Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa
File: C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa (raw, json)
Hash identifier: mmVost6mx+Nsnlt25bJ3nZWYDauWfkhD71L+YP06Tjs=
Subject key identifier: 35:AA:13:55:8F:80:9E:75:1A:11:34:8F:4D:1A:9E:4C:B7:70:54:F0
Certificate issuer: /CN=A919E1AE/serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Certificate serial: 09BD
Authority key identifier: 53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:32:32 +0000
ROA not before: Fri 03 Oct 2025 02:59:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 17924
IP address blocks: 45.64.240.0/22 maxlen: 24
49.130.0.0/15 maxlen: 15
49.130.0.0/17 maxlen: 18
49.130.128.0/24 maxlen: 24
49.130.129.0/24 maxlen: 24
49.130.130.0/24 maxlen: 24
49.130.131.0/24 maxlen: 24
49.130.132.0/23 maxlen: 24
49.130.134.0/23 maxlen: 24
49.130.136.0/21 maxlen: 21
49.130.144.0/20 maxlen: 20
49.130.160.0/19 maxlen: 19
49.130.192.0/18 maxlen: 18
49.131.0.0/17 maxlen: 18
49.131.128.0/17 maxlen: 17
103.1.16.0/22 maxlen: 22
121.202.0.0/15 maxlen: 15
121.202.0.0/18 maxlen: 18
121.202.64.0/19 maxlen: 19
121.202.96.0/20 maxlen: 20
121.202.112.0/24 maxlen: 24
121.202.113.0/24 maxlen: 24
121.202.124.0/24 maxlen: 24
121.202.126.0/24 maxlen: 24
121.202.127.0/24 maxlen: 24
121.202.128.0/17 maxlen: 17
121.202.131.0/24 maxlen: 24
121.202.132.0/24 maxlen: 24
121.202.137.0/24 maxlen: 24
121.202.142.0/24 maxlen: 24
121.202.150.0/24 maxlen: 24
121.202.160.0/19 maxlen: 19
121.202.206.0/24 maxlen: 24
121.202.232.0/22 maxlen: 22
121.202.236.0/22 maxlen: 22
121.202.251.0/24 maxlen: 24
121.202.252.0/24 maxlen: 24
121.202.253.0/24 maxlen: 24
121.202.254.0/24 maxlen: 24
121.203.0.0/20 maxlen: 20
121.203.16.0/20 maxlen: 20
121.203.32.0/20 maxlen: 20
121.203.48.0/20 maxlen: 20
121.203.64.0/18 maxlen: 18
121.203.64.0/21 maxlen: 21
121.203.72.0/21 maxlen: 21
121.203.80.0/21 maxlen: 21
121.203.88.0/21 maxlen: 21
121.203.96.0/21 maxlen: 21
121.203.104.0/21 maxlen: 21
121.203.112.0/21 maxlen: 21
121.203.120.0/21 maxlen: 21
121.203.128.0/18 maxlen: 18
121.203.192.0/19 maxlen: 19
121.203.224.0/20 maxlen: 20
121.203.240.0/21 maxlen: 21
121.203.244.0/24 maxlen: 24
121.203.245.0/24 maxlen: 24
121.203.246.0/24 maxlen: 24
121.203.247.0/24 maxlen: 24
121.203.248.0/21 maxlen: 21
180.219.0.0/16 maxlen: 16
180.219.0.0/20 maxlen: 24
180.219.16.0/20 maxlen: 24
180.219.32.0/20 maxlen: 24
180.219.48.0/20 maxlen: 24
180.219.64.0/20 maxlen: 24
180.219.80.0/20 maxlen: 24
180.219.96.0/20 maxlen: 24
180.219.112.0/20 maxlen: 24
180.219.128.0/20 maxlen: 24
180.219.144.0/20 maxlen: 24
180.219.160.0/20 maxlen: 24
180.219.176.0/20 maxlen: 24
180.219.192.0/19 maxlen: 19
180.219.192.0/20 maxlen: 24
180.219.208.0/21 maxlen: 24
180.219.216.0/21 maxlen: 24
180.219.224.0/19 maxlen: 19
180.219.224.0/21 maxlen: 24
180.219.232.0/21 maxlen: 24
180.219.240.0/21 maxlen: 24
180.219.248.0/21 maxlen: 24
182.152.0.0/15 maxlen: 15
182.152.0.0/17 maxlen: 17
182.152.128.0/17 maxlen: 17
182.152.128.0/21 maxlen: 21
182.152.136.0/21 maxlen: 21
182.152.144.0/21 maxlen: 21
182.152.152.0/21 maxlen: 21
182.152.160.0/21 maxlen: 21
182.152.168.0/21 maxlen: 21
182.152.176.0/21 maxlen: 21
182.152.184.0/21 maxlen: 21
182.152.192.0/21 maxlen: 21
182.152.200.0/21 maxlen: 21
182.152.208.0/21 maxlen: 21
182.152.216.0/21 maxlen: 21
182.152.224.0/21 maxlen: 21
182.152.232.0/21 maxlen: 21
182.152.240.0/21 maxlen: 21
182.152.248.0/21 maxlen: 21
182.153.0.0/18 maxlen: 19
182.153.64.0/19 maxlen: 19
182.153.128.0/19 maxlen: 19
182.153.160.0/19 maxlen: 19
182.153.192.0/19 maxlen: 19
182.153.224.0/19 maxlen: 19
182.153.248.0/21 maxlen: 21
203.78.32.0/21 maxlen: 21
203.78.32.0/24 maxlen: 24
203.78.36.0/24 maxlen: 24
203.78.37.0/24 maxlen: 24
203.78.40.0/22 maxlen: 22
203.78.40.0/24 maxlen: 24
203.78.41.0/24 maxlen: 24
203.78.42.0/24 maxlen: 24
2407:b400::/32 maxlen: 32
2407:b400:31:11::/64 maxlen: 64
2407:b400:51:3::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 19:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2493 (0x9bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E1AE, serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Validity
Not Before: Oct 3 02:59:46 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46a20-9ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:00:16:2d:dd:a7:7f:65:e9:9d:2f:fb:44:
a1:69:54:9e:5e:2f:4d:d8:36:03:37:8c:8a:b2:bc:
f1:e5:ce:6e:ef:83:52:88:cb:80:90:79:f6:3b:e8:
92:5c:7f:95:00:bd:2f:cb:c5:8e:90:54:1e:78:bd:
38:73:0f:52:ac:ff:2e:6f:f9:b6:e0:1c:cd:c0:b4:
d2:7b:67:b2:ab:f4:e2:c2:56:3b:e9:06:7b:e1:fe:
93:4b:e2:e9:e4:07:ca:01:32:80:d0:08:7a:9c:67:
54:f3:e9:7e:2d:70:67:a2:f8:f9:55:ee:f2:d7:28:
0f:4c:f5:14:9f:1c:f8:63:aa:42:21:3a:fa:44:f2:
d3:b1:36:f2:4a:f6:70:59:b3:32:c4:1b:d8:8b:0b:
2f:87:15:08:43:ae:31:9a:99:f4:f6:45:3f:c1:be:
97:82:fe:e9:34:48:60:82:41:cb:44:96:d2:1c:bb:
07:d6:45:b1:8c:85:cc:66:78:bc:85:74:7d:b9:8d:
7b:10:42:24:66:1f:fd:76:4a:2a:82:c5:7a:2b:39:
e2:31:3b:72:71:06:ef:39:c8:35:b2:0f:40:d2:e6:
b8:1a:de:48:d6:a5:cf:5f:5b:0b:95:25:f5:0d:00:
75:f5:fc:ba:52:88:5c:61:f8:8b:df:10:cc:c7:02:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AA:13:55:8F:80:9E:75:1A:11:34:8F:4D:1A:9E:4C:B7:70:54:F0
X509v3 Authority Key Identifier:
keyid:53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.64.240.0/22
49.130.0.0/15
103.1.16.0/22
121.202.0.0/15
180.219.0.0/16
182.152.0.0/15
203.78.32.0-203.78.43.255
IPv6:
2407:b400::/32
Signature Algorithm: sha256WithRSAEncryption
e5:05:c6:ca:f6:98:24:28:dc:6e:1f:c3:1d:52:9a:02:14:19:
d7:42:f0:cb:d6:e0:a8:95:54:45:94:5c:58:33:c0:9e:8f:f7:
f6:36:80:7b:f0:c6:85:2e:fb:de:a6:e9:c7:ca:03:3a:44:9f:
ca:ce:da:34:23:64:62:b0:f0:f7:54:59:71:52:db:e1:8f:2e:
11:9f:c3:97:e0:e0:c8:3c:d0:84:dd:51:58:ba:0a:88:78:b0:
74:f1:08:7b:0a:4b:72:81:43:b7:fb:25:bf:9d:28:24:50:25:
7e:f9:30:0b:8b:53:ef:a8:f1:c8:ef:9c:71:6f:6e:24:e1:4b:
96:e4:02:b0:40:a8:c2:30:d0:03:4c:e1:73:2f:8d:47:62:97:
d8:f9:97:8d:85:2c:22:4b:72:13:11:1a:e0:16:02:80:81:01:
37:37:8e:29:e9:4f:25:c0:58:7f:71:2f:60:bc:14:8f:54:69:
69:c4:8e:2c:da:7d:69:a3:d3:e0:df:ce:9e:41:08:93:ed:11:
a8:02:a5:a5:b3:02:06:a7:81:8f:80:7c:bb:c6:0b:09:98:d3:
eb:20:e1:db:ef:c6:0d:f8:c8:a1:f6:94:80:26:49:26:34:04:
c0:bc:7d:0d:c9:17:79:ec:07:b2:42:5b:d6:06:2f:45:14:5b:
a6:5b:8e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:01 2026 by rpki-client