Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F3309B3004D011E994985639C4F9AE02.roa
File: F3309B3004D011E994985639C4F9AE02.roa (raw, json)
Hash identifier: Bhk/xHZBY8l9YaMSpdb+/dUNS3iyzyjkSflIVsFtR8Q=
Subject key identifier: CE:69:D6:4E:7B:7E:E6:B2:20:51:32:19:9E:01:65:A6:20:00:74:F9
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 2031
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F3309B3004D011E994985639C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:12:27 +0000
ROA not before: Sat 30 Aug 2025 16:35:19 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 134764
IP address blocks: 121.9.13.0/24 maxlen: 24
121.9.100.0/24 maxlen: 24
121.9.201.0/24 maxlen: 24
121.9.202.0/23 maxlen: 23
121.9.204.0/22 maxlen: 22
121.9.208.0/22 maxlen: 22
121.9.212.0/23 maxlen: 23
121.9.214.0/24 maxlen: 24
121.9.219.0/24 maxlen: 24
121.9.220.0/22 maxlen: 22
121.9.227.0/24 maxlen: 24
121.9.228.0/23 maxlen: 23
121.9.232.0/24 maxlen: 24
121.9.234.0/23 maxlen: 23
121.9.238.0/23 maxlen: 23
121.9.240.0/22 maxlen: 22
121.9.244.0/23 maxlen: 23
121.9.246.0/24 maxlen: 24
121.9.247.0/24 maxlen: 24
121.11.32.0/19 maxlen: 19
121.32.240.0/21 maxlen: 21
121.32.248.0/21 maxlen: 21
125.88.144.0/20 maxlen: 20
125.88.176.0/20 maxlen: 20
202.103.160.0/24 maxlen: 24
202.104.19.0/24 maxlen: 24
202.105.13.0/24 maxlen: 24
202.105.19.0/24 maxlen: 24
202.105.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 16:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8241 (0x2031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Aug 30 16:35:19 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48f9a-162e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:07:95:9c:65:f0:b0:44:82:25:0f:9e:12:
b0:1c:eb:02:54:a5:78:7c:e2:cb:7f:24:28:46:0c:
95:27:d9:90:c5:08:22:f6:9b:d8:3b:fc:c4:f9:d7:
a5:a2:d9:c6:1c:1d:db:3b:f8:f5:d0:da:40:1c:f3:
7c:09:61:2a:ec:53:10:35:a6:2a:ad:dd:6b:69:94:
b4:d0:4a:bb:a9:58:62:10:b5:95:18:f0:c1:14:a8:
4c:ad:7d:b2:35:15:1a:d0:ac:c2:d2:2a:ec:13:b5:
1f:e6:62:70:fd:27:9d:69:33:c7:74:64:79:56:9f:
99:1e:b2:31:de:5d:e2:08:5d:4d:bb:59:36:fb:b4:
0d:a8:f2:b4:7a:f3:83:c2:5f:72:f7:f2:cb:8b:2c:
aa:7c:b5:48:23:38:e2:98:c1:24:b9:1c:94:ee:d7:
a8:67:c6:d4:0a:9b:1b:04:e0:67:a2:ab:13:e8:0d:
e0:25:65:3b:8c:dc:d2:94:33:c8:88:b2:ad:1f:bb:
ac:3e:e8:78:61:9f:d1:0a:7a:c0:e1:7e:29:7e:34:
e1:0e:59:7e:03:64:f6:ab:7c:00:8e:14:98:94:75:
81:52:38:72:2d:1b:35:ef:c7:87:27:6f:f2:88:45:
47:b0:34:dd:8e:55:2d:e5:2e:b2:df:6b:2e:71:62:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:D6:4E:7B:7E:E6:B2:20:51:32:19:9E:01:65:A6:20:00:74:F9
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/F3309B3004D011E994985639C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.9.13.0/24
121.9.100.0/24
121.9.201.0-121.9.214.255
121.9.219.0-121.9.223.255
121.9.227.0-121.9.229.255
121.9.232.0/24
121.9.234.0/23
121.9.238.0-121.9.247.255
121.11.32.0/19
121.32.240.0/20
125.88.144.0/20
125.88.176.0/20
202.103.160.0/24
202.104.19.0/24
202.105.13.0/24
202.105.19.0/24
202.105.21.0/24
Signature Algorithm: sha256WithRSAEncryption
53:2c:b5:f0:a6:7b:51:c8:76:5e:a7:13:89:e7:71:4f:45:ef:
49:d6:1f:f3:9a:f3:3a:3f:93:b2:c3:ba:54:c5:82:d0:6b:24:
40:63:12:56:d3:39:31:5b:80:b0:d0:5c:6d:ff:ed:07:00:3d:
82:bb:b1:7a:6b:a5:52:b7:83:3c:ed:e0:f8:b3:22:31:10:26:
a3:f6:ce:34:5d:a2:7b:8b:94:9f:f7:d6:30:0c:a0:03:df:80:
b2:18:4e:37:a1:ac:8a:73:9e:c7:f6:a9:2c:53:2d:62:25:e4:
cb:b2:ee:38:21:4b:7c:12:d9:d2:f2:4f:07:cb:0a:06:dd:5d:
31:ad:ee:a5:8f:e0:d4:8a:5e:35:f5:93:8a:86:a2:6f:f1:70:
60:32:44:f5:13:b9:cb:b0:d6:f5:e6:68:b3:a0:88:a1:00:af:
06:63:41:09:07:3a:5f:56:e6:81:76:95:04:35:3f:ca:06:aa:
ae:3a:5c:4b:d8:7c:a6:05:dd:b8:87:0d:db:1d:1f:86:4a:cd:
3f:ae:16:16:c4:91:d1:04:61:e6:86:45:ee:6e:98:e9:04:0e:
42:d9:1e:5d:db:ac:88:07:3b:9b:86:dc:94:aa:35:f8:5e:45:
64:d1:f6:d3:e1:71:fc:29:6e:94:98:a8:ca:4a:b2:bc:4f:a5:
cc:ed:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:45:54 2026 by rpki-client