Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/DF35E7A2702F11F1A0E3504B61A30FBC.roa
File: DF35E7A2702F11F1A0E3504B61A30FBC.roa (raw, json)
Hash identifier: lzMeejAaSqvG7gVVs9hu5Fu5ilxn5ePvQZukDR0MFCk=
Subject key identifier: FB:F8:56:C4:11:17:80:A0:4D:57:65:0B:F3:E6:50:8A:87:40:E1:3F
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 09AB
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/DF35E7A2702F11F1A0E3504B61A30FBC.roa
Signing time: Thu 25 Jun 2026 00:50:34 +0000
ROA not before: Thu 25 Jun 2026 00:50:34 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.120.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.52.128.0/24 maxlen: 24
126.52.129.0/24 maxlen: 24
126.52.130.0/24 maxlen: 24
126.52.131.0/24 maxlen: 24
126.52.132.0/24 maxlen: 24
126.52.133.0/24 maxlen: 24
126.52.134.0/24 maxlen: 24
126.52.135.0/24 maxlen: 24
126.52.136.0/24 maxlen: 24
126.52.137.0/24 maxlen: 24
126.52.138.0/24 maxlen: 24
126.52.139.0/24 maxlen: 24
126.52.140.0/24 maxlen: 24
126.52.141.0/24 maxlen: 24
126.52.142.0/24 maxlen: 24
126.52.143.0/24 maxlen: 24
126.52.144.0/24 maxlen: 24
126.52.145.0/24 maxlen: 24
126.52.146.0/24 maxlen: 24
126.52.147.0/24 maxlen: 24
126.52.148.0/24 maxlen: 24
126.52.149.0/24 maxlen: 24
126.52.150.0/24 maxlen: 24
126.52.151.0/24 maxlen: 24
126.52.152.0/24 maxlen: 24
126.52.153.0/24 maxlen: 24
126.52.154.0/24 maxlen: 24
126.52.155.0/24 maxlen: 24
126.52.156.0/24 maxlen: 24
126.52.157.0/24 maxlen: 24
126.52.158.0/24 maxlen: 24
126.52.159.0/24 maxlen: 24
126.209.0.0/22 maxlen: 24
126.209.4.0/22 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.64.0/24 maxlen: 24
126.209.65.0/24 maxlen: 24
126.209.66.0/24 maxlen: 24
126.209.67.0/24 maxlen: 24
126.209.68.0/24 maxlen: 24
126.209.69.0/24 maxlen: 24
126.209.70.0/24 maxlen: 24
126.209.71.0/24 maxlen: 24
126.209.72.0/24 maxlen: 24
126.209.73.0/24 maxlen: 24
126.209.74.0/24 maxlen: 24
126.209.75.0/24 maxlen: 24
126.209.76.0/24 maxlen: 24
126.209.77.0/24 maxlen: 24
126.209.78.0/24 maxlen: 24
126.209.79.0/24 maxlen: 24
126.209.82.0/24 maxlen: 24
126.209.83.0/24 maxlen: 24
126.209.84.0/24 maxlen: 24
126.209.87.0/24 maxlen: 24
126.209.92.0/24 maxlen: 24
126.209.93.0/24 maxlen: 24
126.209.95.0/24 maxlen: 24
126.209.104.0/24 maxlen: 24
126.209.105.0/24 maxlen: 24
126.209.106.0/24 maxlen: 24
126.209.107.0/24 maxlen: 24
126.209.108.0/24 maxlen: 24
126.209.109.0/24 maxlen: 24
126.209.110.0/24 maxlen: 24
126.209.112.0/24 maxlen: 24
126.209.113.0/24 maxlen: 24
126.209.114.0/24 maxlen: 24
126.209.115.0/24 maxlen: 24
126.209.122.0/24 maxlen: 24
126.209.124.0/24 maxlen: 24
126.209.125.0/24 maxlen: 24
126.209.127.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 21:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2475 (0x9ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Jun 25 00:50:34 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a3c7b59-fc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:0c:ce:c1:c1:5a:be:18:ab:6e:13:63:96:
20:bb:b0:be:c0:ab:9e:32:4d:b2:4b:b4:62:6e:55:
18:dd:fd:50:94:91:15:fb:41:5e:98:85:49:1f:be:
15:72:7b:56:bc:97:f1:3e:f1:cc:56:f6:0d:38:20:
25:db:c9:b5:56:74:88:d3:39:e6:9d:4b:1f:c0:09:
24:e6:0d:b1:2d:75:60:d6:0f:55:31:d4:99:42:2a:
dc:a0:02:af:c8:83:c2:f3:5c:75:79:5e:ca:ef:9d:
ea:56:2f:51:de:ba:3e:b9:b5:a9:44:7d:9c:e9:3f:
c5:ea:ae:eb:9f:dd:65:c7:4b:d8:b0:43:44:cc:b5:
0d:70:f5:0f:0e:6a:4c:9e:50:76:e2:77:f7:dc:5c:
3e:13:d7:50:68:da:eb:71:1e:36:9b:2a:bc:92:21:
34:30:f0:8f:db:5b:b0:b4:8b:bd:c2:a7:9c:20:24:
c4:51:e6:42:33:ab:1b:ad:bb:f0:59:9f:a1:d2:5c:
a3:ab:86:3c:81:d6:43:e4:c7:98:85:4f:15:cc:3c:
d5:1a:a9:bf:84:13:84:be:66:18:8b:8a:2b:71:35:
b1:20:ab:3c:87:f9:cf:62:a2:92:ef:11:23:27:b9:
29:7f:31:17:0d:36:f2:4d:12:67:4e:3e:ac:49:1b:
45:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F8:56:C4:11:17:80:A0:4D:57:65:0B:F3:E6:50:8A:87:40:E1:3F
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/DF35E7A2702F11F1A0E3504B61A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.120.0/22
103.76.160.0/23
103.100.100.0/23
126.52.128.0/19
126.209.0.0-126.209.14.255
126.209.16.0-126.209.32.255
126.209.34.0-126.209.36.255
126.209.39.0/24
126.209.41.0/24
126.209.44.0-126.209.50.255
126.209.52.0-126.209.57.255
126.209.61.0-126.209.62.255
126.209.64.0/20
126.209.82.0-126.209.84.255
126.209.87.0/24
126.209.92.0/23
126.209.95.0/24
126.209.104.0-126.209.110.255
126.209.112.0/22
126.209.122.0/24
126.209.124.0/23
126.209.127.0/24
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
00:aa:ce:c8:0e:b0:f2:06:42:a8:d7:48:14:14:bb:81:6c:9b:
07:6e:7f:77:75:52:59:9d:16:78:e8:37:0f:40:65:27:52:fd:
77:77:83:aa:b3:25:9a:be:f1:46:67:16:60:49:ce:6d:46:69:
21:7b:eb:e4:e5:c0:99:db:f1:80:d0:6c:55:d8:95:f4:14:e4:
fe:a4:38:24:5f:0d:1f:2d:2b:f0:2e:8d:55:8c:52:fd:50:9c:
e5:cf:e5:54:f9:97:99:12:2b:1d:f0:fd:54:ad:7d:88:20:c8:
65:b4:b3:73:87:48:bd:59:b4:06:db:1d:96:3d:e5:67:d8:51:
46:ca:ce:60:16:e4:fd:72:42:4d:65:4a:24:6f:ef:6b:b6:eb:
b1:7e:51:82:0e:01:5c:90:a7:df:e3:f6:84:59:39:2a:17:60:
49:52:75:8c:c1:4e:ad:f1:55:82:94:94:f6:f8:1d:86:bf:c4:
d5:ba:f6:83:91:35:48:e1:94:f5:38:8a:a8:06:c1:49:e6:64:
98:4c:02:af:12:ef:27:22:43:e7:e0:93:9a:0c:b3:9d:1a:e7:
02:52:b4:14:92:91:ce:67:d2:e8:cf:64:e0:8e:b1:c8:fb:92:
e2:aa:d8:c8:a1:e4:df:40:9f:78:f1:4b:0d:c3:fd:09:24:88:
95:f0:f5:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 7 15:44:30 2026 by rpki-client