Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/44F74E28527B11F1839642F0C3833773.roa
File: 44F74E28527B11F1839642F0C3833773.roa (raw, json)
Hash identifier: NjxmAs/4kyGDuBl88ScF+PdjSVPEvxF3DvEB2Pw90AY=
Subject key identifier: 45:A7:58:2F:93:1A:21:45:0F:FF:0D:C8:0D:C7:08:F1:76:CA:1C:DE
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3DF7
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/44F74E28527B11F1839642F0C3833773.roa
Signing time: Fri 21 Aug 2026 01:20:36 +0000
ROA not before: Fri 21 Aug 2026 01:20:36 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135120
IP address blocks: 45.120.64.0/24 maxlen: 24
45.120.67.0/24 maxlen: 24
103.31.180.0/24 maxlen: 24
103.31.181.0/24 maxlen: 24
103.31.182.0/24 maxlen: 24
121.0.111.0/24 maxlen: 24
121.0.127.0/24 maxlen: 24
203.210.16.0/24 maxlen: 24
203.210.17.0/24 maxlen: 24
203.210.18.0/23 maxlen: 24
203.210.20.0/24 maxlen: 24
203.210.21.0/24 maxlen: 24
203.210.22.0/24 maxlen: 24
203.210.23.0/24 maxlen: 24
203.210.26.0/24 maxlen: 24
203.210.27.0/24 maxlen: 24
203.210.31.0/24 maxlen: 24
210.87.193.0/24 maxlen: 24
210.87.195.0/24 maxlen: 24
210.87.196.0/24 maxlen: 24
210.87.197.0/24 maxlen: 24
210.87.198.0/24 maxlen: 24
210.87.199.0/24 maxlen: 24
210.87.200.0/24 maxlen: 24
210.87.201.0/24 maxlen: 24
210.87.202.0/24 maxlen: 24
210.87.204.0/24 maxlen: 24
210.87.205.0/24 maxlen: 24
210.87.206.0/24 maxlen: 24
210.87.207.0/24 maxlen: 24
210.87.208.0/21 maxlen: 24
210.87.216.0/22 maxlen: 24
210.87.220.0/24 maxlen: 24
210.87.221.0/24 maxlen: 24
210.87.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 14:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15863 (0x3df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Aug 21 01:20:36 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a87a7e4-2960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:70:46:d6:28:f6:bd:1b:19:93:d3:89:22:
6f:9f:05:50:ef:57:c9:71:1c:9d:72:42:bc:36:c7:
0b:f6:2c:60:60:57:88:33:51:e7:d0:af:93:ac:a7:
e0:ca:bc:36:f6:95:41:65:e5:97:7c:b3:81:c1:54:
01:76:46:c8:ad:07:23:b8:53:5c:18:2b:c0:88:60:
73:f8:d6:10:e9:c2:a1:7d:1d:9a:a5:ec:ae:8f:fd:
c9:dd:04:76:d4:8f:8e:f1:0f:11:2d:71:bf:4b:d7:
b8:5a:a6:77:e8:e4:9a:0d:4f:f8:ba:59:69:48:e7:
e0:1b:af:2e:10:02:1a:a9:58:ff:bf:a9:5e:e1:63:
73:ff:f9:4a:65:42:b8:b8:88:c0:8d:d1:0c:b3:d2:
3a:1b:93:7e:4d:20:f2:65:08:8d:8c:9b:0d:e5:05:
d6:73:02:79:af:e7:9f:b3:98:ed:2c:26:b3:c4:09:
c8:38:6f:91:3c:a2:e6:74:df:0d:45:dd:d1:be:94:
5e:07:02:7c:45:bc:7f:d4:59:75:95:c0:97:78:92:
eb:45:a1:e5:b2:63:84:c8:4e:a1:ad:f6:ce:95:7d:
c8:bb:5c:4e:91:cb:4f:a2:b8:56:65:ae:75:67:46:
30:e3:bc:d9:1a:82:13:ab:d2:fe:3a:f0:c0:91:54:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A7:58:2F:93:1A:21:45:0F:FF:0D:C8:0D:C7:08:F1:76:CA:1C:DE
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/44F74E28527B11F1839642F0C3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.120.64.0/24
45.120.67.0/24
103.31.180.0-103.31.182.255
121.0.111.0/24
121.0.127.0/24
203.210.16.0/21
203.210.26.0/23
203.210.31.0/24
210.87.193.0/24
210.87.195.0-210.87.202.255
210.87.204.0-210.87.222.255
Signature Algorithm: sha256WithRSAEncryption
b0:0c:24:b3:5c:fa:b3:3d:a4:7d:93:12:4d:07:a0:77:f8:f2:
dd:24:86:fb:ff:81:4e:23:0d:3f:8b:2c:ec:df:03:33:e0:36:
6e:9a:6a:93:a8:60:b0:95:6a:8d:c7:f7:6a:a3:5f:c2:92:c2:
07:67:bd:b3:78:65:6c:fd:b2:05:39:d6:a7:87:35:90:99:c6:
be:b4:c0:04:1d:6c:f5:7c:a4:2d:d2:6d:6e:95:81:9e:d1:1e:
9d:64:c0:ad:60:9e:f9:8e:43:5f:31:73:96:36:57:07:5c:51:
ad:75:1d:12:bc:a6:e6:75:bb:a7:1b:69:b1:77:8d:e1:b7:44:
a3:f6:50:42:a4:dc:4d:3d:42:ab:1b:33:84:90:7c:b7:a5:a4:
f9:24:d7:a6:3a:77:34:a0:8e:ea:68:86:71:7b:93:09:47:f5:
12:b5:3e:a0:37:ed:59:b9:58:21:e5:f9:db:09:fc:32:e0:3a:
41:49:05:d6:07:42:f8:e4:f2:5e:c8:e0:92:bd:0a:b7:86:e4:
78:da:42:ce:09:09:76:0d:a2:ea:78:8d:36:ef:3d:51:1d:8f:
a7:e0:dd:ed:30:c7:82:98:f9:83:ad:61:4f:33:72:bc:72:10:
30:9c:29:a4:a8:01:ff:b6:f8:4f:2f:f9:7c:58:4d:b2:bb:59:
37:1e:c7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:08:57 2026 by rpki-client