Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/AA7E3F9017A211F1926DA6A3313D8C67.roa
File: AA7E3F9017A211F1926DA6A3313D8C67.roa (raw, json)
Hash identifier: HntMyFAzFt9anwRUcJpcCPwXNJA5dnndYHlLGz9W2go=
Subject key identifier: 66:81:B1:B4:5B:B5:05:9D:B6:E9:14:E9:4C:4D:AE:7E:FE:D2:2A:42
Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial: 3688
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/AA7E3F9017A211F1926DA6A3313D8C67.roa
Signing time: Tue 08 Sep 2026 09:42:06 +0000
ROA not before: Tue 08 Sep 2026 09:42:06 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 55423
IP address blocks: 58.82.128.0/18 maxlen: 18
58.82.128.0/21 maxlen: 24
58.82.136.0/21 maxlen: 24
58.82.144.0/21 maxlen: 24
58.82.152.0/21 maxlen: 24
58.82.160.0/20 maxlen: 20
58.82.160.0/21 maxlen: 24
58.82.168.0/21 maxlen: 24
58.82.176.0/20 maxlen: 20
58.82.176.0/21 maxlen: 23
58.82.176.0/23 maxlen: 24
58.82.179.0/24 maxlen: 24
58.82.180.0/22 maxlen: 24
58.82.184.0/21 maxlen: 21
58.82.184.0/24 maxlen: 24
103.247.60.0/22 maxlen: 24
182.50.80.0/22 maxlen: 22
182.50.80.0/24 maxlen: 24
182.50.83.0/24 maxlen: 24
182.50.86.0/24 maxlen: 24
182.50.88.0/22 maxlen: 22
182.50.88.0/24 maxlen: 24
203.130.129.80/28 maxlen: 28
203.130.131.240/28 maxlen: 28
203.130.140.0/24 maxlen: 24
203.130.152.0/24 maxlen: 24
203.147.6.0/24 maxlen: 24
203.147.26.0/24 maxlen: 24
203.147.30.0/23 maxlen: 23
203.147.46.0/23 maxlen: 23
203.147.46.0/24 maxlen: 24
203.147.47.0/24 maxlen: 24
203.156.0.0/22 maxlen: 22
203.156.8.0/21 maxlen: 21
203.156.9.0/24 maxlen: 24
203.156.16.0/24 maxlen: 24
203.156.24.0/24 maxlen: 24
203.156.25.0/24 maxlen: 24
203.156.26.0/24 maxlen: 24
203.156.27.0/24 maxlen: 24
203.156.28.0/24 maxlen: 24
203.156.31.0/24 maxlen: 24
203.156.40.0/22 maxlen: 22
203.156.46.0/23 maxlen: 23
203.156.46.0/24 maxlen: 24
203.156.48.0/23 maxlen: 23
203.156.51.0/24 maxlen: 24
203.156.52.0/24 maxlen: 24
203.156.57.0/24 maxlen: 24
203.156.59.0/24 maxlen: 24
203.156.60.0/24 maxlen: 24
203.156.61.0/24 maxlen: 24
203.156.62.0/24 maxlen: 24
203.156.64.0/24 maxlen: 24
203.156.96.0/23 maxlen: 23
203.156.102.0/23 maxlen: 23
203.156.108.0/24 maxlen: 24
203.156.109.0/24 maxlen: 24
203.156.110.0/23 maxlen: 23
203.156.110.0/24 maxlen: 24
203.156.111.0/24 maxlen: 24
203.156.112.0/24 maxlen: 24
203.156.113.0/24 maxlen: 24
203.156.114.0/23 maxlen: 23
203.156.119.0/24 maxlen: 24
203.156.120.0/21 maxlen: 21
203.156.143.0/24 maxlen: 24
203.156.150.0/24 maxlen: 24
203.156.151.0/24 maxlen: 24
203.156.152.0/23 maxlen: 23
203.156.152.0/24 maxlen: 24
203.156.153.0/24 maxlen: 24
203.156.156.0/23 maxlen: 23
203.156.176.0/23 maxlen: 23
203.156.183.0/24 maxlen: 24
2404:4a00:1::/64 maxlen: 64
2404:4a00:2::/64 maxlen: 64
2404:4a00:3::/64 maxlen: 64
2404:4a00:4::/64 maxlen: 64
2404:4a00:a::/48 maxlen: 48
2404:4a00:b::/48 maxlen: 48
2404:4a00:1000::/48 maxlen: 48
2404:4a00:2094::/48 maxlen: 48
2404:4a00:5542::/48 maxlen: 48
2404:4a00:5542:3::/64 maxlen: 64
2404:4a00:5542:3a1::/64 maxlen: 64
2404:4a00:5542:3001::/64 maxlen: 64
2404:4a00:5542:3002::/64 maxlen: 64
2404:4a00:5542:3003::/64 maxlen: 64
2404:4a00:6000::/64 maxlen: 64
2404:4a00:6500::/64 maxlen: 64
2404:4a00:6501::/64 maxlen: 64
2404:4a00:6a00::/64 maxlen: 64
2404:4a00:7000::/64 maxlen: 64
2404:4a00:7500::/64 maxlen: 64
2404:4a00:7a00::/64 maxlen: 64
2404:4a00:8000::/64 maxlen: 64
2404:4a00:8500::/64 maxlen: 64
2404:4a00:8a00::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13960 (0x3688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Validity
Not Before: Sep 8 09:42:06 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a9fd86e-21a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:72:bf:09:e1:a0:8b:2a:61:9a:57:2b:87:
95:35:ed:c6:2f:3f:07:2d:a9:68:8e:ce:8f:a1:0f:
51:92:09:5b:a7:ad:c7:8a:1f:4c:03:0a:28:f8:1f:
07:1f:d9:17:35:80:8e:7b:df:2a:d0:29:50:ff:6f:
8a:59:a5:7a:6e:b0:d1:6d:a4:33:02:1e:ee:f3:b0:
b2:a8:3f:a6:af:57:5a:7d:17:27:c3:fd:d4:ef:a8:
d7:ee:e6:f6:bd:51:7b:6a:91:c2:66:e4:e2:ee:36:
81:52:af:3e:03:53:8f:53:3a:e4:33:00:70:f5:05:
1f:6b:c5:fa:0b:15:d8:8d:aa:77:7e:92:f9:d4:52:
8c:30:89:31:c9:40:e8:43:fc:51:fd:02:28:d7:4d:
7d:3d:ef:00:92:71:b8:98:17:91:3b:81:34:31:8a:
1c:ba:09:5e:10:0f:ae:7e:c1:02:d8:46:47:16:ae:
0b:4f:22:36:5d:9e:e0:fa:65:d2:13:d4:10:9a:ce:
6d:1d:25:88:20:dc:7f:35:c7:20:a1:3a:58:bd:8e:
23:11:a2:12:aa:56:cd:84:d7:a1:d3:81:b5:03:83:
1d:65:f3:26:96:c1:22:56:49:17:14:fa:fc:48:36:
0d:6a:9e:31:03:9d:ff:7f:0e:4f:af:99:0d:cd:27:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:81:B1:B4:5B:B5:05:9D:B6:E9:14:E9:4C:4D:AE:7E:FE:D2:2A:42
X509v3 Authority Key Identifier:
keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/AA7E3F9017A211F1926DA6A3313D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
58.82.128.0/18
103.247.60.0/22
182.50.80.0/22
182.50.86.0/24
182.50.88.0/22
203.130.129.80/28
203.130.131.240/28
203.130.140.0/24
203.130.152.0/24
203.147.6.0/24
203.147.26.0/24
203.147.30.0/23
203.147.46.0/23
203.156.0.0/22
203.156.8.0-203.156.16.255
203.156.24.0-203.156.28.255
203.156.31.0/24
203.156.40.0/22
203.156.46.0-203.156.49.255
203.156.51.0-203.156.52.255
203.156.57.0/24
203.156.59.0-203.156.62.255
203.156.64.0/24
203.156.96.0/23
203.156.102.0/23
203.156.108.0-203.156.115.255
203.156.119.0-203.156.127.255
203.156.143.0/24
203.156.150.0-203.156.153.255
203.156.156.0/23
203.156.176.0/23
203.156.183.0/24
IPv6:
2404:4a00:1::/64
2404:4a00:2::/64
2404:4a00:3::/64
2404:4a00:4::/64
2404:4a00:a::/47
2404:4a00:1000::/48
2404:4a00:2094::/48
2404:4a00:5542::/48
2404:4a00:6000::/64
2404:4a00:6500::/64
2404:4a00:6501::/64
2404:4a00:6a00::/64
2404:4a00:7000::/64
2404:4a00:7500::/64
2404:4a00:7a00::/64
2404:4a00:8000::/64
2404:4a00:8500::/64
2404:4a00:8a00::/64
Signature Algorithm: sha256WithRSAEncryption
91:99:66:1c:66:fd:b9:f1:fd:12:9f:04:11:57:a6:e8:78:9b:
f2:16:69:c7:b2:21:28:9a:6d:84:60:aa:49:a0:86:fa:60:ba:
f9:25:31:3c:fc:d5:c7:f7:0a:05:e7:4c:20:bf:09:a2:c2:60:
f5:ac:93:1a:23:04:5b:04:f7:a0:9a:14:17:a1:f3:c3:79:6a:
b1:ef:83:d5:b1:49:b1:3b:f6:92:d5:b8:9a:aa:c0:12:0a:83:
8c:36:d9:23:4c:8d:32:99:bf:b3:23:89:5e:e9:b0:24:a2:b6:
d0:5f:8a:03:e6:56:1e:0c:63:00:54:52:b2:e7:f5:65:f8:0b:
37:37:76:96:a2:61:9b:59:3f:b7:27:c7:3d:02:42:72:48:b6:
54:2e:b1:ee:cc:22:d0:8f:71:d7:f4:e9:c0:6c:a7:c1:5e:0c:
18:74:e3:11:ab:9c:c4:b4:5e:1e:e2:5e:e6:7e:57:99:d6:f4:
cb:a4:32:d4:03:5b:0b:a8:09:53:a6:f1:0f:c7:ff:9d:97:3b:
1f:f3:73:d9:69:17:d1:54:a1:24:5e:b1:3b:d9:cf:40:6c:d9:
ca:cd:33:02:c0:53:24:7a:3f:19:0a:de:a1:b5:7a:f7:af:4a:
38:4e:70:08:b2:4b:40:99:ec:0e:3a:89:0d:9c:8e:d1:62:90:
a5:11:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:37:12 2026 by rpki-client