Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
File: 8C1F014E911411EF84279055C4F9AE02.roa (raw, json)
Hash identifier: 5rD/ZyHPwyrwKgq/EY4U/FQ5iVZEokvnRjlqMpd4Ots=
Subject key identifier: 74:03:22:82:F5:3D:91:46:E6:C9:3A:C8:21:EA:78:12:7C:0F:18:E5
Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial: 0D19
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
Signing time: Sat 26 Sep 2026 17:11:52 +0000
ROA not before: Sat 26 Sep 2026 17:11:52 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 131464
IP address blocks: 103.69.148.0/22 maxlen: 22
103.69.148.0/23 maxlen: 23
103.69.148.0/24 maxlen: 24
103.69.149.0/24 maxlen: 24
103.69.150.0/23 maxlen: 23
103.69.150.0/24 maxlen: 24
103.69.151.0/24 maxlen: 24
180.149.232.0/22 maxlen: 22
180.149.232.0/23 maxlen: 23
180.149.232.0/24 maxlen: 24
180.149.233.0/24 maxlen: 24
180.149.234.0/23 maxlen: 23
180.149.234.0/24 maxlen: 24
180.149.235.0/24 maxlen: 24
2405:f280::/32 maxlen: 32
2405:f280::/33 maxlen: 33
2405:f280::/34 maxlen: 34
2405:f280::/35 maxlen: 35
2405:f280::/36 maxlen: 36
2405:f280:1::/48 maxlen: 48
2405:f280:3::/48 maxlen: 48
2405:f280:11::/48 maxlen: 48
2405:f280:14::/48 maxlen: 48
2405:f280:34::/48 maxlen: 48
2405:f280:5c::/48 maxlen: 48
2405:f280:192::/48 maxlen: 48
2405:f280:1000::/36 maxlen: 36
2405:f280:1000::/48 maxlen: 48
2405:f280:1001::/48 maxlen: 48
2405:f280:1038::/48 maxlen: 48
2405:f280:1039::/48 maxlen: 48
2405:f280:2000::/35 maxlen: 35
2405:f280:2000::/36 maxlen: 36
2405:f280:3000::/36 maxlen: 36
2405:f280:4000::/34 maxlen: 34
2405:f280:4000::/35 maxlen: 35
2405:f280:4000::/36 maxlen: 36
2405:f280:5000::/36 maxlen: 36
2405:f280:6000::/35 maxlen: 35
2405:f280:6000::/36 maxlen: 36
2405:f280:7000::/36 maxlen: 36
2405:f280:8000::/33 maxlen: 33
2405:f280:8000::/34 maxlen: 34
2405:f280:8000::/35 maxlen: 35
2405:f280:8000::/36 maxlen: 36
2405:f280:9000::/36 maxlen: 36
2405:f280:9000::/48 maxlen: 48
2405:f280:9001::/48 maxlen: 48
2405:f280:a000::/35 maxlen: 35
2405:f280:a000::/36 maxlen: 36
2405:f280:b000::/36 maxlen: 36
2405:f280:c000::/34 maxlen: 34
2405:f280:c000::/35 maxlen: 35
2405:f280:c000::/36 maxlen: 36
2405:f280:c000::/48 maxlen: 48
2405:f280:c001::/48 maxlen: 48
2405:f280:c002::/48 maxlen: 48
2405:f280:c100::/48 maxlen: 48
2405:f280:c102::/48 maxlen: 48
2405:f280:d000::/36 maxlen: 36
2405:f280:e000::/35 maxlen: 35
2405:f280:e000::/36 maxlen: 36
2405:f280:e000::/48 maxlen: 48
2405:f280:e004::/48 maxlen: 48
2405:f280:e005::/48 maxlen: 48
2405:f280:e006::/48 maxlen: 48
2405:f280:e007::/48 maxlen: 48
2405:f280:e008::/48 maxlen: 48
2405:f280:e009::/48 maxlen: 48
2405:f280:e00a::/48 maxlen: 48
2405:f280:e00b::/48 maxlen: 48
2405:f280:e00c::/48 maxlen: 48
2405:f280:e00d::/48 maxlen: 48
2405:f280:e034::/48 maxlen: 48
2405:f280:ef00::/48 maxlen: 48
2405:f280:f000::/36 maxlen: 36
2405:f280:ff00::/40 maxlen: 40
2405:f280:ff00::/48 maxlen: 48
2405:f280:ff01::/48 maxlen: 48
2405:f280:ff02::/48 maxlen: 48
2405:f280:ff03::/48 maxlen: 48
2405:f280:ff04::/48 maxlen: 48
2405:f280:ff05::/48 maxlen: 48
2405:f280:ff06::/48 maxlen: 48
2405:f280:ff07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3353 (0xd19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Validity
Not Before: Sep 26 17:11:52 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ab7fcd8-f448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3d:d4:cb:8d:64:56:97:41:60:70:b9:b4:ab:
a0:65:d1:2e:c5:b5:6b:d7:ba:e5:37:bc:0a:ec:c8:
d4:e0:72:23:f8:af:18:7c:0a:d0:bf:6a:79:3c:e7:
df:5b:01:56:19:15:50:3e:20:99:82:16:3d:89:56:
7f:bf:5f:92:14:b5:f0:10:0a:1b:a3:d5:c0:82:df:
d4:dc:d3:31:88:79:c1:4a:cc:07:a1:45:e9:e0:38:
1b:26:2c:33:b8:0a:d4:05:cb:eb:d0:bf:35:65:82:
1b:bb:95:02:15:60:28:1e:96:77:fa:b4:63:dc:c3:
08:56:86:8c:f8:cb:0c:cb:bf:e3:3b:48:c6:35:20:
59:72:86:9d:5c:d8:5e:ee:e5:cf:c8:29:97:39:87:
97:db:18:a4:5d:4f:45:fa:44:dd:f6:a8:5b:3b:a8:
18:44:8a:c9:ad:d7:c0:77:ce:ae:8c:97:88:66:71:
b7:28:5f:70:ef:9d:ad:9f:50:c7:84:f4:6c:14:c6:
fd:ef:d8:91:5c:71:c8:4a:94:b6:84:5a:42:83:e6:
42:b3:34:dd:a6:ea:f6:e4:8e:8b:01:9f:76:96:11:
b0:ad:de:21:12:36:34:57:36:5f:fc:ae:4c:a8:6b:
8c:b0:7b:6a:e5:28:bd:61:92:0c:81:d6:41:cb:60:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:03:22:82:F5:3D:91:46:E6:C9:3A:C8:21:EA:78:12:7C:0F:18:E5
X509v3 Authority Key Identifier:
keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.148.0/22
180.149.232.0/22
IPv6:
2405:f280::/32
Signature Algorithm: sha256WithRSAEncryption
01:b0:fc:71:9c:7d:a6:4d:a3:12:0c:5b:ac:95:cd:4f:1f:90:
f3:92:72:6d:8c:83:27:c8:74:64:a7:8a:ee:9c:3d:37:e7:f3:
a8:d4:09:2e:75:9f:ab:fb:63:2b:7c:c8:69:d5:9a:32:bc:60:
e5:15:25:e1:2a:30:41:26:69:3d:5c:d7:73:3c:c5:2a:c8:19:
a3:bb:da:6f:65:87:44:82:31:fe:43:11:ab:16:9b:5e:13:09:
7a:35:94:df:67:dc:a6:dd:f8:4e:0f:81:19:df:20:11:ea:9e:
f6:4f:b7:e3:0c:1b:68:26:5e:3f:6e:f9:ec:7a:a8:d7:38:02:
a9:5e:c8:a5:d1:fc:48:d1:77:01:3c:62:ac:c9:36:7b:10:f6:
ce:b0:97:2a:11:1c:cf:56:6a:6e:a2:c8:c7:97:31:95:58:9f:
a4:15:43:97:c2:5a:50:3d:b8:b9:e7:f8:4f:17:54:02:4e:7b:
1d:d6:bb:19:cc:2e:da:4a:8c:0d:5c:c1:11:cc:24:9c:a1:57:
f4:e7:b1:1a:65:6d:0c:d0:41:70:58:a9:79:9a:0d:70:f6:b8:
fc:e6:0d:39:1f:b4:c5:4a:66:f1:59:ac:f5:06:79:c7:5e:74:
f2:86:e1:91:06:97:c8:84:75:98:8b:74:6c:54:8a:fa:e0:df:
ff:ae:a3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:05:26 2026 by rpki-client