Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/B538B552701211EFB6868329C4F9AE02.roa
File: B538B552701211EFB6868329C4F9AE02.roa (raw, json)
Hash identifier: DqiiZVY5udMUujSP7TUNCBKyBCwZzN9Rmv7YpLdwjNw=
Subject key identifier: 8A:D6:D3:5A:30:45:72:F6:A6:F8:7B:F1:72:37:32:4E:71:27:3C:BA
Certificate issuer: /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial: 016D
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/B538B552701211EFB6868329C4F9AE02.roa
Signing time: Wed 01 Jul 2026 10:10:09 +0000
ROA not before: Wed 01 Jul 2026 10:10:09 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 17439
IP address blocks: 103.30.152.0/23 maxlen: 24
103.30.154.0/24 maxlen: 24
103.30.155.0/24 maxlen: 24
123.108.32.0/19 maxlen: 24
124.153.64.0/19 maxlen: 24
124.153.96.0/19 maxlen: 24
180.179.0.0/21 maxlen: 24
180.179.8.0/21 maxlen: 24
180.179.16.0/20 maxlen: 24
180.179.32.0/19 maxlen: 24
180.179.64.0/19 maxlen: 24
180.179.96.0/19 maxlen: 23
180.179.96.0/20 maxlen: 24
180.179.112.0/21 maxlen: 24
180.179.120.0/22 maxlen: 24
180.179.124.0/23 maxlen: 24
180.179.128.0/19 maxlen: 20
180.179.128.0/24 maxlen: 24
180.179.129.0/24 maxlen: 24
180.179.130.0/24 maxlen: 24
180.179.132.0/24 maxlen: 24
180.179.133.0/24 maxlen: 24
180.179.134.0/24 maxlen: 24
180.179.135.0/24 maxlen: 24
180.179.136.0/23 maxlen: 24
180.179.138.0/24 maxlen: 24
180.179.139.0/24 maxlen: 24
180.179.140.0/23 maxlen: 24
180.179.142.0/24 maxlen: 24
180.179.143.0/24 maxlen: 24
180.179.144.0/24 maxlen: 24
180.179.145.0/24 maxlen: 24
180.179.146.0/24 maxlen: 24
180.179.149.0/24 maxlen: 24
180.179.151.0/24 maxlen: 24
180.179.153.0/24 maxlen: 24
180.179.154.0/24 maxlen: 24
180.179.155.0/24 maxlen: 24
180.179.156.0/24 maxlen: 24
180.179.157.0/24 maxlen: 24
180.179.158.0/24 maxlen: 24
180.179.159.0/24 maxlen: 24
180.179.160.0/19 maxlen: 20
180.179.160.0/24 maxlen: 24
180.179.161.0/24 maxlen: 24
180.179.162.0/23 maxlen: 23
180.179.164.0/24 maxlen: 24
180.179.165.0/24 maxlen: 24
180.179.166.0/24 maxlen: 24
180.179.167.0/24 maxlen: 24
180.179.168.0/24 maxlen: 24
180.179.169.0/24 maxlen: 24
180.179.170.0/23 maxlen: 23
180.179.172.0/24 maxlen: 24
180.179.173.0/24 maxlen: 24
180.179.174.0/24 maxlen: 24
180.179.175.0/24 maxlen: 24
180.179.177.0/24 maxlen: 24
180.179.178.0/24 maxlen: 24
180.179.179.0/24 maxlen: 24
180.179.180.0/24 maxlen: 24
180.179.182.0/23 maxlen: 23
180.179.184.0/24 maxlen: 24
180.179.185.0/24 maxlen: 24
180.179.186.0/24 maxlen: 24
180.179.192.0/19 maxlen: 20
180.179.192.0/22 maxlen: 22
180.179.192.0/24 maxlen: 24
180.179.193.0/24 maxlen: 24
180.179.194.0/24 maxlen: 24
180.179.195.0/24 maxlen: 24
180.179.196.0/22 maxlen: 22
180.179.196.0/24 maxlen: 24
180.179.197.0/24 maxlen: 24
180.179.198.0/24 maxlen: 24
180.179.199.0/24 maxlen: 24
180.179.200.0/22 maxlen: 22
180.179.200.0/24 maxlen: 24
180.179.201.0/24 maxlen: 24
180.179.202.0/24 maxlen: 24
180.179.203.0/24 maxlen: 24
180.179.204.0/22 maxlen: 23
180.179.206.0/23 maxlen: 24
180.179.208.0/24 maxlen: 24
180.179.209.0/24 maxlen: 24
180.179.211.0/24 maxlen: 24
180.179.212.0/24 maxlen: 24
180.179.213.0/24 maxlen: 24
180.179.214.0/24 maxlen: 24
180.179.215.0/24 maxlen: 24
180.179.216.0/24 maxlen: 24
180.179.217.0/24 maxlen: 24
180.179.218.0/24 maxlen: 24
180.179.219.0/24 maxlen: 24
180.179.220.0/24 maxlen: 24
180.179.221.0/24 maxlen: 24
180.179.222.0/24 maxlen: 24
180.179.223.0/24 maxlen: 24
180.179.224.0/19 maxlen: 20
180.179.224.0/23 maxlen: 23
180.179.224.0/24 maxlen: 24
180.179.226.0/24 maxlen: 24
180.179.227.0/24 maxlen: 24
180.179.228.0/24 maxlen: 24
180.179.229.0/24 maxlen: 24
180.179.230.0/24 maxlen: 24
180.179.231.0/24 maxlen: 24
180.179.232.0/24 maxlen: 24
180.179.233.0/24 maxlen: 24
180.179.234.0/24 maxlen: 24
180.179.235.0/24 maxlen: 24
180.179.236.0/24 maxlen: 24
180.179.237.0/24 maxlen: 24
180.179.239.0/24 maxlen: 24
180.179.240.0/20 maxlen: 21
180.179.240.0/24 maxlen: 24
180.179.242.0/24 maxlen: 24
180.179.243.0/24 maxlen: 24
180.179.244.0/24 maxlen: 24
180.179.245.0/24 maxlen: 24
180.179.246.0/24 maxlen: 24
180.179.247.0/24 maxlen: 24
180.179.248.0/24 maxlen: 24
180.179.249.0/24 maxlen: 24
180.179.253.0/24 maxlen: 24
180.179.255.0/24 maxlen: 24
202.87.32.0/19 maxlen: 24
2401:8800::/40 maxlen: 40
2401:8800:200::/40 maxlen: 40
2401:8800:400::/40 maxlen: 40
2401:8800:47f::/48 maxlen: 48
2401:8800:600::/40 maxlen: 40
2401:8800:800::/40 maxlen: 40
2401:8800:a00::/40 maxlen: 40
2401:8800:a00::/48 maxlen: 48
2401:8800:a03::/48 maxlen: 48
2401:8800:c00::/40 maxlen: 40
2401:8800:c05::/48 maxlen: 48
2401:8800:e00::/40 maxlen: 40
2401:8800:1000::/40 maxlen: 40
2401:8800:1100::/40 maxlen: 40
2401:8800:1200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 06:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Validity
Not Before: Jul 1 10:10:09 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a44e781-529a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:35:0f:1f:af:96:b9:b1:f2:3b:96:d8:4f:
18:a6:96:4e:18:d7:0f:8c:dd:61:87:0c:64:36:e4:
46:51:33:b5:b7:7b:21:4c:f6:0f:90:1d:0e:df:79:
f3:b1:32:52:ea:14:74:59:1b:87:91:44:c4:22:a0:
8e:dd:c3:69:3a:33:a9:63:3d:f2:f0:21:f0:c1:e3:
c7:3f:ce:53:ac:ef:44:df:d4:0a:27:04:45:e7:de:
47:96:c3:23:85:fe:51:6a:5f:2d:8d:b0:37:16:86:
3f:e0:52:56:b5:62:c6:7c:b9:b4:ca:b7:55:2d:60:
3a:97:c8:70:11:cf:37:f2:8d:bf:38:be:7b:20:a3:
09:29:08:3e:9a:f6:40:ca:e9:c6:d7:a4:e8:a5:3a:
d4:14:3b:81:26:fe:24:6b:c5:b1:c1:b5:48:85:8a:
a3:a4:67:3a:72:5d:3e:73:ca:be:4c:95:1e:cd:a9:
5c:d4:05:05:b1:eb:e8:c1:a6:e1:b9:64:db:fa:36:
3e:34:b6:7b:07:8c:b9:a1:b9:58:86:bf:c4:c1:44:
94:98:b1:6f:7e:36:ca:c7:b9:98:1e:92:59:c6:e2:
40:c5:ce:96:b6:a5:6c:52:db:bb:b2:04:69:90:e0:
d9:a3:e1:ad:fb:47:49:54:78:81:0c:56:ee:41:5e:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D6:D3:5A:30:45:72:F6:A6:F8:7B:F1:72:37:32:4E:71:27:3C:BA
X509v3 Authority Key Identifier:
keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/B538B552701211EFB6868329C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.30.152.0/22
123.108.32.0/19
124.153.64.0/18
180.179.0.0/16
202.87.32.0/19
IPv6:
2401:8800::/40
2401:8800:200::/40
2401:8800:400::/40
2401:8800:600::/40
2401:8800:800::/40
2401:8800:a00::/40
2401:8800:c00::/40
2401:8800:e00::/40
2401:8800:1000::-2401:8800:12ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0c:b0:c2:84:c6:9b:e9:6c:ad:98:80:5d:b9:1c:a2:fd:17:67:
e9:ee:08:17:d9:52:bb:63:56:ed:1d:9e:ef:9d:06:2d:2f:20:
6d:7f:4d:d0:c2:53:6e:b2:bf:a6:d9:92:82:32:c0:04:c6:fe:
35:5d:96:a7:08:de:6b:9a:b7:2b:04:b6:90:ee:63:31:d7:78:
60:5a:b2:2d:4a:73:ac:27:43:34:f1:8d:85:7b:e9:a6:4f:8d:
f6:b4:d6:66:62:a6:f6:4c:5b:45:ac:0c:0c:4c:cd:97:69:24:
b1:0b:3e:96:c1:59:c6:e7:18:49:2a:ab:ee:e2:6d:1f:18:08:
a9:70:95:c5:23:44:0c:f2:38:be:ed:d8:44:7e:a3:04:e1:0e:
ef:a9:45:76:6f:ca:7a:80:e3:ae:e0:6d:fb:93:6d:4e:55:db:
e1:78:a6:29:bc:13:63:c2:51:ce:28:1d:fa:01:34:29:6c:44:
d1:99:1b:81:71:4e:f5:3d:f8:9a:90:63:80:8d:64:1f:76:bb:
4c:84:8a:ac:0b:09:f4:dd:1e:be:04:26:19:d9:56:31:c0:bc:
df:e4:0f:e0:2e:6c:9a:47:81:4d:b5:4d:92:3c:39:1c:e0:2c:
e6:61:53:47:a7:d7:f6:d2:b7:71:d9:b2:9c:cc:34:8a:5e:f4:
d8:ba:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:50:38 2026 by rpki-client