Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
File: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (raw, json)
Hash identifier: /ZeOnoGYWqCgohHT1TYAQRbpDcN3ZY5azA82GYZLfCI=
Subject key identifier: C9:36:04:48:32:C0:F2:22:A7:B6:BF:F8:71:E8:DB:FA:7F:A1:48:CE
Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial: 2A31
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
Signing time: Tue 28 Jul 2026 09:36:17 +0000
ROA not before: Tue 28 Jul 2026 09:36:16 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24440
IP address blocks: 36.255.44.0/22 maxlen: 24
43.242.100.0/22 maxlen: 24
58.65.192.0/19 maxlen: 24
61.5.128.0/19 maxlen: 24
101.53.224.0/19 maxlen: 24
103.7.60.0/22 maxlen: 24
103.18.8.0/22 maxlen: 24
103.18.12.0/22 maxlen: 24
103.18.20.0/22 maxlen: 24
103.26.80.0/22 maxlen: 24
103.26.84.0/22 maxlen: 24
103.31.92.0/22 maxlen: 24
103.31.100.0/22 maxlen: 24
103.31.104.0/22 maxlen: 24
103.244.172.0/22 maxlen: 24
103.244.176.0/22 maxlen: 24
103.245.132.0/22 maxlen: 24
103.245.192.0/22 maxlen: 24
119.13.184.0/21 maxlen: 24
124.29.192.0/18 maxlen: 24
153.117.0.0/16 maxlen: 24
175.107.192.0/18 maxlen: 24
202.47.32.0/19 maxlen: 24
202.163.64.0/19 maxlen: 24
202.163.96.0/19 maxlen: 24
203.101.160.0/19 maxlen: 24
218.100.85.0/24 maxlen: 24
2001:4538::/32 maxlen: 32
2001:4538:41::/48 maxlen: 48
2001:4538:a001::/48 maxlen: 48
2001:4538:c001::/48 maxlen: 48
2400:adc0:9::/64 maxlen: 64
2400:adc0:200::/48 maxlen: 48
2400:adc0:201::/48 maxlen: 48
2400:adc0:4000::/48 maxlen: 48
2400:adc0:4001::/48 maxlen: 48
2400:adc0:4002::/48 maxlen: 48
2400:adc0:4003::/48 maxlen: 48
2400:adc0:4004::/48 maxlen: 48
2400:adc0:4005::/48 maxlen: 48
2400:adc0:4006::/48 maxlen: 48
2400:adc0:4006::/64 maxlen: 64
2400:adc0:4007::/48 maxlen: 48
2400:adc0:4008::/48 maxlen: 48
2400:adc0:4009::/48 maxlen: 48
2400:adc0:4010::/48 maxlen: 48
2400:adc0:4011::/48 maxlen: 48
2400:adc0:4012::/48 maxlen: 48
2400:adc0:4013::/48 maxlen: 48
2400:adc0:4014::/48 maxlen: 48
2400:adc0:4020::/48 maxlen: 48
2400:adc0:4030::/48 maxlen: 48
2400:adc0:4040::/48 maxlen: 48
2400:adc0:4104::/48 maxlen: 48
2400:adc0:4203::/48 maxlen: 48
2400:adc0:4204::/48 maxlen: 48
2400:adc0:4300::/48 maxlen: 48
2400:adc0:4301::/48 maxlen: 48
2400:adc0:4302::/48 maxlen: 48
2400:adc0:4303::/48 maxlen: 48
2400:adc0:4310::/48 maxlen: 48
2400:adc0:4311::/48 maxlen: 48
2400:adc0:4500::/48 maxlen: 48
2400:adc0:4600::/48 maxlen: 48
2400:adc0:4610::/48 maxlen: 48
2400:adc0:4611::/48 maxlen: 48
2400:adc0:4700::/48 maxlen: 48
2400:adc0:4701::/48 maxlen: 48
2400:adc0:4710::/48 maxlen: 48
2400:adc0:4711::/48 maxlen: 48
2400:adc0:4900::/48 maxlen: 48
2400:adc0:4901::/48 maxlen: 48
2400:adc0:4910::/48 maxlen: 48
2400:adc0:4a10::/48 maxlen: 48
2400:adc0:4b10::/48 maxlen: 48
2400:adc0:c001::/48 maxlen: 48
2400:adc0:c003::/48 maxlen: 48
2400:adc0:c030::/48 maxlen: 48
2400:adc0:c102::/48 maxlen: 48
2400:adc0:c103::/48 maxlen: 48
2400:adc0:c210::/48 maxlen: 48
2400:adc0:c211::/48 maxlen: 48
2400:adc0:c310::/48 maxlen: 48
2400:adc0:c410::/48 maxlen: 48
2400:adc0:c510::/48 maxlen: 48
2400:adc2:100::/48 maxlen: 48
2400:adc2:300::/40 maxlen: 40
2400:adc2:400::/40 maxlen: 40
2400:adc2:600::/40 maxlen: 40
2400:adc2:700::/40 maxlen: 40
2400:adc2:900::/40 maxlen: 40
2400:adc2:a00::/40 maxlen: 40
2400:adc4::/40 maxlen: 40
2400:adc4:100::/40 maxlen: 40
2400:adc4:800::/40 maxlen: 40
2400:adc4:900::/40 maxlen: 40
2400:adc5::/42 maxlen: 42
2400:adc5:40::/42 maxlen: 42
2400:adc5:80::/42 maxlen: 42
2400:adc5:c0::/42 maxlen: 42
2400:adc5:100::/42 maxlen: 42
2400:adc5:140::/42 maxlen: 42
2400:adc5:180::/42 maxlen: 42
2400:adc5:1c0::/42 maxlen: 42
2400:adc5:300::/42 maxlen: 42
2400:adc5:340::/42 maxlen: 42
2400:adc5:380::/42 maxlen: 42
2400:adc5:3c0::/42 maxlen: 42
2400:adc5:400::/42 maxlen: 42
2400:adc5:440::/42 maxlen: 42
2400:adc5:480::/42 maxlen: 42
2400:adc5:4c0::/42 maxlen: 42
2400:adca::/40 maxlen: 40
2400:adca:100::/40 maxlen: 40
2400:add9::/40 maxlen: 40
2400:add9:100::/40 maxlen: 40
2400:add9:200::/40 maxlen: 40
2400:add9:300::/40 maxlen: 40
2400:addb:800::/40 maxlen: 40
2400:addb:900::/40 maxlen: 40
2400:addd:2000::/40 maxlen: 40
2400:addd:2100::/40 maxlen: 40
2400:addd:2800::/40 maxlen: 40
2400:addd:2900::/40 maxlen: 40
2400:addd:4900::/40 maxlen: 40
2400:adde::/40 maxlen: 40
2400:adde:100::/40 maxlen: 40
2400:addf:800::/40 maxlen: 40
2400:addf:900::/40 maxlen: 40
2400:addf:1000::/40 maxlen: 40
2400:addf:1100::/40 maxlen: 40
2400:addf:2900::/40 maxlen: 40
2400:addf:3900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10801 (0x2a31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Validity
Not Before: Jul 28 09:36:16 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a687810-236a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:02:3f:2b:d7:84:85:22:0e:b6:17:24:fb:
3e:c7:f3:8c:20:3d:63:be:18:db:b2:b4:d8:66:74:
31:34:b7:89:df:c5:50:af:15:75:8e:28:de:52:0f:
d7:ad:fc:ee:73:8e:74:da:4a:4f:9f:02:07:02:1a:
26:c3:b9:53:0d:95:93:4b:06:59:ca:88:74:60:2d:
e9:33:8f:f3:7b:42:75:02:a9:96:78:12:a8:85:82:
28:15:d3:cb:a1:b4:ed:c9:38:2f:84:fb:f4:42:92:
e1:9f:fd:de:04:8d:05:62:33:68:42:87:dc:54:a5:
bd:6d:e7:6c:e0:6c:20:d7:e5:09:6f:05:e7:34:e0:
5c:3a:ea:a3:4a:e1:3f:c2:9b:ca:a8:24:39:56:a5:
97:45:d8:16:0b:50:c5:94:5b:dc:42:b5:51:bf:81:
ff:50:3d:60:27:bd:cd:46:d6:24:c9:d8:41:b5:b1:
a9:5b:d4:3f:01:8e:44:ed:84:c3:52:3f:f8:9a:a7:
40:18:81:63:7f:bd:9b:90:a3:9e:4e:2b:d3:22:47:
72:c5:67:87:27:98:ae:57:76:cb:0e:57:09:8a:98:
7b:5e:2b:62:c4:4d:d0:8b:75:ad:2d:14:72:b5:e5:
2c:6d:d9:2e:94:4d:d3:13:74:5d:f8:9d:21:9f:c1:
8f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:04:48:32:C0:F2:22:A7:B6:BF:F8:71:E8:DB:FA:7F:A1:48:CE
X509v3 Authority Key Identifier:
keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.44.0/22
43.242.100.0/22
58.65.192.0/19
61.5.128.0/19
101.53.224.0/19
103.7.60.0/22
103.18.8.0/21
103.18.20.0/22
103.26.80.0/21
103.31.92.0/22
103.31.100.0-103.31.107.255
103.244.172.0-103.244.179.255
103.245.132.0/22
103.245.192.0/22
119.13.184.0/21
124.29.192.0/18
153.117.0.0/16
175.107.192.0/18
202.47.32.0/19
202.163.64.0/18
203.101.160.0/19
218.100.85.0/24
IPv6:
2001:4538::/32
2400:adc0:9::/64
2400:adc0:200::/47
2400:adc0:4000::-2400:adc0:4009:ffff:ffff:ffff:ffff:ffff
2400:adc0:4010::-2400:adc0:4014:ffff:ffff:ffff:ffff:ffff
2400:adc0:4020::/48
2400:adc0:4030::/48
2400:adc0:4040::/48
2400:adc0:4104::/48
2400:adc0:4203::-2400:adc0:4204:ffff:ffff:ffff:ffff:ffff
2400:adc0:4300::/46
2400:adc0:4310::/47
2400:adc0:4500::/48
2400:adc0:4600::/48
2400:adc0:4610::/47
2400:adc0:4700::/47
2400:adc0:4710::/47
2400:adc0:4900::/47
2400:adc0:4910::/48
2400:adc0:4a10::/48
2400:adc0:4b10::/48
2400:adc0:c001::/48
2400:adc0:c003::/48
2400:adc0:c030::/48
2400:adc0:c102::/47
2400:adc0:c210::/47
2400:adc0:c310::/48
2400:adc0:c410::/48
2400:adc0:c510::/48
2400:adc2:100::/48
2400:adc2:300::-2400:adc2:4ff:ffff:ffff:ffff:ffff:ffff
2400:adc2:600::/39
2400:adc2:900::-2400:adc2:aff:ffff:ffff:ffff:ffff:ffff
2400:adc4::/39
2400:adc4:800::/39
2400:adc5::/39
2400:adc5:300::-2400:adc5:4ff:ffff:ffff:ffff:ffff:ffff
2400:adca::/39
2400:add9::/38
2400:addb:800::/39
2400:addd:2000::/39
2400:addd:2800::/39
2400:addd:4900::/40
2400:adde::/39
2400:addf:800::/39
2400:addf:1000::/39
2400:addf:2900::/40
2400:addf:3900::/40
Signature Algorithm: sha256WithRSAEncryption
67:53:01:46:e2:da:eb:92:37:0d:0c:09:57:49:d9:68:8a:26:
a0:df:5c:15:63:61:1f:a8:2e:5a:e1:43:20:99:6a:17:68:d6:
22:21:bf:f4:d4:f1:4c:07:4c:07:7b:f3:22:40:d6:18:4e:67:
75:e9:b3:3f:9a:46:09:37:c8:47:9a:84:6b:64:d9:bf:6f:3e:
55:82:7b:f0:13:e3:ed:4a:23:48:69:03:2a:ef:d5:d4:38:42:
3a:15:96:c2:47:df:7c:46:24:95:90:ba:2b:bc:88:ad:e5:a0:
b8:c0:ac:2d:5e:da:2d:c7:6e:1b:14:3c:4d:4f:ca:6b:c8:51:
1b:96:80:48:5b:4d:4e:7a:fd:ab:8d:c4:8a:00:fd:6f:13:95:
1d:66:b3:73:9a:0a:e8:bf:98:5e:76:87:3d:6e:87:34:dc:1b:
42:a8:35:21:f7:fb:8b:39:1f:39:ca:07:4f:d1:42:1e:7d:63:
8f:fb:53:34:54:f1:05:5a:60:1f:83:70:02:56:be:5c:7a:6e:
c3:c9:f2:ae:e4:ac:fb:aa:9f:9e:19:28:d4:6f:02:f9:8c:9d:
9e:51:af:fd:c2:83:81:6d:a9:70:40:be:98:65:fa:c7:5c:24:
47:1a:9d:56:5a:f2:dc:16:76:af:6c:ef:a1:1d:d3:f1:25:d3:
d7:31:8e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:31:19 2026 by rpki-client