Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/517E7D1AB0EC11E5A6934B42C4F9AE02.roa
File: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (raw, json)
Hash identifier: 5DRF3OBPfXV3lU2bu3oUnMJrvoo8XlLJ7cqTsx4GaH0=
Subject key identifier: FD:B3:1E:38:E2:7B:9C:83:42:B8:4E:FB:B6:86:3C:3A:A1:E4:96:73
Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial: 30E0
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/517E7D1AB0EC11E5A6934B42C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:25:45 +0000
ROA not before: Wed 02 Jul 2025 15:52:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 10024
IP address blocks: 27.125.196.0/22 maxlen: 22
27.125.196.0/23 maxlen: 23
27.125.196.0/24 maxlen: 24
27.125.197.0/24 maxlen: 24
27.125.198.0/23 maxlen: 23
27.125.198.0/24 maxlen: 24
27.125.199.0/24 maxlen: 24
43.245.16.0/22 maxlen: 22
43.245.16.0/23 maxlen: 23
43.245.16.0/24 maxlen: 24
43.245.17.0/24 maxlen: 24
43.245.18.0/23 maxlen: 23
43.245.18.0/24 maxlen: 24
43.245.19.0/24 maxlen: 24
103.3.200.0/22 maxlen: 22
103.3.200.0/23 maxlen: 23
103.3.200.0/24 maxlen: 24
103.3.201.0/24 maxlen: 24
103.3.202.0/23 maxlen: 23
103.3.202.0/24 maxlen: 24
103.3.203.0/24 maxlen: 24
119.75.192.0/20 maxlen: 20
119.75.192.0/23 maxlen: 23
119.75.192.0/24 maxlen: 24
119.75.193.0/24 maxlen: 24
119.75.194.0/23 maxlen: 23
119.75.194.0/24 maxlen: 24
119.75.195.0/24 maxlen: 24
119.75.196.0/23 maxlen: 23
119.75.196.0/24 maxlen: 24
119.75.197.0/24 maxlen: 24
119.75.198.0/23 maxlen: 23
119.75.198.0/24 maxlen: 24
119.75.199.0/24 maxlen: 24
119.75.200.0/23 maxlen: 23
119.75.200.0/24 maxlen: 24
119.75.201.0/24 maxlen: 24
119.75.202.0/23 maxlen: 23
119.75.202.0/24 maxlen: 24
119.75.203.0/24 maxlen: 24
119.75.204.0/23 maxlen: 23
119.75.204.0/24 maxlen: 24
119.75.205.0/24 maxlen: 24
119.75.206.0/23 maxlen: 23
119.75.206.0/24 maxlen: 24
119.75.207.0/24 maxlen: 24
203.92.64.0/18 maxlen: 18
203.92.64.0/23 maxlen: 23
203.92.64.0/24 maxlen: 24
203.92.65.0/24 maxlen: 24
203.92.66.0/23 maxlen: 23
203.92.66.0/24 maxlen: 24
203.92.67.0/24 maxlen: 24
203.92.68.0/23 maxlen: 23
203.92.68.0/24 maxlen: 24
203.92.69.0/24 maxlen: 24
203.92.70.0/23 maxlen: 23
203.92.70.0/24 maxlen: 24
203.92.71.0/24 maxlen: 24
203.92.72.0/23 maxlen: 23
203.92.72.0/24 maxlen: 24
203.92.73.0/24 maxlen: 24
203.92.74.0/23 maxlen: 23
203.92.74.0/24 maxlen: 24
203.92.75.0/24 maxlen: 24
203.92.76.0/23 maxlen: 23
203.92.76.0/24 maxlen: 24
203.92.77.0/24 maxlen: 24
203.92.78.0/23 maxlen: 23
203.92.78.0/24 maxlen: 24
203.92.79.0/24 maxlen: 24
203.92.80.0/23 maxlen: 23
203.92.80.0/24 maxlen: 24
203.92.81.0/24 maxlen: 24
203.92.82.0/23 maxlen: 23
203.92.82.0/24 maxlen: 24
203.92.83.0/24 maxlen: 24
203.92.84.0/23 maxlen: 23
203.92.84.0/24 maxlen: 24
203.92.85.0/24 maxlen: 24
203.92.86.0/23 maxlen: 23
203.92.86.0/24 maxlen: 24
203.92.87.0/24 maxlen: 24
203.92.88.0/23 maxlen: 23
203.92.88.0/24 maxlen: 24
203.92.89.0/24 maxlen: 24
203.92.90.0/23 maxlen: 23
203.92.90.0/24 maxlen: 24
203.92.91.0/24 maxlen: 24
203.92.92.0/23 maxlen: 23
203.92.92.0/24 maxlen: 24
203.92.93.0/24 maxlen: 24
203.92.94.0/23 maxlen: 23
203.92.94.0/24 maxlen: 24
203.92.95.0/24 maxlen: 24
203.92.96.0/23 maxlen: 23
203.92.96.0/24 maxlen: 24
203.92.97.0/24 maxlen: 24
203.92.98.0/23 maxlen: 23
203.92.98.0/24 maxlen: 24
203.92.99.0/24 maxlen: 24
203.92.100.0/23 maxlen: 23
203.92.100.0/24 maxlen: 24
203.92.101.0/24 maxlen: 24
203.92.102.0/23 maxlen: 23
203.92.102.0/24 maxlen: 24
203.92.103.0/24 maxlen: 24
203.92.104.0/23 maxlen: 23
203.92.104.0/24 maxlen: 24
203.92.105.0/24 maxlen: 24
203.92.106.0/23 maxlen: 23
203.92.106.0/24 maxlen: 24
203.92.107.0/24 maxlen: 24
203.92.108.0/23 maxlen: 23
203.92.108.0/24 maxlen: 24
203.92.109.0/24 maxlen: 24
203.92.110.0/23 maxlen: 23
203.92.110.0/24 maxlen: 24
203.92.111.0/24 maxlen: 24
203.92.112.0/23 maxlen: 23
203.92.112.0/24 maxlen: 24
203.92.113.0/24 maxlen: 24
203.92.114.0/23 maxlen: 23
203.92.114.0/24 maxlen: 24
203.92.115.0/24 maxlen: 24
203.92.116.0/23 maxlen: 23
203.92.116.0/24 maxlen: 24
203.92.117.0/24 maxlen: 24
203.92.118.0/23 maxlen: 23
203.92.118.0/24 maxlen: 24
203.92.119.0/24 maxlen: 24
203.92.120.0/23 maxlen: 23
203.92.120.0/24 maxlen: 24
203.92.121.0/24 maxlen: 24
203.92.122.0/23 maxlen: 23
203.92.122.0/24 maxlen: 24
203.92.123.0/24 maxlen: 24
203.92.124.0/23 maxlen: 23
203.92.124.0/24 maxlen: 24
203.92.125.0/24 maxlen: 24
203.92.126.0/23 maxlen: 23
203.92.126.0/24 maxlen: 24
203.92.127.0/24 maxlen: 24
2406:a400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12512 (0x30e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Validity
Not Before: Jul 2 15:52:18 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a42239-face
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:d3:46:d9:e0:44:33:76:36:c1:11:be:a8:
bd:86:2f:e6:e5:46:c7:df:28:f0:09:7f:ec:fc:5b:
48:e0:86:f0:df:32:38:af:a7:f1:19:f0:86:e1:e7:
bc:76:92:bd:94:e1:3f:aa:24:42:06:aa:0b:7e:9f:
a6:10:cf:b6:1c:48:2e:cb:60:9b:8f:0e:34:f1:c8:
ab:1f:75:c2:8f:9d:c9:5f:22:63:1a:1b:b6:79:76:
f3:88:32:ec:d9:35:cd:a6:87:6c:49:c0:d9:16:52:
0b:c8:d7:c1:6f:f4:94:4c:8b:6f:60:4a:26:4d:7b:
0a:16:20:f9:9d:5b:95:a2:c0:f4:37:b4:dc:7a:db:
fd:6e:be:71:e6:05:ad:2d:ff:f1:78:a8:76:46:fd:
8e:be:8f:54:0f:36:04:f8:d4:32:ca:9a:98:de:2d:
00:5b:8b:14:c1:ba:21:e9:53:af:2b:66:f2:34:e9:
60:88:98:cf:cf:14:be:8f:de:e7:57:b0:74:e2:1a:
41:93:38:ec:d9:d6:d3:7f:91:5e:e4:35:e7:46:6f:
0d:33:76:35:2a:4c:65:9a:a5:2b:17:71:75:58:74:
55:fc:57:fd:a1:d7:85:a4:f5:18:90:b9:8d:f9:4f:
76:fa:03:fe:98:c4:39:d6:b2:1f:b0:db:7b:d0:6f:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B3:1E:38:E2:7B:9C:83:42:B8:4E:FB:B6:86:3C:3A:A1:E4:96:73
X509v3 Authority Key Identifier:
keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/517E7D1AB0EC11E5A6934B42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.125.196.0/22
43.245.16.0/22
103.3.200.0/22
119.75.192.0/20
203.92.64.0/18
IPv6:
2406:a400::/32
Signature Algorithm: sha256WithRSAEncryption
2c:5c:da:d4:0f:8e:89:fd:1f:03:75:84:0f:be:98:6d:75:1f:
92:7b:44:ff:51:cf:cf:2e:15:84:a1:56:b6:f2:0f:42:66:45:
8f:5e:94:59:e8:dc:d0:3c:56:6a:29:11:81:7b:fe:ef:29:d7:
fd:8e:1b:cc:c3:16:b2:15:4e:d1:93:cb:0f:2d:74:e3:f3:e8:
f9:97:7f:d0:d2:fc:21:9d:cc:10:27:52:5a:53:b3:b6:50:95:
81:c1:76:c1:e1:52:51:7b:b6:d5:6a:ad:33:8d:d5:5d:7f:d1:
0a:15:f3:58:03:63:b9:6b:50:61:1b:ae:e7:0a:72:c2:ec:d1:
4f:af:6d:f4:06:cd:5c:fc:6f:d2:a7:da:e6:08:62:11:00:89:
4b:0f:00:5f:fe:68:d7:b3:dd:51:f1:d1:35:94:72:a7:e2:cb:
47:08:dc:1a:2f:ac:cf:e7:1b:85:82:cf:7b:e3:c0:b8:00:9f:
4f:ef:ec:9d:55:71:7b:e6:a0:77:f3:36:3a:ec:44:b9:e7:f6:
15:88:ae:80:0b:df:3f:7e:33:9f:bf:6a:ea:16:69:8f:d6:a8:
30:f2:7b:20:ac:6c:e9:30:0f:92:46:fe:6a:20:39:16:46:df:
d4:92:85:0d:f1:b7:a3:c8:df:ce:10:8e:ca:a0:9b:42:02:bd:
83:16:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:35 2026 by rpki-client