Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/0E33CCCADB0911F0A26F2FDC81D3641D.roa
File: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (raw, json)
Hash identifier: bNoLQTOO3sC7F7WpneIpcIS+MzYB7O3zl99uVU5o2Zk=
Subject key identifier: AD:AD:CF:2C:25:F2:E1:5C:DF:74:90:BC:29:A6:FF:34:F1:60:A9:33
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 06A6
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/0E33CCCADB0911F0A26F2FDC81D3641D.roa
Signing time: Sun 04 Oct 2026 23:43:46 +0000
ROA not before: Sun 04 Oct 2026 23:43:46 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 211392
IP address blocks: 103.135.208.0/22 maxlen: 22
103.135.208.0/24 maxlen: 24
103.135.209.0/24 maxlen: 24
103.135.210.0/24 maxlen: 24
103.135.211.0/24 maxlen: 24
103.172.110.0/23 maxlen: 23
103.172.110.0/24 maxlen: 24
103.172.111.0/24 maxlen: 24
103.204.13.0/24 maxlen: 24
125.3.192.0/21 maxlen: 24
203.168.128.0/22 maxlen: 22
203.168.128.0/23 maxlen: 23
203.168.128.0/24 maxlen: 24
203.168.129.0/24 maxlen: 24
203.168.130.0/23 maxlen: 23
203.168.130.0/24 maxlen: 24
203.168.131.0/24 maxlen: 24
203.168.192.0/20 maxlen: 23
203.168.192.0/24 maxlen: 24
203.168.193.0/24 maxlen: 24
203.168.194.0/24 maxlen: 24
203.168.195.0/24 maxlen: 24
203.168.196.0/24 maxlen: 24
203.168.197.0/24 maxlen: 24
203.168.198.0/24 maxlen: 24
203.168.199.0/24 maxlen: 24
203.168.200.0/24 maxlen: 24
203.168.201.0/24 maxlen: 24
203.168.202.0/24 maxlen: 24
203.168.203.0/24 maxlen: 24
203.168.204.0/24 maxlen: 24
203.168.205.0/24 maxlen: 24
203.168.206.0/24 maxlen: 24
203.168.207.0/24 maxlen: 24
222.167.32.0/22 maxlen: 24
2001:df7:6e80::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Oct 4 23:43:46 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac2e4b2-716b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:d8:0e:7b:30:68:27:39:bc:4e:1d:dc:6b:
fc:94:78:d3:ca:12:70:66:b5:b3:84:82:9f:40:e3:
d1:f6:9e:9f:9c:5d:5e:45:6c:6d:d0:a9:2f:5f:0f:
d9:ea:ed:e7:4f:c2:cb:93:65:b7:0e:6f:9c:5c:d9:
76:37:06:4a:61:31:a0:7d:36:f4:fd:7e:3b:3c:de:
3a:48:a2:ba:d1:f6:8e:26:fd:7b:ac:77:9a:8a:8c:
0b:05:e4:ed:0e:9a:de:6f:e8:e8:a2:fa:84:d6:6b:
db:ec:64:2a:41:c2:92:65:7b:e7:66:76:db:44:cf:
d5:53:4f:54:8a:9e:4e:a9:36:24:0b:ee:cd:15:75:
8e:98:86:15:3c:88:be:d6:de:05:31:fc:9f:4a:cd:
16:7a:a2:7c:8f:b6:8b:85:7a:dd:c3:f2:4b:24:1d:
b2:b6:98:91:73:2c:b6:13:be:05:20:0d:f1:0e:7d:
83:60:f6:28:55:0a:0c:ee:d9:aa:14:9f:27:03:c9:
ea:0c:21:d3:f5:f1:fb:a8:4b:61:43:2b:a4:d8:3e:
d6:7d:b9:f0:89:b0:1e:bb:45:ab:f0:79:bf:d1:80:
67:93:02:14:e9:7a:0d:22:44:16:40:3e:ee:03:be:
ab:88:6b:1f:af:87:13:1d:76:7e:ca:7f:83:b5:57:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AD:CF:2C:25:F2:E1:5C:DF:74:90:BC:29:A6:FF:34:F1:60:A9:33
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/0E33CCCADB0911F0A26F2FDC81D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.208.0/22
103.172.110.0/23
103.204.13.0/24
125.3.192.0/21
203.168.128.0/22
203.168.192.0/20
222.167.32.0/22
IPv6:
2001:df7:6e80::/47
Signature Algorithm: sha256WithRSAEncryption
0d:2f:ac:54:0a:27:a8:58:2e:c5:b3:11:0d:ea:92:2b:53:9e:
59:af:54:12:6f:0b:47:c2:ba:bd:bd:dd:b8:8e:c8:78:0c:7f:
a6:08:98:a5:40:fc:66:f1:c5:d6:27:6b:71:81:3c:c3:64:d5:
8f:31:8c:1b:85:e2:9b:75:55:cf:f8:9b:02:31:6d:65:90:91:
50:15:75:91:4c:dd:b8:50:03:82:c6:e4:65:0c:1e:7a:32:92:
cf:39:24:d0:2e:fe:5f:5c:d4:f6:a5:d1:10:cf:68:d8:25:cc:
fd:07:0e:48:c9:5f:60:63:e6:ce:f3:3a:5f:b6:9f:34:9c:5a:
31:36:0e:bb:97:6b:5c:08:cc:07:2e:a1:9f:22:06:bc:1b:89:
2e:a3:ae:f8:b2:86:41:bf:26:2b:42:78:a1:3b:aa:45:ee:f8:
fa:2f:2b:84:60:bb:09:37:c4:a1:21:ff:86:d7:d3:2d:dd:59:
58:e6:0a:e6:17:74:03:d8:ce:ae:4f:05:51:1e:3e:a9:e5:44:
9e:ef:65:b0:a3:75:d4:22:f5:ef:74:26:80:f1:56:7c:9a:c1:
66:ac:2f:8f:ff:dc:64:4b:cc:73:0b:d2:4e:fe:ce:75:66:b3:
9b:d5:eb:8e:70:cf:5d:7e:83:5a:ae:62:9b:bf:22:92:19:4e:
4a:f1:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:40:32 2026 by rpki-client