Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B630F86086F011F19E006003A7EE528E.roa
File: B630F86086F011F19E006003A7EE528E.roa (raw, json)
Hash identifier: V+QYHdjPqWrSLeX7o3U3iOicTofyINRPHX3hsyXzZG4=
Subject key identifier: AD:1A:AA:22:B1:DC:6E:10:1F:D4:09:9A:8E:A9:67:55:AD:4A:7D:58
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 144B
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B630F86086F011F19E006003A7EE528E.roa
Signing time: Thu 06 Aug 2026 17:34:01 +0000
ROA not before: Thu 06 Aug 2026 17:34:01 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 9874
IP address blocks: 27.54.0.0/18 maxlen: 24
61.8.235.0/24 maxlen: 24
61.8.236.0/24 maxlen: 24
101.127.200.0/22 maxlen: 24
101.127.204.0/23 maxlen: 24
113.10.64.0/18 maxlen: 24
122.11.150.0/23 maxlen: 24
122.11.152.0/21 maxlen: 24
122.11.169.0/24 maxlen: 24
122.11.170.0/23 maxlen: 24
122.11.172.0/24 maxlen: 24
122.11.216.0/24 maxlen: 24
122.11.217.0/24 maxlen: 24
122.11.218.0/24 maxlen: 24
122.11.219.0/24 maxlen: 24
124.155.192.0/19 maxlen: 24
171.0.0.0/15 maxlen: 15
171.0.0.0/16 maxlen: 24
171.1.0.0/16 maxlen: 24
171.207.0.0/16 maxlen: 24
183.90.0.0/19 maxlen: 24
183.90.32.0/21 maxlen: 24
183.90.40.0/24 maxlen: 24
203.116.22.0/24 maxlen: 24
203.116.107.0/24 maxlen: 24
203.116.116.0/24 maxlen: 24
203.116.119.0/24 maxlen: 24
203.116.133.0/24 maxlen: 24
203.116.149.0/24 maxlen: 24
203.116.150.0/24 maxlen: 24
203.116.181.0/24 maxlen: 24
203.116.211.0/24 maxlen: 24
203.116.222.0/24 maxlen: 24
203.117.40.0/23 maxlen: 24
203.117.56.0/21 maxlen: 24
203.117.246.0/24 maxlen: 24
203.117.247.0/24 maxlen: 24
203.117.248.0/22 maxlen: 24
203.117.252.0/23 maxlen: 24
2406:3000:8:4030::/60 maxlen: 60
2406:3002:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5195 (0x144b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Aug 6 17:34:01 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74c588-083a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:16:24:79:71:c7:66:c6:28:14:a4:47:e0:
44:a2:92:43:26:99:38:c7:8e:53:41:f6:fa:d8:d3:
cf:7e:97:fd:94:5b:e1:17:92:63:2a:ca:6b:7b:6f:
69:fb:11:86:37:e2:99:73:5f:1f:b7:c6:53:d6:ce:
dc:ee:9a:b6:d7:b2:b5:73:85:69:15:31:9c:57:d0:
63:16:d8:7b:5f:07:ef:86:fd:bf:36:80:4c:b3:98:
3a:d4:f9:b0:09:cb:44:96:d1:3c:27:62:44:b3:7a:
18:50:50:f4:67:75:f7:89:d8:34:36:d0:0a:74:37:
e2:70:b1:35:f6:9e:dd:9e:de:f0:95:c4:52:7e:a5:
7a:f6:fd:28:39:f0:15:b4:63:e4:e6:e6:87:03:e1:
20:32:b1:76:6a:6b:ca:b8:5e:bb:4f:75:ac:c5:ac:
ca:3e:05:fe:1c:db:66:9e:3a:0d:7b:7c:e8:3f:0d:
0f:73:4a:d8:fe:25:a4:c9:db:dc:46:44:ca:42:62:
66:45:d1:26:50:74:11:85:93:e1:da:22:0e:98:8a:
94:b7:50:d8:1f:39:1d:54:6d:19:3b:1c:fb:25:68:
c8:ac:e5:cc:b4:12:95:ab:72:fa:72:8a:f6:5d:eb:
7a:f7:f8:f3:6d:4e:e7:84:8d:f5:1f:c5:c6:8b:b8:
b0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1A:AA:22:B1:DC:6E:10:1F:D4:09:9A:8E:A9:67:55:AD:4A:7D:58
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B630F86086F011F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
27.54.0.0/18
61.8.235.0-61.8.236.255
101.127.200.0-101.127.205.255
113.10.64.0/18
122.11.150.0-122.11.159.255
122.11.169.0-122.11.172.255
122.11.216.0/22
124.155.192.0/19
171.0.0.0/15
171.207.0.0/16
183.90.0.0-183.90.40.255
203.116.22.0/24
203.116.107.0/24
203.116.116.0/24
203.116.119.0/24
203.116.133.0/24
203.116.149.0-203.116.150.255
203.116.181.0/24
203.116.211.0/24
203.116.222.0/24
203.117.40.0/23
203.117.56.0/21
203.117.246.0-203.117.253.255
IPv6:
2406:3000:8:4030::/60
2406:3002:20::/48
Signature Algorithm: sha256WithRSAEncryption
be:8d:f7:b0:f7:83:a8:0e:c9:0a:c5:dc:21:af:15:00:97:74:
71:67:c2:0e:58:bd:95:55:4f:44:f9:79:36:39:c1:e4:77:86:
78:e8:03:18:c1:03:b7:d0:6b:a6:41:0c:20:08:74:d0:18:21:
87:43:20:d5:4a:b8:b7:a9:97:d0:92:6b:d6:1f:5d:22:54:fe:
9e:ac:e3:3d:ab:ed:c3:77:71:15:cf:d6:f8:a2:a2:59:92:f3:
6a:31:07:aa:61:f5:5c:e0:e7:9b:cb:28:1a:b7:fa:34:05:8a:
0d:c2:ca:60:aa:a7:90:5b:2e:66:f1:9f:ec:45:9d:53:35:e5:
b5:29:52:18:74:d6:d5:30:85:6f:31:f7:c7:1f:93:7d:cd:ff:
f7:12:2b:aa:88:34:cd:ef:48:aa:7e:88:10:da:71:18:0b:a8:
83:92:c2:7f:83:4b:2b:3a:31:67:1c:03:09:b3:c6:a9:05:43:
b0:c1:26:1a:be:90:fa:d9:aa:2f:70:61:d9:8f:c1:46:04:45:
9d:fe:a6:05:47:5b:13:87:bc:50:ac:ac:c8:96:70:ea:7b:66:
03:90:39:fd:ff:c4:98:10:8a:6d:15:6e:b0:2e:6c:79:88:a7:
21:50:ca:5d:fa:31:7f:56:01:99:6c:9a:1a:d6:9f:73:76:87:
67:4d:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:49:25 2026 by rpki-client