Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/727C68508AB411EA89D83541C4F9AE02.roa
File: 727C68508AB411EA89D83541C4F9AE02.roa (raw, json)
Hash identifier: j1y9l++Cb4rS0kTDJ/au9IYHGMfWT1dKRtZ4fnBWD30=
Subject key identifier: 9F:90:54:DE:61:73:FF:20:7F:80:30:89:69:25:43:DC:58:3C:C4:BB
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1D93
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/727C68508AB411EA89D83541C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:27:12 +0000
ROA not before: Tue 04 Nov 2025 15:00:32 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 23966
IP address blocks: 119.30.80.0/20 maxlen: 20
119.30.86.0/24 maxlen: 24
119.30.87.0/24 maxlen: 24
119.30.100.0/24 maxlen: 24
119.30.106.0/24 maxlen: 24
119.30.107.0/24 maxlen: 24
119.30.108.0/24 maxlen: 24
119.30.112.0/22 maxlen: 24
119.30.124.0/22 maxlen: 24
119.73.0.0/18 maxlen: 18
202.61.32.0/19 maxlen: 19
202.61.32.0/20 maxlen: 20
202.61.32.0/24 maxlen: 24
202.61.34.0/24 maxlen: 24
202.61.40.0/24 maxlen: 24
202.61.41.0/24 maxlen: 24
202.61.42.0/24 maxlen: 24
202.61.43.0/24 maxlen: 24
202.61.44.0/24 maxlen: 24
202.61.46.0/24 maxlen: 24
202.61.47.0/24 maxlen: 24
202.61.48.0/21 maxlen: 24
202.61.56.0/21 maxlen: 24
202.147.160.0/20 maxlen: 24
202.147.176.0/20 maxlen: 20
202.147.176.0/21 maxlen: 24
202.147.184.0/21 maxlen: 24
202.154.224.0/19 maxlen: 19
202.154.224.0/20 maxlen: 20
202.154.224.0/24 maxlen: 24
202.154.225.0/24 maxlen: 24
202.154.226.0/24 maxlen: 24
202.154.227.0/24 maxlen: 24
202.154.228.0/24 maxlen: 24
202.154.229.0/24 maxlen: 24
202.154.230.0/24 maxlen: 24
202.154.231.0/24 maxlen: 24
202.154.232.0/24 maxlen: 24
202.154.233.0/24 maxlen: 24
202.154.234.0/24 maxlen: 24
202.154.235.0/24 maxlen: 24
202.154.236.0/24 maxlen: 24
202.154.237.0/24 maxlen: 24
202.154.238.0/24 maxlen: 24
202.154.239.0/24 maxlen: 24
202.154.240.0/20 maxlen: 20
202.154.240.0/24 maxlen: 24
202.154.241.0/24 maxlen: 24
202.154.242.0/24 maxlen: 24
202.154.243.0/24 maxlen: 24
202.154.244.0/24 maxlen: 24
202.154.245.0/24 maxlen: 24
202.154.246.0/24 maxlen: 24
202.154.247.0/24 maxlen: 24
202.154.248.0/24 maxlen: 24
202.154.249.0/24 maxlen: 24
202.154.250.0/24 maxlen: 24
202.154.251.0/24 maxlen: 24
202.154.252.0/24 maxlen: 24
202.154.253.0/24 maxlen: 24
202.154.254.0/24 maxlen: 24
202.154.255.0/24 maxlen: 24
203.223.160.0/20 maxlen: 24
210.2.128.0/18 maxlen: 18
210.2.128.0/20 maxlen: 21
210.2.128.0/24 maxlen: 24
210.2.129.0/24 maxlen: 24
210.2.130.0/24 maxlen: 24
210.2.131.0/24 maxlen: 24
210.2.132.0/22 maxlen: 22
210.2.132.0/24 maxlen: 24
210.2.133.0/24 maxlen: 24
210.2.134.0/24 maxlen: 24
210.2.135.0/24 maxlen: 24
210.2.136.0/21 maxlen: 22
210.2.136.0/24 maxlen: 24
210.2.137.0/24 maxlen: 24
210.2.138.0/24 maxlen: 24
210.2.139.0/24 maxlen: 24
210.2.140.0/24 maxlen: 24
210.2.141.0/24 maxlen: 24
210.2.142.0/24 maxlen: 24
210.2.143.0/24 maxlen: 24
210.2.144.0/20 maxlen: 21
210.2.144.0/24 maxlen: 24
210.2.145.0/24 maxlen: 24
210.2.146.0/24 maxlen: 24
210.2.147.0/24 maxlen: 24
210.2.148.0/24 maxlen: 24
210.2.149.0/24 maxlen: 24
210.2.150.0/24 maxlen: 24
210.2.151.0/24 maxlen: 24
210.2.152.0/24 maxlen: 24
210.2.153.0/24 maxlen: 24
210.2.154.0/24 maxlen: 24
210.2.155.0/24 maxlen: 24
210.2.156.0/24 maxlen: 24
210.2.157.0/24 maxlen: 24
210.2.158.0/24 maxlen: 24
210.2.159.0/24 maxlen: 24
210.2.160.0/20 maxlen: 21
210.2.160.0/24 maxlen: 24
210.2.161.0/24 maxlen: 24
210.2.162.0/24 maxlen: 24
210.2.163.0/24 maxlen: 24
210.2.164.0/24 maxlen: 24
210.2.165.0/24 maxlen: 24
210.2.166.0/24 maxlen: 24
210.2.167.0/24 maxlen: 24
210.2.168.0/24 maxlen: 24
210.2.169.0/24 maxlen: 24
210.2.170.0/24 maxlen: 24
210.2.171.0/24 maxlen: 24
210.2.172.0/24 maxlen: 24
210.2.173.0/24 maxlen: 24
210.2.174.0/24 maxlen: 24
210.2.175.0/24 maxlen: 24
210.2.176.0/20 maxlen: 22
210.2.176.0/24 maxlen: 24
210.2.177.0/24 maxlen: 24
210.2.178.0/24 maxlen: 24
210.2.179.0/24 maxlen: 24
210.2.180.0/24 maxlen: 24
210.2.181.0/24 maxlen: 24
210.2.182.0/24 maxlen: 24
210.2.183.0/24 maxlen: 24
210.2.184.0/24 maxlen: 24
210.2.185.0/24 maxlen: 24
210.2.186.0/24 maxlen: 24
210.2.187.0/24 maxlen: 24
210.2.188.0/24 maxlen: 24
210.2.189.0/24 maxlen: 24
210.2.190.0/24 maxlen: 24
210.2.191.0/24 maxlen: 24
2401:0:201::/48 maxlen: 48
2401:0:4000::/40 maxlen: 40
2401:0:8001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7571 (0x1d93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Nov 4 15:00:32 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48500-4fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:ba:05:c6:42:99:ac:36:2a:a2:bc:08:0c:
46:36:eb:51:0c:b4:c1:a9:a8:c9:7e:8c:26:48:3d:
6d:43:8a:b0:3d:90:17:f9:a0:56:f1:b4:14:12:fc:
b2:28:08:5a:90:f5:81:49:fc:02:65:0f:75:b1:21:
28:3f:09:b6:fa:04:90:2a:f0:a0:f0:6c:d5:0c:9b:
3b:26:44:27:04:d4:ff:34:dc:ba:c1:fd:b2:38:12:
d1:90:ea:02:3c:2f:8b:e4:20:18:7d:22:b8:8d:a7:
7c:90:14:da:fe:7b:e9:e2:94:61:42:ae:34:d7:80:
65:ee:04:4f:3d:97:13:bb:4d:48:de:75:b3:5c:c7:
18:f8:e7:14:c6:4c:13:65:4d:b5:25:41:37:fc:a7:
f5:81:cd:a7:6a:86:54:03:7c:e1:f6:a7:75:cb:cd:
1b:ae:51:4d:99:07:17:24:c9:70:de:68:4e:18:42:
2b:4d:78:eb:6e:e6:26:9b:d8:e2:0a:71:41:5c:09:
13:59:ca:85:38:09:b9:43:bc:5f:c6:24:71:73:bc:
39:e8:0c:73:70:4b:4b:f8:40:71:a7:7e:3f:e1:cc:
e9:21:50:2a:4d:f8:ce:0f:cb:cd:ba:6c:eb:f5:f4:
76:0e:60:14:dc:c0:47:f6:40:aa:41:ac:9f:82:53:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:90:54:DE:61:73:FF:20:7F:80:30:89:69:25:43:DC:58:3C:C4:BB
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/727C68508AB411EA89D83541C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.30.80.0/20
119.30.100.0/24
119.30.106.0-119.30.108.255
119.30.112.0/22
119.30.124.0/22
119.73.0.0/18
202.61.32.0/19
202.147.160.0/19
202.154.224.0/19
203.223.160.0/20
210.2.128.0/18
IPv6:
2401:0:201::/48
2401:0:4000::/40
2401:0:8001::/48
Signature Algorithm: sha256WithRSAEncryption
31:de:b6:d2:41:b1:f4:75:72:db:40:7c:89:93:5e:d6:53:74:
69:8b:58:04:bc:f0:36:a5:6d:21:8e:b2:6d:ac:cd:95:28:a5:
e3:34:1c:f2:13:ef:9d:fd:e3:19:66:be:dc:9b:43:97:7c:a9:
46:5e:58:66:e6:c6:fe:c9:ba:7c:b9:59:c8:81:c0:08:f9:46:
87:af:99:30:2c:dd:c4:8d:fa:17:d0:ad:d2:d6:3d:2f:ce:6d:
57:2a:3d:7e:37:61:41:f5:25:38:9c:da:fd:17:d8:61:aa:a2:
e7:1f:97:fc:9f:29:41:e4:f9:fe:28:9a:c6:ae:68:73:35:52:
31:65:aa:dc:3c:05:91:f8:0c:f3:cc:f3:d8:7e:92:e7:42:f6:
32:5d:97:b4:da:53:fd:08:57:8e:0e:51:6a:35:ca:c0:2e:5f:
3c:a9:a4:91:b1:5b:62:62:6e:68:b7:2c:9a:68:ac:29:c4:9c:
59:1d:66:5e:48:3e:be:2a:c1:dd:d9:38:ed:04:e9:87:63:20:
ef:3d:81:88:a8:58:33:e6:18:1f:26:51:3f:49:32:21:3c:88:
a6:56:bf:b9:a2:86:63:04:57:1d:14:95:c4:71:f7:d7:97:39:
97:0b:12:3b:db:a2:51:3f:b6:5d:60:0f:45:e4:8c:89:b3:83:
52:0b:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:44 2026 by rpki-client