Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/3003BB4EB3A411F0B8845739C4F9AE02.roa
File: 3003BB4EB3A411F0B8845739C4F9AE02.roa (raw, json)
Hash identifier: r94n/IiHAPutl0l3j/KlAHM/eVbebGPKooP9sB2e3Zw=
Subject key identifier: 02:46:B8:BB:CE:DC:55:33:F0:33:90:C4:37:50:FE:4B:29:F3:98:01
Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial: 1B3D
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/3003BB4EB3A411F0B8845739C4F9AE02.roa
Signing time: Fri 21 Aug 2026 03:25:22 +0000
ROA not before: Fri 21 Aug 2026 03:25:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 58.28.0.0/16 maxlen: 24
116.89.224.0/20 maxlen: 24
118.90.0.0/16 maxlen: 24
121.74.0.0/16 maxlen: 16
121.75.0.0/16 maxlen: 16
121.90.0.0/16 maxlen: 16
124.6.192.0/19 maxlen: 19
124.6.198.0/24 maxlen: 24
182.154.0.0/16 maxlen: 24
202.0.32.0/19 maxlen: 19
202.20.76.0/24 maxlen: 24
202.20.93.0/24 maxlen: 24
202.22.30.0/24 maxlen: 24
202.36.72.0/24 maxlen: 24
202.37.56.0/24 maxlen: 24
202.37.136.0/24 maxlen: 24
203.96.144.0/20 maxlen: 20
203.96.152.0/24 maxlen: 24
203.96.192.0/19 maxlen: 19
203.97.128.0/17 maxlen: 17
203.97.183.0/24 maxlen: 24
203.97.184.0/23 maxlen: 23
203.97.224.0/24 maxlen: 24
203.97.225.0/24 maxlen: 24
203.97.226.0/24 maxlen: 24
203.97.227.0/24 maxlen: 24
203.97.232.0/24 maxlen: 24
203.97.246.0/23 maxlen: 23
203.109.128.0/17 maxlen: 17
203.109.143.0/24 maxlen: 24
203.109.179.0/24 maxlen: 24
203.109.183.0/24 maxlen: 24
203.144.32.0/20 maxlen: 24
210.246.0.0/18 maxlen: 18
218.101.0.0/18 maxlen: 18
218.101.64.0/18 maxlen: 18
2001:e20::/32 maxlen: 48
2001:4400::/30 maxlen: 48
2406:9a00::/32 maxlen: 48
2407:7000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6973 (0x1b3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Validity
Not Before: Aug 21 03:25:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a87c522-9455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:19:89:ca:53:e5:7f:c4:41:aa:b3:c7:36:
29:9a:42:02:1d:cb:7b:bc:2a:c6:bb:4c:8b:cd:90:
b2:96:41:8e:f7:4b:dd:a4:10:62:fa:0b:a6:e5:a2:
7a:58:2f:7c:cc:70:64:f6:5a:28:f1:75:fe:c8:8e:
61:74:a9:95:27:ae:f0:f8:a0:87:d1:d6:b8:1d:5a:
f6:f9:95:f9:4d:78:8b:21:a4:df:de:15:24:5d:79:
5d:56:85:6a:37:8b:2a:26:0b:f8:03:74:af:36:da:
ea:14:cd:16:d3:f8:95:39:33:4f:b2:4a:9e:80:9c:
a9:ec:c6:97:5a:30:01:6c:50:ac:b0:74:51:98:e6:
6b:4c:42:0f:a1:b7:70:48:a6:69:5c:03:83:57:a1:
97:ed:d9:e4:68:14:49:03:39:74:79:88:06:06:40:
ca:af:45:1b:51:82:98:46:2f:f3:9a:22:1a:90:0c:
d1:d8:83:e8:f0:0b:1b:eb:1b:a7:9a:82:46:6e:19:
0b:56:e4:bc:bf:f3:e2:3c:07:a7:c1:03:29:98:82:
42:d3:eb:a1:87:24:62:97:41:08:12:26:a7:4f:57:
b7:f0:dd:de:e7:80:0f:e7:88:74:d3:ea:d6:d5:35:
cd:13:99:89:9b:64:2d:70:14:87:8e:7d:d6:08:46:
b8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:B8:BB:CE:DC:55:33:F0:33:90:C4:37:50:FE:4B:29:F3:98:01
X509v3 Authority Key Identifier:
keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/3003BB4EB3A411F0B8845739C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.28.0.0/16
116.89.224.0/20
118.90.0.0/16
121.74.0.0/15
121.90.0.0/16
124.6.192.0/19
182.154.0.0/16
202.0.32.0/19
202.20.76.0/24
202.20.93.0/24
202.22.30.0/24
202.36.72.0/24
202.37.56.0/24
202.37.136.0/24
203.96.144.0/20
203.96.192.0/19
203.97.128.0/17
203.109.128.0/17
203.144.32.0/20
210.246.0.0/18
218.101.0.0/17
IPv6:
2001:e20::/32
2001:4400::/30
2406:9a00::/32
2407:7000::/32
Signature Algorithm: sha256WithRSAEncryption
2c:b9:15:4e:6a:42:b9:4e:6a:2f:1c:1a:18:41:f2:bc:b0:c5:
12:b0:63:c1:bf:8d:37:de:02:a7:e5:dc:90:c6:aa:3b:b3:39:
a6:c9:f8:35:32:e6:31:05:0f:fd:3c:e1:23:43:f4:8b:58:93:
27:e3:8f:d9:28:66:07:9f:94:27:c9:0a:f1:b2:16:d2:da:20:
c3:fb:a0:e6:4f:9f:2c:7a:7f:c8:54:e6:62:bd:56:cd:1a:af:
4e:18:58:ac:fc:41:5c:db:e6:2c:a0:f9:46:43:0e:01:6b:99:
57:13:35:b4:6c:96:e0:df:54:49:06:51:18:fd:4f:81:32:d6:
5b:f6:a6:3a:b1:de:0a:df:a2:ff:cb:6a:35:2c:55:c1:c0:61:
45:4f:2b:02:11:2a:0d:57:4b:d3:3a:81:bf:b1:51:9d:58:cb:
f6:bc:58:06:b8:47:e1:26:6c:3f:b5:c8:3e:62:fb:04:3b:bc:
51:43:0f:93:df:32:98:18:44:42:7b:04:be:e5:bf:1f:29:96:
fb:10:66:e3:51:e5:0f:a2:2c:b1:e7:cd:ce:d1:58:2c:75:39:
0c:55:c2:5f:6d:50:f9:11:60:25:fb:f5:56:3a:6c:ab:24:62:
58:59:15:65:af:7b:0c:e2:34:92:d8:05:31:f6:9b:60:b2:b8:
30:26:8a:7a
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgICGz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2
RjhFRDkwMDUwHhcNMjYwODIxMDMyNTIyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3YzUyMi05NDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo9AZicpT5X/EQaqzxzYpmkICHct7vCrGu0yLzZCylkGO90vdpBBi+gum5aJ6
WC98zHBk9loo8XX+yI5hdKmVJ67w+KCH0da4HVr2+ZX5TXiLIaTf3hUkXXldVoVq
N4sqJgv4A3SvNtrqFM0W0/iVOTNPskqegJyp7MaXWjABbFCssHRRmOZrTEIPobdw
SKZpXAODV6GX7dnkaBRJAzl0eYgGBkDKr0UbUYKYRi/zmiIakAzR2IPo8Asb6xun
moJGbhkLVuS8v/PiPAenwQMpmIJC0+uhhyRil0EIEianT1e38N3e54AP54h00+rW
1TXNE5mJm2QtcBSHjn3WCEa4MQIDAQABo4IC+jCCAvYwHQYDVR0OBBYEFAJGuLvO
3FUz8DOQxDdQ/ksp85gBMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC
ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvMzAwM0JCNEVC
M0E0MTFGMEI4ODQ1NzM5QzRGOUFFMDIucm9hMIG4BggrBgEFBQcBBwEB/wSBqDCB
pTB/BAIAATB5AwMAOhwDBAR0WeADAwB2WgMDAXlKAwMAeVoDBAV8BsADAwC2mgME
BcoAIAMEAMoUTAMEAMoUXQMEAMoWHgMEAMokSAMEAMolOAMEAMoliAMEBMtgkAME
BctgwAMEB8thgAMEB8ttgAMEBMuQIAMEBtL2AAMEB9plADAiBAIAAjAcAwUAIAEO
IAMFAiABRAADBQAkBpoAAwUAJAdwADANBgkqhkiG9w0BAQsFAAOCAQEALLkVTmpC
uU5qLxwaGEHyvLDFErBjwb+NN94Cp+XckMaqO7M5psn4NTLmMQUP/TzhI0P0i1iT
J+OP2ShmB5+UJ8kK8bIW0togw/ug5k+fLHp/yFTmYr1WzRqvThhYrPxBXNvmLKD5
RkMOAWuZVxM1tGyW4N9USQZRGP1PgTLWW/amOrHeCt+i/8tqNSxVwcBhRU8rAhEq
DVdL0zqBv7FRnVjL9rxYBrhH4SZsP7XIPmL7BDu8UUMPk98ymBhEQnsEvuW/HymW
+xBm41HlD6IssefNztFYLHU5DFXCX21Q+RFgJfv1VjpsqyRiWFkVZa97DOI0ktgF
MfabYLK4MCaKeg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:12:44 2026 by rpki-client