Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/C22F80E4D1F011EEB68A503EC4F9AE02.roa
File: C22F80E4D1F011EEB68A503EC4F9AE02.roa (raw, json)
Hash identifier: VHVG6Z6jq5Ma6SUBXPMmjOzqZ8GQCFukojoR+uJjv98=
Subject key identifier: 7D:61:D8:D3:31:B2:A4:59:9F:5E:FF:B4:6D:F4:C3:10:F1:56:E5:83
Certificate issuer: /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Certificate serial: 1F47
Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/C22F80E4D1F011EEB68A503EC4F9AE02.roa
Signing time: Sun 02 Aug 2026 16:28:44 +0000
ROA not before: Sun 02 Aug 2026 16:28:44 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38176
IP address blocks: 113.208.64.0/23 maxlen: 23
113.208.66.0/24 maxlen: 24
113.208.67.0/24 maxlen: 24
113.208.68.0/22 maxlen: 22
113.208.68.0/24 maxlen: 24
113.208.69.0/24 maxlen: 24
113.208.70.0/24 maxlen: 24
113.208.71.0/24 maxlen: 24
113.208.72.0/24 maxlen: 24
113.208.73.0/24 maxlen: 24
113.208.74.0/24 maxlen: 24
113.208.75.0/24 maxlen: 24
113.208.76.0/24 maxlen: 24
113.208.78.0/24 maxlen: 24
113.208.79.0/24 maxlen: 24
113.208.80.0/24 maxlen: 24
113.208.81.0/24 maxlen: 24
113.208.82.0/24 maxlen: 24
113.208.83.0/24 maxlen: 24
113.208.84.0/24 maxlen: 24
113.208.85.0/24 maxlen: 24
113.208.86.0/24 maxlen: 24
113.208.87.0/24 maxlen: 24
113.208.88.0/24 maxlen: 24
113.208.89.0/24 maxlen: 24
113.208.90.0/24 maxlen: 24
113.208.91.0/24 maxlen: 24
113.208.92.0/24 maxlen: 24
113.208.93.0/24 maxlen: 24
113.208.94.0/24 maxlen: 24
203.202.224.0/23 maxlen: 23
203.202.224.0/24 maxlen: 24
203.202.225.0/24 maxlen: 24
203.202.226.0/23 maxlen: 23
203.202.226.0/24 maxlen: 24
203.202.227.0/24 maxlen: 24
203.202.228.0/23 maxlen: 23
203.202.228.0/24 maxlen: 24
203.202.229.0/24 maxlen: 24
203.202.230.0/23 maxlen: 23
203.202.230.0/24 maxlen: 24
203.202.231.0/24 maxlen: 24
2405:1400::/34 maxlen: 34
2405:1400:4000::/34 maxlen: 34
2405:1400:8000::/34 maxlen: 34
2405:1400:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl
rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8007 (0x1f47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Validity
Not Before: Aug 2 16:28:44 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6f703c-cddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:17:f7:b7:6e:01:71:61:b6:57:4a:69:58:
2a:70:8e:a4:c7:e0:79:67:cf:66:dc:8c:be:a8:3e:
f8:1f:fb:03:1d:88:90:3a:ab:30:eb:89:a7:4d:36:
9b:32:56:c0:2e:d1:f5:e7:fa:9e:06:30:5e:48:5d:
52:48:65:19:76:a2:f1:b8:27:b1:64:01:49:8a:35:
77:b0:56:37:b1:77:75:8b:15:a3:06:28:e4:7b:74:
d7:4f:10:e1:06:51:8b:bf:fd:ef:e3:6b:73:b3:39:
2a:93:af:16:de:01:80:07:6c:02:ae:c3:54:b7:62:
3c:f1:3a:18:a3:42:96:35:6f:88:08:51:a3:35:58:
5a:a1:61:bf:6a:79:f0:01:f7:b5:34:14:e1:f1:73:
46:ce:65:e0:b9:ae:bc:c6:44:5c:ad:98:f9:49:d4:
ba:d0:38:ff:33:e2:2d:61:96:68:56:48:f1:3d:e7:
fc:c0:65:92:8d:c3:2a:f8:a0:33:cb:3f:33:24:af:
b2:02:5b:be:d1:06:4c:2c:50:f1:ae:88:fe:0a:dd:
e7:d8:e0:1b:a4:3e:6f:d0:23:14:93:5a:e3:33:a8:
3e:84:c1:98:7b:ac:b1:14:e9:fb:05:8f:97:05:a3:
ca:83:ce:54:6c:25:00:06:e2:88:c2:b2:c6:17:b7:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:61:D8:D3:31:B2:A4:59:9F:5E:FF:B4:6D:F4:C3:10:F1:56:E5:83
X509v3 Authority Key Identifier:
keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/C22F80E4D1F011EEB68A503EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
113.208.64.0-113.208.76.255
113.208.78.0-113.208.94.255
203.202.224.0/21
IPv6:
2405:1400::/32
Signature Algorithm: sha256WithRSAEncryption
2d:d5:7d:fd:52:12:3d:7d:b5:ba:8a:a6:48:43:08:fb:fb:25:
45:08:5a:2a:ec:40:0d:39:b1:e1:80:1d:96:d1:8b:8e:69:20:
8f:99:a9:37:3a:99:9d:5f:06:85:e6:b4:11:7f:63:22:4c:43:
2c:3d:e9:11:85:92:6b:89:a4:f2:c7:1f:2f:b3:5e:68:78:62:
ec:09:92:1e:78:bb:76:fe:63:82:2a:89:95:34:2a:a9:98:88:
1a:1f:f3:ea:48:5c:58:9b:86:22:f1:d5:6e:40:4e:2c:fd:b4:
82:82:3f:e3:fe:85:71:8c:9d:08:18:bd:8e:a2:40:d3:17:9e:
0f:80:f1:ed:d0:f7:35:fb:93:fb:d0:c8:c6:f6:a6:1c:98:8d:
b1:57:51:8e:dd:b9:3c:ae:a1:c0:cf:64:c1:1d:1b:10:76:9a:
cd:ec:4d:3a:cd:3d:4a:3b:b1:2d:fd:eb:1f:62:4c:50:a6:fb:
53:74:ab:e3:01:ee:58:75:c7:42:da:df:c6:f0:d1:56:74:7a:
00:e3:ff:f2:1a:a1:30:52:e9:ac:5e:f8:d7:27:63:79:55:09:
33:70:62:48:9e:f0:04:c6:9d:11:f0:3e:fa:11:76:e6:c8:31:
6c:a3:5f:49:64:12:56:b7:01:5b:53:d6:9c:93:6b:75:15:f3:
76:96:e7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:20:52 2026 by rpki-client