Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/E99C5D78999011F09D326581C4F9AE02.roa
File: E99C5D78999011F09D326581C4F9AE02.roa (raw, json)
Hash identifier: 1cz0Gx6xNn3eft1Tu+kHnL/yvs5aiRq8FiVpKp392Ng=
Subject key identifier: A6:90:ED:6D:24:75:0D:71:05:12:69:A1:C5:14:A0:06:25:01:FD:77
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 0749
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/E99C5D78999011F09D326581C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:48:11 +0000
ROA not before: Wed 24 Sep 2025 21:53:32 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 17766
IP address blocks: 43.251.108.0/22 maxlen: 24
103.1.228.0/24 maxlen: 24
103.1.229.0/24 maxlen: 24
103.1.230.0/23 maxlen: 23
103.16.148.0/22 maxlen: 22
103.16.148.0/24 maxlen: 24
103.16.149.0/24 maxlen: 24
103.252.191.0/24 maxlen: 24
116.213.0.0/23 maxlen: 23
116.213.3.0/24 maxlen: 24
116.213.4.0/24 maxlen: 24
116.213.6.0/23 maxlen: 23
116.213.7.0/24 maxlen: 24
116.213.8.0/22 maxlen: 22
116.213.12.0/22 maxlen: 22
116.213.16.0/22 maxlen: 22
124.109.64.0/19 maxlen: 19
150.129.84.0/22 maxlen: 22
150.129.84.0/24 maxlen: 24
202.9.87.0/24 maxlen: 24
202.125.164.0/23 maxlen: 23
202.125.168.0/21 maxlen: 21
202.155.160.0/20 maxlen: 20
203.1.248.0/22 maxlen: 22
203.3.166.0/24 maxlen: 24
203.9.152.0/22 maxlen: 22
203.9.152.0/23 maxlen: 23
203.9.246.0/23 maxlen: 23
203.9.248.0/23 maxlen: 23
203.12.234.0/24 maxlen: 24
203.17.76.0/22 maxlen: 22
203.19.214.0/23 maxlen: 23
203.19.244.0/22 maxlen: 22
203.25.126.0/23 maxlen: 23
203.26.138.0/24 maxlen: 24
203.26.139.0/24 maxlen: 24
203.28.121.0/24 maxlen: 24
203.30.164.0/23 maxlen: 24
203.30.199.0/24 maxlen: 24
203.31.116.0/23 maxlen: 24
203.32.160.0/20 maxlen: 20
203.32.161.0/24 maxlen: 24
203.33.150.0/24 maxlen: 24
203.55.1.0/24 maxlen: 24
203.56.26.0/24 maxlen: 24
203.76.0.0/18 maxlen: 18
203.149.64.0/20 maxlen: 20
203.149.64.0/22 maxlen: 22
203.149.64.0/24 maxlen: 24
203.149.65.0/24 maxlen: 24
203.149.66.0/24 maxlen: 24
203.149.67.0/24 maxlen: 24
203.149.68.0/22 maxlen: 22
203.149.68.0/24 maxlen: 24
203.149.69.0/24 maxlen: 24
203.149.70.0/24 maxlen: 24
203.149.71.0/24 maxlen: 24
203.149.72.0/22 maxlen: 22
203.149.72.0/24 maxlen: 24
203.149.73.0/24 maxlen: 24
203.149.74.0/24 maxlen: 24
203.149.75.0/24 maxlen: 24
203.149.76.0/22 maxlen: 22
203.149.76.0/24 maxlen: 24
203.149.77.0/24 maxlen: 24
203.149.78.0/24 maxlen: 24
203.149.79.0/24 maxlen: 24
203.149.80.0/21 maxlen: 22
203.149.80.0/24 maxlen: 24
203.149.81.0/24 maxlen: 24
203.149.82.0/24 maxlen: 24
203.149.83.0/24 maxlen: 24
203.149.84.0/24 maxlen: 24
203.149.85.0/24 maxlen: 24
203.149.86.0/24 maxlen: 24
203.149.87.0/24 maxlen: 24
210.215.0.0/16 maxlen: 16
210.215.5.0/24 maxlen: 24
210.215.6.0/24 maxlen: 24
210.215.8.0/24 maxlen: 24
210.215.48.0/24 maxlen: 24
210.215.72.0/24 maxlen: 24
210.215.75.0/24 maxlen: 24
210.215.77.0/24 maxlen: 24
210.215.83.0/24 maxlen: 24
210.215.84.0/24 maxlen: 24
210.215.85.0/24 maxlen: 24
210.215.87.0/24 maxlen: 24
210.215.90.0/24 maxlen: 24
210.215.101.0/24 maxlen: 24
210.215.102.0/24 maxlen: 24
210.215.104.0/24 maxlen: 24
210.215.112.0/24 maxlen: 24
210.215.113.0/24 maxlen: 24
210.215.130.0/24 maxlen: 24
210.215.131.0/24 maxlen: 24
210.215.136.0/24 maxlen: 24
210.215.151.0/24 maxlen: 24
2001:db0::/32 maxlen: 32
2001:db0::/36 maxlen: 36
2001:db0:1000::/36 maxlen: 36
2001:db0:2000::/36 maxlen: 36
2001:db0:3000::/36 maxlen: 36
2001:db0:4000::/36 maxlen: 36
2001:db0:5000::/36 maxlen: 36
2001:db0:6000::/36 maxlen: 36
2001:db0:7000::/36 maxlen: 36
2001:db0:8000::/36 maxlen: 36
2001:db0:9000::/36 maxlen: 36
2001:db0:a000::/36 maxlen: 36
2001:db0:b000::/36 maxlen: 36
2001:db0:c000::/36 maxlen: 36
2001:db0:d000::/36 maxlen: 36
2001:db0:e000::/36 maxlen: 36
2001:db0:f000::/36 maxlen: 36
2404:d200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1865 (0x749)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Sep 24 21:53:32 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47bdb-03be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:85:15:0a:27:cf:b4:15:71:7c:3f:15:ae:1e:
61:5c:d0:ee:9a:07:71:58:e7:01:10:4c:20:e7:ff:
a7:79:4b:72:bd:5f:00:e9:52:95:6e:7a:75:d9:77:
b3:72:d5:77:c3:95:60:d3:0d:70:9b:cc:d2:b5:64:
c4:0b:b9:88:b3:7f:2e:6d:17:ec:13:aa:77:22:31:
35:ea:15:05:06:a7:2c:40:21:04:cb:27:ab:7d:b2:
8f:31:f9:4d:f9:88:5b:91:41:a5:39:92:ba:e3:35:
c9:92:35:e9:8b:05:7c:34:1a:49:e5:bd:16:dd:11:
26:9b:4a:fb:12:91:54:ff:61:d8:74:86:28:27:8a:
3d:cb:20:04:ce:35:6f:80:4a:34:d1:a0:be:11:2a:
c2:01:a3:e3:b8:93:ec:2d:8c:7b:13:e0:d5:f2:72:
9d:32:86:ba:d6:d4:5e:8f:15:c7:a9:c4:9b:cc:cd:
3d:6e:cc:3f:aa:78:6e:96:a3:ae:7e:86:b3:4e:73:
c8:6b:e6:16:07:b7:ca:ac:cd:1c:56:98:44:61:dd:
2d:34:12:9a:d2:c3:d9:cc:39:c1:b2:1a:8d:a6:bc:
60:bd:67:b8:a9:d5:6c:ea:10:e0:0f:f2:b7:b1:6e:
88:59:5e:01:bf:d7:a6:a3:f9:61:e8:b2:c7:b5:5e:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:90:ED:6D:24:75:0D:71:05:12:69:A1:C5:14:A0:06:25:01:FD:77
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/E99C5D78999011F09D326581C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.251.108.0/22
103.1.228.0/22
103.16.148.0/22
103.252.191.0/24
116.213.0.0/23
116.213.3.0-116.213.4.255
116.213.6.0-116.213.19.255
124.109.64.0/19
150.129.84.0/22
202.9.87.0/24
202.125.164.0/23
202.125.168.0/21
202.155.160.0/20
203.1.248.0/22
203.3.166.0/24
203.9.152.0/22
203.9.246.0-203.9.249.255
203.12.234.0/24
203.17.76.0/22
203.19.214.0/23
203.19.244.0/22
203.25.126.0/23
203.26.138.0/23
203.28.121.0/24
203.30.164.0/23
203.30.199.0/24
203.31.116.0/23
203.32.160.0/20
203.33.150.0/24
203.55.1.0/24
203.56.26.0/24
203.76.0.0/18
203.149.64.0-203.149.87.255
210.215.0.0/16
IPv6:
2001:db0::/32
2404:d200::/32
Signature Algorithm: sha256WithRSAEncryption
52:3d:fe:9d:26:b5:ba:51:95:93:fd:03:20:6a:bb:97:e1:69:
1a:9b:da:4a:80:df:b2:4a:24:bf:a5:af:e1:07:cf:ad:48:2f:
4d:4b:7b:82:12:0a:49:14:1b:ec:fe:3c:83:1e:1e:bd:c3:80:
a2:db:9e:17:20:89:5b:f6:39:f4:14:05:77:bd:63:0f:23:58:
b2:21:62:5b:69:93:d2:a5:fd:ee:83:24:2e:62:63:58:81:c9:
5a:48:97:59:4e:2c:44:2c:c4:14:96:ce:b9:8b:d4:e3:4d:2c:
5d:f0:2f:62:82:ea:d7:12:46:e9:d2:34:5a:d5:d1:19:0f:5f:
c1:b4:1f:96:7a:87:29:1e:3d:92:5a:65:dd:9a:ed:7d:d3:9d:
19:8a:86:ed:34:28:a3:c2:e7:da:5f:da:99:33:24:ff:01:2b:
fa:fd:fc:08:d2:93:a2:e9:7c:7c:06:79:6e:1f:24:06:a2:ef:
e3:00:59:b7:fb:6d:67:8d:cd:8f:93:c1:62:d8:a7:c0:e3:33:
15:69:bd:6d:86:35:c6:b5:9b:ae:0a:9d:00:d0:5c:cc:c5:a9:
6b:a6:d9:3b:00:47:60:88:db:01:ee:ac:9a:22:41:06:16:5c:
d4:fc:e6:0c:d9:ee:0e:4a:02:99:48:13:d0:a4:20:cd:c8:03:
57:b3:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:04 2026 by rpki-client