Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
File: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (raw, json)
Hash identifier: sxDbznRMUEuDI6/LpS+5Ojyml9z10ADIy3GNXv2BLt8=
Subject key identifier: A7:A3:BA:A6:33:F7:8C:E1:94:EC:0D:98:AC:48:7D:9B:C0:CC:9F:92
Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial: 2A5A
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
Signing time: Mon 14 Sep 2026 05:28:59 +0000
ROA not before: Mon 14 Sep 2026 05:28:59 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24440
IP address blocks: 36.255.44.0/22 maxlen: 24
43.242.100.0/22 maxlen: 24
58.65.192.0/19 maxlen: 24
61.5.128.0/19 maxlen: 24
101.53.224.0/19 maxlen: 24
103.7.60.0/22 maxlen: 24
103.18.8.0/22 maxlen: 24
103.18.12.0/22 maxlen: 24
103.18.20.0/22 maxlen: 24
103.26.80.0/22 maxlen: 24
103.26.84.0/22 maxlen: 24
103.31.92.0/22 maxlen: 24
103.31.100.0/22 maxlen: 24
103.31.104.0/22 maxlen: 24
103.244.172.0/22 maxlen: 24
103.244.176.0/22 maxlen: 24
103.245.132.0/22 maxlen: 24
103.245.192.0/22 maxlen: 24
119.13.184.0/21 maxlen: 24
124.29.192.0/18 maxlen: 24
153.117.0.0/16 maxlen: 24
175.107.192.0/18 maxlen: 24
202.47.32.0/19 maxlen: 24
202.163.64.0/19 maxlen: 24
202.163.96.0/19 maxlen: 24
203.101.160.0/19 maxlen: 24
218.100.85.0/24 maxlen: 24
2001:4538::/32 maxlen: 32
2001:4538:41::/48 maxlen: 48
2001:4538:a001::/48 maxlen: 48
2001:4538:c001::/48 maxlen: 48
2400:adc0:9::/64 maxlen: 64
2400:adc0:b::/64 maxlen: 64
2400:adc0:200::/48 maxlen: 48
2400:adc0:201::/48 maxlen: 48
2400:adc0:4000::/48 maxlen: 48
2400:adc0:4001::/48 maxlen: 48
2400:adc0:4002::/48 maxlen: 48
2400:adc0:4003::/48 maxlen: 48
2400:adc0:4004::/48 maxlen: 48
2400:adc0:4005::/48 maxlen: 48
2400:adc0:4006::/48 maxlen: 48
2400:adc0:4006::/64 maxlen: 64
2400:adc0:4007::/48 maxlen: 48
2400:adc0:4008::/48 maxlen: 48
2400:adc0:4009::/48 maxlen: 48
2400:adc0:4010::/48 maxlen: 48
2400:adc0:4011::/48 maxlen: 48
2400:adc0:4012::/48 maxlen: 48
2400:adc0:4013::/48 maxlen: 48
2400:adc0:4014::/48 maxlen: 48
2400:adc0:4020::/48 maxlen: 48
2400:adc0:4030::/48 maxlen: 48
2400:adc0:4040::/48 maxlen: 48
2400:adc0:4104::/48 maxlen: 48
2400:adc0:4203::/48 maxlen: 48
2400:adc0:4204::/48 maxlen: 48
2400:adc0:4300::/48 maxlen: 48
2400:adc0:4301::/48 maxlen: 48
2400:adc0:4302::/48 maxlen: 48
2400:adc0:4303::/48 maxlen: 48
2400:adc0:4310::/48 maxlen: 48
2400:adc0:4311::/48 maxlen: 48
2400:adc0:4500::/48 maxlen: 48
2400:adc0:4600::/48 maxlen: 48
2400:adc0:4610::/48 maxlen: 48
2400:adc0:4611::/48 maxlen: 48
2400:adc0:4700::/48 maxlen: 48
2400:adc0:4701::/48 maxlen: 48
2400:adc0:4710::/48 maxlen: 48
2400:adc0:4711::/48 maxlen: 48
2400:adc0:4800::/48 maxlen: 48
2400:adc0:4900::/48 maxlen: 48
2400:adc0:4901::/48 maxlen: 48
2400:adc0:4910::/48 maxlen: 48
2400:adc0:4a10::/48 maxlen: 48
2400:adc0:4b10::/48 maxlen: 48
2400:adc0:c001::/48 maxlen: 48
2400:adc0:c003::/48 maxlen: 48
2400:adc0:c030::/48 maxlen: 48
2400:adc0:c102::/48 maxlen: 48
2400:adc0:c103::/48 maxlen: 48
2400:adc0:c210::/48 maxlen: 48
2400:adc0:c211::/48 maxlen: 48
2400:adc0:c310::/48 maxlen: 48
2400:adc0:c400::/48 maxlen: 48
2400:adc0:c410::/48 maxlen: 48
2400:adc0:c510::/48 maxlen: 48
2400:adc2:100::/48 maxlen: 48
2400:adc2:300::/40 maxlen: 40
2400:adc2:400::/40 maxlen: 40
2400:adc2:600::/40 maxlen: 40
2400:adc2:700::/40 maxlen: 40
2400:adc2:900::/40 maxlen: 40
2400:adc2:a00::/40 maxlen: 40
2400:adc4::/40 maxlen: 40
2400:adc4:100::/40 maxlen: 40
2400:adc4:800::/40 maxlen: 40
2400:adc4:900::/40 maxlen: 40
2400:adc5::/42 maxlen: 42
2400:adc5:40::/42 maxlen: 42
2400:adc5:80::/42 maxlen: 42
2400:adc5:c0::/42 maxlen: 42
2400:adc5:100::/42 maxlen: 42
2400:adc5:140::/42 maxlen: 42
2400:adc5:180::/42 maxlen: 42
2400:adc5:1c0::/42 maxlen: 42
2400:adc5:300::/42 maxlen: 42
2400:adc5:340::/42 maxlen: 42
2400:adc5:380::/42 maxlen: 42
2400:adc5:3c0::/42 maxlen: 42
2400:adc5:400::/42 maxlen: 42
2400:adc5:440::/42 maxlen: 42
2400:adc5:480::/42 maxlen: 42
2400:adc5:4c0::/42 maxlen: 42
2400:adca::/40 maxlen: 40
2400:adca:100::/40 maxlen: 40
2400:add9::/40 maxlen: 40
2400:add9:100::/40 maxlen: 40
2400:add9:200::/40 maxlen: 40
2400:add9:300::/40 maxlen: 40
2400:addb:800::/40 maxlen: 40
2400:addb:900::/40 maxlen: 40
2400:addd:2000::/40 maxlen: 40
2400:addd:2100::/40 maxlen: 40
2400:addd:2800::/40 maxlen: 40
2400:addd:2900::/40 maxlen: 40
2400:addd:4900::/40 maxlen: 40
2400:adde::/40 maxlen: 40
2400:adde:100::/40 maxlen: 40
2400:addf:800::/40 maxlen: 40
2400:addf:900::/40 maxlen: 40
2400:addf:1000::/40 maxlen: 40
2400:addf:1100::/40 maxlen: 40
2400:addf:2900::/40 maxlen: 40
2400:addf:3900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10842 (0x2a5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Validity
Not Before: Sep 14 05:28:59 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aa7861b-8e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:55:d5:87:3f:15:2c:8c:34:ed:2f:c9:6e:
af:c2:31:29:27:1e:ad:21:70:92:1b:58:5d:c8:86:
76:ab:d5:22:c8:49:e1:0f:ff:1d:67:ea:f5:b5:19:
e2:e5:b6:d3:e7:55:55:e6:a3:56:0d:74:f8:1c:81:
45:3e:ef:dd:7f:13:d8:f5:d5:73:9d:e1:d7:fb:ca:
93:26:d5:82:5a:38:5b:1a:32:07:fc:67:d6:b7:73:
ee:e8:ff:50:0b:79:b1:9c:8a:cb:1c:4b:4e:64:68:
ed:76:e8:6c:cb:d3:13:5b:7e:0d:32:a1:33:31:1a:
f8:9e:ec:e5:3e:33:44:a2:fd:06:a0:b8:8a:a0:f5:
88:24:09:8f:5a:a9:0c:fb:0b:4c:6e:51:4e:8b:0c:
1c:e4:c2:07:d6:57:2e:43:97:5f:21:2c:cc:f8:ab:
33:e9:31:8b:70:26:e1:77:71:d7:b5:58:12:a7:b4:
31:2d:c3:52:bf:6e:05:03:36:af:1f:68:6c:90:d8:
09:6a:46:ef:65:79:ce:d0:a5:7a:02:b2:94:ba:cd:
e9:a6:42:41:7c:da:32:65:02:5f:71:c1:9b:b5:6e:
0b:68:41:8b:82:8b:5d:c5:6d:79:7e:aa:01:85:1f:
bb:52:56:da:79:7a:8d:27:1f:58:66:8a:90:ea:09:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A3:BA:A6:33:F7:8C:E1:94:EC:0D:98:AC:48:7D:9B:C0:CC:9F:92
X509v3 Authority Key Identifier:
keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.44.0/22
43.242.100.0/22
58.65.192.0/19
61.5.128.0/19
101.53.224.0/19
103.7.60.0/22
103.18.8.0/21
103.18.20.0/22
103.26.80.0/21
103.31.92.0/22
103.31.100.0-103.31.107.255
103.244.172.0-103.244.179.255
103.245.132.0/22
103.245.192.0/22
119.13.184.0/21
124.29.192.0/18
153.117.0.0/16
175.107.192.0/18
202.47.32.0/19
202.163.64.0/18
203.101.160.0/19
218.100.85.0/24
IPv6:
2001:4538::/32
2400:adc0:9::/64
2400:adc0:b::/64
2400:adc0:200::/47
2400:adc0:4000::-2400:adc0:4009:ffff:ffff:ffff:ffff:ffff
2400:adc0:4010::-2400:adc0:4014:ffff:ffff:ffff:ffff:ffff
2400:adc0:4020::/48
2400:adc0:4030::/48
2400:adc0:4040::/48
2400:adc0:4104::/48
2400:adc0:4203::-2400:adc0:4204:ffff:ffff:ffff:ffff:ffff
2400:adc0:4300::/46
2400:adc0:4310::/47
2400:adc0:4500::/48
2400:adc0:4600::/48
2400:adc0:4610::/47
2400:adc0:4700::/47
2400:adc0:4710::/47
2400:adc0:4800::/48
2400:adc0:4900::/47
2400:adc0:4910::/48
2400:adc0:4a10::/48
2400:adc0:4b10::/48
2400:adc0:c001::/48
2400:adc0:c003::/48
2400:adc0:c030::/48
2400:adc0:c102::/47
2400:adc0:c210::/47
2400:adc0:c310::/48
2400:adc0:c400::/48
2400:adc0:c410::/48
2400:adc0:c510::/48
2400:adc2:100::/48
2400:adc2:300::-2400:adc2:4ff:ffff:ffff:ffff:ffff:ffff
2400:adc2:600::/39
2400:adc2:900::-2400:adc2:aff:ffff:ffff:ffff:ffff:ffff
2400:adc4::/39
2400:adc4:800::/39
2400:adc5::/39
2400:adc5:300::-2400:adc5:4ff:ffff:ffff:ffff:ffff:ffff
2400:adca::/39
2400:add9::/38
2400:addb:800::/39
2400:addd:2000::/39
2400:addd:2800::/39
2400:addd:4900::/40
2400:adde::/39
2400:addf:800::/39
2400:addf:1000::/39
2400:addf:2900::/40
2400:addf:3900::/40
Signature Algorithm: sha256WithRSAEncryption
36:05:ac:99:62:2c:ce:15:27:f4:b7:ed:8f:85:21:d6:9e:12:
83:e9:ed:b9:fd:a8:37:73:7d:e1:c4:f6:e8:5a:d2:0c:aa:24:
50:61:37:60:ec:c2:bd:87:5e:25:a0:d6:10:71:b1:36:3f:3c:
a9:85:9f:ff:6d:f3:f4:7f:ca:70:0b:51:ca:d1:f5:2f:9f:49:
ac:68:fd:3d:98:48:da:31:7e:38:6a:d9:5a:ce:f9:d6:c9:af:
e9:8d:08:fe:b1:36:1f:4f:0a:67:73:a9:dd:7a:9c:8e:77:db:
27:ac:a4:f1:20:6a:72:48:c7:df:d2:3e:60:77:90:bb:da:da:
39:b8:91:21:6b:87:3f:5b:b3:58:29:4a:f2:1f:6a:b4:53:f9:
33:02:29:47:82:16:bc:27:39:1b:34:d0:e4:9c:30:b4:38:80:
6d:a8:1e:d8:9e:f4:47:72:97:fe:84:39:c3:a4:20:28:d0:df:
3d:8a:14:cc:b7:08:80:55:95:11:c0:a3:c5:17:cc:d2:1a:fe:
b4:9f:fc:7e:ba:bb:d1:ca:fa:57:1a:ef:b9:e2:76:a8:fa:32:
d4:ed:1a:16:3d:34:15:69:64:48:f2:10:b4:c5:7f:1a:38:02:
55:70:f6:dc:64:17:84:f5:83:d0:75:43:87:86:1c:b6:5e:15:
69:58:e6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:40:48 2026 by rpki-client