Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa
File: 24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa (raw, json)
Hash identifier: QOoxAPcSDNYd7ZeuO509c/Bc0Tll0c/S3y+OYF8yyjc=
Subject key identifier: 2E:C3:71:CA:38:46:E9:80:B8:AD:D0:F1:13:5A:0A:44:98:31:30:9F
Certificate issuer: /CN=A9123E38/serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A
Certificate serial: 17ED
Authority key identifier: D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa
Signing time: Mon 19 Oct 2026 06:26:11 +0000
ROA not before: Mon 19 Oct 2026 06:26:11 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24337
IP address blocks: 103.228.252.0/22 maxlen: 22
103.228.252.0/24 maxlen: 24
103.228.253.0/24 maxlen: 24
103.228.254.0/24 maxlen: 24
103.228.255.0/24 maxlen: 24
139.5.156.0/22 maxlen: 22
139.5.156.0/24 maxlen: 24
139.5.157.0/24 maxlen: 24
139.5.158.0/24 maxlen: 24
139.5.159.0/24 maxlen: 24
141.164.96.0/20 maxlen: 20
141.164.96.0/24 maxlen: 24
141.164.97.0/24 maxlen: 24
141.164.98.0/24 maxlen: 24
141.164.99.0/24 maxlen: 24
141.164.100.0/24 maxlen: 24
141.164.101.0/24 maxlen: 24
141.164.102.0/24 maxlen: 24
141.164.103.0/24 maxlen: 24
141.164.104.0/24 maxlen: 24
141.164.105.0/24 maxlen: 24
141.164.106.0/24 maxlen: 24
141.164.107.0/24 maxlen: 24
141.164.108.0/24 maxlen: 24
141.164.109.0/24 maxlen: 24
141.164.110.0/24 maxlen: 24
141.164.111.0/24 maxlen: 24
202.123.176.0/21 maxlen: 21
202.123.176.0/24 maxlen: 24
202.123.177.0/24 maxlen: 24
202.123.178.0/24 maxlen: 24
202.123.179.0/24 maxlen: 24
202.123.180.0/24 maxlen: 24
202.123.181.0/24 maxlen: 24
202.123.182.0/24 maxlen: 24
202.123.183.0/24 maxlen: 24
2400:c180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl
rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 16:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6125 (0x17ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123E38, serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A
Validity
Not Before: Oct 19 06:26:11 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ad5b803-b4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:64:30:63:29:a2:0d:d4:34:cd:2d:65:fd:
84:89:7a:fa:e0:81:f7:2a:02:cc:b8:82:b1:0c:f8:
1f:8e:f5:c8:6d:2b:77:50:b7:2c:00:e7:55:66:cc:
f8:50:c1:41:d2:27:15:5f:f0:db:8b:61:4d:3a:b3:
8d:f8:6d:f9:3b:85:45:67:2b:c6:8b:1c:7c:31:be:
e0:5a:c3:bd:7f:9b:4b:cc:a4:99:78:c2:9d:62:09:
5b:da:aa:95:e0:59:e5:d8:4d:35:4f:0e:73:a5:22:
73:b0:e3:28:33:e8:1a:2a:90:78:67:cd:52:d0:fe:
da:71:60:d5:1c:e5:11:dd:cf:0c:f2:75:56:9c:03:
73:48:3f:f3:a6:e3:41:12:04:43:c5:e1:ff:47:c6:
a1:28:5a:1b:10:13:9a:60:44:6f:fa:cb:aa:c7:68:
0a:7f:b2:1c:25:e4:7e:c4:aa:7a:23:3a:b7:af:20:
6f:a3:4a:ce:3f:f4:e1:31:fd:75:bb:23:3f:bf:67:
93:75:ed:48:14:e7:58:da:1b:89:2a:dc:02:d7:7c:
ce:bc:e2:6e:fc:62:92:f7:e9:0a:6e:10:a7:75:28:
29:2b:c0:f2:7c:4a:f3:7e:81:95:3b:43:bd:4f:9d:
52:73:a2:36:6e:91:c9:c3:9b:ce:69:8e:3d:5d:97:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:71:CA:38:46:E9:80:B8:AD:D0:F1:13:5A:0A:44:98:31:30:9F
X509v3 Authority Key Identifier:
keyid:D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.228.252.0/22
139.5.156.0/22
141.164.96.0/20
202.123.176.0/21
IPv6:
2400:c180::/32
Signature Algorithm: sha256WithRSAEncryption
b5:bb:b4:b1:65:fa:05:8b:9b:86:75:ba:da:e6:66:d4:47:66:
d5:e0:dc:f1:46:aa:d4:57:9e:55:c4:06:40:da:c8:19:6c:43:
a0:86:84:5a:b1:00:60:2c:6c:c6:6c:d0:97:66:ed:29:95:1a:
7b:78:b4:cf:ee:76:2b:78:c6:1e:0b:59:91:2b:28:c7:a8:e8:
0f:9f:63:52:4d:df:9e:08:13:4a:eb:0b:72:d9:54:ee:19:c1:
c5:3c:c8:03:f5:c3:3b:e7:40:ae:ea:01:86:d3:37:3c:83:cf:
89:07:58:21:ec:a7:2e:ba:32:89:5e:57:f6:2b:87:54:59:3c:
d1:62:1c:4a:43:f6:47:79:2c:95:df:fb:d0:86:65:58:75:3a:
e5:f0:6e:2f:63:7f:1e:07:9b:9c:59:00:b3:67:dc:98:33:bb:
61:00:e5:a6:79:62:07:fa:e7:f9:ea:aa:5c:95:e6:55:15:f1:
b1:1f:3c:e1:a3:8c:41:b4:b7:72:c1:3b:30:1e:26:4d:13:71:
a2:69:1b:52:16:93:3f:0e:56:86:63:1e:c1:ec:89:83:9d:04:
93:2a:a6:30:c6:82:b3:16:28:3d:68:ef:0c:c8:62:f4:ce:e1:
f6:4f:01:33:7a:f0:a3:4e:ee:45:cb:62:78:5e:97:f7:32:0c:
ee:56:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:54:05 2026 by rpki-client