Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
File: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (raw, json)
Hash identifier: tDiNjxHLhZC1joZZn8et4eDqQovSvtK/L6hvpTBMkFE=
Subject key identifier: 9B:E2:8C:6C:A7:DD:C2:8D:77:0F:80:FA:69:7A:CA:BE:87:BA:4E:6B
Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial: 2A6E
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
Signing time: Fri 09 Oct 2026 05:48:34 +0000
ROA not before: Fri 09 Oct 2026 05:48:34 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24440
IP address blocks: 36.255.44.0/22 maxlen: 24
43.242.100.0/22 maxlen: 24
58.65.192.0/19 maxlen: 24
61.5.128.0/19 maxlen: 24
101.53.224.0/19 maxlen: 24
103.7.60.0/22 maxlen: 24
103.18.8.0/22 maxlen: 24
103.18.12.0/22 maxlen: 24
103.18.20.0/22 maxlen: 24
103.26.80.0/22 maxlen: 24
103.26.84.0/22 maxlen: 24
103.31.92.0/22 maxlen: 24
103.31.100.0/22 maxlen: 24
103.31.104.0/22 maxlen: 24
103.244.172.0/22 maxlen: 24
103.244.176.0/22 maxlen: 24
103.245.132.0/22 maxlen: 24
103.245.192.0/22 maxlen: 24
119.13.184.0/21 maxlen: 24
124.29.192.0/18 maxlen: 24
153.117.0.0/16 maxlen: 24
175.107.192.0/18 maxlen: 24
202.47.32.0/19 maxlen: 24
202.163.64.0/19 maxlen: 24
202.163.96.0/19 maxlen: 24
203.101.160.0/19 maxlen: 24
218.100.85.0/24 maxlen: 24
2001:4538::/32 maxlen: 32
2001:4538:41::/48 maxlen: 48
2001:4538:a001::/48 maxlen: 48
2001:4538:c001::/48 maxlen: 48
2400:adc0:9::/64 maxlen: 64
2400:adc0:b::/64 maxlen: 64
2400:adc0:200::/48 maxlen: 48
2400:adc0:201::/48 maxlen: 48
2400:adc0:4000::/48 maxlen: 48
2400:adc0:4001::/48 maxlen: 48
2400:adc0:4002::/48 maxlen: 48
2400:adc0:4003::/48 maxlen: 48
2400:adc0:4004::/48 maxlen: 48
2400:adc0:4005::/48 maxlen: 48
2400:adc0:4006::/48 maxlen: 48
2400:adc0:4006::/64 maxlen: 64
2400:adc0:4007::/48 maxlen: 48
2400:adc0:4008::/48 maxlen: 48
2400:adc0:4009::/48 maxlen: 48
2400:adc0:4010::/48 maxlen: 48
2400:adc0:4011::/48 maxlen: 48
2400:adc0:4012::/48 maxlen: 48
2400:adc0:4013::/48 maxlen: 48
2400:adc0:4014::/48 maxlen: 48
2400:adc0:4020::/48 maxlen: 48
2400:adc0:4030::/48 maxlen: 48
2400:adc0:4040::/48 maxlen: 48
2400:adc0:4104::/48 maxlen: 48
2400:adc0:4203::/48 maxlen: 48
2400:adc0:4204::/48 maxlen: 48
2400:adc0:4300::/48 maxlen: 48
2400:adc0:4301::/48 maxlen: 48
2400:adc0:4302::/48 maxlen: 48
2400:adc0:4303::/48 maxlen: 48
2400:adc0:4310::/48 maxlen: 48
2400:adc0:4311::/48 maxlen: 48
2400:adc0:4500::/48 maxlen: 48
2400:adc0:4600::/48 maxlen: 48
2400:adc0:4610::/48 maxlen: 48
2400:adc0:4611::/48 maxlen: 48
2400:adc0:4700::/48 maxlen: 48
2400:adc0:4701::/48 maxlen: 48
2400:adc0:4710::/48 maxlen: 48
2400:adc0:4711::/48 maxlen: 48
2400:adc0:4800::/48 maxlen: 48
2400:adc0:4900::/48 maxlen: 48
2400:adc0:4901::/48 maxlen: 48
2400:adc0:4910::/48 maxlen: 48
2400:adc0:4a10::/48 maxlen: 48
2400:adc0:4a10::/64 maxlen: 64
2400:adc0:4b10::/48 maxlen: 48
2400:adc0:c001::/48 maxlen: 48
2400:adc0:c003::/48 maxlen: 48
2400:adc0:c030::/48 maxlen: 48
2400:adc0:c102::/48 maxlen: 48
2400:adc0:c103::/48 maxlen: 48
2400:adc0:c210::/48 maxlen: 48
2400:adc0:c211::/48 maxlen: 48
2400:adc0:c310::/48 maxlen: 48
2400:adc0:c400::/48 maxlen: 48
2400:adc0:c410::/48 maxlen: 48
2400:adc0:c510::/48 maxlen: 48
2400:adc2:100::/48 maxlen: 48
2400:adc2:300::/40 maxlen: 40
2400:adc2:400::/40 maxlen: 40
2400:adc2:600::/40 maxlen: 40
2400:adc2:700::/40 maxlen: 40
2400:adc2:900::/40 maxlen: 40
2400:adc2:a00::/40 maxlen: 40
2400:adc4::/40 maxlen: 40
2400:adc4:100::/40 maxlen: 40
2400:adc4:800::/40 maxlen: 40
2400:adc4:900::/40 maxlen: 40
2400:adc5::/42 maxlen: 42
2400:adc5:40::/42 maxlen: 42
2400:adc5:80::/42 maxlen: 42
2400:adc5:c0::/42 maxlen: 42
2400:adc5:100::/42 maxlen: 42
2400:adc5:140::/42 maxlen: 42
2400:adc5:180::/42 maxlen: 42
2400:adc5:1c0::/42 maxlen: 42
2400:adc5:300::/42 maxlen: 42
2400:adc5:340::/42 maxlen: 42
2400:adc5:380::/42 maxlen: 42
2400:adc5:3c0::/42 maxlen: 42
2400:adc5:400::/42 maxlen: 42
2400:adc5:440::/42 maxlen: 42
2400:adc5:480::/42 maxlen: 42
2400:adc5:4c0::/42 maxlen: 42
2400:adca::/40 maxlen: 40
2400:adca:100::/40 maxlen: 40
2400:add9::/40 maxlen: 40
2400:add9:100::/40 maxlen: 40
2400:add9:200::/40 maxlen: 40
2400:add9:300::/40 maxlen: 40
2400:addb:800::/40 maxlen: 40
2400:addb:900::/40 maxlen: 40
2400:addd:2000::/40 maxlen: 40
2400:addd:2100::/40 maxlen: 40
2400:addd:2800::/40 maxlen: 40
2400:addd:2900::/40 maxlen: 40
2400:addd:4900::/40 maxlen: 40
2400:adde::/40 maxlen: 40
2400:adde:100::/40 maxlen: 40
2400:addf:800::/40 maxlen: 40
2400:addf:900::/40 maxlen: 40
2400:addf:1000::/40 maxlen: 40
2400:addf:1100::/40 maxlen: 40
2400:addf:2900::/40 maxlen: 40
2400:addf:3900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 15:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10862 (0x2a6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Validity
Not Before: Oct 9 05:48:34 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ac88031-5c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:f3:d3:ce:fd:c5:aa:30:25:cd:1d:28:3f:
61:a5:5e:de:78:95:34:c4:59:79:0a:fa:96:68:10:
8f:05:a2:41:15:88:1b:40:c6:cc:5b:5f:8a:06:f7:
6f:5b:9f:ee:42:e8:dd:e0:35:9e:54:46:aa:b1:aa:
4b:e5:6d:bb:ca:ab:69:25:e3:74:95:13:fe:a8:0c:
b5:00:ba:f5:ce:24:14:bd:1f:75:9f:75:74:2a:36:
3e:b3:4c:11:76:ce:37:b5:b3:0e:f9:22:c3:04:1a:
cd:e9:83:f1:be:de:55:5c:7d:10:5c:3a:48:fc:ed:
04:dc:43:09:69:a5:e6:82:9f:22:9d:8a:0a:f2:61:
8c:39:03:81:f9:c5:04:a8:a8:49:96:13:10:c2:c4:
c2:1a:72:fe:02:2f:ec:22:4a:46:90:25:27:01:73:
49:0a:6c:91:dc:ed:49:b8:1d:2c:fa:25:f2:1a:42:
0b:c1:0c:9a:15:41:3a:65:2f:4d:73:db:25:83:7c:
64:f1:f4:a3:1f:5d:1d:ed:67:c6:cf:3b:12:df:ae:
a1:da:d0:23:d0:71:59:21:a1:e2:e2:70:d7:fe:b9:
4c:c8:3f:71:5e:fe:99:31:15:da:22:1a:69:13:31:
00:38:62:38:da:f3:66:b9:54:e0:2b:35:f6:8a:b5:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E2:8C:6C:A7:DD:C2:8D:77:0F:80:FA:69:7A:CA:BE:87:BA:4E:6B
X509v3 Authority Key Identifier:
keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.44.0/22
43.242.100.0/22
58.65.192.0/19
61.5.128.0/19
101.53.224.0/19
103.7.60.0/22
103.18.8.0/21
103.18.20.0/22
103.26.80.0/21
103.31.92.0/22
103.31.100.0-103.31.107.255
103.244.172.0-103.244.179.255
103.245.132.0/22
103.245.192.0/22
119.13.184.0/21
124.29.192.0/18
153.117.0.0/16
175.107.192.0/18
202.47.32.0/19
202.163.64.0/18
203.101.160.0/19
218.100.85.0/24
IPv6:
2001:4538::/32
2400:adc0:9::/64
2400:adc0:b::/64
2400:adc0:200::/47
2400:adc0:4000::-2400:adc0:4009:ffff:ffff:ffff:ffff:ffff
2400:adc0:4010::-2400:adc0:4014:ffff:ffff:ffff:ffff:ffff
2400:adc0:4020::/48
2400:adc0:4030::/48
2400:adc0:4040::/48
2400:adc0:4104::/48
2400:adc0:4203::-2400:adc0:4204:ffff:ffff:ffff:ffff:ffff
2400:adc0:4300::/46
2400:adc0:4310::/47
2400:adc0:4500::/48
2400:adc0:4600::/48
2400:adc0:4610::/47
2400:adc0:4700::/47
2400:adc0:4710::/47
2400:adc0:4800::/48
2400:adc0:4900::/47
2400:adc0:4910::/48
2400:adc0:4a10::/48
2400:adc0:4b10::/48
2400:adc0:c001::/48
2400:adc0:c003::/48
2400:adc0:c030::/48
2400:adc0:c102::/47
2400:adc0:c210::/47
2400:adc0:c310::/48
2400:adc0:c400::/48
2400:adc0:c410::/48
2400:adc0:c510::/48
2400:adc2:100::/48
2400:adc2:300::-2400:adc2:4ff:ffff:ffff:ffff:ffff:ffff
2400:adc2:600::/39
2400:adc2:900::-2400:adc2:aff:ffff:ffff:ffff:ffff:ffff
2400:adc4::/39
2400:adc4:800::/39
2400:adc5::/39
2400:adc5:300::-2400:adc5:4ff:ffff:ffff:ffff:ffff:ffff
2400:adca::/39
2400:add9::/38
2400:addb:800::/39
2400:addd:2000::/39
2400:addd:2800::/39
2400:addd:4900::/40
2400:adde::/39
2400:addf:800::/39
2400:addf:1000::/39
2400:addf:2900::/40
2400:addf:3900::/40
Signature Algorithm: sha256WithRSAEncryption
3e:29:07:0f:b7:94:0b:c5:26:e9:93:d4:72:2f:95:b6:09:aa:
ef:a8:41:cf:2e:8d:d3:6d:e8:9f:97:2a:4c:43:35:a5:94:7a:
8a:13:56:08:61:00:b9:08:49:bf:8b:f7:ff:df:be:dd:48:39:
5a:09:dc:63:93:e0:a3:31:a5:42:9b:5e:a8:ab:bb:11:d6:56:
ae:d5:ec:f1:e6:9c:78:d5:dd:0c:9e:ea:d2:82:83:ce:11:18:
ca:0b:31:a9:78:88:9d:b7:87:b6:0b:af:49:e8:db:69:c8:6b:
26:11:98:94:1b:52:4b:07:bb:af:cf:4a:70:bc:8c:60:97:ac:
f9:57:84:34:53:bf:d9:13:c5:a3:81:f1:2d:d7:bc:a2:ce:e2:
fc:ae:05:3f:e5:18:8b:48:4b:f8:ea:0a:cc:ad:a7:8e:75:9e:
e5:0f:0f:72:2e:c8:e2:86:c2:1e:65:f1:6e:63:2a:7c:e1:b2:
d7:99:76:25:62:61:78:c3:30:fd:8e:36:c7:16:81:ce:5d:6c:
29:db:20:ee:8a:92:09:7d:34:2d:eb:16:54:3b:bb:20:4d:75:
d1:86:1c:c4:42:cd:a7:53:9b:46:ea:28:de:5a:6a:8a:2a:b2:
b4:3c:ce:ca:29:87:f1:e5:d9:61:37:9c:37:3c:fa:96:4b:87:
ab:2c:22:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:42:59 2026 by rpki-client