Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/8BD2406E632411F1916C95348547A888.roa
File: 8BD2406E632411F1916C95348547A888.roa (raw, json)
Hash identifier: P+JRn2njC74TEFoIIx8wRaaAH82NOXF3TDsCqq1fF7M=
Subject key identifier: F8:F5:CD:69:27:DF:26:35:60:41:99:68:6D:00:D0:58:93:71:50:C5
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 09CF
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/8BD2406E632411F1916C95348547A888.roa
Signing time: Fri 31 Jul 2026 00:37:15 +0000
ROA not before: Fri 31 Jul 2026 00:37:15 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 152584
IP address blocks: 126.52.130.0/24 maxlen: 24
126.52.131.0/24 maxlen: 24
126.209.15.0/24 maxlen: 24
126.209.33.0/24 maxlen: 24
126.209.37.0/24 maxlen: 24
126.209.38.0/24 maxlen: 24
126.209.40.0/24 maxlen: 24
126.209.51.0/24 maxlen: 24
126.209.60.0/24 maxlen: 24
126.209.63.0/24 maxlen: 24
126.209.80.0/24 maxlen: 24
126.209.81.0/24 maxlen: 24
126.209.85.0/24 maxlen: 24
126.209.86.0/24 maxlen: 24
126.209.96.0/21 maxlen: 24
126.209.111.0/24 maxlen: 24
126.209.116.0/22 maxlen: 24
126.209.120.0/24 maxlen: 24
126.209.121.0/24 maxlen: 24
126.209.123.0/24 maxlen: 24
126.209.126.0/24 maxlen: 24
126.209.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2511 (0x9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Jul 31 00:37:15 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a6bee3b-673c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:c1:17:d2:7c:0b:17:a4:62:0e:71:51:0f:
4f:15:33:52:b6:2d:5e:88:60:b9:d1:aa:67:e9:01:
7b:dc:43:29:69:20:df:7c:40:0b:af:8c:55:f9:e2:
89:b3:7d:ba:82:a3:a5:7c:2c:c0:47:3b:31:4f:02:
91:f3:45:c8:df:1d:03:12:31:85:23:5b:5d:98:1a:
0a:ab:f6:64:fb:17:2e:56:ef:9a:bd:40:40:aa:7f:
89:b8:9b:e4:c2:ee:5e:67:45:3b:95:0c:de:95:83:
6b:f8:f8:00:71:a6:e1:c2:c1:db:2f:51:d3:af:ae:
25:b7:46:32:7d:f2:4c:93:2a:dc:34:2f:e2:8c:c2:
e9:30:05:3b:31:6a:c7:f8:39:26:f1:fc:75:6a:36:
03:11:71:f6:62:6f:2a:da:34:4d:8f:0c:bd:b0:4c:
4b:08:20:c5:ff:9b:c7:56:ce:91:a0:50:91:74:68:
af:32:74:c4:16:a3:6d:ae:a9:09:81:56:64:31:1f:
f7:d6:2d:4c:51:ef:a4:d5:5f:4c:45:9c:50:5c:4a:
df:2b:da:46:4e:31:db:4a:91:7f:34:8c:5c:46:bd:
51:b5:55:1b:26:4c:48:68:8b:8b:2f:b4:75:c7:4c:
23:7b:b2:c4:fb:37:92:5c:47:a2:8c:ca:69:59:b8:
41:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F5:CD:69:27:DF:26:35:60:41:99:68:6D:00:D0:58:93:71:50:C5
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/8BD2406E632411F1916C95348547A888.roa
sbgp-ipAddrBlock: critical
IPv4:
126.52.130.0/23
126.209.15.0/24
126.209.33.0/24
126.209.37.0-126.209.38.255
126.209.40.0/24
126.209.51.0/24
126.209.60.0/24
126.209.63.0/24
126.209.80.0/23
126.209.85.0-126.209.86.255
126.209.96.0/21
126.209.111.0/24
126.209.116.0-126.209.121.255
126.209.123.0/24
126.209.126.0/23
Signature Algorithm: sha256WithRSAEncryption
77:88:2c:59:c1:df:9c:47:a7:42:1a:80:74:33:f9:f1:48:bb:
bc:42:4a:60:9b:3e:c8:aa:0c:26:f3:f2:78:a7:af:7c:a9:53:
79:2b:fb:93:f3:83:16:5a:28:d1:c1:7c:67:87:10:77:de:41:
67:fe:43:3f:7a:2d:35:d7:6a:2d:41:59:b4:aa:ee:3b:1c:64:
32:12:3f:f5:14:0c:a3:9d:fa:e5:b8:d4:ef:da:2d:31:83:32:
0f:20:13:a2:0c:39:d4:b3:46:dd:4c:25:76:0c:38:02:8a:61:
61:8f:c5:61:75:c5:37:bc:b3:d3:1e:c0:65:65:49:73:d3:27:
a3:a9:d0:a5:3b:89:43:a9:a0:f9:b1:2b:d6:f2:c7:d4:b9:94:
48:0d:16:dc:8a:4e:b1:cf:af:16:74:37:0b:3d:07:7d:02:bf:
bb:67:1a:51:8a:d7:0c:de:2b:69:30:15:13:29:d2:38:09:f3:
44:0f:e1:0a:a9:7e:ca:b4:6d:cd:f8:c4:31:02:cb:73:7d:4d:
79:87:26:7c:d4:2e:76:a2:1d:3d:3d:38:84:a4:26:cd:ff:a3:
53:c3:0c:5d:3c:c7:06:25:3a:7a:48:7a:d3:f3:e2:61:f1:d7:
83:21:d9:d5:2e:db:5b:e6:24:91:88:e4:0e:0f:20:d3:68:d9:
0c:c9:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 05:55:06 2026 by rpki-client