Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9440915CC15B11F1BA64C0B55511F970.roa
File: 9440915CC15B11F1BA64C0B55511F970.roa (raw, json)
Hash identifier: Vh8Mp/8VykYpC0m6IyWHli9CPvWDBpb/b2lkNumHvm4=
Subject key identifier: EC:27:44:2D:0C:F1:D7:C2:04:55:EB:45:C9:E9:6E:9E:20:09:05:EE
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: 01A5
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9440915CC15B11F1BA64C0B55511F970.roa
Signing time: Tue 06 Oct 2026 08:01:07 +0000
ROA not before: Tue 06 Oct 2026 08:01:07 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9335
IP address blocks: 61.19.240.0/20 maxlen: 20
61.19.242.0/24 maxlen: 24
61.19.245.0/24 maxlen: 24
61.19.246.0/24 maxlen: 24
61.19.247.0/24 maxlen: 24
61.19.248.0/24 maxlen: 24
61.19.249.0/24 maxlen: 24
61.19.250.0/24 maxlen: 24
61.19.251.0/24 maxlen: 24
61.19.252.0/24 maxlen: 24
110.78.192.0/20 maxlen: 24
110.78.208.0/21 maxlen: 24
110.78.216.0/22 maxlen: 24
110.78.220.0/22 maxlen: 24
110.78.228.0/22 maxlen: 24
110.78.252.0/22 maxlen: 24
122.154.133.0/24 maxlen: 24
122.155.0.0/19 maxlen: 20
122.155.0.0/24 maxlen: 24
122.155.1.0/24 maxlen: 24
122.155.2.0/24 maxlen: 24
122.155.3.0/24 maxlen: 24
122.155.4.0/24 maxlen: 24
122.155.5.0/24 maxlen: 24
122.155.6.0/24 maxlen: 24
122.155.7.0/24 maxlen: 24
122.155.8.0/24 maxlen: 24
122.155.9.0/24 maxlen: 24
122.155.10.0/24 maxlen: 24
122.155.11.0/24 maxlen: 24
122.155.12.0/24 maxlen: 24
122.155.13.0/24 maxlen: 24
122.155.14.0/24 maxlen: 24
122.155.16.0/24 maxlen: 24
122.155.17.0/24 maxlen: 24
122.155.18.0/24 maxlen: 24
122.155.19.0/24 maxlen: 24
122.155.21.0/24 maxlen: 24
122.155.22.0/24 maxlen: 24
122.155.23.0/24 maxlen: 24
122.155.28.0/24 maxlen: 24
122.155.29.0/24 maxlen: 24
122.155.55.0/24 maxlen: 24
122.155.144.0/21 maxlen: 21
122.155.144.0/24 maxlen: 24
122.155.145.0/24 maxlen: 24
122.155.146.0/24 maxlen: 24
122.155.147.0/24 maxlen: 24
122.155.148.0/24 maxlen: 24
122.155.149.0/24 maxlen: 24
122.155.150.0/24 maxlen: 24
122.155.151.0/24 maxlen: 24
122.155.160.0/19 maxlen: 19
122.155.160.0/24 maxlen: 24
122.155.161.0/24 maxlen: 24
122.155.162.0/24 maxlen: 24
122.155.163.0/24 maxlen: 24
122.155.164.0/24 maxlen: 24
122.155.165.0/24 maxlen: 24
122.155.166.0/24 maxlen: 24
122.155.167.0/24 maxlen: 24
122.155.168.0/24 maxlen: 24
122.155.169.0/24 maxlen: 24
122.155.170.0/24 maxlen: 24
122.155.171.0/24 maxlen: 24
122.155.172.0/24 maxlen: 24
122.155.173.0/24 maxlen: 24
122.155.174.0/24 maxlen: 24
122.155.175.0/24 maxlen: 24
122.155.176.0/24 maxlen: 24
122.155.177.0/24 maxlen: 24
122.155.178.0/24 maxlen: 24
122.155.179.0/24 maxlen: 24
122.155.180.0/24 maxlen: 24
122.155.181.0/24 maxlen: 24
122.155.182.0/24 maxlen: 24
122.155.183.0/24 maxlen: 24
122.155.184.0/21 maxlen: 21
122.155.184.0/22 maxlen: 24
122.155.188.0/24 maxlen: 24
122.155.189.0/24 maxlen: 24
122.155.190.0/24 maxlen: 24
122.155.191.0/24 maxlen: 24
122.155.192.0/24 maxlen: 24
122.155.193.0/24 maxlen: 24
122.155.194.0/24 maxlen: 24
122.155.195.0/24 maxlen: 24
122.155.196.0/24 maxlen: 24
122.155.197.0/24 maxlen: 24
122.155.198.0/24 maxlen: 24
122.155.199.0/24 maxlen: 24
122.155.200.0/24 maxlen: 24
122.155.201.0/24 maxlen: 24
122.155.202.0/24 maxlen: 24
122.155.203.0/24 maxlen: 24
122.155.204.0/24 maxlen: 24
122.155.205.0/24 maxlen: 24
122.155.206.0/24 maxlen: 24
122.155.207.0/24 maxlen: 24
122.155.208.0/24 maxlen: 24
122.155.209.0/24 maxlen: 24
122.155.210.0/24 maxlen: 24
122.155.211.0/24 maxlen: 24
122.155.212.0/24 maxlen: 24
122.155.215.0/24 maxlen: 24
122.155.216.0/24 maxlen: 24
122.155.220.0/24 maxlen: 24
122.155.221.0/24 maxlen: 24
122.155.222.0/24 maxlen: 24
122.155.223.0/24 maxlen: 24
202.3.68.0/24 maxlen: 24
202.3.69.0/24 maxlen: 24
202.3.70.0/24 maxlen: 24
202.3.71.0/24 maxlen: 24
202.129.2.0/24 maxlen: 24
202.129.50.0/24 maxlen: 24
202.139.192.0/22 maxlen: 22
202.139.192.0/24 maxlen: 24
202.139.193.0/24 maxlen: 24
202.139.194.0/24 maxlen: 24
202.139.195.0/24 maxlen: 24
202.139.196.0/24 maxlen: 24
202.139.198.0/24 maxlen: 24
202.139.199.0/24 maxlen: 24
202.139.223.0/24 maxlen: 24
2001:c38:1000::/36 maxlen: 36
2001:c38:1000::/48 maxlen: 48
2001:c38:2000::/36 maxlen: 36
2001:c38:2000::/48 maxlen: 48
2001:c38:2001::/48 maxlen: 48
2001:c38:20f8::/48 maxlen: 48
2001:c38:3001::/48 maxlen: 48
2001:c38:3002::/48 maxlen: 48
2001:c38:3003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: Oct 6 08:01:07 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6ac4aac3-3255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:4c:d7:a2:39:44:8d:93:38:21:70:29:8b:
8b:91:01:13:ec:09:1a:76:dc:55:e0:3c:c6:02:e6:
1b:d1:30:49:e0:24:b4:ca:ce:dd:a2:96:63:13:7f:
8a:f7:3c:df:40:96:44:c6:26:97:0d:0d:bd:d3:03:
80:e4:4a:53:b0:d8:c7:e5:a4:01:bb:30:d0:8c:04:
d3:fd:18:4f:62:5d:d1:a3:73:6e:56:21:c5:ad:8d:
01:d8:10:68:6d:4b:5c:11:f7:e3:4f:f8:16:70:10:
7d:df:5a:ec:39:a0:73:61:80:5b:2b:15:2e:2e:73:
31:03:dc:4d:4c:19:c1:95:f7:7a:e9:30:06:2f:96:
08:4a:07:45:b0:f4:e3:b2:56:23:a3:d5:d9:ff:e6:
05:3d:12:e2:41:6b:ff:e8:ae:c9:3a:6d:ff:21:8e:
68:e8:34:46:b5:9e:bd:90:e5:2b:a1:cc:de:ed:cf:
43:61:71:a7:3e:cc:3b:90:01:e9:3c:d7:36:57:bf:
79:28:b9:cb:ad:05:80:ef:2a:a7:e3:e5:85:b9:9a:
b7:55:10:35:86:a0:39:fc:ef:7e:e1:4b:36:60:ae:
03:fd:3e:b7:bc:a4:0f:ba:ab:96:e9:e5:54:5e:d8:
99:48:cc:a5:ac:08:ec:0a:ab:35:6c:0e:8f:bf:4f:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:27:44:2D:0C:F1:D7:C2:04:55:EB:45:C9:E9:6E:9E:20:09:05:EE
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9440915CC15B11F1BA64C0B55511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.19.240.0/20
110.78.192.0/19
110.78.228.0/22
110.78.252.0/22
122.154.133.0/24
122.155.0.0/19
122.155.55.0/24
122.155.144.0/21
122.155.160.0-122.155.212.255
122.155.215.0-122.155.216.255
122.155.220.0/22
202.3.68.0/22
202.129.2.0/24
202.129.50.0/24
202.139.192.0-202.139.196.255
202.139.198.0/23
202.139.223.0/24
IPv6:
2001:c38:1000::-2001:c38:2fff:ffff:ffff:ffff:ffff:ffff
2001:c38:3001::-2001:c38:3003:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
92:91:19:79:12:4a:68:7a:86:dc:b2:62:7e:ff:ae:a0:2d:a3:
ad:88:b2:56:a6:3a:94:81:1e:ef:f2:17:9b:07:4a:d3:3e:85:
44:c5:84:6d:a9:b3:05:ab:08:10:2f:90:38:8d:57:47:f2:15:
cb:f6:81:23:a1:45:df:18:7f:94:42:d6:09:3d:c6:ab:42:a5:
a5:cf:b7:c9:14:77:ac:c8:c1:e2:29:1f:dd:f2:ec:6e:08:53:
1b:f9:20:9e:dc:4b:f6:7e:dc:6e:70:38:bc:83:d4:2e:79:89:
6a:d5:6a:bd:9a:24:d5:20:56:3b:6b:2f:e3:4d:78:4d:4e:59:
ec:7a:fc:a1:95:55:9d:32:53:70:50:f4:c0:f6:08:0e:77:10:
40:77:dc:05:06:e7:25:0e:39:74:83:d4:6a:8f:83:bf:6f:9e:
47:8a:a0:5a:31:ff:dd:91:1d:af:8e:99:fd:39:78:8f:27:3a:
bc:75:91:ea:22:62:94:ae:c2:53:36:2a:b9:2b:4a:39:63:9a:
25:8d:1e:c9:dd:a4:b3:52:8e:58:d2:d2:a8:18:7b:da:04:74:
bf:13:01:f9:6c:2f:a6:be:90:bb:d8:6e:b6:4b:1e:dd:f5:0f:
7d:c3:48:a2:bb:00:e4:9b:12:46:7b:7e:d4:66:28:20:74:9c:
5b:1c:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:20:47 2026 by rpki-client