Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/AA7E3F9017A211F1926DA6A3313D8C67.roa
File: AA7E3F9017A211F1926DA6A3313D8C67.roa (raw, json)
Hash identifier: TzU5EM2LlZwWBD/WfDqDNwPUftoaUk3C9aOQrjn5Irk=
Subject key identifier: F2:7E:85:C8:68:09:99:0E:4A:94:C1:7A:05:6A:DB:52:09:11:CA:ED
Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial: 36A5
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/AA7E3F9017A211F1926DA6A3313D8C67.roa
Signing time: Mon 12 Oct 2026 10:12:40 +0000
ROA not before: Mon 12 Oct 2026 10:12:40 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 55423
IP address blocks: 58.82.128.0/18 maxlen: 18
58.82.128.0/21 maxlen: 24
58.82.136.0/21 maxlen: 24
58.82.144.0/21 maxlen: 24
58.82.152.0/21 maxlen: 24
58.82.160.0/20 maxlen: 20
58.82.160.0/21 maxlen: 24
58.82.168.0/21 maxlen: 24
58.82.176.0/20 maxlen: 20
58.82.176.0/21 maxlen: 23
58.82.176.0/23 maxlen: 24
58.82.179.0/24 maxlen: 24
58.82.180.0/22 maxlen: 24
58.82.184.0/21 maxlen: 21
58.82.184.0/24 maxlen: 24
103.247.60.0/22 maxlen: 24
182.50.80.0/22 maxlen: 22
182.50.80.0/24 maxlen: 24
182.50.83.0/24 maxlen: 24
182.50.86.0/24 maxlen: 24
182.50.88.0/22 maxlen: 22
182.50.88.0/24 maxlen: 24
203.130.129.80/28 maxlen: 28
203.130.131.240/28 maxlen: 28
203.130.140.0/24 maxlen: 24
203.130.152.0/24 maxlen: 24
203.147.6.0/24 maxlen: 24
203.147.26.0/24 maxlen: 24
203.147.30.0/23 maxlen: 23
203.147.46.0/23 maxlen: 23
203.147.46.0/24 maxlen: 24
203.147.47.0/24 maxlen: 24
203.156.0.0/22 maxlen: 22
203.156.8.0/21 maxlen: 21
203.156.9.0/24 maxlen: 24
203.156.16.0/24 maxlen: 24
203.156.24.0/24 maxlen: 24
203.156.25.0/24 maxlen: 24
203.156.26.0/24 maxlen: 24
203.156.27.0/24 maxlen: 24
203.156.28.0/24 maxlen: 24
203.156.31.0/24 maxlen: 24
203.156.40.0/22 maxlen: 22
203.156.46.0/23 maxlen: 23
203.156.46.0/24 maxlen: 24
203.156.48.0/23 maxlen: 23
203.156.51.0/24 maxlen: 24
203.156.52.0/24 maxlen: 24
203.156.57.0/24 maxlen: 24
203.156.59.0/24 maxlen: 24
203.156.60.0/24 maxlen: 24
203.156.61.0/24 maxlen: 24
203.156.62.0/24 maxlen: 24
203.156.64.0/24 maxlen: 24
203.156.96.0/23 maxlen: 23
203.156.102.0/23 maxlen: 23
203.156.108.0/24 maxlen: 24
203.156.109.0/24 maxlen: 24
203.156.110.0/23 maxlen: 23
203.156.110.0/24 maxlen: 24
203.156.111.0/24 maxlen: 24
203.156.112.0/24 maxlen: 24
203.156.113.0/24 maxlen: 24
203.156.114.0/23 maxlen: 23
203.156.119.0/24 maxlen: 24
203.156.120.0/21 maxlen: 21
203.156.143.0/24 maxlen: 24
203.156.150.0/24 maxlen: 24
203.156.151.0/24 maxlen: 24
203.156.152.0/23 maxlen: 23
203.156.152.0/24 maxlen: 24
203.156.153.0/24 maxlen: 24
203.156.156.0/23 maxlen: 23
203.156.176.0/23 maxlen: 23
203.156.183.0/24 maxlen: 24
2404:4a00:1::/64 maxlen: 64
2404:4a00:2::/64 maxlen: 64
2404:4a00:3::/64 maxlen: 64
2404:4a00:4::/48 maxlen: 48
2404:4a00:4::/64 maxlen: 64
2404:4a00:a::/48 maxlen: 48
2404:4a00:b::/48 maxlen: 48
2404:4a00:d::/48 maxlen: 48
2404:4a00:1000::/48 maxlen: 48
2404:4a00:2094::/48 maxlen: 48
2404:4a00:5542::/48 maxlen: 48
2404:4a00:5542:3::/64 maxlen: 64
2404:4a00:5542:3a1::/64 maxlen: 64
2404:4a00:5542:3001::/64 maxlen: 64
2404:4a00:5542:3002::/64 maxlen: 64
2404:4a00:5542:3003::/64 maxlen: 64
2404:4a00:6000::/64 maxlen: 64
2404:4a00:6500::/64 maxlen: 64
2404:4a00:6501::/64 maxlen: 64
2404:4a00:6a00::/64 maxlen: 64
2404:4a00:7000::/64 maxlen: 64
2404:4a00:7500::/64 maxlen: 64
2404:4a00:7a00::/64 maxlen: 64
2404:4a00:8000::/64 maxlen: 64
2404:4a00:8500::/64 maxlen: 64
2404:4a00:8a00::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 14:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13989 (0x36a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Validity
Not Before: Oct 12 10:12:40 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6accb298-65de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:3b:72:32:27:b5:f1:e4:1b:1b:3a:50:b5:
7c:7a:d8:d1:a9:1a:34:0a:29:86:e4:da:dd:e2:55:
94:86:ce:a2:99:30:02:8a:a5:1e:af:2d:55:5c:33:
8c:33:91:4f:e1:a3:eb:30:da:55:c0:e9:6e:97:ee:
b2:00:4c:7e:0b:4d:72:41:3b:01:35:72:67:4d:ca:
58:d3:95:9d:4b:99:77:dc:a3:f5:72:4e:61:e8:e0:
99:04:72:10:ff:68:51:94:06:76:cc:4d:7a:bc:62:
0d:90:94:da:00:64:80:0c:20:57:9d:ef:71:81:b1:
2b:c0:bc:9d:4f:3a:8f:42:53:d4:fd:41:47:dd:db:
3d:06:51:6b:84:b6:50:0e:0c:28:bd:8d:19:79:5f:
97:02:08:b8:1a:fe:61:7d:8f:59:44:58:c0:92:bf:
5d:09:48:84:0b:57:fb:38:6d:7c:f0:29:ea:2e:92:
2a:75:b3:87:94:f4:97:e1:6b:ee:e6:0e:f8:8f:9f:
6f:7e:42:59:41:4b:89:a6:9f:eb:8f:2a:c5:68:28:
81:43:f7:89:4b:eb:a5:70:43:06:36:b3:11:b7:b0:
d9:1b:4f:90:3b:8f:dd:f9:ad:e1:33:ea:71:7b:86:
20:fe:7c:6f:ce:b4:8c:ef:90:63:93:ce:88:75:62:
fc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:85:C8:68:09:99:0E:4A:94:C1:7A:05:6A:DB:52:09:11:CA:ED
X509v3 Authority Key Identifier:
keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/AA7E3F9017A211F1926DA6A3313D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
58.82.128.0/18
103.247.60.0/22
182.50.80.0/22
182.50.86.0/24
182.50.88.0/22
203.130.129.80/28
203.130.131.240/28
203.130.140.0/24
203.130.152.0/24
203.147.6.0/24
203.147.26.0/24
203.147.30.0/23
203.147.46.0/23
203.156.0.0/22
203.156.8.0-203.156.16.255
203.156.24.0-203.156.28.255
203.156.31.0/24
203.156.40.0/22
203.156.46.0-203.156.49.255
203.156.51.0-203.156.52.255
203.156.57.0/24
203.156.59.0-203.156.62.255
203.156.64.0/24
203.156.96.0/23
203.156.102.0/23
203.156.108.0-203.156.115.255
203.156.119.0-203.156.127.255
203.156.143.0/24
203.156.150.0-203.156.153.255
203.156.156.0/23
203.156.176.0/23
203.156.183.0/24
IPv6:
2404:4a00:1::/64
2404:4a00:2::/64
2404:4a00:3::/64
2404:4a00:4::/48
2404:4a00:a::/47
2404:4a00:d::/48
2404:4a00:1000::/48
2404:4a00:2094::/48
2404:4a00:5542::/48
2404:4a00:6000::/64
2404:4a00:6500::/64
2404:4a00:6501::/64
2404:4a00:6a00::/64
2404:4a00:7000::/64
2404:4a00:7500::/64
2404:4a00:7a00::/64
2404:4a00:8000::/64
2404:4a00:8500::/64
2404:4a00:8a00::/64
Signature Algorithm: sha256WithRSAEncryption
98:6f:6e:41:00:4c:30:5a:60:d7:e0:77:67:1d:5f:9a:52:b8:
9d:19:63:dd:2d:b4:67:24:86:f9:68:d0:92:45:53:3b:ac:db:
84:59:15:38:79:44:1c:db:3e:13:b5:88:68:f8:cb:61:3f:2a:
1f:8a:1e:1a:d9:a6:62:2a:43:b1:44:c6:b3:56:04:ab:82:c0:
f6:3c:7d:83:64:4c:b7:d6:a2:e9:f6:d7:00:e7:7e:56:13:ce:
9e:32:58:df:f9:7a:54:55:d4:2c:33:a6:fd:3d:47:1c:8e:91:
23:33:6c:e6:61:96:b2:af:1b:b0:5a:1e:f6:a9:85:6e:49:50:
bd:47:91:88:46:31:c3:ad:47:74:e6:2e:80:6f:3b:5d:f9:0d:
3f:01:77:f5:00:51:8a:16:de:24:e9:59:84:6e:a3:d9:a7:71:
5f:10:6f:08:e5:9a:ab:2e:56:fb:cb:14:a0:78:a0:9e:1c:51:
03:22:e1:f4:93:8e:a6:22:b0:e0:3a:66:9f:3c:f4:13:45:2f:
d8:94:16:17:db:7e:0e:60:57:60:3c:7b:b4:1b:88:d8:51:71:
4f:08:8e:b3:fc:e8:43:25:1b:2a:a4:a4:97:7a:6e:0a:c2:29:
89:5a:58:91:93:4e:f3:69:eb:02:38:5a:c9:4d:21:7d:34:24:
4d:80:eb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:10:28 2026 by rpki-client