Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/69CEA0B8382811EE8415371AC4F9AE02.roa
File: 69CEA0B8382811EE8415371AC4F9AE02.roa (raw, json)
Hash identifier: eSF23eSXWGxbGGCU0lk58UKa5dA0MZd67ZoNZ9XEdN4=
Subject key identifier: 3B:0F:5D:88:99:FF:37:75:94:4D:E1:FD:C5:88:5D:74:24:EB:73:87
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C13
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/69CEA0B8382811EE8415371AC4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:12:31 +0000
ROA not before: Mon 06 Jul 2026 15:12:31 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38082
IP address blocks: 27.123.16.0/22 maxlen: 22
27.123.16.0/24 maxlen: 24
27.123.17.0/24 maxlen: 24
27.123.18.0/24 maxlen: 24
27.123.19.0/24 maxlen: 24
58.97.24.0/24 maxlen: 24
61.91.221.0/24 maxlen: 24
113.21.240.0/22 maxlen: 22
113.21.240.0/24 maxlen: 24
113.21.241.0/24 maxlen: 24
113.21.242.0/24 maxlen: 24
113.21.243.0/24 maxlen: 24
113.21.244.0/22 maxlen: 22
113.21.244.0/24 maxlen: 24
113.21.245.0/24 maxlen: 24
113.21.247.0/24 maxlen: 24
122.144.24.0/22 maxlen: 24
122.144.28.0/23 maxlen: 23
171.102.10.0/24 maxlen: 24
171.102.221.0/24 maxlen: 24
171.102.236.0/24 maxlen: 24
171.102.237.0/24 maxlen: 24
171.102.238.0/24 maxlen: 24
171.102.239.0/24 maxlen: 24
2405:4000::/32 maxlen: 32
2405:4000:800::/48 maxlen: 48
2405:4000:800:1::/64 maxlen: 64
2405:4000:800:6::/64 maxlen: 64
2405:4000:800:7::/64 maxlen: 64
2405:4000:800:8::/64 maxlen: 64
2405:4000:800:8::200/120 maxlen: 120
2405:4000:800:9::/64 maxlen: 64
2405:4000:800:a::/64 maxlen: 64
2405:4000:800:b::/64 maxlen: 64
2405:4000:800:d::/64 maxlen: 64
2405:4000:800:e::/64 maxlen: 64
2405:4000:800:f::/64 maxlen: 64
2405:4000:801::/48 maxlen: 48
2405:4000:801::/64 maxlen: 64
2405:4000:801:1::/64 maxlen: 64
2405:4000:801:2::/64 maxlen: 64
2405:4000:801:3::/64 maxlen: 64
2405:4000:801:4::/64 maxlen: 64
2405:4000:801:5::/64 maxlen: 64
2405:4000:900::/40 maxlen: 40
2405:4000:a00::/40 maxlen: 40
2405:4000:aaa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15379 (0x3c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:12:31 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5df-4350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:c7:09:d7:62:12:8c:e2:f9:e1:ff:fa:ad:
09:51:9e:78:55:52:bb:81:31:c7:30:da:27:40:3e:
f7:51:28:cc:57:2d:44:0f:01:8b:54:84:c3:89:59:
97:7e:c0:c7:d5:0e:a2:c4:50:77:5f:54:f4:43:d6:
95:42:2c:27:c5:f6:f4:c0:38:46:df:3b:4a:92:27:
80:0d:87:0c:7a:d6:2e:1f:85:21:25:0c:b3:6a:49:
2b:61:09:22:93:56:1a:0c:fa:03:56:f6:b0:84:84:
7a:be:52:b5:6e:92:a2:4c:1b:56:01:b7:ab:c9:72:
39:91:02:48:80:f9:04:e3:92:69:db:b8:2c:a9:3d:
73:d9:da:51:6f:ca:c7:21:33:ea:87:e5:21:20:da:
31:2a:06:21:0f:bc:d4:88:e9:5f:c4:58:4b:c3:2e:
4d:c4:a7:8f:ff:08:ab:d5:4b:78:a2:2f:ee:53:12:
73:da:84:3e:9e:44:c7:17:de:e4:04:2f:99:c2:cf:
c8:ca:de:de:7d:95:59:c0:32:2d:1c:8e:34:c4:de:
28:bc:81:83:fd:5c:63:03:14:d6:01:5a:24:a8:1e:
96:2c:5e:6d:60:a7:d7:1a:fc:15:50:2e:96:f2:e6:
4d:c8:f2:8d:e9:99:25:8b:24:58:8c:96:6d:73:87:
9f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:5D:88:99:FF:37:75:94:4D:E1:FD:C5:88:5D:74:24:EB:73:87
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/69CEA0B8382811EE8415371AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.123.16.0/22
58.97.24.0/24
61.91.221.0/24
113.21.240.0/21
122.144.24.0-122.144.29.255
171.102.10.0/24
171.102.221.0/24
171.102.236.0/22
IPv6:
2405:4000::/32
Signature Algorithm: sha256WithRSAEncryption
61:b0:62:1a:bb:bd:42:f0:7d:26:c7:fd:ff:81:08:6a:9b:29:
5e:08:53:ba:5f:fe:3d:fc:a6:3b:40:ba:ca:cc:ce:0b:93:7a:
cd:d2:46:42:4f:d4:97:f6:c8:9c:2b:6b:1b:ab:54:b2:4d:c2:
f6:56:d5:3c:a8:86:cd:44:37:d8:25:89:bb:a1:a0:9f:a5:d4:
02:9e:74:bf:28:1b:92:a9:10:ef:2f:4e:2e:c1:1c:a0:46:59:
96:a4:85:a8:d9:a9:06:43:27:ac:60:18:69:3a:38:84:db:9b:
6e:bc:dd:83:7b:2d:5d:73:71:35:f1:5e:64:e7:fd:09:fb:f1:
f7:00:69:97:17:90:3a:80:36:38:5e:f2:9b:24:4c:ae:b0:4b:
96:8e:87:07:a4:b1:35:6d:a9:55:0c:90:18:5a:57:a9:6e:83:
48:02:89:e7:c9:25:a0:8c:b6:b0:72:6f:e4:54:d3:90:c1:05:
c4:1c:e5:bf:33:28:5a:a1:ba:da:3e:46:e9:bf:59:a8:a6:ac:
42:a2:fb:98:ec:80:c6:5b:50:93:b8:72:5f:05:15:4c:57:37:
14:51:a8:b1:f0:77:6a:91:9b:bb:aa:09:d9:34:bc:8c:00:f8:
8a:6a:c1:cf:eb:0c:9c:42:77:64:ef:39:c0:83:93:72:f8:37:
ea:73:3e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:48:57 2026 by rpki-client