Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
File: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (raw, json)
Hash identifier: jwid66LxSE6FtfJo00r5CTlLTDl6YNkAIwCqKcvsbZE=
Subject key identifier: 01:50:67:C7:18:13:46:51:3F:51:27:EF:28:4B:CD:8C:81:89:0D:2A
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 0A2B
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
Signing time: Wed 02 Sep 2026 20:41:38 +0000
ROA not before: Wed 02 Sep 2026 20:41:38 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 132115
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
45.117.204.0/24 maxlen: 24
45.117.205.0/24 maxlen: 24
45.117.206.0/24 maxlen: 24
45.117.207.0/24 maxlen: 24
45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.24.188.0/24 maxlen: 24
103.24.189.0/24 maxlen: 24
103.24.190.0/24 maxlen: 24
103.24.191.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
103.57.240.0/24 maxlen: 24
103.57.241.0/24 maxlen: 24
103.57.242.0/24 maxlen: 24
103.57.243.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
103.70.208.0/24 maxlen: 24
103.70.209.0/24 maxlen: 24
103.70.210.0/24 maxlen: 24
103.70.211.0/24 maxlen: 24
103.75.192.0/24 maxlen: 24
103.75.193.0/24 maxlen: 24
103.75.194.0/24 maxlen: 24
103.75.195.0/24 maxlen: 24
103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
103.244.4.0/24 maxlen: 24
103.244.5.0/24 maxlen: 24
103.244.6.0/24 maxlen: 24
103.244.7.0/24 maxlen: 24
150.107.10.0/24 maxlen: 24
150.107.11.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
202.142.64.0/24 maxlen: 24
202.142.65.0/24 maxlen: 24
202.142.66.0/24 maxlen: 24
202.142.67.0/24 maxlen: 24
202.142.68.0/24 maxlen: 24
202.142.69.0/24 maxlen: 24
202.142.70.0/24 maxlen: 24
202.142.71.0/24 maxlen: 24
202.142.72.0/24 maxlen: 24
202.142.73.0/24 maxlen: 24
202.142.74.0/24 maxlen: 24
202.142.75.0/24 maxlen: 24
202.142.76.0/24 maxlen: 24
202.142.77.0/24 maxlen: 24
202.142.78.0/24 maxlen: 24
202.142.79.0/24 maxlen: 24
202.142.81.0/24 maxlen: 24
202.142.83.0/24 maxlen: 24
202.142.85.0/24 maxlen: 24
202.142.86.0/24 maxlen: 24
202.142.87.0/24 maxlen: 24
202.142.89.0/24 maxlen: 24
202.142.90.0/24 maxlen: 24
202.142.91.0/24 maxlen: 24
202.142.92.0/24 maxlen: 24
202.142.93.0/24 maxlen: 24
202.142.95.0/24 maxlen: 24
202.142.96.0/24 maxlen: 24
202.142.97.0/24 maxlen: 24
202.142.98.0/24 maxlen: 24
202.142.99.0/24 maxlen: 24
202.142.100.0/24 maxlen: 24
202.142.101.0/24 maxlen: 24
202.142.102.0/24 maxlen: 24
202.142.103.0/24 maxlen: 24
202.142.104.0/24 maxlen: 24
202.142.105.0/24 maxlen: 24
202.142.106.0/24 maxlen: 24
202.142.107.0/24 maxlen: 24
202.142.110.0/24 maxlen: 24
202.142.112.0/24 maxlen: 24
202.142.113.0/24 maxlen: 24
202.142.114.0/24 maxlen: 24
202.142.115.0/24 maxlen: 24
202.142.118.0/24 maxlen: 24
202.142.119.0/24 maxlen: 24
202.142.120.0/24 maxlen: 24
202.142.123.0/24 maxlen: 24
202.142.124.0/24 maxlen: 24
202.142.125.0/24 maxlen: 24
202.142.126.0/24 maxlen: 24
202.142.127.0/24 maxlen: 24
2406:3c80::/48 maxlen: 48
2406:3c80:1::/48 maxlen: 48
2406:3c80:2::/48 maxlen: 48
2406:3c80:3::/48 maxlen: 48
2406:3c80:4::/48 maxlen: 48
2406:3c80:5::/48 maxlen: 48
2406:3c80:6::/48 maxlen: 48
2406:3c80:7::/48 maxlen: 48
2406:3c80:8::/48 maxlen: 48
2406:3c80:9::/48 maxlen: 48
2406:3c80:a::/48 maxlen: 48
2406:3c80:b::/48 maxlen: 48
2406:3c80:c::/48 maxlen: 48
2406:3c80:d::/48 maxlen: 48
2406:3c80:e::/48 maxlen: 48
2406:3c80:f::/48 maxlen: 48
2406:3c80:18::/48 maxlen: 48
2406:3c80:400::/48 maxlen: 48
2406:3c80:401::/48 maxlen: 48
2406:3c80:402::/48 maxlen: 48
2406:3c80:403::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603 (0xa2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Validity
Not Before: Sep 2 20:41:38 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a988a02-d94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:b9:b5:c0:2b:d0:f9:b6:c0:73:45:1a:6e:
b4:57:85:42:02:ca:5f:30:87:2c:bf:79:91:e4:a4:
57:3c:b7:c5:3c:5a:e8:5f:ac:54:80:7c:70:e4:d8:
41:0c:aa:30:51:dd:04:ec:f3:08:d3:dc:7d:05:0d:
80:59:71:57:57:e8:a5:66:ea:0d:5e:22:41:e2:71:
a2:0e:04:da:0f:15:f8:bc:3b:cf:8b:2e:6c:bd:dd:
bd:25:9b:ef:c5:5f:10:ad:10:1e:76:65:10:32:4c:
91:31:b5:6d:e1:57:4f:d8:e3:1e:87:0c:e5:09:42:
ed:d5:5e:65:39:b3:ec:29:54:ad:d5:6d:8a:05:d7:
0d:62:5f:33:a8:2a:ea:29:8a:6d:ba:75:87:e6:2e:
99:0d:f2:86:a0:c1:a0:47:85:85:6f:d4:e0:35:35:
29:8d:ed:8f:3f:d4:42:c9:ab:1a:62:2c:65:de:b5:
97:60:cc:87:f6:ac:f6:9f:cd:bf:b3:c9:7d:11:fe:
fa:f1:01:4c:c3:7d:f6:05:39:67:3a:c3:e3:f0:a6:
c6:91:35:d8:a4:7c:e9:35:47:b5:fb:b5:83:82:b5:
1f:c7:e4:a8:7d:46:2b:21:ae:39:cd:d6:2f:d9:07:
ce:2f:4f:0f:63:68:8c:be:7f:68:62:2c:fe:c9:dc:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:50:67:C7:18:13:46:51:3F:51:27:EF:28:4B:CD:8C:81:89:0D:2A
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/21
45.126.160.0/22
103.24.188.0/22
103.57.236.0-103.57.247.255
103.70.208.0/22
103.75.192.0/22
103.225.176.0/22
103.244.4.0/22
150.107.10.0/23
150.129.124.0/22
202.142.64.0/20
202.142.81.0/24
202.142.83.0/24
202.142.85.0-202.142.87.255
202.142.89.0-202.142.93.255
202.142.95.0-202.142.107.255
202.142.110.0/24
202.142.112.0/22
202.142.118.0-202.142.120.255
202.142.123.0-202.142.127.255
IPv6:
2406:3c80::/44
2406:3c80:18::/48
2406:3c80:400::/46
Signature Algorithm: sha256WithRSAEncryption
a1:71:ac:b3:fb:77:2e:d9:18:6a:19:38:c6:25:86:74:51:5f:
6f:04:9a:6e:85:ff:ab:52:60:15:de:a4:df:bf:ca:97:00:24:
34:63:ff:92:99:9a:17:74:02:63:c6:bd:82:68:33:e2:f3:c8:
fc:a1:7d:33:f4:9c:f5:89:13:97:a3:f7:5b:63:cc:bc:bf:10:
a0:3b:e8:0d:41:a9:05:3f:2e:c7:99:12:e8:c6:07:56:a5:66:
22:86:e0:66:f0:08:b0:60:c0:a8:2c:31:9d:9f:92:4a:e6:88:
13:de:60:93:76:83:49:a6:46:00:9d:aa:5f:68:2f:d8:12:09:
89:3b:a5:ef:cb:0c:63:bf:88:f8:37:05:84:03:c5:68:3d:fc:
df:2d:9a:2d:0d:cb:58:ae:3b:a3:22:a6:ef:fd:9d:12:97:72:
74:2b:f3:7f:a7:38:81:25:1d:72:46:af:e6:62:13:79:26:92:
9a:67:43:09:e2:f3:d5:d0:f9:62:ed:e7:e4:7f:9f:1b:8e:3a:
e0:71:bd:e8:99:90:00:03:b0:9d:f5:c2:c6:83:92:62:e8:1c:
d0:2f:54:f3:87:2b:48:2a:84:5d:e2:7a:44:98:80:3e:65:9e:
af:8c:3c:93:92:cf:d6:30:19:48:22:74:a9:3a:46:3a:e9:a6:
12:3a:8b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:46:15 2026 by rpki-client