Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/44F74E28527B11F1839642F0C3833773.roa
File: 44F74E28527B11F1839642F0C3833773.roa (raw, json)
Hash identifier: MnGfQiXEp8C/Au8QP7VBYLFWZ424IWYjjfnKxGA1Pm0=
Subject key identifier: 45:DF:29:D1:D9:DE:DE:92:C0:48:3A:DF:86:88:50:49:06:7B:2C:0C
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3E4A
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/44F74E28527B11F1839642F0C3833773.roa
Signing time: Mon 07 Sep 2026 00:27:23 +0000
ROA not before: Mon 07 Sep 2026 00:27:23 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135120
IP address blocks: 45.120.64.0/24 maxlen: 24
45.120.67.0/24 maxlen: 24
103.31.180.0/24 maxlen: 24
103.31.181.0/24 maxlen: 24
103.31.182.0/24 maxlen: 24
103.31.183.0/24 maxlen: 24
121.0.111.0/24 maxlen: 24
121.0.127.0/24 maxlen: 24
182.237.54.0/24 maxlen: 24
203.210.16.0/24 maxlen: 24
203.210.17.0/24 maxlen: 24
203.210.18.0/23 maxlen: 24
203.210.20.0/24 maxlen: 24
203.210.21.0/24 maxlen: 24
203.210.22.0/24 maxlen: 24
203.210.23.0/24 maxlen: 24
203.210.26.0/24 maxlen: 24
203.210.27.0/24 maxlen: 24
203.210.31.0/24 maxlen: 24
210.87.193.0/24 maxlen: 24
210.87.195.0/24 maxlen: 24
210.87.196.0/24 maxlen: 24
210.87.197.0/24 maxlen: 24
210.87.198.0/24 maxlen: 24
210.87.199.0/24 maxlen: 24
210.87.200.0/24 maxlen: 24
210.87.201.0/24 maxlen: 24
210.87.202.0/24 maxlen: 24
210.87.204.0/24 maxlen: 24
210.87.205.0/24 maxlen: 24
210.87.206.0/24 maxlen: 24
210.87.207.0/24 maxlen: 24
210.87.208.0/21 maxlen: 24
210.87.216.0/22 maxlen: 24
210.87.220.0/24 maxlen: 24
210.87.221.0/24 maxlen: 24
210.87.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:21:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15946 (0x3e4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Sep 7 00:27:23 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a9e04eb-bbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:30:3c:9b:cf:e2:a9:6c:f6:fd:d1:42:1c:7d:
3d:fb:99:d7:79:2a:df:72:fa:08:77:79:78:7e:9a:
59:75:af:e8:85:b4:3f:c6:7e:7b:85:9d:48:39:5b:
08:e3:da:ba:ca:26:ee:0f:f0:5d:41:b7:b7:7f:5e:
89:31:8d:46:bf:3b:e9:71:39:fe:89:8c:12:a3:8e:
95:51:cd:26:50:18:5b:23:26:1f:dc:53:aa:48:0d:
4f:94:fb:e5:97:a7:8e:5c:af:7c:db:d4:48:d8:e3:
18:35:94:d3:fb:20:aa:5a:6b:24:83:7d:a4:0d:58:
5c:04:a8:2e:d7:e4:79:b0:06:02:76:9a:0a:be:7e:
11:42:03:af:19:32:2f:01:65:f1:18:3b:74:47:14:
f5:cf:27:96:8d:4b:d8:b2:c3:3d:92:8d:24:e4:26:
45:77:ba:7b:3f:b7:d9:59:44:3d:86:5a:55:7d:9b:
ba:da:9a:3d:a3:ae:6f:f1:fb:a3:9a:11:29:3c:eb:
51:0d:27:35:50:db:4e:9e:c9:13:f6:87:b1:03:28:
ab:7c:3e:16:d5:2d:00:d3:4c:42:69:14:0d:a4:44:
4a:00:8f:73:c4:ee:26:94:ee:0a:76:2f:c4:53:49:
93:81:d0:29:1b:65:8f:3a:76:8d:d6:b4:65:94:8c:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DF:29:D1:D9:DE:DE:92:C0:48:3A:DF:86:88:50:49:06:7B:2C:0C
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/44F74E28527B11F1839642F0C3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.120.64.0/24
45.120.67.0/24
103.31.180.0/22
121.0.111.0/24
121.0.127.0/24
182.237.54.0/24
203.210.16.0/21
203.210.26.0/23
203.210.31.0/24
210.87.193.0/24
210.87.195.0-210.87.202.255
210.87.204.0-210.87.222.255
Signature Algorithm: sha256WithRSAEncryption
83:3a:fd:84:df:1f:c8:a7:16:bb:94:89:61:b6:21:38:04:47:
4b:d9:9f:52:99:af:b3:9c:47:e8:37:58:3d:1b:ca:32:ec:6d:
39:c3:a7:a3:99:5c:73:2b:4b:c4:e2:fb:20:89:86:8a:87:98:
ed:a1:c4:1d:2a:56:0c:82:8b:bc:66:45:80:a3:26:14:2b:c7:
07:f6:61:18:2a:a8:12:c5:91:b2:40:9b:a0:df:12:c9:c7:cd:
17:cc:37:3a:41:36:18:04:29:5f:81:2a:2e:a1:85:04:b8:59:
c0:5a:f9:b9:03:dc:54:d1:7b:4a:17:a5:0c:98:9d:2a:d6:39:
6a:b0:4f:fc:01:86:ab:50:9d:41:82:95:24:30:20:9a:17:d1:
f8:f7:76:5b:5a:d4:b2:ef:22:64:75:30:ca:70:b8:ff:06:e9:
cf:e5:9a:54:aa:15:b3:2e:a5:82:c6:96:32:ad:15:47:14:e3:
04:c9:f1:20:8a:19:5b:03:7e:48:fd:8f:2b:dd:a1:0e:23:cd:
a8:2e:35:b3:7a:65:d1:fc:41:e8:dc:59:19:94:05:75:51:84:
c6:de:a1:18:8a:fd:5b:48:bf:f0:ae:2e:25:c6:b2:95:06:ef:
94:ee:e7:ce:3c:4b:14:e0:e3:6d:49:1f:4f:c3:16:23:c6:af:
f0:4c:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:29:49 2026 by rpki-client