Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/DDBCC9E08C7711F18CBA23116411F970.roa
File: DDBCC9E08C7711F18CBA23116411F970.roa (raw, json)
Hash identifier: 8QmEQc48Q775Zau2fs73p3Al4eMpMIjCsKKLpJbH6Fo=
Subject key identifier: 86:08:28:0E:0B:00:F2:09:B5:6E:B6:99:1B:FD:D9:46:DB:2A:E6:D5
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 09CD
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/DDBCC9E08C7711F18CBA23116411F970.roa
Signing time: Fri 31 Jul 2026 00:36:27 +0000
ROA not before: Fri 31 Jul 2026 00:36:27 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.120.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.52.128.0/24 maxlen: 24
126.52.129.0/24 maxlen: 24
126.52.132.0/24 maxlen: 24
126.52.133.0/24 maxlen: 24
126.52.134.0/24 maxlen: 24
126.52.135.0/24 maxlen: 24
126.52.136.0/24 maxlen: 24
126.52.137.0/24 maxlen: 24
126.52.138.0/24 maxlen: 24
126.52.139.0/24 maxlen: 24
126.52.140.0/24 maxlen: 24
126.52.141.0/24 maxlen: 24
126.52.142.0/24 maxlen: 24
126.52.143.0/24 maxlen: 24
126.52.144.0/24 maxlen: 24
126.52.145.0/24 maxlen: 24
126.52.146.0/24 maxlen: 24
126.52.147.0/24 maxlen: 24
126.52.148.0/24 maxlen: 24
126.52.149.0/24 maxlen: 24
126.52.150.0/24 maxlen: 24
126.52.151.0/24 maxlen: 24
126.52.152.0/24 maxlen: 24
126.52.153.0/24 maxlen: 24
126.52.154.0/24 maxlen: 24
126.52.155.0/24 maxlen: 24
126.52.156.0/24 maxlen: 24
126.52.157.0/24 maxlen: 24
126.52.158.0/24 maxlen: 24
126.209.0.0/22 maxlen: 24
126.209.4.0/22 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.64.0/24 maxlen: 24
126.209.65.0/24 maxlen: 24
126.209.66.0/24 maxlen: 24
126.209.67.0/24 maxlen: 24
126.209.68.0/24 maxlen: 24
126.209.69.0/24 maxlen: 24
126.209.70.0/24 maxlen: 24
126.209.71.0/24 maxlen: 24
126.209.72.0/24 maxlen: 24
126.209.73.0/24 maxlen: 24
126.209.74.0/24 maxlen: 24
126.209.75.0/24 maxlen: 24
126.209.76.0/24 maxlen: 24
126.209.77.0/24 maxlen: 24
126.209.78.0/24 maxlen: 24
126.209.79.0/24 maxlen: 24
126.209.82.0/24 maxlen: 24
126.209.83.0/24 maxlen: 24
126.209.84.0/24 maxlen: 24
126.209.87.0/24 maxlen: 24
126.209.92.0/24 maxlen: 24
126.209.93.0/24 maxlen: 24
126.209.95.0/24 maxlen: 24
126.209.104.0/24 maxlen: 24
126.209.105.0/24 maxlen: 24
126.209.106.0/24 maxlen: 24
126.209.107.0/24 maxlen: 24
126.209.108.0/24 maxlen: 24
126.209.109.0/24 maxlen: 24
126.209.110.0/24 maxlen: 24
126.209.112.0/24 maxlen: 24
126.209.113.0/24 maxlen: 24
126.209.114.0/24 maxlen: 24
126.209.115.0/24 maxlen: 24
126.209.122.0/24 maxlen: 24
126.209.124.0/24 maxlen: 24
126.209.125.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2509 (0x9cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Jul 31 00:36:27 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a6bee0b-a08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:23:09:a5:4c:47:3b:5d:43:dc:05:fa:bf:
70:b9:6a:d9:c6:35:3a:40:77:4b:7d:91:0f:45:ee:
03:da:f8:84:b2:0c:d5:ee:9d:5f:e7:eb:45:ba:96:
d9:11:e4:5c:55:8e:88:5c:76:91:e1:16:64:3f:1b:
a4:cc:38:06:20:52:dc:0e:1b:e6:a7:d1:ee:97:f5:
81:5c:15:93:0b:01:cd:3b:3e:2b:41:3a:b0:73:c7:
f6:ec:2f:e2:46:42:9f:36:6d:db:7f:92:e2:54:cf:
74:b0:16:ad:a1:00:db:80:28:09:c9:8c:a1:68:6b:
cb:4f:ac:4c:b1:b2:f8:9f:00:33:a1:3c:b5:69:dc:
19:70:1f:49:d3:ec:e5:de:a8:83:2a:94:01:34:33:
2e:77:88:d8:77:9c:e8:9a:fe:fb:ce:67:5a:fc:9a:
fb:cc:fe:8c:e2:10:74:38:08:49:f0:1e:e4:98:ab:
f1:23:52:db:d6:e7:48:7e:f6:26:8f:72:dc:a2:8f:
a2:6c:54:ad:cf:6a:e6:24:5f:30:b2:b2:63:5f:e8:
4c:8f:06:3b:e5:5e:30:b3:04:78:1a:d0:7e:19:ee:
40:9c:b7:86:6a:0e:05:27:f6:10:4d:74:4d:ed:dc:
27:90:09:0c:95:cf:cf:b0:ee:1e:0e:a7:b0:db:d2:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:08:28:0E:0B:00:F2:09:B5:6E:B6:99:1B:FD:D9:46:DB:2A:E6:D5
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/DDBCC9E08C7711F18CBA23116411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.120.0/22
103.76.160.0/23
103.100.100.0/23
126.52.128.0/23
126.52.132.0-126.52.158.255
126.209.0.0-126.209.14.255
126.209.16.0-126.209.32.255
126.209.34.0-126.209.36.255
126.209.39.0/24
126.209.41.0/24
126.209.44.0-126.209.50.255
126.209.52.0-126.209.57.255
126.209.61.0-126.209.62.255
126.209.64.0/20
126.209.82.0-126.209.84.255
126.209.87.0/24
126.209.92.0/23
126.209.95.0/24
126.209.104.0-126.209.110.255
126.209.112.0/22
126.209.122.0/24
126.209.124.0/23
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
88:49:c7:9c:10:76:38:57:c3:80:99:9d:41:5e:46:a4:09:b6:
ec:53:f6:c8:d9:25:3b:e4:e7:2e:23:71:ff:a2:b4:d7:bb:c2:
02:5f:9b:89:b0:c4:46:46:29:b1:e1:12:2f:31:7c:55:bb:85:
d1:34:9a:c4:3e:f6:e4:95:63:d2:30:f8:b6:f6:92:ab:3a:d0:
7d:33:a9:64:84:4c:2f:14:6a:fe:6f:45:2a:cd:c5:4c:21:0b:
68:99:a1:93:9a:fe:36:02:0c:50:14:ea:fa:51:70:51:c4:20:
0e:72:7b:1d:6d:35:63:43:18:3a:4a:5b:9b:cf:08:b7:53:ab:
3b:f5:5f:ec:9c:b4:54:b5:ce:de:4c:5f:74:48:5c:ae:72:69:
0b:44:30:70:b3:86:69:d3:54:15:e1:d4:0b:46:e8:fa:24:16:
f7:88:5b:d9:98:e0:24:c4:b4:e8:40:43:7b:26:4f:13:ba:14:
a9:1d:50:19:56:8f:ba:05:a9:9c:f7:18:f6:d5:c2:2d:bc:28:
d4:9b:f5:76:5c:89:bf:20:ba:7d:c8:b4:5f:6b:73:14:3f:fd:
77:35:0a:46:27:c5:58:82:cf:ad:af:39:04:15:2c:ce:25:b6:
4d:c8:62:f9:a9:7f:5d:bd:27:9b:b3:3a:4a:48:58:44:0b:97:
d0:da:d0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:51:52 2026 by rpki-client