Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
File: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (raw, json)
Hash identifier: IkqwubhChyAi/RsPzQUJ2UaEZb1ZNZg9N1N26san5I8=
Subject key identifier: FB:7F:75:B3:F1:A6:C6:BB:5A:21:A8:74:44:0B:0E:84:F3:7D:FF:0A
Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial: 2A21
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
Signing time: Mon 20 Jul 2026 10:18:53 +0000
ROA not before: Mon 20 Jul 2026 10:18:53 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24440
IP address blocks: 36.255.44.0/22 maxlen: 24
43.242.100.0/22 maxlen: 24
58.65.192.0/19 maxlen: 24
61.5.128.0/19 maxlen: 24
101.53.224.0/19 maxlen: 24
103.7.60.0/22 maxlen: 24
103.18.8.0/22 maxlen: 24
103.18.12.0/22 maxlen: 24
103.18.20.0/22 maxlen: 24
103.26.80.0/22 maxlen: 24
103.26.84.0/22 maxlen: 24
103.31.92.0/22 maxlen: 24
103.31.100.0/22 maxlen: 24
103.31.104.0/22 maxlen: 24
103.244.172.0/22 maxlen: 24
103.244.176.0/22 maxlen: 24
103.245.132.0/22 maxlen: 24
103.245.192.0/22 maxlen: 24
119.13.184.0/21 maxlen: 24
124.29.192.0/18 maxlen: 24
153.117.0.0/16 maxlen: 24
175.107.192.0/18 maxlen: 24
202.47.32.0/19 maxlen: 24
202.163.64.0/19 maxlen: 24
202.163.96.0/19 maxlen: 24
203.101.160.0/19 maxlen: 24
218.100.85.0/24 maxlen: 24
2001:4538::/32 maxlen: 32
2001:4538:41::/48 maxlen: 48
2400:adc0:9::/64 maxlen: 64
2400:adc0:200::/48 maxlen: 48
2400:adc0:201::/48 maxlen: 48
2400:adc0:4000::/48 maxlen: 48
2400:adc0:4001::/48 maxlen: 48
2400:adc0:4002::/48 maxlen: 48
2400:adc0:4003::/48 maxlen: 48
2400:adc0:4004::/48 maxlen: 48
2400:adc0:4005::/48 maxlen: 48
2400:adc0:4006::/48 maxlen: 48
2400:adc0:4007::/48 maxlen: 48
2400:adc0:4008::/48 maxlen: 48
2400:adc0:4009::/48 maxlen: 48
2400:adc0:4010::/48 maxlen: 48
2400:adc0:4011::/48 maxlen: 48
2400:adc0:4012::/48 maxlen: 48
2400:adc0:4013::/48 maxlen: 48
2400:adc0:4014::/48 maxlen: 48
2400:adc0:4020::/48 maxlen: 48
2400:adc0:4030::/48 maxlen: 48
2400:adc0:4040::/48 maxlen: 48
2400:adc0:4104::/48 maxlen: 48
2400:adc0:4203::/48 maxlen: 48
2400:adc0:4204::/48 maxlen: 48
2400:adc0:4300::/48 maxlen: 48
2400:adc0:4301::/48 maxlen: 48
2400:adc0:4302::/48 maxlen: 48
2400:adc0:4303::/48 maxlen: 48
2400:adc0:4310::/48 maxlen: 48
2400:adc0:4311::/48 maxlen: 48
2400:adc0:4500::/48 maxlen: 48
2400:adc0:4600::/48 maxlen: 48
2400:adc0:4610::/48 maxlen: 48
2400:adc0:4611::/48 maxlen: 48
2400:adc0:4700::/48 maxlen: 48
2400:adc0:4701::/48 maxlen: 48
2400:adc0:4710::/48 maxlen: 48
2400:adc0:4711::/48 maxlen: 48
2400:adc0:4900::/48 maxlen: 48
2400:adc0:4901::/48 maxlen: 48
2400:adc0:4910::/48 maxlen: 48
2400:adc0:4a10::/48 maxlen: 48
2400:adc0:4b10::/48 maxlen: 48
2400:adc0:c001::/48 maxlen: 48
2400:adc0:c003::/48 maxlen: 48
2400:adc0:c030::/48 maxlen: 48
2400:adc0:c102::/48 maxlen: 48
2400:adc0:c103::/48 maxlen: 48
2400:adc0:c210::/48 maxlen: 48
2400:adc0:c211::/48 maxlen: 48
2400:adc0:c310::/48 maxlen: 48
2400:adc0:c410::/48 maxlen: 48
2400:adc0:c510::/48 maxlen: 48
2400:adc2:100::/48 maxlen: 48
2400:adc2:300::/40 maxlen: 40
2400:adc2:400::/40 maxlen: 40
2400:adc2:600::/40 maxlen: 40
2400:adc2:700::/40 maxlen: 40
2400:adc2:900::/40 maxlen: 40
2400:adc2:a00::/40 maxlen: 40
2400:adc4::/40 maxlen: 40
2400:adc4:100::/40 maxlen: 40
2400:adc4:800::/40 maxlen: 40
2400:adc4:900::/40 maxlen: 40
2400:adc5::/42 maxlen: 42
2400:adc5:40::/42 maxlen: 42
2400:adc5:80::/42 maxlen: 42
2400:adc5:c0::/42 maxlen: 42
2400:adc5:100::/42 maxlen: 42
2400:adc5:140::/42 maxlen: 42
2400:adc5:180::/42 maxlen: 42
2400:adc5:1c0::/42 maxlen: 42
2400:adc5:300::/42 maxlen: 42
2400:adc5:340::/42 maxlen: 42
2400:adc5:380::/42 maxlen: 42
2400:adc5:3c0::/42 maxlen: 42
2400:adc5:400::/42 maxlen: 42
2400:adc5:440::/42 maxlen: 42
2400:adc5:480::/42 maxlen: 42
2400:adc5:4c0::/42 maxlen: 42
2400:adca::/40 maxlen: 40
2400:adca:100::/40 maxlen: 40
2400:add9::/40 maxlen: 40
2400:add9:100::/40 maxlen: 40
2400:add9:200::/40 maxlen: 40
2400:add9:300::/40 maxlen: 40
2400:addb:800::/40 maxlen: 40
2400:addb:900::/40 maxlen: 40
2400:addd:2000::/40 maxlen: 40
2400:addd:2100::/40 maxlen: 40
2400:addd:2800::/40 maxlen: 40
2400:addd:2900::/40 maxlen: 40
2400:addd:4900::/40 maxlen: 40
2400:adde::/40 maxlen: 40
2400:adde:100::/40 maxlen: 40
2400:addf:800::/40 maxlen: 40
2400:addf:900::/40 maxlen: 40
2400:addf:1000::/40 maxlen: 40
2400:addf:1100::/40 maxlen: 40
2400:addf:2900::/40 maxlen: 40
2400:addf:3900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10785 (0x2a21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Validity
Not Before: Jul 20 10:18:53 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a5df60d-c348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:52:ca:d4:6b:41:93:08:ac:83:ab:53:59:
b6:e0:86:4b:30:ef:fc:f9:4e:03:13:8d:ed:b7:07:
7d:86:bd:c7:26:e8:cd:26:81:ab:a4:d0:46:af:8c:
31:04:1d:9c:7b:e2:cd:27:f8:ed:7d:b2:d8:33:9d:
8e:0b:fe:c7:5a:7d:27:88:84:14:55:10:62:0a:c1:
74:4b:cc:8a:4a:d5:00:47:6d:df:cc:3d:2d:b0:a3:
ee:eb:f2:29:01:2c:4f:4b:90:94:05:fb:bc:cf:14:
82:c1:50:e0:bd:a8:75:cb:3a:24:c3:d6:ca:92:08:
ad:38:83:ec:16:ae:c1:4a:bb:c1:50:7d:e1:af:fc:
12:0a:3b:db:5b:d2:6a:ee:bc:37:c3:c7:eb:29:e5:
ad:dc:7a:be:70:3b:22:f5:84:8a:40:2e:46:f7:c3:
ac:37:fa:db:0f:b0:01:5c:64:53:e4:8e:e8:2f:82:
54:22:66:0f:da:1f:3f:8d:99:04:47:60:55:e5:9b:
8c:f8:0a:93:93:0b:62:8b:04:ee:e0:00:43:5d:04:
fc:0f:91:e0:94:21:e3:7a:58:de:0f:c0:e4:07:32:
75:79:70:76:ff:81:e4:48:20:04:cd:c4:c0:2f:96:
e4:8c:c4:94:c2:ac:9e:6f:79:f0:61:7b:ae:18:7b:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:75:B3:F1:A6:C6:BB:5A:21:A8:74:44:0B:0E:84:F3:7D:FF:0A
X509v3 Authority Key Identifier:
keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.44.0/22
43.242.100.0/22
58.65.192.0/19
61.5.128.0/19
101.53.224.0/19
103.7.60.0/22
103.18.8.0/21
103.18.20.0/22
103.26.80.0/21
103.31.92.0/22
103.31.100.0-103.31.107.255
103.244.172.0-103.244.179.255
103.245.132.0/22
103.245.192.0/22
119.13.184.0/21
124.29.192.0/18
153.117.0.0/16
175.107.192.0/18
202.47.32.0/19
202.163.64.0/18
203.101.160.0/19
218.100.85.0/24
IPv6:
2001:4538::/32
2400:adc0:9::/64
2400:adc0:200::/47
2400:adc0:4000::-2400:adc0:4009:ffff:ffff:ffff:ffff:ffff
2400:adc0:4010::-2400:adc0:4014:ffff:ffff:ffff:ffff:ffff
2400:adc0:4020::/48
2400:adc0:4030::/48
2400:adc0:4040::/48
2400:adc0:4104::/48
2400:adc0:4203::-2400:adc0:4204:ffff:ffff:ffff:ffff:ffff
2400:adc0:4300::/46
2400:adc0:4310::/47
2400:adc0:4500::/48
2400:adc0:4600::/48
2400:adc0:4610::/47
2400:adc0:4700::/47
2400:adc0:4710::/47
2400:adc0:4900::/47
2400:adc0:4910::/48
2400:adc0:4a10::/48
2400:adc0:4b10::/48
2400:adc0:c001::/48
2400:adc0:c003::/48
2400:adc0:c030::/48
2400:adc0:c102::/47
2400:adc0:c210::/47
2400:adc0:c310::/48
2400:adc0:c410::/48
2400:adc0:c510::/48
2400:adc2:100::/48
2400:adc2:300::-2400:adc2:4ff:ffff:ffff:ffff:ffff:ffff
2400:adc2:600::/39
2400:adc2:900::-2400:adc2:aff:ffff:ffff:ffff:ffff:ffff
2400:adc4::/39
2400:adc4:800::/39
2400:adc5::/39
2400:adc5:300::-2400:adc5:4ff:ffff:ffff:ffff:ffff:ffff
2400:adca::/39
2400:add9::/38
2400:addb:800::/39
2400:addd:2000::/39
2400:addd:2800::/39
2400:addd:4900::/40
2400:adde::/39
2400:addf:800::/39
2400:addf:1000::/39
2400:addf:2900::/40
2400:addf:3900::/40
Signature Algorithm: sha256WithRSAEncryption
07:c5:b4:2f:de:37:00:67:b0:a4:16:0c:b1:16:90:fb:70:a5:
d6:94:18:72:06:ab:9b:59:9a:f5:a5:2c:e6:38:5f:9f:e7:33:
73:b3:92:fe:ab:54:78:ae:1d:39:ab:31:96:bc:60:f4:5c:43:
61:a9:cc:46:8a:bd:cb:10:d7:47:c8:20:30:7e:4a:08:55:06:
27:22:02:a1:7d:db:cd:c6:59:56:9d:14:1d:d0:85:ff:1b:e3:
f0:f9:82:2f:9b:56:cc:c9:a5:40:6f:05:4d:a2:5c:9f:20:4e:
94:7c:8d:f2:97:c7:4f:62:89:73:50:50:4a:1d:38:b4:52:d1:
b4:b7:28:8e:23:ec:7a:fe:af:5b:ee:4b:09:ca:2c:86:61:87:
cf:9d:be:3d:09:fb:c9:95:08:51:89:27:31:4e:d9:c4:01:ce:
ac:a2:4b:d2:6c:bf:b4:7b:54:5a:d3:e6:df:ac:72:62:e5:ff:
f5:8a:a9:cf:35:fe:35:ea:83:a4:d6:03:a6:5f:04:f0:df:c0:
e5:17:93:02:f4:a5:4d:3a:d5:0f:5e:85:d5:fc:69:c0:7c:03:
cc:b2:87:eb:cb:0b:99:1f:47:14:1e:c5:b3:de:49:5d:f7:7b:
c6:1a:a9:d3:60:61:83:0f:be:6e:55:8d:2d:f7:6a:d2:ee:3c:
50:14:1e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:40:00 2026 by rpki-client