Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa
File: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (raw, json)
Hash identifier: i4NWXoIOqvLLIDoT5vnJRlML/dfECc5wW/haWblxm44=
Subject key identifier: EA:26:B5:EE:DC:1E:56:2E:9E:68:70:76:8E:DC:AF:0A:92:FE:A5:17
Certificate issuer: /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Certificate serial: 1978
Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa
Signing time: Wed 08 Apr 2026 16:23:51 +0000
ROA not before: Wed 08 Apr 2026 16:23:51 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 18001
IP address blocks: 123.231.0.0/17 maxlen: 17
123.231.0.0/18 maxlen: 18
123.231.0.0/19 maxlen: 19
123.231.0.0/21 maxlen: 21
123.231.2.0/24 maxlen: 24
123.231.8.0/21 maxlen: 21
123.231.16.0/21 maxlen: 21
123.231.24.0/21 maxlen: 21
123.231.32.0/21 maxlen: 21
123.231.40.0/22 maxlen: 22
123.231.44.0/22 maxlen: 22
123.231.48.0/21 maxlen: 21
123.231.56.0/21 maxlen: 21
123.231.64.0/19 maxlen: 19
123.231.64.0/21 maxlen: 21
123.231.64.0/24 maxlen: 24
123.231.65.0/24 maxlen: 24
123.231.68.0/24 maxlen: 24
123.231.69.0/24 maxlen: 24
123.231.72.0/21 maxlen: 21
123.231.72.0/24 maxlen: 24
123.231.73.0/24 maxlen: 24
123.231.80.0/21 maxlen: 22
123.231.88.0/21 maxlen: 21
123.231.96.0/19 maxlen: 19
123.231.96.0/21 maxlen: 21
123.231.104.0/21 maxlen: 22
123.231.112.0/22 maxlen: 22
123.231.116.0/22 maxlen: 22
123.231.120.0/21 maxlen: 22
203.189.64.0/20 maxlen: 21
203.189.70.0/24 maxlen: 24
203.189.73.0/24 maxlen: 24
2405:4400::/32 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6520 (0x1978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Validity
Not Before: Apr 8 16:23:51 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69d68117-da89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:06:30:7e:a3:13:3d:ea:3d:46:43:d8:da:
f8:64:01:3a:37:f4:45:75:a2:b7:31:c9:6d:0e:10:
43:60:14:39:03:3c:ea:9e:c9:cc:60:74:68:70:b6:
fe:dc:ed:5a:f5:c7:7f:ca:3c:ea:d3:a2:96:50:01:
41:30:83:c3:7d:fe:32:97:8b:71:7b:7f:3a:a2:70:
5c:a8:18:2c:b3:f2:dd:a4:ce:72:0d:12:9a:75:20:
3c:47:0f:2e:89:d2:22:f6:f2:ea:6d:5a:bb:f7:20:
cf:90:e7:b6:5c:b5:70:af:dd:96:04:bf:bf:34:20:
4a:6e:b9:27:b3:85:a3:ca:d2:69:2d:f1:91:f7:7e:
e4:e1:15:37:54:31:bb:12:81:d6:09:b3:e5:82:84:
ed:38:ed:4e:7b:8f:e5:52:4c:6a:cb:45:6e:de:05:
43:6f:ce:9a:07:28:d6:90:64:03:53:15:d5:b5:a4:
c7:b3:8b:c4:1c:42:5e:cf:4e:63:d3:86:20:0c:7b:
6d:ef:8d:c7:c4:98:ff:e6:22:80:70:6b:30:1a:ce:
df:ba:dc:d1:f4:5b:4b:ff:b2:49:83:98:c1:5b:cb:
fc:df:6b:58:72:fe:e4:9c:d5:25:12:c0:8a:fe:10:
01:58:94:74:0a:9c:ee:a3:bc:03:ee:aa:10:93:0f:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:26:B5:EE:DC:1E:56:2E:9E:68:70:76:8E:DC:AF:0A:92:FE:A5:17
X509v3 Authority Key Identifier:
keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.231.0.0/17
203.189.64.0/20
IPv6:
2405:4400::/32
Signature Algorithm: sha256WithRSAEncryption
7d:dd:8e:fd:ac:37:fe:34:c6:ab:1d:a3:19:49:06:2d:b6:9d:
53:97:07:ff:96:42:b5:72:f3:3e:05:92:ca:ad:8f:a1:f7:58:
c6:6e:ba:a1:ff:a4:7a:e0:e6:8a:35:11:79:10:81:9e:c3:4d:
1d:db:8a:5d:4b:64:d9:92:b4:2e:68:50:1f:51:81:f5:7d:5c:
d6:5b:f8:c8:82:ec:a2:95:30:a9:44:bb:cb:2b:87:92:27:7f:
5e:09:75:01:6e:74:ea:20:ca:70:c5:e9:1f:da:44:11:0f:9f:
97:26:9d:48:b9:f3:1f:27:92:58:bf:54:dd:05:2d:b3:e2:44:
a3:48:8b:ca:78:8c:1e:2c:06:98:12:87:69:5e:a3:67:6e:23:
da:ee:14:c8:5a:c0:cd:ae:35:24:f5:f7:17:4a:52:6f:2e:a5:
8b:7b:d5:b1:fc:24:57:98:f5:84:d6:74:d3:17:78:bb:a4:02:
89:c5:e1:68:31:47:5e:d3:3f:62:ee:e6:e6:61:59:7f:58:96:
56:30:dc:64:be:42:61:24:a1:23:44:15:f3:fd:35:e3:d9:af:
bb:4d:4b:43:90:c8:bb:fd:94:2f:17:e9:52:11:f5:60:dd:e7:
a8:08:d2:69:fb:94:22:4e:b3:57:c2:6f:05:92:1d:c0:0d:26:
0a:06:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:36 2026 by rpki-client