Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa
File: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (raw, json)
Hash identifier: FnXv9I6TqM9POtWWkrhNn3mAPsS36+vPK2xzuCoRyFY=
Subject key identifier: 88:E4:33:5C:FA:F4:53:C7:39:51:E3:CD:FE:2E:82:F5:2E:C9:5C:EC
Certificate issuer: /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Certificate serial: 1960
Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:30:28 +0000
ROA not before: Fri 30 Jan 2026 17:14:01 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 18001
IP address blocks: 123.231.0.0/17 maxlen: 17
123.231.0.0/18 maxlen: 18
123.231.0.0/19 maxlen: 19
123.231.0.0/21 maxlen: 21
123.231.2.0/24 maxlen: 24
123.231.8.0/21 maxlen: 21
123.231.16.0/21 maxlen: 21
123.231.24.0/21 maxlen: 21
123.231.32.0/21 maxlen: 21
123.231.40.0/22 maxlen: 22
123.231.44.0/22 maxlen: 22
123.231.48.0/21 maxlen: 21
123.231.56.0/21 maxlen: 21
123.231.64.0/19 maxlen: 19
123.231.64.0/21 maxlen: 21
123.231.64.0/24 maxlen: 24
123.231.65.0/24 maxlen: 24
123.231.68.0/24 maxlen: 24
123.231.69.0/24 maxlen: 24
123.231.72.0/21 maxlen: 21
123.231.72.0/24 maxlen: 24
123.231.73.0/24 maxlen: 24
123.231.80.0/21 maxlen: 22
123.231.88.0/21 maxlen: 21
123.231.96.0/19 maxlen: 19
123.231.96.0/21 maxlen: 21
123.231.104.0/21 maxlen: 22
123.231.112.0/22 maxlen: 22
123.231.116.0/22 maxlen: 22
123.231.120.0/21 maxlen: 22
203.189.64.0/20 maxlen: 21
203.189.70.0/24 maxlen: 24
203.189.73.0/24 maxlen: 24
2405:4400::/32 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6496 (0x1960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Validity
Not Before: Jan 30 17:14:01 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=69a45b94-0f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:7a:8a:0c:ea:0f:be:8a:ac:a3:87:e4:13:
fd:3b:3f:f1:1b:03:8f:18:71:93:c2:bb:d9:a0:73:
aa:48:78:d6:76:85:6d:a6:87:51:d2:a7:55:b7:d2:
90:ac:b2:51:1e:f7:b1:0f:1f:bc:da:f2:a4:22:e4:
f5:72:cd:25:b5:69:f9:7d:cc:ff:8f:7e:1b:ec:88:
a5:46:f5:70:e8:4b:d3:e1:4b:8d:e5:38:e7:d1:54:
4d:0e:72:da:c5:da:37:d6:9b:9f:cd:89:2c:95:98:
94:c9:6b:bf:84:28:c6:a9:df:7e:ed:a8:8a:36:2a:
f0:fd:12:e5:6e:3a:8c:19:ad:e6:a8:78:52:95:e0:
e8:98:8c:ff:3c:55:41:c3:c0:cd:92:3e:50:cf:fa:
9a:2c:15:17:95:3f:d0:0a:3e:2e:fa:3e:a2:48:ed:
0c:df:7d:98:4c:fe:d5:73:c4:34:7b:60:b1:be:36:
3c:6f:ec:a6:34:fe:b3:e8:37:0a:a0:67:f5:a5:4a:
58:77:a2:36:9a:e6:67:52:ec:65:5a:6c:07:22:95:
f6:f1:de:3b:4e:15:e2:06:f9:99:63:93:ec:e4:6f:
c9:16:d3:93:fb:b0:af:06:ea:3b:64:56:2e:76:98:
e9:fb:bf:fe:63:f2:f8:de:ee:76:c6:3a:6b:cc:be:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E4:33:5C:FA:F4:53:C7:39:51:E3:CD:FE:2E:82:F5:2E:C9:5C:EC
X509v3 Authority Key Identifier:
keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.231.0.0/17
203.189.64.0/20
IPv6:
2405:4400::/32
Signature Algorithm: sha256WithRSAEncryption
9c:86:d7:29:c1:d6:16:1f:b7:75:4c:06:23:7e:30:ff:02:30:
cd:81:57:0e:05:7d:b5:c4:a4:ae:c8:25:43:13:ad:2c:cf:cd:
89:03:e4:41:3d:c4:d5:26:7f:03:a8:b2:f0:eb:33:cc:8c:5e:
fd:12:85:2b:c4:cb:c4:ff:31:df:ce:e5:52:9a:ef:3e:44:5e:
00:27:a8:f9:b7:e9:6e:1f:fb:97:ad:53:df:ba:07:90:0a:fa:
da:9a:21:52:9b:e6:20:bd:0f:d9:15:c1:e6:7f:f4:a1:14:dd:
cf:0f:85:6b:0a:73:c3:3b:dd:ba:40:27:1d:50:98:2e:9a:94:
de:b8:24:df:e4:26:da:3c:47:29:ad:85:cf:76:67:d9:a2:3f:
e7:ff:62:19:21:c2:13:7b:57:9d:48:d2:61:f1:d4:5d:45:af:
e3:f9:08:08:6f:a4:21:35:1c:04:b6:75:40:e5:f3:89:5e:1e:
01:0a:41:88:36:79:94:4a:ef:05:6f:cb:03:65:af:62:7e:40:
ef:63:ca:9f:c7:38:b0:9b:ad:a7:3e:a2:2a:8c:84:40:2a:f6:
39:18:7c:b2:31:32:c8:be:73:54:ab:6b:9b:2b:b8:73:2e:52:
12:ed:b4:62:f6:ca:3b:1d:e0:5f:63:a9:f5:5b:4c:84:c8:97:
e9:2a:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:57 2026 by rpki-client