Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/AE5C97A8AFB711E79FACFF11C4F9AE02.roa
File: AE5C97A8AFB711E79FACFF11C4F9AE02.roa (raw, json)
Hash identifier: 24rgjDDm1BWe2/3/cX07RaewtgiGcNIAGfPQqajGRoM=
Subject key identifier: A4:42:F5:E1:91:0F:53:5B:E5:5D:F5:45:09:BD:75:AF:08:15:1A:04
Certificate issuer: /CN=A912FAB9/serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Certificate serial: 1E8F
Authority key identifier: 34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/AE5C97A8AFB711E79FACFF11C4F9AE02.roa
Signing time: Wed 20 May 2026 16:19:49 +0000
ROA not before: Wed 20 May 2026 16:19:49 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 10226
IP address blocks: 43.252.244.0/22 maxlen: 24
101.78.8.0/21 maxlen: 21
101.78.8.0/21 maxlen: 24
101.78.8.0/24 maxlen: 24
101.78.9.0/24 maxlen: 24
101.78.10.0/24 maxlen: 24
101.78.11.0/24 maxlen: 24
101.78.12.0/24 maxlen: 24
101.78.13.0/24 maxlen: 24
101.78.14.0/24 maxlen: 24
101.78.15.0/24 maxlen: 24
103.13.88.0/22 maxlen: 22
103.13.88.0/22 maxlen: 24
103.13.88.0/24 maxlen: 24
103.13.89.0/24 maxlen: 24
103.13.90.0/24 maxlen: 24
103.13.91.0/24 maxlen: 24
114.129.24.0/21 maxlen: 21
114.129.24.0/21 maxlen: 24
114.129.24.0/24 maxlen: 24
114.129.25.0/24 maxlen: 24
114.129.26.0/24 maxlen: 24
114.129.27.0/24 maxlen: 24
114.129.28.0/22 maxlen: 22
114.129.28.0/24 maxlen: 24
114.129.29.0/24 maxlen: 24
114.129.30.0/24 maxlen: 24
114.129.31.0/24 maxlen: 24
202.62.96.0/20 maxlen: 24
202.62.96.0/24 maxlen: 24
202.62.97.0/24 maxlen: 24
202.62.98.0/24 maxlen: 24
202.62.99.0/24 maxlen: 24
202.62.100.0/24 maxlen: 24
202.62.101.0/24 maxlen: 24
202.62.102.0/24 maxlen: 24
202.62.103.0/24 maxlen: 24
202.62.104.0/24 maxlen: 24
202.62.105.0/24 maxlen: 24
202.62.106.0/24 maxlen: 24
202.62.107.0/24 maxlen: 24
202.62.108.0/24 maxlen: 24
202.62.109.0/24 maxlen: 24
202.62.110.0/24 maxlen: 24
202.62.111.0/24 maxlen: 24
2404:2e00::/32 maxlen: 32
2404:2e00::/48 maxlen: 48
2404:2e00:1::/48 maxlen: 48
2404:2e00:2::/48 maxlen: 48
2404:2e00:3::/48 maxlen: 48
2404:2e00:4::/48 maxlen: 48
2404:2e00:5::/48 maxlen: 48
2404:2e00:6::/48 maxlen: 48
2404:2e00:7::/48 maxlen: 48
2404:2e00:8::/48 maxlen: 48
2404:2e00:9::/48 maxlen: 48
2404:2e00:a::/48 maxlen: 48
2404:2e00:b::/48 maxlen: 48
2404:2e00:c::/48 maxlen: 48
2404:2e00:d::/48 maxlen: 48
2404:2e00:e::/48 maxlen: 48
2404:2e00:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7823 (0x1e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FAB9, serialNumber=349C09E99CA806E335915735CF972A1BF864A6C3
Validity
Not Before: May 20 16:19:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a0ddf25-327a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:d6:47:b4:77:dc:82:62:65:d5:bb:cf:ec:
cb:25:37:43:f5:07:51:ed:08:32:7d:40:43:95:f1:
91:8b:74:55:ff:27:7c:25:5c:57:50:18:62:0c:9d:
45:20:98:6c:17:0b:c0:95:05:b9:d9:31:3a:f5:a1:
83:01:f7:e3:77:93:27:8d:18:67:90:71:24:b4:a3:
5a:a9:e5:ef:8c:40:a1:1b:4a:63:a2:cb:42:26:b1:
04:19:ef:6f:e1:6b:18:2b:4f:09:88:d6:e4:26:db:
c9:10:f3:43:d4:30:a1:1e:db:c0:d9:7e:08:1b:a5:
3c:51:c0:54:b3:1a:5c:2b:f6:58:04:f0:a1:69:04:
26:14:a7:b5:20:61:59:29:48:3a:4b:ff:9c:f2:4d:
ae:ab:94:31:64:bf:dd:1b:3d:eb:ae:08:b9:d3:bf:
b6:37:5f:be:4a:71:e6:2f:6a:d3:93:bd:a1:ee:b8:
da:4e:1e:c2:4f:4a:42:11:51:58:b8:1c:d7:9f:3f:
19:69:80:65:93:92:33:06:e4:75:58:0e:c2:34:62:
b7:de:f1:60:c7:3f:9f:05:51:af:57:80:ce:56:c8:
a5:39:c2:1f:71:84:0f:8a:b9:45:3a:e4:d3:6a:82:
7b:c6:4e:69:b1:56:37:7a:76:69:3e:66:d5:b5:d7:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:42:F5:E1:91:0F:53:5B:E5:5D:F5:45:09:BD:75:AF:08:15:1A:04
X509v3 Authority Key Identifier:
keyid:34:9C:09:E9:9C:A8:06:E3:35:91:57:35:CF:97:2A:1B:F8:64:A6:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJwJ6ZyoBuM1kVc1z5cqG_hkpsM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAB9/938A70E495CD11E6BF4A8232C4F9AE02/AE5C97A8AFB711E79FACFF11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.252.244.0/22
101.78.8.0/21
103.13.88.0/22
114.129.24.0/21
202.62.96.0/20
IPv6:
2404:2e00::/32
Signature Algorithm: sha256WithRSAEncryption
15:d5:fb:89:99:c3:23:0c:e6:c6:a1:ae:c7:2a:17:00:06:52:
4c:7d:6d:32:46:80:5d:8b:44:e1:fc:a1:2e:56:10:8a:6d:fe:
4f:3d:da:42:bf:2b:c7:96:e1:08:c2:4b:b6:2e:c1:77:7c:31:
18:cb:f7:36:cf:af:1e:16:81:7c:f2:20:03:82:ba:c0:39:29:
66:07:a1:6d:af:48:e0:1f:7f:3f:83:4f:f0:7e:3a:a3:1c:49:
d4:4a:4c:a5:fb:a9:42:a9:da:e8:51:48:fe:cd:7b:8b:3e:58:
be:4d:c7:79:8b:bf:38:0f:c8:fa:e1:aa:c3:bc:80:42:67:f7:
0b:77:3f:29:ea:2a:81:b6:cc:b9:b4:10:c5:d9:95:ee:07:e5:
56:e5:f1:dd:b8:50:5a:bc:3a:ba:61:54:11:a7:58:76:45:6e:
d3:b5:21:ab:ce:92:29:99:e8:df:69:01:94:8c:97:db:82:fb:
ec:e0:ac:71:c2:0e:fa:fb:80:e7:c1:05:70:71:4f:e6:fc:a5:
61:dd:77:c3:ca:b7:6e:a6:75:5d:8c:c4:b2:7a:ad:4e:d0:e4:
b5:81:9e:dc:4f:e9:89:85:ea:1d:6d:65:9e:40:1a:e4:d9:3a:
16:76:33:0b:35:32:a8:48:cc:a8:fc:4e:9f:0d:b1:b9:88:ad:
ce:e2:15:92
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgICHo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZBQjkxMTAvBgNVBAUTKDM0OUMwOUU5OUNBODA2RTMzNTkxNTczNUNGOTcyQTFC
Rjg2NEE2QzMwHhcNMjYwNTIwMTYxOTQ5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTBkZGYyNS0zMjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA36HWR7R33IJiZdW7z+zLJTdD9QdR7QgyfUBDlfGRi3RV/yd8JVxXUBhiDJ1F
IJhsFwvAlQW52TE69aGDAffjd5MnjRhnkHEktKNaqeXvjEChG0pjostCJrEEGe9v
4WsYK08JiNbkJtvJEPND1DChHtvA2X4IG6U8UcBUsxpcK/ZYBPChaQQmFKe1IGFZ
KUg6S/+c8k2uq5QxZL/dGz3rrgi507+2N1++SnHmL2rTk72h7rjaTh7CT0pCEVFY
uBzXnz8ZaYBlk5IzBuR1WA7CNGK33vFgxz+fBVGvV4DOVsilOcIfcYQPirlFOuTT
aoJ7xk5psVY3enZpPmbVtdeT3wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFKRC9eGR
D1Nb5V31RQm9da8IFRoEMB8GA1UdIwQYMBaAFDScCemcqAbjNZFXNc+XKhv4ZKbD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkFCOS85MzhBNzBFNDk1
Q0QxMUU2QkY0QTgyMzJDNEY5QUUwMi9OSndKNlp5b0J1TTFrVmMxejVjcUdfaGtw
c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05Kd0o2WnlvQnVNMWtWYzF6NWNxR19oa3BzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZBQjkvOTM4QTcwRTQ5NUNEMTFFNkJGNEE4MjMyQzRGOUFFMDIvQUU1Qzk3QThB
RkI3MTFFNzlGQUNGRjExQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk
BAIAATAeAwQCK/z0AwQDZU4IAwQCZw1YAwQDcoEYAwQEyj5gMA0EAgACMAcDBQAk
BC4AMA0GCSqGSIb3DQEBCwUAA4IBAQAV1fuJmcMjDObGoa7HKhcABlJMfW0yRoBd
i0Th/KEuVhCKbf5PPdpCvyvHluEIwku2LsF3fDEYy/c2z68eFoF88iADgrrAOSlm
B6Ftr0jgH38/g0/wfjqjHEnUSkyl+6lCqdroUUj+zXuLPli+Tcd5i784D8j64arD
vIBCZ/cLdz8p6iqBtsy5tBDF2ZXuB+VW5fHduFBavDq6YVQRp1h2RW7TtSGrzpIp
mejfaQGUjJfbgvvs4Kxxwg76+4DnwQVwcU/m/KVh3XfDyrdupnVdjMSyeq1O0OS1
gZ7cT+mJheodbWWeQBrk2ToWdjMLNTKoSMyo/E6fDbG5iK3O4hWS
-----END CERTIFICATE-----
Generated at Thu May 21 10:36:29 2026 by rpki-client