Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/3003BB4EB3A411F0B8845739C4F9AE02.roa
File: 3003BB4EB3A411F0B8845739C4F9AE02.roa (raw, json)
Hash identifier: 6r+trUJG7yo6sp5YaDImbd2bXMorhAYgy4FzzoVnz88=
Subject key identifier: 4A:18:08:B2:25:84:61:5D:0B:EE:5D:E5:32:AB:FB:DC:53:51:04:A6
Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial: 1AFA
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/3003BB4EB3A411F0B8845739C4F9AE02.roa
Signing time: Mon 15 Jun 2026 04:15:07 +0000
ROA not before: Mon 15 Jun 2026 04:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 116.89.224.0/20 maxlen: 24
121.74.0.0/16 maxlen: 16
121.75.0.0/16 maxlen: 16
121.90.0.0/16 maxlen: 16
124.6.192.0/19 maxlen: 19
124.6.198.0/24 maxlen: 24
202.0.32.0/19 maxlen: 19
202.20.93.0/24 maxlen: 24
202.22.30.0/24 maxlen: 24
202.36.72.0/24 maxlen: 24
203.96.144.0/20 maxlen: 20
203.96.152.0/24 maxlen: 24
203.96.192.0/19 maxlen: 19
203.97.128.0/17 maxlen: 17
203.97.183.0/24 maxlen: 24
203.97.184.0/23 maxlen: 23
203.97.224.0/24 maxlen: 24
203.97.225.0/24 maxlen: 24
203.97.226.0/24 maxlen: 24
203.97.227.0/24 maxlen: 24
203.97.232.0/24 maxlen: 24
203.97.246.0/23 maxlen: 23
203.109.128.0/17 maxlen: 17
203.109.143.0/24 maxlen: 24
203.109.179.0/24 maxlen: 24
203.109.183.0/24 maxlen: 24
203.144.32.0/20 maxlen: 24
210.246.0.0/18 maxlen: 18
218.101.0.0/18 maxlen: 18
218.101.64.0/18 maxlen: 18
2001:4400::/30 maxlen: 48
2407:7000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6906 (0x1afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Validity
Not Before: Jun 15 04:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a2f7c4b-ddb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:eb:62:bf:81:e9:47:b5:8b:d1:8c:cc:12:
ef:90:21:0b:62:09:57:3d:8e:61:95:8c:7f:57:4e:
1c:ff:cc:48:aa:5b:17:12:fa:04:b0:85:9f:53:25:
30:70:17:4c:e9:fa:cc:07:e5:92:ec:b6:7b:a7:b4:
38:66:e9:8e:cb:a3:95:40:ff:e4:48:d4:9e:0e:98:
43:77:b4:69:01:39:32:85:45:0a:51:7b:73:73:62:
4f:e7:c5:ef:5f:3c:cf:43:91:ed:d8:49:37:5f:7a:
7a:b6:96:63:5c:11:bf:8e:41:e8:36:f2:61:d7:30:
f9:4a:31:3c:d8:7c:a5:76:f8:49:ea:b7:f8:d0:80:
d6:b2:2e:fb:68:f8:1b:3d:7b:7d:36:48:a6:42:a4:
a7:81:ed:46:e6:40:41:95:22:7e:37:74:ef:a9:4e:
91:26:f0:e8:2d:45:c2:8a:1a:3e:56:2e:05:76:ef:
a9:07:87:60:31:bf:e9:37:95:8a:11:f3:4a:e6:a2:
ba:1b:8f:b3:9a:76:a3:e9:ca:8d:a4:14:6e:2a:f8:
97:79:69:e6:41:21:e0:61:f7:42:78:30:21:1f:50:
5e:0f:41:01:48:5f:d9:e0:61:26:52:84:de:b9:63:
3e:1e:07:05:08:8e:1c:35:ac:7c:05:fb:8c:0f:ac:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:18:08:B2:25:84:61:5D:0B:EE:5D:E5:32:AB:FB:DC:53:51:04:A6
X509v3 Authority Key Identifier:
keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/3003BB4EB3A411F0B8845739C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.89.224.0/20
121.74.0.0/15
121.90.0.0/16
124.6.192.0/19
202.0.32.0/19
202.20.93.0/24
202.22.30.0/24
202.36.72.0/24
203.96.144.0/20
203.96.192.0/19
203.97.128.0/17
203.109.128.0/17
203.144.32.0/20
210.246.0.0/18
218.101.0.0/17
IPv6:
2001:4400::/30
2407:7000::/32
Signature Algorithm: sha256WithRSAEncryption
af:5f:5a:b8:35:94:54:81:3d:86:82:92:c0:34:fd:b5:27:4a:
70:d5:a7:4d:0b:ca:ef:e4:f6:e4:33:79:7e:40:8f:52:62:9a:
d6:4b:9b:4e:2e:46:fd:8f:6b:67:8b:4a:9e:76:63:95:45:06:
cb:b3:46:f1:60:37:46:5c:06:c2:48:61:11:c7:b5:21:c1:57:
92:9d:75:f2:48:0a:2a:c1:db:79:dd:69:44:5e:82:ab:93:b7:
b2:cf:e4:e8:df:ff:2e:8e:9e:11:f2:79:f1:f9:4a:3d:a7:7c:
a9:59:b1:aa:e2:a7:87:ff:f5:dd:28:77:68:50:e6:60:c2:be:
12:28:ce:99:55:3b:56:91:2c:3f:57:64:b2:08:8b:ec:24:c4:
9b:6b:83:15:e3:1c:2d:7e:4e:ca:8e:92:2a:bf:c8:1c:27:41:
9f:32:e7:9b:f9:dc:24:33:61:d7:bb:84:09:06:1e:37:0f:52:
11:96:3d:05:ad:66:85:74:c4:83:d3:03:77:65:c1:5f:97:43:
b3:f9:59:8e:06:d6:dd:26:69:6f:bf:c3:5a:35:4c:9d:2f:3f:
f2:a3:7a:f6:9b:51:56:b8:ff:82:06:bb:1a:2f:6b:4b:e4:4d:
ec:82:a0:7d:01:6c:e7:3f:fc:9d:a3:47:e4:c4:21:11:bf:4c:
df:5f:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 19:09:54 2026 by rpki-client