Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
File: CCF0C1920EBA11ECB2C2867AC4F9AE02.roa (raw, json)
Hash identifier: cv31taop2GDOh5eNnwwv1uIm3wEsAeXjo2x50Gu7Pg0=
Subject key identifier: F6:5E:24:0B:2B:B0:47:E3:2F:DE:86:34:55:AE:B9:17:F0:AA:D0:6D
Certificate issuer: /CN=A9150F66/serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Certificate serial: 2A45
Authority key identifier: 90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
Signing time: Mon 17 Aug 2026 05:28:37 +0000
ROA not before: Mon 17 Aug 2026 05:28:37 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24440
IP address blocks: 36.255.44.0/22 maxlen: 24
43.242.100.0/22 maxlen: 24
58.65.192.0/19 maxlen: 24
61.5.128.0/19 maxlen: 24
101.53.224.0/19 maxlen: 24
103.7.60.0/22 maxlen: 24
103.18.8.0/22 maxlen: 24
103.18.12.0/22 maxlen: 24
103.18.20.0/22 maxlen: 24
103.26.80.0/22 maxlen: 24
103.26.84.0/22 maxlen: 24
103.31.92.0/22 maxlen: 24
103.31.100.0/22 maxlen: 24
103.31.104.0/22 maxlen: 24
103.244.172.0/22 maxlen: 24
103.244.176.0/22 maxlen: 24
103.245.132.0/22 maxlen: 24
103.245.192.0/22 maxlen: 24
119.13.184.0/21 maxlen: 24
124.29.192.0/18 maxlen: 24
153.117.0.0/16 maxlen: 24
175.107.192.0/18 maxlen: 24
202.47.32.0/19 maxlen: 24
202.163.64.0/19 maxlen: 24
202.163.96.0/19 maxlen: 24
203.101.160.0/19 maxlen: 24
218.100.85.0/24 maxlen: 24
2001:4538::/32 maxlen: 32
2001:4538:41::/48 maxlen: 48
2001:4538:a001::/48 maxlen: 48
2001:4538:c001::/48 maxlen: 48
2400:adc0:9::/64 maxlen: 64
2400:adc0:200::/48 maxlen: 48
2400:adc0:201::/48 maxlen: 48
2400:adc0:4000::/48 maxlen: 48
2400:adc0:4001::/48 maxlen: 48
2400:adc0:4002::/48 maxlen: 48
2400:adc0:4003::/48 maxlen: 48
2400:adc0:4004::/48 maxlen: 48
2400:adc0:4005::/48 maxlen: 48
2400:adc0:4006::/48 maxlen: 48
2400:adc0:4006::/64 maxlen: 64
2400:adc0:4007::/48 maxlen: 48
2400:adc0:4008::/48 maxlen: 48
2400:adc0:4009::/48 maxlen: 48
2400:adc0:4010::/48 maxlen: 48
2400:adc0:4011::/48 maxlen: 48
2400:adc0:4012::/48 maxlen: 48
2400:adc0:4013::/48 maxlen: 48
2400:adc0:4014::/48 maxlen: 48
2400:adc0:4020::/48 maxlen: 48
2400:adc0:4030::/48 maxlen: 48
2400:adc0:4040::/48 maxlen: 48
2400:adc0:4104::/48 maxlen: 48
2400:adc0:4203::/48 maxlen: 48
2400:adc0:4204::/48 maxlen: 48
2400:adc0:4300::/48 maxlen: 48
2400:adc0:4301::/48 maxlen: 48
2400:adc0:4302::/48 maxlen: 48
2400:adc0:4303::/48 maxlen: 48
2400:adc0:4310::/48 maxlen: 48
2400:adc0:4311::/48 maxlen: 48
2400:adc0:4500::/48 maxlen: 48
2400:adc0:4600::/48 maxlen: 48
2400:adc0:4610::/48 maxlen: 48
2400:adc0:4611::/48 maxlen: 48
2400:adc0:4700::/48 maxlen: 48
2400:adc0:4701::/48 maxlen: 48
2400:adc0:4710::/48 maxlen: 48
2400:adc0:4711::/48 maxlen: 48
2400:adc0:4900::/48 maxlen: 48
2400:adc0:4901::/48 maxlen: 48
2400:adc0:4910::/48 maxlen: 48
2400:adc0:4a10::/48 maxlen: 48
2400:adc0:4b10::/48 maxlen: 48
2400:adc0:c001::/48 maxlen: 48
2400:adc0:c003::/48 maxlen: 48
2400:adc0:c030::/48 maxlen: 48
2400:adc0:c102::/48 maxlen: 48
2400:adc0:c103::/48 maxlen: 48
2400:adc0:c210::/48 maxlen: 48
2400:adc0:c211::/48 maxlen: 48
2400:adc0:c310::/48 maxlen: 48
2400:adc0:c400::/48 maxlen: 48
2400:adc0:c410::/48 maxlen: 48
2400:adc0:c510::/48 maxlen: 48
2400:adc2:100::/48 maxlen: 48
2400:adc2:300::/40 maxlen: 40
2400:adc2:400::/40 maxlen: 40
2400:adc2:600::/40 maxlen: 40
2400:adc2:700::/40 maxlen: 40
2400:adc2:900::/40 maxlen: 40
2400:adc2:a00::/40 maxlen: 40
2400:adc4::/40 maxlen: 40
2400:adc4:100::/40 maxlen: 40
2400:adc4:800::/40 maxlen: 40
2400:adc4:900::/40 maxlen: 40
2400:adc5::/42 maxlen: 42
2400:adc5:40::/42 maxlen: 42
2400:adc5:80::/42 maxlen: 42
2400:adc5:c0::/42 maxlen: 42
2400:adc5:100::/42 maxlen: 42
2400:adc5:140::/42 maxlen: 42
2400:adc5:180::/42 maxlen: 42
2400:adc5:1c0::/42 maxlen: 42
2400:adc5:300::/42 maxlen: 42
2400:adc5:340::/42 maxlen: 42
2400:adc5:380::/42 maxlen: 42
2400:adc5:3c0::/42 maxlen: 42
2400:adc5:400::/42 maxlen: 42
2400:adc5:440::/42 maxlen: 42
2400:adc5:480::/42 maxlen: 42
2400:adc5:4c0::/42 maxlen: 42
2400:adca::/40 maxlen: 40
2400:adca:100::/40 maxlen: 40
2400:add9::/40 maxlen: 40
2400:add9:100::/40 maxlen: 40
2400:add9:200::/40 maxlen: 40
2400:add9:300::/40 maxlen: 40
2400:addb:800::/40 maxlen: 40
2400:addb:900::/40 maxlen: 40
2400:addd:2000::/40 maxlen: 40
2400:addd:2100::/40 maxlen: 40
2400:addd:2800::/40 maxlen: 40
2400:addd:2900::/40 maxlen: 40
2400:addd:4900::/40 maxlen: 40
2400:adde::/40 maxlen: 40
2400:adde:100::/40 maxlen: 40
2400:addf:800::/40 maxlen: 40
2400:addf:900::/40 maxlen: 40
2400:addf:1000::/40 maxlen: 40
2400:addf:1100::/40 maxlen: 40
2400:addf:2900::/40 maxlen: 40
2400:addf:3900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10821 (0x2a45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=9009E74196D48B03964F1FC56CFE446EC5048CF7
Validity
Not Before: Aug 17 05:28:37 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a829c05-419f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:f2:06:c3:54:7d:04:d8:58:24:a7:f9:8c:
31:c7:50:a0:8d:c6:8f:5e:f0:84:f2:3a:87:61:9b:
21:07:85:55:f8:92:49:65:2d:56:d1:4a:e7:e0:39:
ed:53:7f:71:c8:0f:d8:23:3a:93:88:a3:c1:5c:93:
b4:76:7e:ac:2e:13:93:66:57:6f:cd:e5:01:c5:10:
df:9a:0e:ac:b2:b5:86:c6:57:d2:70:3f:fb:f1:4b:
ed:61:d2:55:d3:a4:2d:77:14:d5:3d:45:84:f1:4d:
6d:3b:95:c3:79:9c:fd:21:17:db:75:e0:18:69:cb:
22:9a:4a:b1:8c:0b:24:f8:ad:fb:8d:f4:c3:94:a8:
23:31:44:c1:68:47:99:68:c6:bd:87:ff:f4:67:ad:
39:5f:bc:94:c8:ba:3c:c8:79:3b:1d:88:b2:d0:0a:
cf:8e:03:82:25:44:cb:c1:04:99:66:16:8e:31:c6:
25:0d:a6:a7:92:eb:55:df:2d:4f:c2:d6:52:19:11:
dd:8d:7a:d0:b0:b7:97:7c:9e:c1:fa:f3:43:23:8e:
a6:94:78:d8:2a:41:c9:0d:91:05:6b:5b:e7:14:2b:
9e:19:79:eb:34:c1:56:61:ba:2a:99:6c:2b:50:5a:
79:f5:2b:7a:3c:8c:8b:ae:58:04:75:a0:fe:12:ea:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5E:24:0B:2B:B0:47:E3:2F:DE:86:34:55:AE:B9:17:F0:AA:D0:6D
X509v3 Authority Key Identifier:
keyid:90:09:E7:41:96:D4:8B:03:96:4F:1F:C5:6C:FE:44:6E:C5:04:8C:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/kAnnQZbUiwOWTx_FbP5EbsUEjPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAnnQZbUiwOWTx_FbP5EbsUEjPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/BC1DC1F6C17511E4A2C7B74CC4F9AE02/CCF0C1920EBA11ECB2C2867AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.44.0/22
43.242.100.0/22
58.65.192.0/19
61.5.128.0/19
101.53.224.0/19
103.7.60.0/22
103.18.8.0/21
103.18.20.0/22
103.26.80.0/21
103.31.92.0/22
103.31.100.0-103.31.107.255
103.244.172.0-103.244.179.255
103.245.132.0/22
103.245.192.0/22
119.13.184.0/21
124.29.192.0/18
153.117.0.0/16
175.107.192.0/18
202.47.32.0/19
202.163.64.0/18
203.101.160.0/19
218.100.85.0/24
IPv6:
2001:4538::/32
2400:adc0:9::/64
2400:adc0:200::/47
2400:adc0:4000::-2400:adc0:4009:ffff:ffff:ffff:ffff:ffff
2400:adc0:4010::-2400:adc0:4014:ffff:ffff:ffff:ffff:ffff
2400:adc0:4020::/48
2400:adc0:4030::/48
2400:adc0:4040::/48
2400:adc0:4104::/48
2400:adc0:4203::-2400:adc0:4204:ffff:ffff:ffff:ffff:ffff
2400:adc0:4300::/46
2400:adc0:4310::/47
2400:adc0:4500::/48
2400:adc0:4600::/48
2400:adc0:4610::/47
2400:adc0:4700::/47
2400:adc0:4710::/47
2400:adc0:4900::/47
2400:adc0:4910::/48
2400:adc0:4a10::/48
2400:adc0:4b10::/48
2400:adc0:c001::/48
2400:adc0:c003::/48
2400:adc0:c030::/48
2400:adc0:c102::/47
2400:adc0:c210::/47
2400:adc0:c310::/48
2400:adc0:c400::/48
2400:adc0:c410::/48
2400:adc0:c510::/48
2400:adc2:100::/48
2400:adc2:300::-2400:adc2:4ff:ffff:ffff:ffff:ffff:ffff
2400:adc2:600::/39
2400:adc2:900::-2400:adc2:aff:ffff:ffff:ffff:ffff:ffff
2400:adc4::/39
2400:adc4:800::/39
2400:adc5::/39
2400:adc5:300::-2400:adc5:4ff:ffff:ffff:ffff:ffff:ffff
2400:adca::/39
2400:add9::/38
2400:addb:800::/39
2400:addd:2000::/39
2400:addd:2800::/39
2400:addd:4900::/40
2400:adde::/39
2400:addf:800::/39
2400:addf:1000::/39
2400:addf:2900::/40
2400:addf:3900::/40
Signature Algorithm: sha256WithRSAEncryption
47:5a:da:a1:9c:b8:d0:f1:b6:88:d5:16:99:d9:57:d6:58:19:
56:f5:43:8c:97:ac:d6:52:bb:49:f6:aa:71:ad:7b:08:bf:17:
45:dc:51:7a:4e:e8:be:a3:35:cf:dd:23:85:7b:80:3a:db:9e:
d2:bf:d4:1a:22:37:93:75:e6:8f:37:48:35:00:89:5a:f5:25:
0b:4e:71:8b:f8:a2:55:13:ac:10:1a:02:ca:73:23:2f:34:8f:
8f:e7:3e:01:1e:bf:32:de:aa:5b:c1:5e:29:4a:3b:23:68:9b:
de:b7:ed:31:de:01:7f:18:46:7b:93:be:80:ec:a6:bf:0d:af:
26:2b:d9:60:2e:c0:f9:80:6a:93:ab:7b:6e:9b:fa:8a:21:9b:
97:25:85:8b:74:21:86:96:8d:0b:40:6c:fa:3b:55:2b:c8:2c:
9b:12:3f:fc:17:49:52:b2:4e:3b:88:6d:d8:e9:75:6e:47:83:
8d:61:f7:c2:27:78:68:e0:22:96:b9:68:5d:9a:0e:9f:46:ce:
df:ce:05:e4:17:58:81:f4:c1:db:cd:09:2b:cb:03:32:da:1c:
ad:c8:ae:01:20:7e:b4:7c:87:1b:47:0f:be:97:aa:aa:e1:a3:
9b:7a:b6:38:2a:ca:91:d3:7f:a5:93:d1:1d:cd:f9:21:43:60:
98:78:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:59:40 2026 by rpki-client