Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/76494F6E146111ED83A8FB50C4F9AE02.roa
File: 76494F6E146111ED83A8FB50C4F9AE02.roa (raw, json)
Hash identifier: Dcfnrtvcf6qmw0OIdnn1ILAXOXPZ/6nzxnRz5Jox0pY=
Subject key identifier: EB:37:46:CD:D4:82:BE:F0:5C:14:99:1B:88:3A:4B:E2:70:86:D7:C6
Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial: 034A
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/76494F6E146111ED83A8FB50C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:05:13 +0000
ROA not before: Sat 01 Mar 2025 03:55:08 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 133414
IP address blocks: 202.10.255.0/24 maxlen: 24
202.80.64.0/19 maxlen: 19
202.80.64.0/24 maxlen: 24
202.80.65.0/24 maxlen: 24
202.80.66.0/24 maxlen: 24
202.80.68.0/24 maxlen: 24
202.80.73.0/24 maxlen: 24
202.80.74.0/24 maxlen: 24
2405:7f00:3200::/48 maxlen: 48
2405:7f00:3201::/48 maxlen: 48
2405:7f00:3204::/48 maxlen: 48
2405:7f00:3250::/48 maxlen: 48
2405:7f00:3260::/48 maxlen: 48
2405:7f00:8000::/43 maxlen: 43
2405:7f00:8100::/43 maxlen: 43
2405:7f00:8120::/43 maxlen: 43
2405:7f00:8140::/43 maxlen: 43
2405:7f00:8160::/43 maxlen: 43
2405:7f00:8180::/43 maxlen: 43
2405:7f00:8200::/43 maxlen: 43
2405:7f00:8220::/43 maxlen: 43
2405:7f00:8240::/43 maxlen: 43
2405:7f00:8260::/43 maxlen: 43
2405:7f00:8280::/43 maxlen: 43
2405:7f00:8300::/43 maxlen: 43
2405:7f00:8320::/43 maxlen: 43
2405:7f00:8340::/43 maxlen: 43
2405:7f00:8500::/43 maxlen: 43
2405:7f00:8800::/40 maxlen: 40
2405:7f00:8a00::/40 maxlen: 40
2405:7f00:c100::/43 maxlen: 43
2405:7f00:c120::/43 maxlen: 43
2405:7f00:c140::/43 maxlen: 43
2405:7f00:c160::/43 maxlen: 43
2405:7f00:c180::/43 maxlen: 43
2405:7f00:c200::/43 maxlen: 43
2405:7f00:c800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 842 (0x34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Validity
Not Before: Mar 1 03:55:08 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a42b79-60cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:e8:ba:02:3a:66:0e:fe:10:1b:5f:ee:c6:
f2:5c:8f:79:e0:7e:0f:eb:39:bc:30:c9:e4:16:18:
d2:6e:cb:73:b5:c0:1c:e4:4a:a0:6e:cb:e3:d4:25:
3f:d0:46:05:c0:77:54:d8:8c:34:14:48:a8:42:c6:
36:7d:cc:64:71:83:2d:4f:bb:35:79:81:bb:ed:e2:
e7:bc:48:d1:86:42:6a:dd:7e:1f:a3:e0:d8:68:d4:
f6:56:08:5a:86:f5:4a:51:33:fc:51:7d:36:63:33:
bd:f7:1f:ce:bd:f2:91:e4:95:4c:df:1b:7b:be:51:
3e:ca:a6:d2:f3:7f:ac:75:2a:7a:b6:7b:18:02:30:
56:e6:a5:ab:18:92:25:c2:6a:64:7b:73:ea:8a:21:
9c:c9:58:b1:2a:6d:77:b6:67:bd:46:f8:90:93:8a:
40:07:df:ec:83:50:f2:ec:e5:6e:06:6c:46:5f:fa:
ea:95:48:07:3e:59:2b:c0:0a:3b:2d:a5:14:17:26:
e0:29:78:64:cf:a1:a0:0e:11:54:29:96:4c:d4:ae:
d0:8e:28:94:f3:c4:7f:ea:e9:5c:28:e3:15:72:14:
ab:27:ae:f0:bf:0b:37:d2:2a:85:6b:e7:70:83:85:
5f:c4:e0:be:8e:c7:57:96:c6:8c:77:95:4b:67:46:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:37:46:CD:D4:82:BE:F0:5C:14:99:1B:88:3A:4B:E2:70:86:D7:C6
X509v3 Authority Key Identifier:
keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/76494F6E146111ED83A8FB50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.10.255.0/24
202.80.64.0/19
IPv6:
2405:7f00:3200::/47
2405:7f00:3204::/48
2405:7f00:3250::/48
2405:7f00:3260::/48
2405:7f00:8000::/43
2405:7f00:8100::-2405:7f00:819f:ffff:ffff:ffff:ffff:ffff
2405:7f00:8200::-2405:7f00:829f:ffff:ffff:ffff:ffff:ffff
2405:7f00:8300::-2405:7f00:835f:ffff:ffff:ffff:ffff:ffff
2405:7f00:8500::/43
2405:7f00:8800::/40
2405:7f00:8a00::/40
2405:7f00:c100::-2405:7f00:c19f:ffff:ffff:ffff:ffff:ffff
2405:7f00:c200::/43
2405:7f00:c800::/40
Signature Algorithm: sha256WithRSAEncryption
25:14:6c:40:fd:ef:eb:46:ff:23:50:73:28:8e:88:d8:be:27:
e4:20:6b:75:71:d0:06:6a:d9:41:76:a9:9f:75:0e:c8:48:5b:
78:b2:63:fb:e6:54:80:50:e0:b8:87:52:4d:3e:18:12:b9:4d:
6e:bc:65:03:18:81:4b:91:d6:87:41:12:47:ed:a8:26:64:11:
1e:74:32:45:6f:65:5f:29:a5:9a:1c:5b:ca:5e:ef:cb:21:7c:
a0:a3:4b:b8:f1:22:ac:25:fd:3a:c7:4b:c3:47:15:bc:fa:1b:
79:62:84:a8:04:a9:b9:93:2d:2f:d3:ca:fc:15:dd:92:2e:7b:
32:39:e6:19:cd:09:b1:b2:04:1e:c4:3f:ad:39:41:ec:02:a3:
a9:3f:4d:55:ad:72:d0:e4:0f:63:af:61:d6:67:cb:d5:3f:84:
a8:c2:c9:a5:79:a0:47:85:59:eb:7d:a9:0c:6b:fc:aa:fd:9e:
c6:47:0e:f8:d1:7f:bb:0f:16:15:09:2d:14:2b:29:b6:03:36:
dd:c9:2f:93:d8:6c:74:ab:00:1c:ec:51:fe:c1:9f:78:7d:6a:
ad:cc:cf:0d:1b:ca:86:98:4f:2d:af:78:c9:34:36:5e:b2:17:
54:04:1a:f1:c0:89:79:d1:da:56:6d:5f:f4:6c:d7:20:db:dd:
f8:dc:2d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:28 2026 by rpki-client