Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CBCF6A88358611F08913BB23C4F9AE02.roa
File: CBCF6A88358611F08913BB23C4F9AE02.roa (raw, json)
Hash identifier: mNksQE/xzdIYYCvljnqlY0EDftzvuMmGsaDQO09s8nU=
Subject key identifier: 68:86:D2:52:09:C7:6F:E4:53:42:1B:83:D6:92:37:F8:9B:18:9F:6B
Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Certificate serial: 35CB
Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CBCF6A88358611F08913BB23C4F9AE02.roa
Signing time: Mon 24 Aug 2026 15:16:44 +0000
ROA not before: Mon 24 Aug 2026 15:16:44 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 38466
IP address blocks: 27.125.224.0/19 maxlen: 19
27.125.224.0/24 maxlen: 24
27.125.225.0/24 maxlen: 24
27.125.226.0/24 maxlen: 24
27.125.227.0/24 maxlen: 24
27.125.228.0/24 maxlen: 24
27.125.229.0/24 maxlen: 24
27.125.230.0/24 maxlen: 24
27.125.231.0/24 maxlen: 24
27.125.232.0/24 maxlen: 24
27.125.233.0/24 maxlen: 24
27.125.234.0/24 maxlen: 24
27.125.235.0/24 maxlen: 24
27.125.236.0/24 maxlen: 24
27.125.237.0/24 maxlen: 24
27.125.238.0/24 maxlen: 24
27.125.239.0/24 maxlen: 24
27.125.240.0/24 maxlen: 24
27.125.241.0/24 maxlen: 24
27.125.242.0/24 maxlen: 24
27.125.243.0/24 maxlen: 24
27.125.244.0/24 maxlen: 24
27.125.245.0/24 maxlen: 24
27.125.246.0/24 maxlen: 24
27.125.247.0/24 maxlen: 24
27.125.248.0/24 maxlen: 24
27.125.249.0/24 maxlen: 24
27.125.250.0/24 maxlen: 24
27.125.251.0/24 maxlen: 24
27.125.252.0/24 maxlen: 24
27.125.253.0/24 maxlen: 24
27.125.254.0/24 maxlen: 24
27.125.255.0/24 maxlen: 24
103.1.144.0/22 maxlen: 22
103.1.144.0/24 maxlen: 24
103.1.145.0/24 maxlen: 24
103.1.146.0/24 maxlen: 24
103.1.147.0/24 maxlen: 24
113.30.232.0/21 maxlen: 21
113.30.232.0/24 maxlen: 24
113.30.233.0/24 maxlen: 24
113.30.234.0/23 maxlen: 24
113.30.236.0/22 maxlen: 24
123.136.96.0/19 maxlen: 19
123.136.96.0/24 maxlen: 24
123.136.97.0/24 maxlen: 24
123.136.98.0/24 maxlen: 24
123.136.99.0/24 maxlen: 24
123.136.100.0/24 maxlen: 24
123.136.101.0/24 maxlen: 24
123.136.102.0/23 maxlen: 24
123.136.104.0/22 maxlen: 22
123.136.104.0/24 maxlen: 24
123.136.105.0/24 maxlen: 24
123.136.106.0/24 maxlen: 24
123.136.107.0/24 maxlen: 24
123.136.108.0/24 maxlen: 24
123.136.109.0/24 maxlen: 24
123.136.110.0/24 maxlen: 24
123.136.111.0/24 maxlen: 24
123.136.112.0/24 maxlen: 24
123.136.113.0/24 maxlen: 24
123.136.114.0/24 maxlen: 24
123.136.115.0/24 maxlen: 24
123.136.116.0/24 maxlen: 24
123.136.117.0/24 maxlen: 24
123.136.118.0/24 maxlen: 24
123.136.119.0/24 maxlen: 24
123.136.120.0/24 maxlen: 24
123.136.121.0/24 maxlen: 24
123.136.122.0/24 maxlen: 24
123.136.123.0/24 maxlen: 24
123.136.124.0/24 maxlen: 24
123.136.125.0/24 maxlen: 24
123.136.126.0/24 maxlen: 24
123.136.127.0/24 maxlen: 24
203.168.160.0/19 maxlen: 19
203.168.160.0/24 maxlen: 24
203.168.161.0/24 maxlen: 24
203.168.162.0/24 maxlen: 24
203.168.163.0/24 maxlen: 24
203.168.164.0/22 maxlen: 22
203.168.164.0/24 maxlen: 24
203.168.165.0/24 maxlen: 24
203.168.166.0/24 maxlen: 24
203.168.167.0/24 maxlen: 24
203.168.168.0/24 maxlen: 24
203.168.169.0/24 maxlen: 24
203.168.170.0/24 maxlen: 24
203.168.171.0/24 maxlen: 24
203.168.172.0/24 maxlen: 24
203.168.173.0/24 maxlen: 24
203.168.174.0/24 maxlen: 24
203.168.175.0/24 maxlen: 24
203.168.176.0/24 maxlen: 24
203.168.177.0/24 maxlen: 24
203.168.178.0/24 maxlen: 24
203.168.179.0/24 maxlen: 24
203.168.180.0/24 maxlen: 24
203.168.181.0/24 maxlen: 24
203.168.182.0/24 maxlen: 24
203.168.183.0/24 maxlen: 24
203.168.184.0/24 maxlen: 24
203.168.185.0/24 maxlen: 24
203.168.186.0/24 maxlen: 24
203.168.187.0/24 maxlen: 24
203.168.188.0/24 maxlen: 24
203.168.189.0/24 maxlen: 24
203.168.190.0/24 maxlen: 24
203.168.191.0/24 maxlen: 24
2405:3800::/32 maxlen: 32
2405:3800::/48 maxlen: 48
2405:3800:1::/48 maxlen: 48
2405:3800:800::/43 maxlen: 43
2405:3800:820::/43 maxlen: 43
2405:3800:840::/43 maxlen: 43
2405:3800:860::/43 maxlen: 43
2405:3800:880::/43 maxlen: 43
2405:3800:8a0::/43 maxlen: 43
2405:3800:8c0::/43 maxlen: 43
2405:3800:8e0::/43 maxlen: 43
2405:3800:900::/43 maxlen: 43
2405:3800:dc2::/47 maxlen: 47
2405:3800:dc4::/47 maxlen: 47
2405:3800:dc6::/47 maxlen: 47
2405:3800:dd0::/45 maxlen: 45
2405:3801::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13771 (0x35cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Validity
Not Before: Aug 24 15:16:44 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a8c605c-6017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:6a:f2:2b:de:35:8a:b7:ed:9b:58:f2:d5:
a7:5d:79:08:b2:c3:d0:fa:31:f1:0a:d4:b1:a6:1a:
3c:65:b7:db:23:37:99:75:e1:ad:ec:ff:1e:6e:a6:
69:fc:71:4c:64:07:11:e1:39:ba:f1:31:bc:6a:dc:
38:23:7d:17:00:fb:20:96:b0:54:33:d0:3b:cb:dc:
76:c3:2a:0e:95:ef:d7:3e:83:32:c5:79:33:53:99:
f7:df:99:54:e2:1a:23:4f:9f:64:34:7b:b1:be:a0:
ed:b4:23:0f:92:64:b7:89:dc:ce:70:ae:7b:de:1d:
f0:69:84:a1:e6:77:7a:52:e7:f3:61:46:39:fb:8e:
d2:bb:73:0b:e6:58:68:f4:c9:66:a2:1a:63:7a:78:
6a:ee:f1:b0:56:10:98:cb:7a:5c:6c:8c:a1:50:b1:
6f:56:42:21:84:12:c4:58:b1:e5:3b:86:d0:49:24:
e8:eb:f7:10:4f:11:9f:52:e8:7e:fb:ac:4b:82:24:
e8:32:d1:85:0a:57:e6:2d:00:19:c4:12:b0:6e:7d:
63:23:38:7f:2a:36:34:94:c5:67:da:62:2c:6d:21:
fb:db:9c:6d:33:e6:1b:d2:97:77:46:0c:b8:43:4a:
a5:b8:e6:77:ec:a3:9e:57:48:cf:d4:4c:85:31:5b:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:86:D2:52:09:C7:6F:E4:53:42:1B:83:D6:92:37:F8:9B:18:9F:6B
X509v3 Authority Key Identifier:
keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CBCF6A88358611F08913BB23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.125.224.0/19
103.1.144.0/22
113.30.232.0/21
123.136.96.0/19
203.168.160.0/19
IPv6:
2405:3800::/31
Signature Algorithm: sha256WithRSAEncryption
4f:0b:d9:8c:41:23:98:db:db:c3:78:a8:f2:1d:bb:09:fc:6b:
14:c3:d6:bd:6a:70:05:ff:5a:7a:97:16:a6:2c:c8:b1:0e:4c:
a2:0c:cd:5a:d8:de:9a:63:24:12:3a:a9:64:53:c2:89:0f:ca:
0e:f6:27:59:9a:59:04:d8:94:32:d4:65:6e:8d:95:25:89:d4:
4e:82:22:f5:38:a4:f4:97:96:e3:79:4c:16:e9:86:99:43:f0:
8e:f9:12:af:d1:cf:d8:dc:16:b0:e4:54:92:9b:a4:b8:a3:bf:
87:94:c3:d2:9a:ec:ea:58:de:bb:b4:43:7d:9d:83:c1:bf:92:
23:c1:4d:fb:a9:fb:b1:15:b2:36:e0:a9:7d:33:74:16:45:f8:
37:36:13:d1:b1:b5:ef:9d:6d:8a:67:b3:95:a7:9b:6b:bf:ff:
d4:66:66:ba:74:14:68:0d:c6:0f:f4:e0:df:14:4b:f0:e5:c7:
a0:f1:26:a2:76:7d:92:a4:e5:8c:89:07:98:1d:9e:a8:18:14:
f4:f0:dd:9b:50:86:e7:ff:af:61:b7:33:46:4b:a3:2f:64:0e:
f1:52:ea:11:94:db:a3:48:c3:6e:63:54:fb:06:5b:d8:ec:b1:
7e:cd:ba:f3:69:81:85:f2:ba:c2:f7:c4:2d:c4:25:a6:fd:6f:
bf:89:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:13:20 2026 by rpki-client