Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/58213782AC2311F1817C69D13511F970.roa
File: 58213782AC2311F1817C69D13511F970.roa (raw, json)
Hash identifier: g5EKTgwMHM2HKQwoMGwLMyMOruuD1fUoSXIk43pBrwU=
Subject key identifier: 89:49:7F:52:15:6B:A7:A6:91:F7:30:D3:BA:9E:07:FC:04:6A:B8:5D
Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial: 35FB
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/58213782AC2311F1817C69D13511F970.roa
Signing time: Thu 08 Oct 2026 15:18:17 +0000
ROA not before: Thu 08 Oct 2026 15:18:17 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 4007
IP address blocks: 103.232.152.0/22 maxlen: 24
103.235.196.0/22 maxlen: 24
110.34.0.0/19 maxlen: 24
116.66.192.0/21 maxlen: 24
163.47.148.0/22 maxlen: 22
163.47.148.0/24 maxlen: 24
163.47.149.0/24 maxlen: 24
163.47.150.0/24 maxlen: 24
163.47.151.0/24 maxlen: 24
163.53.24.0/23 maxlen: 23
163.53.24.0/24 maxlen: 24
163.53.25.0/24 maxlen: 24
182.93.64.0/19 maxlen: 24
202.51.80.0/24 maxlen: 24
202.51.88.0/23 maxlen: 24
202.51.92.0/23 maxlen: 24
202.63.240.0/21 maxlen: 24
2403:3800::/32 maxlen: 40
2403:3800:8::/48 maxlen: 48
2403:3800:600::/48 maxlen: 48
2403:3800:700::/48 maxlen: 48
2403:3800:820::/48 maxlen: 48
2403:3800:1200::/44 maxlen: 44
2403:3800:1210::/44 maxlen: 44
2403:3800:1220::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13819 (0x35fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Validity
Not Before: Oct 8 15:18:17 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac7b439-e619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:f8:e3:f1:b5:a2:0c:a9:82:04:5d:a1:dd:
7d:d5:96:91:39:12:d1:4b:f2:e5:91:5f:82:1c:63:
66:9e:3e:fc:cb:da:69:e8:62:b8:ce:01:27:80:ae:
19:ed:56:e9:c9:5e:87:67:9c:05:56:8f:97:9f:9e:
12:57:bf:0e:bb:54:f2:ea:8b:e9:19:56:e0:57:2d:
3b:51:14:86:4d:a7:bd:57:e3:8b:12:56:61:76:2b:
f3:2b:31:41:cf:a4:92:31:8a:35:eb:2c:cc:6f:5a:
18:cc:7a:09:a2:19:98:1d:8f:12:e2:93:64:39:f5:
7d:b6:98:71:ab:1c:e2:33:da:90:4f:a0:7d:f8:32:
8c:fb:27:9b:9f:da:5b:ad:ea:8c:5e:2b:17:f5:e2:
bc:ba:03:9d:86:e5:22:d2:bd:43:22:89:41:fb:c8:
e0:75:b3:ea:1a:97:b5:76:e7:e8:6b:4a:e3:92:59:
d0:06:a5:7f:4b:6c:27:27:40:87:f8:d8:7c:6f:6b:
73:f3:46:37:e7:b8:f0:33:2c:b1:8c:09:6e:40:92:
ac:d0:09:f5:7a:71:f7:e9:81:6e:ec:58:4e:e3:22:
7e:d7:da:d2:08:2b:ea:ad:9a:75:1d:18:24:11:23:
20:5a:d1:0a:ce:0c:7e:8d:0a:a4:27:74:14:75:c8:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:7F:52:15:6B:A7:A6:91:F7:30:D3:BA:9E:07:FC:04:6A:B8:5D
X509v3 Authority Key Identifier:
keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/58213782AC2311F1817C69D13511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.232.152.0/22
103.235.196.0/22
110.34.0.0/19
116.66.192.0/21
163.47.148.0/22
163.53.24.0/23
182.93.64.0/19
202.51.80.0/24
202.51.88.0/23
202.51.92.0/23
202.63.240.0/21
IPv6:
2403:3800::/32
Signature Algorithm: sha256WithRSAEncryption
a7:63:1a:11:0f:41:cd:c7:71:86:58:b3:00:d7:d3:7f:7f:c5:
c0:0e:65:8b:7f:1e:46:4a:a3:b3:63:f7:95:b2:85:8a:2e:f5:
d4:05:70:77:73:9f:5a:56:5d:52:fc:38:c1:be:a0:f1:f2:c4:
77:c4:b7:3d:74:39:9e:a5:12:da:67:c4:1d:c3:6e:da:b0:ec:
35:fd:e4:39:4f:42:4c:d1:63:ef:26:95:27:3f:72:fe:d6:3b:
83:5d:54:c9:df:3b:bd:8c:aa:8d:bf:e0:73:ed:33:13:8c:f1:
6e:77:4a:f3:6b:5d:a6:9e:ff:66:6a:85:f2:9d:68:c8:4b:eb:
57:57:b9:25:5d:96:ae:79:0b:a3:b2:ff:dc:8d:32:71:8f:c0:
bd:e8:49:f1:83:5b:3d:9e:20:69:4b:8f:b3:a8:dd:d3:30:5c:
55:e2:c3:7c:80:60:99:d6:3f:9a:95:ad:56:2e:d9:5e:90:bb:
cb:38:9f:ee:cf:d1:48:c2:f4:ed:a2:4d:42:dc:e4:dd:0e:c3:
34:fd:d5:24:92:40:ee:c3:7d:f3:43:43:31:68:aa:04:00:25:
c4:c5:22:ac:1e:02:ed:8d:80:58:84:b1:65:d8:b7:0e:56:7d:
2e:d4:78:d6:7a:74:6b:75:12:6d:7a:3b:b3:b3:da:f8:4c:1b:
6b:9d:62:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:26:26 2026 by rpki-client