Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/2805F2D6E5B511EEB34EF35AC4F9AE02.roa
File: 2805F2D6E5B511EEB34EF35AC4F9AE02.roa (raw, json)
Hash identifier: 3kP9Z+OOoAND6PAOU9ue/UcJJCzKrLb+i6LxI6B2qrY=
Subject key identifier: 3A:CE:A8:26:8E:7D:FE:1F:E2:EE:C4:55:4D:4F:FB:5E:71:33:D2:C3
Certificate issuer: /CN=A9158EC4/serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Certificate serial: 019E
Authority key identifier: 53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/2805F2D6E5B511EEB34EF35AC4F9AE02.roa
Signing time: Fri 15 May 2026 04:35:59 +0000
ROA not before: Fri 15 May 2026 04:35:59 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 7131
IP address blocks: 43.247.60.0/22 maxlen: 22
43.247.60.0/24 maxlen: 24
43.247.61.0/24 maxlen: 24
43.247.62.0/24 maxlen: 24
43.247.63.0/24 maxlen: 24
103.3.240.0/22 maxlen: 22
103.3.240.0/24 maxlen: 24
103.3.241.0/24 maxlen: 24
103.3.242.0/24 maxlen: 24
103.3.243.0/24 maxlen: 24
202.123.128.0/19 maxlen: 19
202.123.128.0/24 maxlen: 24
202.123.129.0/24 maxlen: 24
202.123.130.0/24 maxlen: 24
202.123.131.0/24 maxlen: 24
202.123.132.0/24 maxlen: 24
202.123.133.0/24 maxlen: 24
202.123.134.0/24 maxlen: 24
202.123.135.0/24 maxlen: 24
202.123.136.0/24 maxlen: 24
202.123.137.0/24 maxlen: 24
202.123.138.0/24 maxlen: 24
202.123.139.0/24 maxlen: 24
202.123.140.0/24 maxlen: 24
202.123.141.0/24 maxlen: 24
202.123.142.0/24 maxlen: 24
202.123.143.0/24 maxlen: 24
202.123.144.0/24 maxlen: 24
202.123.145.0/24 maxlen: 24
202.123.146.0/24 maxlen: 24
202.123.147.0/24 maxlen: 24
202.123.148.0/24 maxlen: 24
202.123.149.0/24 maxlen: 24
202.123.150.0/24 maxlen: 24
202.123.151.0/24 maxlen: 24
202.123.152.0/24 maxlen: 24
202.123.153.0/24 maxlen: 24
202.123.154.0/24 maxlen: 24
202.123.155.0/24 maxlen: 24
202.123.156.0/24 maxlen: 24
202.123.157.0/24 maxlen: 24
202.123.158.0/24 maxlen: 24
202.123.159.0/24 maxlen: 24
2401:58c0::/32 maxlen: 32
2401:58c0::/36 maxlen: 36
2401:58c0:1000::/36 maxlen: 36
2401:58c0:2000::/36 maxlen: 36
2401:58c0:3000::/36 maxlen: 36
2401:58c0:4000::/36 maxlen: 36
2401:58c0:5000::/36 maxlen: 36
2401:58c0:6000::/36 maxlen: 36
2401:58c0:7000::/36 maxlen: 36
2401:58c0:8000::/36 maxlen: 36
2401:58c0:9000::/36 maxlen: 36
2401:58c0:a000::/36 maxlen: 36
2401:58c0:b000::/36 maxlen: 36
2401:58c0:c000::/36 maxlen: 36
2401:58c0:d000::/36 maxlen: 36
2401:58c0:e000::/36 maxlen: 36
2401:58c0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158EC4, serialNumber=5324065A613D2D1078179C6216371CCC6A77507A
Validity
Not Before: May 15 04:35:59 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a06a2af-c55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:97:22:3e:ed:d2:2b:5c:de:2c:ab:b2:24:
9e:04:8d:39:34:e2:ec:00:5d:ab:36:a2:ef:af:21:
8d:e3:2e:a9:fd:a1:e7:81:e5:22:02:9e:68:fc:59:
9d:dc:2c:ce:e5:1e:5d:54:eb:64:ce:5d:c5:f9:92:
bb:3d:86:27:22:bc:0e:bd:ad:75:a3:86:6e:e0:ba:
f5:47:41:e9:3e:27:71:9f:cf:f3:ee:4f:cc:67:fd:
fb:e8:95:fd:f4:ac:37:6c:72:38:5e:48:e5:70:f0:
9e:cb:3a:aa:76:25:d4:68:39:55:80:0a:05:8e:61:
96:57:88:59:6e:a2:aa:70:56:af:0b:a8:27:77:bc:
a9:a6:27:75:01:e4:f1:4d:ba:b0:06:c6:a4:ae:0a:
0d:bd:38:69:5f:65:94:e9:9c:3d:19:16:f2:04:9a:
a2:c4:f0:3d:c5:74:68:7f:1b:77:93:a1:e3:1c:4b:
5c:1f:09:fe:2f:0f:ad:01:e7:06:54:a3:0c:6e:78:
c5:43:00:4f:e1:47:aa:26:4c:d7:fb:5f:d4:a6:d7:
17:f2:e8:76:4a:8c:5e:78:8c:9f:2e:7d:97:e2:25:
b6:f1:1c:6d:05:99:a1:87:21:bf:39:db:c2:53:60:
29:c2:68:7c:4b:85:81:17:45:f8:d4:91:d6:10:1a:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CE:A8:26:8E:7D:FE:1F:E2:EE:C4:55:4D:4F:FB:5E:71:33:D2:C3
X509v3 Authority Key Identifier:
keyid:53:24:06:5A:61:3D:2D:10:78:17:9C:62:16:37:1C:CC:6A:77:50:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/UyQGWmE9LRB4F5xiFjcczGp3UHo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyQGWmE9LRB4F5xiFjcczGp3UHo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158EC4/45064790E5B111EE9E35C333C4F9AE02/2805F2D6E5B511EEB34EF35AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.247.60.0/22
103.3.240.0/22
202.123.128.0/19
IPv6:
2401:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
c5:c3:19:d6:03:0c:a0:da:4c:51:83:05:54:fa:0c:76:4a:b0:
d5:8a:4d:8a:11:fb:ff:64:88:c8:a9:ac:46:bf:a9:49:20:47:
b3:da:b1:c7:89:51:02:a0:04:6f:24:43:4d:55:3b:c8:9f:ee:
d3:f7:e9:0d:f6:7b:15:df:cd:1c:bd:de:7e:af:d1:91:94:cf:
fb:7b:32:57:a5:f1:fd:36:c6:28:a0:e2:a4:5d:39:35:9e:0b:
05:02:09:3b:d3:6b:f4:4a:b1:68:8c:d7:6c:67:6f:00:22:cc:
e5:43:b4:2e:8c:95:f7:1c:12:42:0d:fc:68:fb:db:e8:db:59:
88:e3:9d:d9:1c:68:4f:52:56:28:3d:a2:02:70:ed:28:6c:17:
43:64:7d:3c:49:bb:03:5a:00:a0:52:18:ce:07:b0:41:80:11:
67:f8:ef:88:03:21:00:4f:af:b2:5c:a0:dc:ef:db:1b:84:5a:
aa:43:53:8c:d5:f4:f4:16:53:29:83:6c:0c:72:8b:6f:50:dc:
27:b8:e4:e8:c4:b0:5e:2c:b9:3f:4a:4a:a7:bb:ce:3f:04:7f:
d9:00:cd:4e:f4:c9:62:a1:de:ad:17:81:c9:a4:27:05:a5:38:
d9:38:a0:d6:8b:57:a1:8d:81:8e:d5:c4:d5:22:4e:75:9a:ba:
ae:13:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:03 2026 by rpki-client