Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/CB304C36307111EDB0CBD946C4F9AE02.roa
File: CB304C36307111EDB0CBD946C4F9AE02.roa (raw, json)
Hash identifier: OsHIZ98gQcVy38hupLpiePN5LNP1PLEubxZX6vOjRUw=
Subject key identifier: B4:EC:68:06:C6:A8:C2:6B:13:1E:56:70:D6:C2:04:53:07:7C:A0:83
Certificate issuer: /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Certificate serial: 0734
Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/CB304C36307111EDB0CBD946C4F9AE02.roa
Signing time: Tue 20 Oct 2026 22:42:45 +0000
ROA not before: Tue 20 Oct 2026 22:42:44 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 139628
IP address blocks: 43.255.114.0/23 maxlen: 24
45.120.132.0/22 maxlen: 22
45.120.132.0/24 maxlen: 24
45.120.133.0/24 maxlen: 24
45.120.134.0/24 maxlen: 24
45.120.135.0/24 maxlen: 24
103.20.80.0/22 maxlen: 22
103.20.80.0/24 maxlen: 24
103.20.81.0/24 maxlen: 24
103.20.82.0/24 maxlen: 24
103.20.83.0/24 maxlen: 24
103.106.204.0/22 maxlen: 22
103.106.204.0/24 maxlen: 24
103.106.205.0/24 maxlen: 24
103.106.206.0/24 maxlen: 24
103.106.207.0/24 maxlen: 24
103.119.96.0/22 maxlen: 22
103.119.96.0/24 maxlen: 24
103.119.97.0/24 maxlen: 24
103.119.98.0/24 maxlen: 24
103.119.99.0/24 maxlen: 24
103.136.176.0/22 maxlen: 22
103.136.176.0/24 maxlen: 24
103.136.177.0/24 maxlen: 24
103.136.178.0/24 maxlen: 24
103.136.179.0/24 maxlen: 24
103.142.208.0/23 maxlen: 23
103.142.208.0/24 maxlen: 24
103.142.209.0/24 maxlen: 24
103.147.234.0/23 maxlen: 24
103.152.194.0/23 maxlen: 24
111.67.96.0/22 maxlen: 22
111.67.96.0/24 maxlen: 24
111.67.97.0/24 maxlen: 24
111.67.98.0/24 maxlen: 24
111.67.99.0/24 maxlen: 24
111.67.100.0/22 maxlen: 22
111.67.100.0/24 maxlen: 24
111.67.101.0/24 maxlen: 24
111.67.102.0/24 maxlen: 24
111.67.103.0/24 maxlen: 24
115.178.24.0/23 maxlen: 23
115.178.24.0/24 maxlen: 24
115.178.25.0/24 maxlen: 24
124.108.4.0/22 maxlen: 22
124.108.4.0/24 maxlen: 24
124.108.5.0/24 maxlen: 24
124.108.6.0/24 maxlen: 24
124.108.7.0/24 maxlen: 24
150.129.20.0/22 maxlen: 22
150.129.20.0/24 maxlen: 24
150.129.21.0/24 maxlen: 24
150.129.22.0/24 maxlen: 24
150.129.23.0/24 maxlen: 24
202.58.16.0/23 maxlen: 23
202.58.16.0/24 maxlen: 24
202.58.17.0/24 maxlen: 24
202.58.18.0/23 maxlen: 23
202.58.18.0/24 maxlen: 24
202.58.19.0/24 maxlen: 24
203.80.170.0/23 maxlen: 23
203.80.170.0/24 maxlen: 24
203.80.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 22:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82, serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Validity
Not Before: Oct 20 22:42:44 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ad7ee64-c2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:88:19:46:e0:27:2b:96:78:a9:9e:2f:8c:
e7:b7:ab:a3:49:77:c7:c4:1e:c7:ec:59:54:19:ab:
dd:de:91:a7:e5:ce:55:b7:14:20:82:95:f1:bf:dc:
d1:38:29:ca:4b:05:a3:08:a1:c6:4a:42:b8:0d:0a:
51:82:d7:95:a3:87:98:8f:32:b4:10:cb:0b:3e:41:
13:cb:dd:68:88:e2:9a:79:19:b0:1c:50:45:96:d1:
06:18:45:c8:ba:e7:9a:b1:1b:46:dc:fb:92:43:74:
a6:21:7f:40:5d:f7:d9:db:45:2a:97:58:ed:c4:c8:
01:2d:11:7c:75:2b:f7:20:0c:0c:d7:b8:8f:60:29:
76:9f:8b:b9:d6:28:44:4c:aa:7a:a7:c2:7c:13:ac:
fe:55:35:44:8d:d5:06:7d:15:e4:d1:ea:1f:6d:b2:
ed:44:d6:9e:cc:5c:94:a7:74:96:cc:e5:d4:ff:36:
59:75:9b:fe:db:33:95:be:99:ec:4a:e6:53:65:95:
c4:b8:7f:2f:1c:c3:33:2f:e8:2d:b2:75:08:69:a3:
b1:1a:36:af:23:2f:f2:a9:1e:8a:6d:3e:08:c2:88:
ac:d0:f0:b5:e0:f9:ad:5a:fb:48:8f:24:e4:77:31:
5c:9c:64:29:0f:81:f5:0f:d2:6b:fe:42:41:c7:52:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EC:68:06:C6:A8:C2:6B:13:1E:56:70:D6:C2:04:53:07:7C:A0:83
X509v3 Authority Key Identifier:
keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/CB304C36307111EDB0CBD946C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.255.114.0/23
45.120.132.0/22
103.20.80.0/22
103.106.204.0/22
103.119.96.0/22
103.136.176.0/22
103.142.208.0/23
103.147.234.0/23
103.152.194.0/23
111.67.96.0/21
115.178.24.0/23
124.108.4.0/22
150.129.20.0/22
202.58.16.0/22
203.80.170.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:0d:a7:bb:7c:7f:13:d2:36:7c:fe:f5:31:0a:3c:00:4a:15:
55:39:8f:fb:2a:c6:3f:15:4f:bd:cc:2b:20:07:ea:78:f7:b0:
f0:d7:09:2e:47:4c:9f:27:70:ba:1b:fd:85:62:34:ca:0b:09:
f4:0d:4f:98:b4:79:04:9d:81:bd:b5:58:12:c5:b0:36:cb:61:
fc:ae:1b:e2:56:b3:6a:f9:10:16:21:10:21:8a:41:88:5d:bf:
3c:df:d9:4c:82:3b:75:fb:fc:0d:b9:cd:8b:15:9e:7c:6d:4a:
52:c6:20:85:03:55:3a:db:a9:dd:4e:79:32:dc:08:4f:1a:b0:
f1:23:b6:ab:d1:e7:bb:30:44:0d:e8:2f:12:8c:6d:5b:05:72:
a2:90:80:8b:19:d7:35:fa:31:8c:66:38:8a:cc:2e:70:e9:82:
3e:62:d3:7a:7b:d0:4b:e4:69:66:4e:a7:22:64:65:8a:70:bb:
d1:1a:7b:84:b2:8a:fd:7e:78:77:28:19:2f:3b:68:95:74:95:
28:f2:7b:ac:ce:5c:7b:6b:62:b8:14:33:92:ee:fd:71:49:d1:
7d:24:3b:13:4f:d0:92:f1:a2:09:e0:aa:e2:77:82:60:63:17:
32:b0:81:a1:34:89:90:86:d0:05:63:26:c2:21:e2:4c:48:e5:
22:0f:51:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:46:57 2026 by rpki-client