Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/CBAFF664136B11EFB53F2683C4F9AE02.roa
File: CBAFF664136B11EFB53F2683C4F9AE02.roa (raw, json)
Hash identifier: Os71J1BmHa8Ft50qDgpW0oC8c860amCLqtQpeQpf0Ts=
Subject key identifier: E8:17:AC:FC:F0:3C:71:4E:C8:DB:C8:A2:03:C3:17:92:84:3B:88:29
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 20ED
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/CBAFF664136B11EFB53F2683C4F9AE02.roa
Signing time: Wed 16 Sep 2026 08:43:38 +0000
ROA not before: Wed 16 Sep 2026 08:43:38 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 58777
IP address blocks: 42.122.63.0/24 maxlen: 24
59.47.246.0/24 maxlen: 24
59.47.247.0/24 maxlen: 24
59.50.75.0/24 maxlen: 24
59.52.138.0/24 maxlen: 24
61.133.162.0/24 maxlen: 24
61.151.144.0/24 maxlen: 24
61.151.145.0/24 maxlen: 24
106.91.120.0/24 maxlen: 24
110.90.214.0/24 maxlen: 24
113.240.205.0/24 maxlen: 24
115.233.202.0/24 maxlen: 24
117.25.105.0/24 maxlen: 24
125.93.28.0/24 maxlen: 24
125.93.29.0/24 maxlen: 24
171.221.53.0/24 maxlen: 24
182.36.0.0/24 maxlen: 24
182.36.12.0/24 maxlen: 24
202.67.0.0/22 maxlen: 24
202.73.128.0/22 maxlen: 24
202.191.72.0/21 maxlen: 24
203.33.67.0/24 maxlen: 24
203.33.68.0/24 maxlen: 24
203.33.73.0/24 maxlen: 24
203.33.79.0/24 maxlen: 24
203.33.100.0/24 maxlen: 24
203.33.122.0/24 maxlen: 24
203.33.129.0/24 maxlen: 24
203.33.131.0/24 maxlen: 24
218.62.152.0/24 maxlen: 24
218.62.153.0/24 maxlen: 24
220.171.147.0/24 maxlen: 24
221.226.225.0/24 maxlen: 24
221.235.40.0/24 maxlen: 24
221.237.65.0/24 maxlen: 24
240e:108:4000::/48 maxlen: 48
240e:108:4001::/48 maxlen: 48
240e:108:4020::/48 maxlen: 48
240e:108:4025::/48 maxlen: 48
240e:108:4040::/48 maxlen: 48
240e:108:4047::/48 maxlen: 48
240e:108:4059::/48 maxlen: 48
240e:108:4060::/48 maxlen: 48
240e:108:4080::/48 maxlen: 48
240e:108:40a0::/48 maxlen: 48
240e:108:40e0::/48 maxlen: 48
240e:108:40ec::/48 maxlen: 48
240e:108:4120::/48 maxlen: 48
240e:108:4140::/48 maxlen: 48
240e:108:4160::/48 maxlen: 48
240e:108:41c0::/48 maxlen: 48
240e:108:41e0::/48 maxlen: 48
240e:108:4200::/48 maxlen: 48
240e:108:4220::/48 maxlen: 48
240e:108:4240::/48 maxlen: 48
240e:108:4260::/48 maxlen: 48
240e:108:4280::/48 maxlen: 48
240e:108:42a0::/48 maxlen: 48
240e:108:42c0::/48 maxlen: 48
240e:108:42e0::/48 maxlen: 48
240e:108:4300::/48 maxlen: 48
240e:108:4320::/48 maxlen: 48
240e:108:4340::/48 maxlen: 48
240e:108:4360::/48 maxlen: 48
240e:108:4380::/48 maxlen: 48
240e:108:438c::/48 maxlen: 48
240e:108:43a0::/48 maxlen: 48
240e:108:43c0::/48 maxlen: 48
240e:108:4800::/48 maxlen: 48
240e:108:4801::/48 maxlen: 48
240e:108:4820::/48 maxlen: 48
240e:108:4825::/48 maxlen: 48
240e:108:4840::/48 maxlen: 48
240e:108:4847::/48 maxlen: 48
240e:108:4859::/48 maxlen: 48
240e:108:4860::/48 maxlen: 48
240e:108:4880::/48 maxlen: 48
240e:108:48a0::/48 maxlen: 48
240e:108:48e0::/48 maxlen: 48
240e:108:48ec::/48 maxlen: 48
240e:108:4920::/48 maxlen: 48
240e:108:4940::/48 maxlen: 48
240e:108:4960::/48 maxlen: 48
240e:108:49c0::/48 maxlen: 48
240e:108:49e0::/48 maxlen: 48
240e:108:4a00::/48 maxlen: 48
240e:108:4a20::/48 maxlen: 48
240e:108:4a40::/48 maxlen: 48
240e:108:4a60::/48 maxlen: 48
240e:108:4a80::/48 maxlen: 48
240e:108:4aa0::/48 maxlen: 48
240e:108:4ac0::/48 maxlen: 48
240e:108:4ae0::/48 maxlen: 48
240e:108:4b00::/48 maxlen: 48
240e:108:4b20::/48 maxlen: 48
240e:108:4b40::/48 maxlen: 48
240e:108:4b60::/48 maxlen: 48
240e:108:4b80::/48 maxlen: 48
240e:108:4b8c::/48 maxlen: 48
240e:108:4ba0::/48 maxlen: 48
240e:108:4bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8429 (0x20ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Sep 16 08:43:38 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6aaa56ba-8769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:10:71:c3:6e:04:ab:60:c8:30:a8:67:d6:
d9:e8:c0:9e:ad:32:09:99:7c:fa:45:69:78:42:31:
d9:5f:7f:46:9c:b2:6b:b1:df:e0:60:1f:db:ec:c1:
0d:3a:9d:a9:11:3e:93:10:0d:9b:21:41:be:2b:89:
cb:d4:c4:f5:24:27:96:6c:56:17:38:5b:90:f4:ce:
45:40:25:00:ec:66:15:e3:96:d4:dc:9a:57:87:45:
54:2c:05:d4:96:ce:94:2d:05:9e:86:e9:62:92:15:
74:e2:3e:2b:ad:23:60:63:b5:d2:17:b1:ee:d1:18:
e8:57:57:93:81:47:5d:17:9c:0a:15:da:e8:e8:8a:
48:3c:f4:f0:76:42:12:5c:bf:9f:e8:20:0f:48:7c:
51:5c:d6:fe:cc:4c:c3:c4:2b:3f:ad:2e:02:57:67:
bc:c2:9a:0d:37:bb:11:44:e6:69:02:86:e2:5a:f8:
8c:6c:46:71:3f:2e:66:3d:74:ab:e7:0c:d8:ca:b5:
ae:bf:20:fd:d0:99:b9:fc:58:6a:38:a7:ea:c9:c8:
de:04:ea:99:68:6d:52:33:83:e1:a2:d1:74:ed:2c:
5f:5d:f0:aa:a2:9c:31:86:92:10:4e:e7:b1:63:41:
74:5f:62:23:ac:bb:3e:ba:25:42:72:83:37:41:c8:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:17:AC:FC:F0:3C:71:4E:C8:DB:C8:A2:03:C3:17:92:84:3B:88:29
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/CBAFF664136B11EFB53F2683C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
42.122.63.0/24
59.47.246.0/23
59.50.75.0/24
59.52.138.0/24
61.133.162.0/24
61.151.144.0/23
106.91.120.0/24
110.90.214.0/24
113.240.205.0/24
115.233.202.0/24
117.25.105.0/24
125.93.28.0/23
171.221.53.0/24
182.36.0.0/24
182.36.12.0/24
202.67.0.0/22
202.73.128.0/22
202.191.72.0/21
203.33.67.0-203.33.68.255
203.33.73.0/24
203.33.79.0/24
203.33.100.0/24
203.33.122.0/24
203.33.129.0/24
203.33.131.0/24
218.62.152.0/23
220.171.147.0/24
221.226.225.0/24
221.235.40.0/24
221.237.65.0/24
IPv6:
240e:108:4000::/47
240e:108:4020::/48
240e:108:4025::/48
240e:108:4040::/48
240e:108:4047::/48
240e:108:4059::/48
240e:108:4060::/48
240e:108:4080::/48
240e:108:40a0::/48
240e:108:40e0::/48
240e:108:40ec::/48
240e:108:4120::/48
240e:108:4140::/48
240e:108:4160::/48
240e:108:41c0::/48
240e:108:41e0::/48
240e:108:4200::/48
240e:108:4220::/48
240e:108:4240::/48
240e:108:4260::/48
240e:108:4280::/48
240e:108:42a0::/48
240e:108:42c0::/48
240e:108:42e0::/48
240e:108:4300::/48
240e:108:4320::/48
240e:108:4340::/48
240e:108:4360::/48
240e:108:4380::/48
240e:108:438c::/48
240e:108:43a0::/48
240e:108:43c0::/48
240e:108:4800::/47
240e:108:4820::/48
240e:108:4825::/48
240e:108:4840::/48
240e:108:4847::/48
240e:108:4859::/48
240e:108:4860::/48
240e:108:4880::/48
240e:108:48a0::/48
240e:108:48e0::/48
240e:108:48ec::/48
240e:108:4920::/48
240e:108:4940::/48
240e:108:4960::/48
240e:108:49c0::/48
240e:108:49e0::/48
240e:108:4a00::/48
240e:108:4a20::/48
240e:108:4a40::/48
240e:108:4a60::/48
240e:108:4a80::/48
240e:108:4aa0::/48
240e:108:4ac0::/48
240e:108:4ae0::/48
240e:108:4b00::/48
240e:108:4b20::/48
240e:108:4b40::/48
240e:108:4b60::/48
240e:108:4b80::/48
240e:108:4b8c::/48
240e:108:4ba0::/48
240e:108:4bc0::/48
Signature Algorithm: sha256WithRSAEncryption
73:3a:84:0e:d0:75:6e:71:4d:2b:83:21:c6:59:6e:a6:78:47:
3f:e1:e4:28:09:c4:5e:bc:8c:54:19:6e:35:61:17:6d:85:90:
bc:e5:3b:8a:38:77:08:11:9b:fb:42:a5:ed:01:c6:6b:6f:2c:
15:3a:26:56:74:1e:17:23:03:e4:f0:d9:cb:f6:43:74:fd:b3:
80:48:e0:92:c3:7a:ba:b9:21:10:1a:39:c3:e2:3c:10:47:f9:
81:b6:f5:60:19:34:ea:db:5a:cf:4b:c7:ed:00:28:21:85:13:
92:11:e5:91:14:1f:40:10:a4:fc:80:fd:72:b1:45:6e:0e:84:
27:3e:80:cd:42:ac:c9:cb:48:9c:00:d7:b8:dd:0b:7e:05:0b:
24:b9:ff:1f:d0:a1:97:8e:7e:e2:ca:6f:f0:24:11:8e:82:d9:
51:51:b2:84:a4:ac:dc:ad:e0:33:42:3d:cf:ec:37:dc:7e:ce:
00:b1:2f:e1:be:38:f7:3e:ac:ad:ca:25:2f:e9:8f:b1:c5:f4:
28:47:cb:47:a7:a9:95:35:a6:58:b9:12:b6:95:dc:81:eb:91:
d4:14:89:45:e0:05:01:d1:fd:df:45:6b:16:a0:fd:bd:42:a7:
92:9c:27:31:ef:7b:e7:0e:39:bb:9c:48:b0:e6:1f:a0:6f:71:
8d:6e:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:24:00 2026 by rpki-client