Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A9B6556E064311F0BA61C549C4F9AE02.roa
File: A9B6556E064311F0BA61C549C4F9AE02.roa (raw, json)
Hash identifier: yIdjqnTmZ+HqSiiYs29cxCLQvArNG95hY2OgROFWMog=
Subject key identifier: 02:E2:44:A5:28:48:E4:F4:E4:A3:33:CA:26:02:54:C6:6B:12:7A:68
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 35FF
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A9B6556E064311F0BA61C549C4F9AE02.roa
Signing time: Wed 19 Aug 2026 11:06:52 +0000
ROA not before: Wed 19 Aug 2026 11:06:52 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4741
IP address blocks: 203.149.0.0/18 maxlen: 18
203.149.0.0/19 maxlen: 19
203.149.0.0/20 maxlen: 20
203.149.0.0/22 maxlen: 22
203.149.0.0/24 maxlen: 24
203.149.6.0/24 maxlen: 24
203.149.8.0/24 maxlen: 24
203.149.9.0/24 maxlen: 24
203.149.10.0/24 maxlen: 24
203.149.11.0/24 maxlen: 24
203.149.16.0/20 maxlen: 20
203.149.20.0/24 maxlen: 24
203.149.21.0/24 maxlen: 24
203.149.29.0/24 maxlen: 24
203.149.31.0/24 maxlen: 24
203.149.32.0/19 maxlen: 19
203.149.32.0/24 maxlen: 24
203.149.35.0/24 maxlen: 24
203.149.37.0/24 maxlen: 24
203.149.38.0/24 maxlen: 24
203.149.44.0/24 maxlen: 24
203.149.45.0/24 maxlen: 24
203.149.46.0/23 maxlen: 23
203.149.48.0/20 maxlen: 20
203.149.62.0/24 maxlen: 24
203.149.63.0/24 maxlen: 24
210.246.64.0/18 maxlen: 18
210.246.64.0/19 maxlen: 19
210.246.64.0/20 maxlen: 20
210.246.80.0/20 maxlen: 20
210.246.96.0/19 maxlen: 19
210.246.96.0/20 maxlen: 20
210.246.112.0/20 maxlen: 20
210.246.128.0/17 maxlen: 17
210.246.128.0/18 maxlen: 18
210.246.128.0/20 maxlen: 20
210.246.144.0/20 maxlen: 20
210.246.150.0/24 maxlen: 24
210.246.151.0/24 maxlen: 24
210.246.152.0/24 maxlen: 24
210.246.154.0/24 maxlen: 24
210.246.155.0/24 maxlen: 24
210.246.176.0/20 maxlen: 20
210.246.176.0/21 maxlen: 21
210.246.176.0/24 maxlen: 24
210.246.177.0/24 maxlen: 24
210.246.178.0/24 maxlen: 24
210.246.179.0/24 maxlen: 24
210.246.184.0/21 maxlen: 21
210.246.184.0/24 maxlen: 24
210.246.185.0/24 maxlen: 24
210.246.186.0/24 maxlen: 24
210.246.187.0/24 maxlen: 24
210.246.188.0/24 maxlen: 24
210.246.192.0/18 maxlen: 18
210.246.192.0/20 maxlen: 20
210.246.232.0/22 maxlen: 22
210.246.253.0/24 maxlen: 24
2403:c000::/32 maxlen: 32
2403:c000:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13823 (0x35ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Aug 19 11:06:52 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a858e4c-2235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:d9:c5:f8:7e:07:e5:89:45:16:4f:b5:b4:
25:04:08:d6:f1:9e:d9:02:1a:82:82:41:a7:0f:4d:
16:b7:a3:34:6b:f8:7c:21:56:89:8e:8a:c8:ce:19:
29:8f:86:77:4a:f9:70:7b:a8:e8:32:e9:bd:71:27:
21:3c:da:96:d3:4f:e2:89:0b:b1:13:73:e2:de:56:
c1:86:cc:6d:42:65:1c:30:1b:f1:2e:d7:50:d8:b2:
44:87:e2:df:8c:d5:b3:a8:bb:d3:d4:0e:03:44:d2:
32:45:36:1b:a9:42:25:6f:54:a1:11:fb:c8:ca:d9:
a8:17:74:0c:61:b2:1c:94:c3:f0:3f:2d:c0:ed:1c:
6b:f6:80:9b:e6:3e:80:82:ba:ad:4c:1e:91:95:82:
0d:b5:66:0c:fa:c2:06:84:bf:06:97:c6:80:db:03:
e0:36:fa:61:83:32:ab:8c:04:1d:d3:ad:9e:de:8c:
16:c3:1b:70:be:c3:34:24:c1:c8:81:02:3c:3d:5d:
b0:9c:2b:9d:56:9a:86:b6:ae:b4:3e:64:84:4d:90:
36:65:bd:05:8a:92:5a:24:4d:fb:cd:70:ab:c2:16:
63:a9:ed:fe:d9:63:6c:75:0f:b4:6e:64:f4:2d:4e:
fe:e2:58:2e:d2:a2:02:47:99:c4:4a:61:2b:dd:94:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E2:44:A5:28:48:E4:F4:E4:A3:33:CA:26:02:54:C6:6B:12:7A:68
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A9B6556E064311F0BA61C549C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.149.0.0/18
210.246.64.0-210.246.255.255
IPv6:
2403:c000::/32
Signature Algorithm: sha256WithRSAEncryption
a0:af:c6:86:74:21:ef:fe:c7:6a:ff:c8:f2:12:73:a1:44:e3:
30:be:ba:5a:2b:2b:0c:a6:e9:39:f1:7a:67:10:43:13:a9:8f:
ef:44:4d:8a:a0:65:f8:9b:7f:fa:33:75:c6:22:c5:3d:4d:18:
6d:e9:65:29:3c:93:0a:c9:47:3d:fa:11:34:e3:9d:f9:2a:fa:
2c:f8:de:5d:7c:49:30:fb:f1:d0:a1:4c:6d:df:ab:a6:e4:7a:
86:39:f8:23:7b:ad:8c:98:fc:32:1c:09:d0:86:cf:64:3f:96:
44:c6:13:8d:f9:1b:e8:50:aa:2e:eb:58:ed:7a:5f:af:40:c3:
d3:c7:76:86:d9:ba:34:5e:52:97:e4:ad:36:26:c9:db:cb:72:
c8:e5:bf:2e:0b:67:bc:5a:06:91:a2:9f:8d:16:d6:ff:55:1c:
c5:23:14:6c:a6:19:d1:5e:af:1a:cb:2e:71:29:16:c5:05:d7:
21:62:b8:c4:8f:ab:7b:a9:4a:77:80:3d:41:35:1a:98:ad:20:
4a:5b:66:7c:e0:b3:0c:e1:f5:9c:a0:27:40:f3:5b:bb:97:e0:
51:d8:3b:29:6b:7e:ee:63:99:e9:24:49:aa:fd:0f:af:8d:ed:
93:f6:a2:c3:ed:ee:06:09:4d:08:02:d3:70:8a:64:d2:7d:51:
11:01:91:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:22 2026 by rpki-client