Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/7165DB28E2C911EF8A1C1514C4F9AE02.roa
File: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (raw, json)
Hash identifier: qc7dfpxoyaWy9hmAOoxHUqM2HrHxDCq2dYCwFXa7BDs=
Subject key identifier: BD:61:D5:6B:B4:E4:DB:20:71:42:14:74:8F:11:16:C8:AC:04:22:9A
Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Certificate serial: 361B
Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/7165DB28E2C911EF8A1C1514C4F9AE02.roa
Signing time: Mon 14 Sep 2026 04:23:26 +0000
ROA not before: Mon 14 Sep 2026 04:23:25 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138322
IP address blocks: 43.250.136.0/24 maxlen: 24
43.250.138.0/24 maxlen: 24
61.5.193.0/24 maxlen: 24
61.5.194.0/24 maxlen: 24
61.5.196.0/22 maxlen: 22
61.5.196.0/24 maxlen: 24
61.5.198.0/24 maxlen: 24
61.5.199.0/24 maxlen: 24
61.5.200.0/22 maxlen: 22
61.5.201.0/24 maxlen: 24
61.5.203.0/24 maxlen: 24
61.5.204.0/24 maxlen: 24
103.42.0.0/24 maxlen: 24
103.42.1.0/24 maxlen: 24
103.42.2.0/23 maxlen: 23
119.59.80.0/21 maxlen: 21
119.59.80.0/24 maxlen: 24
119.59.81.0/24 maxlen: 24
119.59.82.0/23 maxlen: 23
119.59.82.0/24 maxlen: 24
119.59.84.0/22 maxlen: 22
121.100.53.0/24 maxlen: 24
2400:e500::/48 maxlen: 48
2400:e500:2::/48 maxlen: 48
2400:e500:2f::/48 maxlen: 48
2400:e500:35::/48 maxlen: 48
2400:e500:36::/48 maxlen: 48
2400:e500:37::/48 maxlen: 48
2400:e500:38::/48 maxlen: 48
2400:e500:39::/48 maxlen: 48
2400:e500:3a::/48 maxlen: 48
2400:e500:3b::/48 maxlen: 48
2400:e500:3c::/48 maxlen: 48
2400:e500:3d::/48 maxlen: 48
2400:e500:3e::/48 maxlen: 48
2400:e500:40::/43 maxlen: 43
2400:e500:60::/43 maxlen: 43
2400:e500:90::/48 maxlen: 48
2400:e500:100::/40 maxlen: 40
2400:e501::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13851 (0x361b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Validity
Not Before: Sep 14 04:23:25 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6aa776bd-0be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:d9:00:df:bd:c7:50:f2:48:bc:e2:9a:de:
01:55:0d:55:1b:dc:8c:82:2c:74:12:79:3f:e7:d3:
c2:de:f8:b8:90:89:72:d2:a7:2a:fb:88:59:4f:1d:
9e:95:7d:ca:4f:01:f2:20:8c:be:bd:53:f3:36:ea:
e2:b2:4b:3f:4e:85:71:0c:c8:e5:22:04:6c:bd:7a:
01:07:cc:54:70:eb:b0:b1:7a:9c:73:45:56:1f:5b:
e2:75:8c:3e:a6:51:87:05:3a:ec:d3:a2:a3:ae:df:
5b:34:e9:87:2b:ac:71:88:c9:b9:60:80:a1:89:eb:
78:53:89:c6:70:38:44:17:67:e8:d9:7b:08:5d:54:
b9:26:ca:01:99:5b:37:e2:fd:8d:10:9b:d1:68:54:
5c:5d:a4:ac:81:3e:a7:69:45:43:43:23:af:7c:79:
b1:df:ec:0a:74:da:78:7d:6d:bb:ea:b5:4b:b7:9f:
f9:d6:45:21:74:84:c0:ad:69:ec:0c:10:b1:00:5f:
9e:71:05:49:99:48:50:9e:e9:e7:9f:ba:73:ba:91:
aa:c3:54:25:85:f2:6e:be:09:4d:97:eb:aa:79:10:
2d:01:a8:29:24:0d:69:16:e4:f5:0d:69:1d:a9:49:
5d:ef:fd:34:dd:44:78:e2:db:59:30:28:6c:e0:1e:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:61:D5:6B:B4:E4:DB:20:71:42:14:74:8F:11:16:C8:AC:04:22:9A
X509v3 Authority Key Identifier:
keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/7165DB28E2C911EF8A1C1514C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.250.136.0/24
43.250.138.0/24
61.5.193.0-61.5.194.255
61.5.196.0-61.5.204.255
103.42.0.0/22
119.59.80.0/21
121.100.53.0/24
IPv6:
2400:e500::/48
2400:e500:2::/48
2400:e500:2f::/48
2400:e500:35::-2400:e500:3e:ffff:ffff:ffff:ffff:ffff
2400:e500:40::/42
2400:e500:90::/48
2400:e500:100::/40
2400:e501::/32
Signature Algorithm: sha256WithRSAEncryption
78:3f:c5:d3:f8:e0:03:91:7e:6a:cf:44:b8:98:2e:ee:8f:d8:
80:3b:df:f2:18:17:cb:79:35:d9:b4:75:59:09:2a:d6:f5:d5:
9e:d6:63:1f:1c:16:99:4e:e1:d7:00:5a:d4:32:c3:81:36:3c:
d5:f8:33:76:dd:71:80:49:49:ef:65:0b:26:86:66:e4:95:5b:
c4:1a:82:36:b5:3e:e7:4d:72:41:c8:a8:81:ea:19:4b:e0:30:
8a:d2:92:f8:1a:07:64:d3:95:fe:af:fe:55:fe:5c:b8:cc:41:
b4:1b:e2:ce:5a:d7:59:e2:19:cc:b8:c1:2f:69:dc:49:0c:8a:
b8:d2:45:1b:c5:52:f4:ac:7c:e8:87:8b:3c:e5:93:c9:bc:fd:
f7:5f:a2:e5:56:20:92:03:0c:0f:3f:65:75:96:69:49:b0:11:
b6:ca:0f:d4:e1:d8:29:21:93:4a:67:ac:80:1a:4e:59:3d:1b:
b5:7e:50:a7:f7:10:9c:a3:34:ad:82:3d:7c:d4:78:1a:40:42:
c6:09:33:fb:14:d9:50:4e:32:a2:aa:7a:ab:ec:dd:48:06:c4:
78:bb:de:7b:38:40:a1:96:c7:49:88:8e:46:33:49:2a:b7:90:
5c:35:20:82:8f:65:04:ef:df:a4:58:94:1f:37:40:05:f4:a5:
0e:c2:c6:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:06:39 2026 by rpki-client