Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/0144318C9AFB11F1AE17B1595911F970.roa
File: 0144318C9AFB11F1AE17B1595911F970.roa (raw, json)
Hash identifier: mjYuZtC3XEskN7xgTBANLx/Rych49xVi6AQW29IHHX4=
Subject key identifier: 95:AC:B5:4D:3D:D7:A8:0E:D1:FC:77:0A:55:82:68:B0:6C:80:53:91
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0E14
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/0144318C9AFB11F1AE17B1595911F970.roa
Signing time: Tue 18 Aug 2026 11:50:27 +0000
ROA not before: Tue 18 Aug 2026 11:50:27 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 134371
IP address blocks: 103.62.140.0/22 maxlen: 24
202.136.88.0/22 maxlen: 24
2400:3dc0::/32 maxlen: 32
2400:3dc0::/36 maxlen: 36
2400:3dc0::/44 maxlen: 48
2400:3dc0:10::/44 maxlen: 48
2400:3dc0:2e::/48 maxlen: 48
2400:3dc0:2f::/48 maxlen: 48
2400:3dc0:3e::/48 maxlen: 48
2400:3dc0:3f::/48 maxlen: 48
2400:3dc0:40::/44 maxlen: 47
2400:3dc0:40::/48 maxlen: 48
2400:3dc0:43::/48 maxlen: 48
2400:3dc0:45::/48 maxlen: 48
2400:3dc0:46::/48 maxlen: 48
2400:3dc0:49::/48 maxlen: 48
2400:3dc0:4c::/48 maxlen: 48
2400:3dc0:50::/44 maxlen: 47
2400:3dc0:57::/48 maxlen: 48
2400:3dc0:58::/48 maxlen: 48
2400:3dc0:5a::/47 maxlen: 48
2400:3dc0:60::/44 maxlen: 47
2400:3dc0:60::/47 maxlen: 48
2400:3dc0:68::/47 maxlen: 48
2400:3dc0:6a::/48 maxlen: 48
2400:3dc0:6c::/48 maxlen: 48
2400:3dc0:6e::/47 maxlen: 48
2400:3dc0:70::/48 maxlen: 48
2400:3dc0:78::/48 maxlen: 48
2400:3dc0:7b::/48 maxlen: 48
2400:3dc0:89::/48 maxlen: 48
2400:3dc0:100::/48 maxlen: 48
2400:3dc0:101::/48 maxlen: 48
2400:3dc0:140::/48 maxlen: 48
2400:3dc0:200::/48 maxlen: 48
2400:3dc0:201::/48 maxlen: 48
2400:3dc0:300::/48 maxlen: 48
2400:3dc0:400::/48 maxlen: 48
2400:3dc0:500::/48 maxlen: 48
2400:3dc0:600::/48 maxlen: 48
2400:3dc0:700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 18:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3604 (0xe14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Aug 18 11:50:27 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a844703-6f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:db:12:ee:e5:69:5f:3f:9f:e4:81:2c:86:
e5:7a:ae:07:ae:38:1d:9f:ba:cd:32:c6:0f:e4:5b:
26:74:90:3d:e7:56:82:20:0b:9d:cb:ad:40:d0:aa:
ed:20:06:df:23:e5:3b:e5:df:bd:f3:87:9c:8e:8c:
1f:2a:a1:71:f4:64:57:ba:89:f9:32:f0:a7:96:2e:
83:3e:a8:de:94:a1:9e:ee:c5:88:e2:19:09:87:b0:
03:e8:ed:eb:49:02:ec:2c:86:4e:3f:01:96:8b:88:
2e:27:57:fe:42:e1:c1:1d:69:9d:30:4c:2a:cf:bb:
a9:87:88:fe:bd:24:53:1b:45:4e:0b:cb:61:21:5c:
56:88:93:51:d6:c5:c6:33:06:bc:37:67:59:a2:cb:
cb:ed:dd:5e:ab:62:3b:ab:66:5f:72:8e:43:04:cb:
46:a1:21:4a:c2:d3:49:93:be:e5:e3:e0:85:43:66:
d3:1b:21:41:2a:6c:00:09:0f:c2:bb:91:c9:9b:42:
89:37:39:88:f6:84:ea:63:61:84:4a:68:4e:8b:d6:
6c:40:f4:d7:f9:98:76:c0:37:b5:fb:1e:fb:35:36:
8e:c5:43:a2:17:fe:39:dd:ce:71:6b:89:55:4a:bf:
56:8c:b5:26:b3:fe:6f:79:35:d2:8a:6e:55:b7:33:
29:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:B5:4D:3D:D7:A8:0E:D1:FC:77:0A:55:82:68:B0:6C:80:53:91
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/0144318C9AFB11F1AE17B1595911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.62.140.0/22
202.136.88.0/22
IPv6:
2400:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
07:54:72:93:bf:79:8b:f4:42:fc:04:fb:33:71:94:fa:37:af:
0e:a8:aa:cc:2c:66:3c:5d:16:97:b1:8d:bf:f4:75:5a:6e:6d:
ec:c7:90:92:66:06:1a:88:b4:46:d4:db:76:08:c7:d4:1e:2d:
0b:b8:4a:13:19:eb:4a:8f:5f:32:4a:34:ff:0d:0c:e5:24:9e:
f4:b8:9e:9e:a5:6c:0a:4e:34:f4:0b:3c:03:5f:9a:aa:21:bd:
d4:cc:f2:18:7a:5b:ee:02:81:5d:f9:4f:bb:b9:0f:4d:cd:8f:
e1:74:ad:83:f0:1d:31:d3:9a:19:86:1b:43:eb:d8:ef:55:be:
59:d2:4b:bc:bf:39:56:27:30:0e:1b:33:72:d9:d9:44:57:da:
45:45:1a:56:67:54:ba:1b:aa:93:41:ba:1a:50:a1:1d:8f:70:
39:d9:92:87:8b:67:ea:59:61:cc:88:71:32:a5:01:05:60:62:
3b:39:e3:c3:f4:6f:9a:9b:d8:7e:8b:33:02:68:53:96:c6:4f:
60:ce:0a:19:90:8b:86:70:9e:ec:b0:dc:93:4f:18:43:97:00:
c9:20:3f:90:37:b4:bf:9c:8b:2a:b2:11:1e:58:83:53:f9:42:
40:7f:ae:97:38:b8:44:b1:fe:3c:80:b6:6c:ef:26:25:e0:1c:
11:0e:56:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:31:30 2026 by rpki-client