Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/1984AA58ADD211F186DFD4363C11F970.roa
File: 1984AA58ADD211F186DFD4363C11F970.roa (raw, json)
Hash identifier: Mhf7Y6KDoQxjP27VVsBzv65Od2/Oyn52mOTGsaQpsJA=
Subject key identifier: DF:D7:34:DC:82:41:1A:C6:06:26:83:64:3A:F4:83:B0:AF:3F:D3:CC
Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial: 273E
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/1984AA58ADD211F186DFD4363C11F970.roa
Signing time: Fri 11 Sep 2026 11:15:31 +0000
ROA not before: Fri 11 Sep 2026 11:15:31 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 7590
IP address blocks: 203.124.32.0/24 maxlen: 24
203.124.33.0/24 maxlen: 24
203.124.35.0/24 maxlen: 24
203.124.36.0/24 maxlen: 24
203.124.37.0/24 maxlen: 24
203.124.39.0/24 maxlen: 24
203.124.40.0/24 maxlen: 24
203.124.41.0/24 maxlen: 24
203.124.42.0/24 maxlen: 24
203.124.43.0/24 maxlen: 24
203.124.44.0/24 maxlen: 24
203.124.45.0/24 maxlen: 24
203.124.46.0/24 maxlen: 24
203.124.47.0/24 maxlen: 24
203.124.48.0/24 maxlen: 24
203.124.50.0/24 maxlen: 24
203.124.51.0/24 maxlen: 24
203.124.52.0/24 maxlen: 24
203.124.53.0/24 maxlen: 24
203.124.54.0/24 maxlen: 24
203.124.56.0/24 maxlen: 24
203.124.57.0/24 maxlen: 24
203.124.59.0/24 maxlen: 24
203.124.63.0/24 maxlen: 24
210.56.0.0/24 maxlen: 24
210.56.1.0/24 maxlen: 24
210.56.2.0/24 maxlen: 24
210.56.6.0/24 maxlen: 24
210.56.7.0/24 maxlen: 24
210.56.8.0/24 maxlen: 24
210.56.9.0/24 maxlen: 24
210.56.10.0/24 maxlen: 24
210.56.11.0/24 maxlen: 24
210.56.12.0/24 maxlen: 24
210.56.13.0/24 maxlen: 24
210.56.14.0/24 maxlen: 24
210.56.15.0/24 maxlen: 24
210.56.16.0/24 maxlen: 24
210.56.17.0/24 maxlen: 24
210.56.20.0/24 maxlen: 24
210.56.21.0/24 maxlen: 24
210.56.23.0/24 maxlen: 24
210.56.24.0/24 maxlen: 24
210.56.25.0/24 maxlen: 24
210.56.27.0/24 maxlen: 24
210.56.28.0/24 maxlen: 24
210.56.29.0/24 maxlen: 24
210.56.30.0/24 maxlen: 24
210.56.31.0/24 maxlen: 24
2402:1680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 11:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10046 (0x273e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Validity
Not Before: Sep 11 11:15:31 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aa3e2d3-acee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:1d:bf:51:2c:30:86:79:ce:85:60:fb:49:
3a:7c:49:bc:ba:8a:2b:8c:0b:ce:c0:1d:fc:ca:f1:
c9:a6:9d:71:df:ce:6a:d7:9f:59:c4:f9:c8:15:cc:
21:d6:8e:df:cf:9d:63:f9:58:ac:5b:3e:44:c8:00:
31:d4:a3:19:b0:c0:f4:f3:8d:76:61:f5:49:f6:4c:
a7:f2:c0:40:4a:99:8f:32:95:05:52:f6:0e:d5:be:
90:aa:90:aa:a4:bd:e4:f6:e1:94:17:cf:35:64:db:
4e:81:9b:67:bf:2e:13:6f:2b:e7:cf:4d:08:56:31:
ee:de:a5:4f:15:6c:6d:fb:55:46:ea:1d:92:30:49:
9b:ff:48:d5:c5:15:96:05:69:55:96:4e:37:fa:8c:
ec:fa:b1:24:17:88:d4:30:91:34:65:aa:fc:84:d7:
6a:7f:d6:a3:78:be:ce:ba:0d:85:93:63:17:1c:4d:
bd:51:10:50:f4:8d:f0:20:d9:2f:5a:11:11:b4:70:
e3:71:b1:59:07:ed:b9:67:c4:62:52:a9:ea:f4:d2:
8e:7a:d0:dd:6e:3b:14:c9:b4:b5:fb:54:6a:32:66:
b6:fc:01:9e:53:42:90:bc:0d:d9:dd:0f:bf:72:a0:
50:1b:9e:b3:34:b9:1d:4b:86:68:25:a2:02:d6:3e:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D7:34:DC:82:41:1A:C6:06:26:83:64:3A:F4:83:B0:AF:3F:D3:CC
X509v3 Authority Key Identifier:
keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/1984AA58ADD211F186DFD4363C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.124.32.0/23
203.124.35.0-203.124.37.255
203.124.39.0-203.124.48.255
203.124.50.0-203.124.54.255
203.124.56.0/23
203.124.59.0/24
203.124.63.0/24
210.56.0.0-210.56.2.255
210.56.6.0-210.56.17.255
210.56.20.0/23
210.56.23.0-210.56.25.255
210.56.27.0-210.56.31.255
IPv6:
2402:1680:1::/48
Signature Algorithm: sha256WithRSAEncryption
87:65:86:bc:31:c7:5a:4e:b0:87:36:9a:f4:5f:64:9c:11:44:
ab:c2:40:fa:13:45:9b:bc:49:58:7b:ed:f1:d7:c0:19:39:db:
ec:8c:66:b4:f8:c2:87:a6:63:9a:5b:79:8a:70:43:04:bc:65:
9f:ae:13:2b:09:52:f8:05:9b:b6:ad:a0:2e:71:ca:5a:f4:47:
00:54:92:a4:05:08:13:5b:8d:dc:47:1c:5d:e3:cb:1b:dd:f5:
96:d6:af:11:6d:84:29:f4:fc:36:66:5f:2d:e7:30:a3:9d:45:
11:e7:1d:29:a3:4d:20:bc:2d:8e:8c:66:ce:33:ac:bf:40:d6:
45:74:1c:10:f5:62:36:d1:e8:df:d4:79:d9:00:5d:f4:ea:3d:
35:51:14:a4:d1:4c:ad:9c:6a:0c:a6:f4:72:9f:86:d4:a6:ee:
66:9e:cb:4b:4a:e0:b1:9e:40:a4:2c:8e:3a:73:4b:fe:51:12:
c2:34:f7:3e:ca:2a:f4:94:40:dd:49:2b:a3:55:38:0d:66:4d:
bb:81:ad:86:f7:03:e4:ff:79:85:90:26:87:1a:1f:bd:da:af:
cc:3c:5d:8a:1b:3b:d0:e2:d8:15:5d:98:f3:34:e2:66:35:1f:
e4:fb:f0:78:95:62:63:7a:d9:ea:7f:3a:0d:46:08:57:9f:fa:
0b:5c:0c:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 12 13:45:40 2026 by rpki-client