Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa
File: F49AA4A889C211EEADFCF27CC4F9AE02.roa (raw, json)
Hash identifier: hK855y65AhmcM8dFvio4eF6aP3gfcWPf81k8GC91DUo=
Subject key identifier: E9:DD:A0:F1:43:D0:15:3C:6D:10:A1:A8:EF:A1:BA:CD:FB:31:0F:6C
Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial: 18C9
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa
Signing time: Tue 24 Feb 2026 17:14:20 +0000
ROA not before: Tue 24 Feb 2026 17:14:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9287
IP address blocks: 45.125.128.0/22 maxlen: 22
45.125.128.0/24 maxlen: 24
45.125.129.0/24 maxlen: 24
45.125.131.0/24 maxlen: 24
45.252.52.0/22 maxlen: 22
45.252.52.0/24 maxlen: 24
45.252.53.0/24 maxlen: 24
45.252.54.0/24 maxlen: 24
45.252.55.0/24 maxlen: 24
103.55.1.0/24 maxlen: 24
103.55.2.0/24 maxlen: 24
103.76.196.0/22 maxlen: 22
103.76.196.0/24 maxlen: 24
103.76.197.0/24 maxlen: 24
103.76.198.0/24 maxlen: 24
103.76.199.0/24 maxlen: 24
103.115.132.0/22 maxlen: 22
103.115.132.0/24 maxlen: 24
103.115.133.0/24 maxlen: 24
103.115.134.0/24 maxlen: 24
103.115.135.0/24 maxlen: 24
2404:3280::/32 maxlen: 32
2404:3280:1::/48 maxlen: 48
2404:3280:a::/48 maxlen: 48
2404:3280:c::/48 maxlen: 48
2404:3280:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6345 (0x18c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Validity
Not Before: Feb 24 17:14:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=699ddc6c-0e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:84:2a:7d:45:fa:f2:44:21:47:63:f7:18:
92:95:aa:a1:e0:34:c0:0b:ff:8a:21:8f:4c:53:6a:
4a:33:f2:29:fe:5e:98:d4:79:dd:da:65:bc:a0:85:
6d:c2:a4:72:bb:6e:c1:1e:b5:76:79:e6:5a:b6:d2:
0c:f3:1d:b4:80:5d:36:a5:a7:24:5f:bb:e1:c3:eb:
30:8b:82:2c:76:80:22:90:1d:41:89:42:db:79:37:
f6:e5:85:ed:d4:d3:fb:2d:6b:50:72:8b:2d:a3:3a:
08:e1:93:31:12:08:09:5d:dd:61:15:0f:d3:55:21:
c6:16:cf:77:f4:af:87:1c:87:27:20:24:4b:1f:e8:
dd:59:36:53:0a:2c:e8:6d:68:a5:c9:cf:4c:d4:e9:
07:89:d0:ee:77:d7:8c:c8:9d:84:b6:0c:c6:5d:50:
0a:4b:c5:db:45:45:08:37:c9:0f:cd:fa:dd:e6:4e:
00:7f:54:c1:63:de:9b:f7:90:22:e1:a2:06:3b:10:
95:96:f0:de:cc:87:20:51:05:56:e6:37:b6:67:85:
bb:a6:00:67:c1:d0:2b:15:47:32:52:78:c2:2a:13:
fe:fb:32:d7:94:e1:41:46:83:bb:90:76:ba:23:67:
87:f1:3d:a7:ef:39:89:c6:c0:45:9b:98:73:4c:30:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DD:A0:F1:43:D0:15:3C:6D:10:A1:A8:EF:A1:BA:CD:FB:31:0F:6C
X509v3 Authority Key Identifier:
keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.128.0/22
45.252.52.0/22
103.55.1.0-103.55.2.255
103.76.196.0/22
103.115.132.0/22
IPv6:
2404:3280::/32
Signature Algorithm: sha256WithRSAEncryption
32:a2:46:ec:d5:bf:33:31:b3:a2:16:19:1e:e1:cf:fb:b0:27:
ae:9a:e6:5b:7b:39:34:1d:be:1d:dd:e2:42:43:22:33:2e:9e:
9f:85:8b:54:78:d2:15:a1:8d:6e:fa:74:ac:b7:b5:68:57:82:
cd:02:63:cf:3b:5b:49:30:f6:31:84:75:21:22:a2:0a:96:a3:
d1:59:80:69:42:b2:81:e4:e1:bf:38:9f:86:ac:dd:d7:10:f8:
ce:c2:36:15:07:55:62:ba:fa:26:01:b0:62:2f:a4:70:23:74:
d4:64:6a:be:1e:75:05:de:ef:dc:e3:83:16:ad:f2:81:7b:11:
bd:b6:c9:47:db:d8:bd:bf:ae:65:b9:2c:89:a1:c8:e9:e8:71:
4b:20:4b:8e:3c:66:a9:98:a8:d7:17:e9:9e:eb:47:8b:4d:c4:
9c:3f:a4:b8:eb:9a:5b:7a:49:49:be:0d:5c:a6:98:82:19:3a:
4e:ee:24:60:56:23:6a:d4:25:ac:2d:7a:72:da:8a:cc:98:cd:
9d:6e:c7:e6:e6:ea:cd:2d:b5:e3:4e:65:c1:e4:0e:aa:30:91:
df:dd:ef:4d:2e:51:31:e5:dc:c5:7b:ff:ae:5f:d6:26:35:42:
93:8a:9e:90:e8:ef:3a:95:02:1b:be:d2:ae:aa:30:d5:70:07:
a8:d3:9c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:41 2026 by rpki-client