Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/70A511E6ECD111F09C92E5176E6F56BC.roa
File: 70A511E6ECD111F09C92E5176E6F56BC.roa (raw, json)
Hash identifier: 4kvY15kmoRibeYszxVkHrvlLmTn2DqrfKOexn1KZ4Sw=
Subject key identifier: 00:27:EB:7B:D1:CF:CC:36:B5:50:F1:8D:53:94:A4:6A:9C:5B:69:CF
Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Certificate serial: 06C1
Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/70A511E6ECD111F09C92E5176E6F56BC.roa
Signing time: Thu 05 Mar 2026 03:38:49 +0000
ROA not before: Thu 05 Mar 2026 03:38:49 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 63956
IP address blocks: 45.112.244.0/22 maxlen: 24
103.20.17.0/24 maxlen: 24
103.20.208.0/22 maxlen: 22
103.21.108.0/24 maxlen: 24
103.52.116.0/22 maxlen: 24
103.97.52.0/22 maxlen: 22
103.97.52.0/24 maxlen: 24
103.97.53.0/24 maxlen: 24
103.97.54.0/24 maxlen: 24
103.97.55.0/24 maxlen: 24
103.225.96.0/24 maxlen: 24
180.94.112.0/21 maxlen: 21
202.46.160.0/20 maxlen: 24
202.58.32.0/19 maxlen: 24
202.59.32.0/19 maxlen: 24
203.12.129.0/24 maxlen: 24
203.18.194.0/24 maxlen: 24
203.209.192.0/19 maxlen: 24
203.210.102.0/24 maxlen: 24
2402:1b80::/32 maxlen: 36
2402:1b80::/40 maxlen: 40
2402:1b80:10::/48 maxlen: 48
2402:1b80:11::/48 maxlen: 48
2402:1b80:14::/48 maxlen: 48
2402:1b80:103::/48 maxlen: 48
2402:1b80:104::/48 maxlen: 48
2402:1b80:106::/48 maxlen: 48
2402:1b80:203::/48 maxlen: 48
2402:1b80:204::/48 maxlen: 48
2402:1b80:206::/48 maxlen: 48
2402:1b80:300::/40 maxlen: 40
2402:1b80:304::/48 maxlen: 48
2402:1b80:306::/48 maxlen: 48
2402:1b80:403::/48 maxlen: 48
2402:1b80:600::/40 maxlen: 40
2402:1b80:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 22:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1729 (0x6c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Validity
Not Before: Mar 5 03:38:49 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a8fac9-1a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:23:45:13:6b:17:0b:94:c1:5a:a0:df:12:
bd:fa:9e:72:9b:d6:03:e3:fc:a8:27:c8:67:3c:c1:
3c:ad:45:47:44:63:94:8a:a4:6c:14:5d:71:bf:fb:
0d:95:85:f9:9a:47:f7:de:e1:10:c0:8a:92:88:46:
b8:a2:d8:17:41:0b:7c:65:ae:50:41:89:6e:63:f4:
ea:1b:ec:8b:db:e2:51:c1:0a:bd:71:6f:2d:45:3b:
be:92:29:ed:bc:d3:7a:7e:6a:23:12:af:ef:63:b6:
23:df:20:4c:78:eb:53:8d:c7:1e:3a:73:04:16:e5:
af:92:b5:4f:be:f1:b0:35:da:5b:b6:d5:d8:05:2a:
f3:0f:f8:ca:c7:3b:71:1c:fc:33:ec:50:e6:2e:76:
60:db:a6:c8:58:a4:eb:6c:b4:7e:3a:9e:5f:04:62:
9c:29:98:cd:2c:41:ce:d8:2d:64:cd:08:9d:00:8b:
da:24:72:42:52:67:8b:ba:ed:01:f7:a8:52:01:fc:
36:c7:08:7e:fe:97:75:b3:2f:94:57:21:38:0c:b1:
5a:1b:6f:a5:bf:4b:b4:1c:a3:d3:df:4e:f9:52:cc:
ea:a7:e8:60:10:7a:25:25:77:c7:f8:fa:69:fd:72:
02:81:77:f6:2e:f9:29:04:1c:ca:78:7f:0a:ed:6b:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:27:EB:7B:D1:CF:CC:36:B5:50:F1:8D:53:94:A4:6A:9C:5B:69:CF
X509v3 Authority Key Identifier:
keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/70A511E6ECD111F09C92E5176E6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.244.0/22
103.20.17.0/24
103.20.208.0/22
103.21.108.0/24
103.52.116.0/22
103.97.52.0/22
103.225.96.0/24
180.94.112.0/21
202.46.160.0/20
202.58.32.0/19
202.59.32.0/19
203.12.129.0/24
203.18.194.0/24
203.209.192.0/19
203.210.102.0/24
IPv6:
2402:1b80::/32
Signature Algorithm: sha256WithRSAEncryption
c6:16:dc:b3:63:03:5e:fa:7b:9e:a2:23:39:9b:d7:74:86:5b:
55:81:55:b9:c6:dd:c0:55:85:de:7c:b7:3b:34:58:80:25:f8:
ea:fa:6b:e9:10:55:42:1b:c3:b9:63:74:20:a2:c0:b3:9f:46:
e5:06:8e:27:cf:82:b6:4d:fb:23:a5:ad:08:95:03:c7:9d:4a:
b3:0d:6f:96:28:ef:bb:e6:45:33:c4:c8:54:9e:41:4a:8b:a0:
c7:11:96:f8:63:2e:6a:4c:5e:5d:ef:d5:8e:a3:72:21:3e:68:
6b:53:67:8b:62:43:3b:cc:78:5a:b1:76:c4:fe:8a:cf:4b:f6:
b1:05:4f:d6:d2:11:52:b3:8c:e9:e7:4a:de:69:c5:46:86:8c:
35:b5:12:67:2b:3b:ca:8f:d4:b5:4b:7b:17:8b:d8:12:4c:73:
2d:ac:c7:1d:72:9d:ce:50:fd:a8:29:e7:04:38:40:26:29:bd:
1a:23:f0:c0:01:4e:1b:40:f3:74:10:e4:da:a8:ee:16:ed:ae:
25:af:d5:bd:ff:d6:6f:22:a2:92:df:66:fa:de:e4:50:9c:94:
ad:77:58:51:d6:3d:71:46:d2:cf:d1:3a:5d:90:d5:e9:f0:3c:
f1:5b:6d:0f:1f:f5:f1:b3:95:9a:3e:f4:ec:22:a8:be:ee:61:
3a:45:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 09:38:19 2026 by rpki-client