Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/BDECB94CEC4F11EEB0B9B467C4F9AE02.roa
File: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (raw, json)
Hash identifier: 2pI1bzUTUq/EmFMii6AUxvtNgZI/E8A87UU703pgGXc=
Subject key identifier: 5E:11:D6:72:51:EA:65:E7:AD:4E:9B:9B:A1:76:63:57:95:9D:A2:77
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 0239
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/BDECB94CEC4F11EEB0B9B467C4F9AE02.roa
Signing time: Wed 09 Sep 2026 16:53:41 +0000
ROA not before: Wed 09 Sep 2026 16:53:41 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 134835
IP address blocks: 45.120.156.0/24 maxlen: 24
45.120.157.0/24 maxlen: 24
45.120.159.0/24 maxlen: 24
45.125.164.0/24 maxlen: 24
45.125.165.0/24 maxlen: 24
45.125.166.0/24 maxlen: 24
45.125.167.0/24 maxlen: 24
103.56.216.0/24 maxlen: 24
103.56.217.0/24 maxlen: 24
103.56.218.0/24 maxlen: 24
103.56.219.0/24 maxlen: 24
103.194.41.0/24 maxlen: 24
103.194.42.0/24 maxlen: 24
103.194.43.0/24 maxlen: 24
103.200.96.0/24 maxlen: 24
103.200.97.0/24 maxlen: 24
103.200.99.0/24 maxlen: 24
103.204.172.0/24 maxlen: 24
103.204.173.0/24 maxlen: 24
103.204.174.0/24 maxlen: 24
103.204.175.0/24 maxlen: 24
122.128.96.0/24 maxlen: 24
122.128.97.0/24 maxlen: 24
122.128.99.0/24 maxlen: 24
2403:ad80:60::/45 maxlen: 45
2403:ad80:80::/45 maxlen: 45
2403:ad80:88::/45 maxlen: 45
2403:ad80:98::/45 maxlen: 45
2403:ad80:a0::/45 maxlen: 45
2403:ad80:3c00::/38 maxlen: 38
2403:ad80:4c00::/38 maxlen: 38
2403:ad80:5000::/38 maxlen: 38
2403:ad80:8100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Sep 9 16:53:41 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa18f15-3c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:e6:0b:64:79:be:09:4a:c3:9e:c0:a4:fc:
b0:53:e7:e1:cf:dc:2d:fa:62:d8:53:5e:c6:26:d6:
65:1c:95:2c:74:90:8e:c5:f6:db:f3:cf:40:51:04:
1e:56:79:38:de:78:bb:45:b8:4f:7a:08:c9:85:05:
da:d2:7a:5b:33:7b:2c:07:df:9b:df:87:bf:74:93:
c4:dd:e6:f4:0e:cd:c6:2e:ef:92:e0:1f:6d:e3:6d:
5a:00:e5:24:9a:9d:46:71:5c:7b:ce:01:2d:f0:5f:
f0:a5:d3:95:68:f8:0d:bb:21:f4:2f:e7:27:32:08:
a3:84:52:47:27:17:2b:9a:3c:6b:04:b2:84:2f:c8:
76:3a:b0:8a:20:ad:9c:e8:da:36:e2:4d:95:20:69:
17:ae:20:6c:b6:49:03:11:8d:37:41:ec:25:a9:10:
6d:16:60:ad:a6:82:02:d6:cc:98:36:d6:f4:82:68:
f1:c8:a9:0e:e1:e3:8a:7a:bd:70:76:10:ad:c6:48:
b7:c2:94:64:17:c3:0c:85:89:38:46:ca:5d:9e:8b:
fe:2d:24:95:24:89:6a:0d:65:ac:b9:0d:73:c0:e9:
2a:10:3c:c5:5a:0b:22:69:a5:ec:00:cf:0a:14:01:
cc:5b:04:6c:77:bb:0f:4e:d8:e2:da:95:42:d5:dc:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:11:D6:72:51:EA:65:E7:AD:4E:9B:9B:A1:76:63:57:95:9D:A2:77
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/BDECB94CEC4F11EEB0B9B467C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.120.156.0/23
45.120.159.0/24
45.125.164.0/22
103.56.216.0/22
103.194.41.0-103.194.43.255
103.200.96.0/23
103.200.99.0/24
103.204.172.0/22
122.128.96.0/23
122.128.99.0/24
IPv6:
2403:ad80:60::/45
2403:ad80:80::/44
2403:ad80:98::-2403:ad80:a7:ffff:ffff:ffff:ffff:ffff
2403:ad80:3c00::/38
2403:ad80:4c00::-2403:ad80:53ff:ffff:ffff:ffff:ffff:ffff
2403:ad80:8100::/40
Signature Algorithm: sha256WithRSAEncryption
47:8c:30:f7:b0:5e:e7:d7:4e:62:03:45:8d:a1:f8:de:11:27:
93:20:b5:03:43:c6:6f:0e:d8:39:3b:20:38:61:79:5b:05:87:
aa:ae:3b:b4:3e:20:b3:d3:e6:bc:33:10:c6:f7:ac:26:b4:b7:
8a:20:9d:e7:c1:c5:b5:e0:e2:c2:d5:32:30:26:99:cf:b0:0b:
e4:d8:19:4a:f8:0b:19:7c:86:07:bc:13:c3:a7:8b:a8:25:d1:
3f:b7:d3:3e:00:6b:cd:3f:31:d1:46:fb:28:0c:48:1c:dd:9c:
3e:ea:7c:02:0c:8c:59:c2:11:dc:44:5e:1f:45:74:66:b4:60:
ba:d3:22:54:60:6d:14:af:6f:1f:88:df:6d:ec:54:8f:e5:da:
29:8d:d6:2b:9e:ec:50:d5:d4:78:03:78:44:08:02:95:57:71:
d2:fb:3e:b2:37:5d:34:79:46:5c:6e:f0:68:9c:85:f9:13:fe:
f2:8a:2f:ce:a1:26:76:d2:af:65:b4:b5:f3:40:5a:9c:70:60:
45:94:9c:b2:8e:49:cd:e9:4e:55:af:76:b3:82:6b:7d:57:c1:
10:1e:fd:91:c8:d8:48:8d:4a:43:d9:af:86:32:33:f5:44:23:
c0:d0:1d:b6:82:95:a8:32:71:b3:91:99:33:11:5f:d3:1e:32:
24:f2:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:23:10 2026 by rpki-client