Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/FC895C72C39F11F095CC9914C4F9AE02.roa
File: FC895C72C39F11F095CC9914C4F9AE02.roa (raw, json)
Hash identifier: yjj/zkLhNcQJqnRFnzDLWEG0yhJ3Fsm/uus5IKjmRsQ=
Subject key identifier: F1:31:2F:CD:FC:C5:9B:95:C2:91:23:31:1B:CA:F3:58:2A:63:99:24
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0C3D
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/FC895C72C39F11F095CC9914C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:44:44 +0000
ROA not before: Sat 10 Jan 2026 14:43:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138915
IP address blocks: 59.153.156.0/24 maxlen: 24
59.153.157.0/24 maxlen: 24
59.153.158.0/24 maxlen: 24
59.153.159.0/24 maxlen: 24
103.84.108.0/24 maxlen: 24
103.84.109.0/24 maxlen: 24
103.84.110.0/24 maxlen: 24
103.84.111.0/24 maxlen: 24
103.136.248.0/22 maxlen: 22
103.136.248.0/24 maxlen: 24
103.136.249.0/24 maxlen: 24
103.136.250.0/24 maxlen: 24
103.136.251.0/24 maxlen: 24
103.145.72.0/24 maxlen: 24
103.145.73.0/24 maxlen: 24
103.151.138.0/23 maxlen: 23
103.151.138.0/24 maxlen: 24
103.151.139.0/24 maxlen: 24
103.152.14.0/24 maxlen: 24
103.152.15.0/24 maxlen: 24
103.152.98.0/24 maxlen: 24
103.152.99.0/24 maxlen: 24
103.154.242.0/24 maxlen: 24
103.154.243.0/24 maxlen: 24
103.155.16.0/24 maxlen: 24
103.155.17.0/24 maxlen: 24
103.198.200.0/24 maxlen: 24
103.198.201.0/24 maxlen: 24
103.198.202.0/24 maxlen: 24
103.198.203.0/24 maxlen: 24
175.176.192.0/24 maxlen: 24
175.176.193.0/24 maxlen: 24
175.176.194.0/24 maxlen: 24
175.176.195.0/24 maxlen: 24
2404:a140::/32 maxlen: 32
2404:a140:2::/48 maxlen: 48
2404:a140:3::/48 maxlen: 48
2404:a140:4::/48 maxlen: 48
2404:a140:5::/48 maxlen: 48
2404:a140:6::/48 maxlen: 48
2404:a140:7::/48 maxlen: 48
2404:a140:8::/48 maxlen: 48
2404:a140:9::/48 maxlen: 48
2404:a140:a::/48 maxlen: 48
2404:a140:b::/48 maxlen: 48
2404:a140:c::/48 maxlen: 48
2404:a140:d::/48 maxlen: 48
2404:a140:e::/48 maxlen: 48
2404:a140:f::/48 maxlen: 48
2404:a140:10::/48 maxlen: 48
2404:a140:11::/48 maxlen: 48
2404:a140:12::/48 maxlen: 48
2404:a140:13::/48 maxlen: 48
2404:a140:14::/48 maxlen: 48
2404:a140:15::/48 maxlen: 48
2404:a140:16::/48 maxlen: 48
2404:a140:17::/48 maxlen: 48
2404:a140:18::/48 maxlen: 48
2404:a140:19::/48 maxlen: 48
2404:a140:1a::/48 maxlen: 48
2404:a140:1b::/48 maxlen: 48
2404:a140:1c::/48 maxlen: 48
2404:a140:1d::/48 maxlen: 48
2404:a140:1e::/48 maxlen: 48
2404:a140:1f::/48 maxlen: 48
2404:a140:20::/48 maxlen: 48
2404:a140:21::/48 maxlen: 48
2404:a140:22::/48 maxlen: 48
2404:a140:23::/48 maxlen: 48
2404:a140:24::/48 maxlen: 48
2404:a140:25::/48 maxlen: 48
2404:a140:26::/48 maxlen: 48
2404:a140:27::/48 maxlen: 48
2404:a140:28::/48 maxlen: 48
2404:a140:29::/48 maxlen: 48
2404:a140:2a::/48 maxlen: 48
2404:a140:2b::/48 maxlen: 48
2404:a140:2c::/48 maxlen: 48
2404:a140:2d::/48 maxlen: 48
2404:a140:2e::/48 maxlen: 48
2404:a140:2f::/48 maxlen: 48
2404:a140:30::/48 maxlen: 48
2404:a140:32::/48 maxlen: 48
2404:a140:33::/48 maxlen: 48
2404:a140:38::/48 maxlen: 48
2404:a140:39::/48 maxlen: 48
2404:a140:3a::/48 maxlen: 48
2404:a140:3b::/48 maxlen: 48
2404:a140:3c::/48 maxlen: 48
2404:a140:3d::/48 maxlen: 48
2404:a140:3e::/48 maxlen: 48
2404:a140:3f::/48 maxlen: 48
2404:a140:42::/48 maxlen: 48
2404:a140:43::/48 maxlen: 48
2404:a140:44::/48 maxlen: 48
2404:a140:45::/48 maxlen: 48
2404:a140:46::/48 maxlen: 48
2404:a140:47::/48 maxlen: 48
2404:a140:48::/48 maxlen: 48
2404:a140:49::/48 maxlen: 48
2404:a140:4a::/48 maxlen: 48
2404:a140:4b::/48 maxlen: 48
2404:a140:4c::/48 maxlen: 48
2404:a140:4d::/48 maxlen: 48
2404:a140:4f::/48 maxlen: 48
2404:a140:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 19:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3133 (0xc3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Jan 10 14:43:53 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4891b-037b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:90:9a:75:c7:b6:c1:ce:ec:90:4b:35:1a:40:
ab:8b:2b:64:04:ac:5e:ea:b2:2a:d8:cc:24:c9:c4:
cc:5d:bf:ca:c9:ec:a8:ef:68:b4:2c:6e:1a:59:dc:
5d:1a:6d:04:82:61:90:06:9a:28:77:db:59:84:08:
72:8e:c0:a0:96:b0:66:28:f4:51:48:2b:c6:49:fd:
dd:a4:8e:70:f1:d1:28:66:a9:7b:33:e7:a3:36:2c:
2b:a8:13:1d:7c:b9:ca:51:83:37:3b:54:99:a7:7e:
9b:5f:8f:21:e9:8f:dc:8c:3d:34:10:4f:75:82:41:
ef:a2:cc:82:3e:69:b4:42:e5:4f:20:07:73:76:83:
ef:0c:ee:47:a6:45:2a:fe:5e:1d:25:cb:5f:31:ee:
79:0d:b4:68:37:2b:0a:d8:2e:38:a5:25:fc:0c:53:
97:50:d4:22:49:53:c5:53:16:7a:80:b7:a2:bd:29:
38:f3:e0:05:6a:52:63:b0:c4:3c:f4:6f:fc:fb:ec:
99:50:96:27:ec:04:aa:b3:4a:c2:34:fb:23:ef:4c:
1d:f6:2f:55:09:da:a7:f5:55:3c:f5:dd:73:2d:99:
f1:a7:d3:88:a6:bb:08:7f:c9:d5:c1:7b:1b:44:ac:
dc:c9:34:36:e8:38:8a:c6:5c:ce:ce:c8:af:ed:26:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:31:2F:CD:FC:C5:9B:95:C2:91:23:31:1B:CA:F3:58:2A:63:99:24
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/FC895C72C39F11F095CC9914C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.153.156.0/22
103.84.108.0/22
103.136.248.0/22
103.145.72.0/23
103.151.138.0/23
103.152.14.0/23
103.152.98.0/23
103.154.242.0/23
103.155.16.0/23
103.198.200.0/22
175.176.192.0/22
IPv6:
2404:a140::/32
Signature Algorithm: sha256WithRSAEncryption
91:31:06:d9:68:2e:51:86:35:84:4e:98:5a:b6:15:ab:fa:05:
09:bd:b9:ff:ef:5c:7b:ab:6f:1c:8c:86:09:48:fa:40:d8:27:
d7:4a:f0:14:57:d1:1e:d5:68:f1:27:32:11:04:c7:69:b6:38:
6b:34:34:ca:2d:4b:bc:bb:e3:2e:61:08:c5:50:0b:7c:26:16:
45:96:6f:f5:18:35:ca:2e:cc:3b:9f:b7:34:b6:54:92:12:b4:
04:7c:6f:eb:be:4a:f8:d3:c2:37:2f:c9:13:ff:46:f3:99:00:
e7:a3:d8:c4:01:09:62:b8:15:f1:49:d0:61:36:7e:2a:d5:17:
94:c5:4f:16:a3:1a:08:a9:57:b9:ed:72:b2:63:df:5e:56:7e:
be:22:b3:3b:6f:df:83:f0:fd:b4:7a:33:4e:4f:ca:d0:a4:74:
25:24:15:07:c9:19:ff:d2:6a:13:c7:8c:d3:6a:30:4d:76:ff:
dd:b2:2c:03:71:17:00:da:45:0e:f1:8b:a6:a2:be:ff:b1:85:
0c:87:3b:d8:50:e9:a8:70:49:ba:2a:e7:44:f4:fe:2f:b2:dc:
c1:d3:aa:14:ca:6c:f2:ba:9b:be:db:0e:5f:0d:a3:08:ff:68:
f8:6b:09:93:05:44:2e:13:5d:d9:19:03:75:cb:e3:92:c3:eb:
4c:f0:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:18:25 2026 by rpki-client