Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/09E2992EC11711EA98A6A253C4F9AE02.roa
File: 09E2992EC11711EA98A6A253C4F9AE02.roa (raw, json)
Hash identifier: dlFkR2avwNaQRrhowifIk2SCm7xDD8/3CdJnrrdYm08=
Subject key identifier: 8A:6B:04:A4:F0:DB:CD:8B:2B:2F:B6:B4:7F:69:A4:C6:2E:9B:2D:F3
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 211E
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/09E2992EC11711EA98A6A253C4F9AE02.roa
Signing time: Wed 30 Sep 2026 16:32:07 +0000
ROA not before: Wed 30 Sep 2026 16:32:07 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 58543
IP address blocks: 121.10.24.0/22 maxlen: 22
121.10.104.0/23 maxlen: 23
121.10.106.0/24 maxlen: 24
121.10.107.0/24 maxlen: 24
121.10.108.0/23 maxlen: 23
121.10.110.0/23 maxlen: 23
121.10.112.0/22 maxlen: 22
121.10.116.0/22 maxlen: 22
121.10.120.0/21 maxlen: 21
121.10.132.0/24 maxlen: 24
121.10.133.0/24 maxlen: 24
121.10.134.0/24 maxlen: 24
121.10.135.0/24 maxlen: 24
121.10.136.0/22 maxlen: 22
121.10.140.0/22 maxlen: 22
121.10.172.0/23 maxlen: 23
121.10.240.0/21 maxlen: 21
121.11.0.0/24 maxlen: 24
121.11.64.0/21 maxlen: 21
121.11.72.0/22 maxlen: 22
121.11.76.0/22 maxlen: 22
121.11.80.0/20 maxlen: 20
121.11.148.0/24 maxlen: 24
121.11.149.0/24 maxlen: 24
121.11.150.0/24 maxlen: 24
121.11.158.0/24 maxlen: 24
121.11.159.0/24 maxlen: 24
121.11.171.0/24 maxlen: 24
121.11.252.0/22 maxlen: 22
121.12.92.0/24 maxlen: 24
121.12.95.0/24 maxlen: 24
121.12.96.0/22 maxlen: 22
121.12.255.0/24 maxlen: 24
121.14.160.0/20 maxlen: 20
121.14.176.0/20 maxlen: 20
121.14.208.0/20 maxlen: 20
121.14.224.0/20 maxlen: 20
121.14.240.0/20 maxlen: 20
121.15.220.0/23 maxlen: 23
121.15.222.0/24 maxlen: 24
121.15.245.0/24 maxlen: 24
121.15.246.0/23 maxlen: 23
121.15.253.0/24 maxlen: 24
121.32.224.0/23 maxlen: 23
121.32.226.0/23 maxlen: 23
121.32.228.0/23 maxlen: 23
121.32.230.0/23 maxlen: 23
121.32.232.0/21 maxlen: 21
125.88.16.0/23 maxlen: 23
125.89.70.0/24 maxlen: 24
125.89.71.0/24 maxlen: 24
125.89.72.0/24 maxlen: 24
125.89.73.0/24 maxlen: 24
125.89.74.0/24 maxlen: 24
125.89.75.0/24 maxlen: 24
125.89.76.0/24 maxlen: 24
125.89.77.0/24 maxlen: 24
125.89.78.0/24 maxlen: 24
125.89.79.0/24 maxlen: 24
125.90.64.0/24 maxlen: 24
125.90.65.0/24 maxlen: 24
125.90.66.0/24 maxlen: 24
125.90.67.0/24 maxlen: 24
125.90.88.0/24 maxlen: 24
125.90.93.0/24 maxlen: 24
125.90.192.0/22 maxlen: 22
125.90.196.0/23 maxlen: 23
125.90.204.0/22 maxlen: 22
125.91.0.0/20 maxlen: 20
125.93.53.0/24 maxlen: 24
202.96.140.0/24 maxlen: 24
202.103.178.0/24 maxlen: 24
202.104.186.0/24 maxlen: 24
202.104.187.0/24 maxlen: 24
202.104.188.0/24 maxlen: 24
202.104.236.0/22 maxlen: 22
202.104.240.0/23 maxlen: 23
202.104.242.0/24 maxlen: 24
202.105.176.0/24 maxlen: 24
202.105.178.0/24 maxlen: 24
202.105.179.0/24 maxlen: 24
202.105.182.0/24 maxlen: 24
202.105.232.0/23 maxlen: 23
218.15.112.0/22 maxlen: 22
218.16.223.0/24 maxlen: 24
218.16.224.0/22 maxlen: 22
218.16.228.0/23 maxlen: 23
218.30.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 16:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8478 (0x211e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Sep 30 16:32:07 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd3986-9159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:a1:7a:0a:30:d5:06:4c:ac:b3:96:35:4f:
b1:5f:32:56:ab:86:60:fb:b9:0d:17:13:71:ba:9d:
c1:c9:ba:fe:d2:24:b9:6a:32:33:dc:14:79:63:57:
55:0c:4b:ae:10:91:54:2c:89:38:5d:d4:71:3e:18:
06:3d:c0:5c:9b:98:e9:f4:ef:0a:49:92:8e:3b:2e:
45:a8:68:0c:f1:dd:1b:4f:9f:2d:12:c7:b9:a7:2f:
25:17:61:b6:94:46:18:f6:9b:bf:47:9f:f3:9d:6e:
75:8f:a3:f1:26:07:46:66:e2:42:9b:0b:3f:5d:e4:
6f:f1:b1:7e:97:d7:15:73:74:9a:60:2f:df:dc:fa:
3f:7b:f1:b3:03:49:44:a7:de:94:f5:e8:6a:f5:b8:
57:b7:22:fd:4f:5f:0e:e6:3c:1b:9b:39:25:67:89:
c8:e6:cb:7e:5a:0f:d9:20:c6:a0:18:ac:f6:89:d3:
09:e1:41:75:e2:3b:81:78:8c:b5:11:8d:e8:e6:1d:
63:08:b2:a1:1a:5f:5f:4e:c5:e4:50:e2:52:8c:6e:
dd:98:73:ac:5c:02:d4:26:ba:af:20:94:31:97:66:
3e:41:fd:02:bc:c8:f2:36:3c:48:8a:f8:e8:61:12:
08:05:ea:73:45:0d:b0:bb:75:e4:3f:61:ab:54:a3:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6B:04:A4:F0:DB:CD:8B:2B:2F:B6:B4:7F:69:A4:C6:2E:9B:2D:F3
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/09E2992EC11711EA98A6A253C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.10.24.0/22
121.10.104.0-121.10.127.255
121.10.132.0-121.10.143.255
121.10.172.0/23
121.10.240.0/21
121.11.0.0/24
121.11.64.0/19
121.11.148.0-121.11.150.255
121.11.158.0/23
121.11.171.0/24
121.11.252.0/22
121.12.92.0/24
121.12.95.0-121.12.99.255
121.12.255.0/24
121.14.160.0/19
121.14.208.0-121.14.255.255
121.15.220.0-121.15.222.255
121.15.245.0-121.15.247.255
121.15.253.0/24
121.32.224.0/20
125.88.16.0/23
125.89.70.0-125.89.79.255
125.90.64.0/22
125.90.88.0/24
125.90.93.0/24
125.90.192.0-125.90.197.255
125.90.204.0/22
125.91.0.0/20
125.93.53.0/24
202.96.140.0/24
202.103.178.0/24
202.104.186.0-202.104.188.255
202.104.236.0-202.104.242.255
202.105.176.0/24
202.105.178.0/23
202.105.182.0/24
202.105.232.0/23
218.15.112.0/22
218.16.223.0-218.16.229.255
218.30.131.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:16:cd:14:66:c6:3d:de:b4:3a:2d:f7:69:c6:a8:a7:5c:55:
00:ca:93:af:22:9a:eb:53:dc:c8:94:21:01:25:80:7e:18:ea:
ef:96:f2:d0:ea:d2:8b:44:bf:30:58:e4:82:9d:31:41:7a:d8:
54:cd:f9:ca:02:65:8f:7c:12:53:63:35:bf:27:dd:a2:10:aa:
12:f9:ea:e6:12:cb:12:93:60:e0:b7:9a:83:3a:9d:75:bb:23:
a0:fa:2b:88:ea:e1:b7:c4:9f:e4:4b:f0:dc:33:cc:a5:1a:8d:
9c:13:bb:c8:07:ac:0a:35:9e:45:10:75:29:8e:4e:a4:70:18:
fb:b1:e7:7c:52:14:d1:c5:14:42:a5:df:6e:55:44:2d:e8:5b:
dd:c4:ad:4f:ff:95:83:ed:db:72:35:ae:19:a5:c2:b7:3c:6f:
a0:3b:d1:62:ab:d1:14:a6:4f:fc:28:9f:2f:70:a7:bd:5e:f4:
98:7b:a7:2c:22:ab:ea:6f:87:da:e0:94:8e:e5:77:d3:75:e3:
6f:55:36:41:d7:63:81:b4:ba:81:c6:9f:6f:ea:62:92:f0:ca:
a4:35:c5:55:7c:e2:91:c6:ab:2f:7e:74:b0:9c:c8:77:03:29:
56:e8:fa:bd:2a:09:b3:04:b2:49:18:40:c2:0f:b3:93:c1:71:
ef:a2:4e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:14:25 2026 by rpki-client