Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/0CDEC76081E111F185BF86D772A30FBC.roa
File: 0CDEC76081E111F185BF86D772A30FBC.roa (raw, json)
Hash identifier: 1gHu8IS8tDMIfsonve1Pdylzy3QYbCNdgXdgoGgmP/E=
Subject key identifier: 30:9E:D5:77:18:69:43:27:69:CC:B5:02:30:1E:76:CB:60:1B:FC:5E
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 01BD
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/0CDEC76081E111F185BF86D772A30FBC.roa
Signing time: Tue 13 Oct 2026 03:52:26 +0000
ROA not before: Tue 13 Oct 2026 03:52:26 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 40115
IP address blocks: 177.2.16.0/20 maxlen: 24
177.2.176.0/21 maxlen: 24
177.2.184.0/21 maxlen: 24
177.3.32.0/20 maxlen: 24
177.3.80.0/21 maxlen: 24
177.3.88.0/21 maxlen: 24
177.4.0.0/20 maxlen: 24
177.4.32.0/20 maxlen: 24
177.4.80.0/20 maxlen: 24
177.5.48.0/20 maxlen: 24
177.5.64.0/20 maxlen: 24
177.5.112.0/20 maxlen: 24
177.5.176.0/20 maxlen: 24
177.6.176.0/20 maxlen: 24
177.7.128.0/20 maxlen: 24
177.201.224.0/20 maxlen: 24
179.236.96.0/21 maxlen: 24
179.236.104.0/21 maxlen: 24
187.126.64.0/20 maxlen: 24
191.223.32.0/20 maxlen: 24
200.97.32.0/20 maxlen: 24
200.217.96.0/20 maxlen: 24
200.222.224.0/20 maxlen: 24
201.15.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 11:23:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Oct 13 03:52:26 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acdaafa-c3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:52:b0:ae:9f:a5:0f:96:0d:b6:c5:9b:fa:f0:
8b:a9:02:64:44:65:1d:c9:a2:9a:06:44:0f:09:e6:
b4:06:74:55:64:9f:1b:d2:91:17:23:04:a2:d2:e8:
46:92:f3:0f:34:eb:bb:7c:29:d2:e5:0f:17:c4:81:
ca:e3:4b:2d:ba:b8:53:85:b3:d6:4a:17:89:1a:4e:
ec:eb:4d:3a:7f:fc:59:70:62:de:09:d4:6c:16:38:
47:32:2b:3e:7b:b6:7f:c8:df:d7:86:d7:89:bc:84:
95:28:b4:79:c1:e8:a5:51:06:ab:ad:78:fa:93:9c:
bc:b3:f2:68:ce:c0:2a:ec:47:0c:3a:3d:c5:b5:af:
4f:8e:4a:b7:a6:a2:d5:94:f4:77:e4:b6:de:83:6c:
fa:7d:34:64:23:28:48:99:ca:31:26:10:b1:a8:f7:
e4:c6:5f:6f:eb:c3:55:6d:ec:91:00:3f:5d:46:89:
9a:8f:d9:2f:0a:49:57:ad:1e:43:cf:ab:7d:ed:0c:
fd:a1:e5:51:44:42:50:9e:b8:e7:da:98:d6:71:5a:
3f:91:44:a7:b9:ca:cb:dd:3c:0d:07:7a:0f:40:9e:
ec:ef:28:b4:8a:1b:41:0d:55:63:51:69:13:dc:4a:
e5:81:52:00:31:fc:a7:ac:a1:d6:2d:1a:6a:62:61:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9E:D5:77:18:69:43:27:69:CC:B5:02:30:1E:76:CB:60:1B:FC:5E
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/0CDEC76081E111F185BF86D772A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
177.2.16.0/20
177.2.176.0/20
177.3.32.0/20
177.3.80.0/20
177.4.0.0/20
177.4.32.0/20
177.4.80.0/20
177.5.48.0-177.5.79.255
177.5.112.0/20
177.5.176.0/20
177.6.176.0/20
177.7.128.0/20
177.201.224.0/20
179.236.96.0/20
187.126.64.0/20
191.223.32.0/20
200.97.32.0/20
200.217.96.0/20
200.222.224.0/20
201.15.160.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:82:92:2f:d8:b6:ef:9c:11:08:5e:0d:2f:f5:49:a2:83:51:
6d:64:94:1e:0b:45:eb:06:13:5d:23:45:29:59:44:fe:a4:76:
d0:f5:bc:86:84:10:08:00:8e:23:ba:3d:c5:14:1f:da:e6:d9:
7a:52:2c:b3:e7:1d:39:5c:d2:b0:77:ac:4f:d9:2a:65:3f:d6:
8a:db:bc:01:29:5b:cf:bf:a2:be:8d:17:e8:35:5b:09:f9:01:
88:61:2c:4f:78:12:a5:a2:f7:ff:1b:43:f5:04:a4:5b:cf:3f:
a6:e0:c7:ee:26:b5:1d:ab:25:f7:57:98:2d:4a:08:9d:8b:4e:
30:97:e6:27:c3:2b:5b:c9:57:70:de:c6:71:49:d3:b2:50:e3:
27:15:3f:5d:ae:62:7f:48:a6:88:27:f3:4b:ca:5d:bd:a4:a5:
4b:0f:b4:d3:41:fc:b9:f9:5b:22:f2:96:12:f0:28:04:6a:cc:
3a:88:48:84:2b:c6:7c:a9:5b:e9:db:8c:21:fc:76:f3:b8:51:
5c:fe:c7:c8:96:9a:f8:87:23:e5:7e:af:54:7e:4d:a1:c6:88:
3a:a4:12:ca:f3:d6:9d:48:15:a1:f3:36:e6:49:5b:45:b8:ea:
ab:a5:62:ae:ea:1b:c7:f9:f9:a7:08:b9:5d:21:09:c2:b4:50:
3d:a0:41:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:25 2026 by rpki-client