Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/F09B48C8CA4511F1A80A0C6C5811F970.roa
File: F09B48C8CA4511F1A80A0C6C5811F970.roa (raw, json)
Hash identifier: D5Jdp/ELVraSIjb2iNWd9120t8VeaehqXUK3KRJJzDY=
Subject key identifier: B5:01:A8:03:16:80:26:C6:55:7D:B2:77:28:17:39:64:22:C9:C8:51
Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial: 1AFA
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/F09B48C8CA4511F1A80A0C6C5811F970.roa
Signing time: Sat 17 Oct 2026 16:15:16 +0000
ROA not before: Sat 17 Oct 2026 16:15:16 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 20940
IP address blocks: 43.254.120.0/22 maxlen: 22
59.151.128.0/18 maxlen: 18
60.254.128.0/18 maxlen: 18
60.254.143.0/24 maxlen: 24
60.254.148.0/24 maxlen: 24
60.254.173.0/24 maxlen: 24
103.238.148.0/22 maxlen: 22
118.214.0.0/16 maxlen: 16
118.214.1.0/24 maxlen: 24
118.214.167.0/24 maxlen: 24
118.214.171.0/24 maxlen: 24
118.214.178.0/24 maxlen: 24
118.214.181.0/24 maxlen: 24
118.214.185.0/24 maxlen: 24
118.214.186.0/24 maxlen: 24
118.214.187.0/24 maxlen: 24
118.214.188.0/23 maxlen: 23
118.214.190.0/24 maxlen: 24
118.215.0.0/17 maxlen: 17
118.215.128.0/18 maxlen: 18
122.252.32.0/19 maxlen: 19
122.252.128.0/20 maxlen: 20
125.56.186.0/24 maxlen: 24
125.56.205.0/24 maxlen: 24
125.56.219.0/24 maxlen: 24
125.56.222.0/24 maxlen: 24
125.252.192.0/18 maxlen: 18
125.252.224.0/24 maxlen: 24
2405:9600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 16:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6906 (0x1afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Validity
Not Before: Oct 17 16:15:16 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6ad39f14-9a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:18:16:15:ac:29:ac:c3:a4:8c:42:4f:46:c7:
8c:ba:67:a5:a3:19:ec:ef:5d:dd:80:10:d8:45:ed:
a0:4c:cf:1b:ff:f6:92:a0:e8:1e:6f:e0:e3:92:ac:
78:18:4f:eb:12:54:19:b0:87:17:3a:a3:f4:77:85:
0f:9b:58:bb:b0:02:f2:83:a4:6b:2c:f7:7b:37:39:
c9:f0:47:58:78:90:63:0a:b3:ee:76:8e:c1:8e:28:
54:fb:a1:d8:a9:8b:f9:a1:58:12:ae:2f:7f:fc:ce:
7c:74:fc:cb:9f:86:eb:8b:5f:d9:0a:71:e5:4e:ff:
f2:33:8a:4b:42:4d:3b:f1:93:9c:ea:24:e0:bd:06:
73:0c:4d:46:7d:87:57:ba:10:60:a1:c9:eb:c3:7d:
db:d5:e9:b3:e6:ac:38:3d:3d:4e:af:cd:ad:9e:d9:
de:96:cb:47:2b:98:bc:d2:8d:54:43:e3:e5:2b:93:
df:c4:22:df:0f:5e:0f:0f:2d:5d:98:65:d9:86:8a:
c9:b2:a5:d1:43:a2:13:a9:f0:9c:69:1d:e2:0c:e8:
80:b0:b2:81:19:3e:7b:70:f7:37:ac:04:cd:27:27:
88:a2:89:7e:33:90:c4:ad:2a:65:ac:ab:9a:ec:4a:
b3:54:7b:74:5e:e3:02:04:72:9b:2b:c0:bb:14:aa:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:01:A8:03:16:80:26:C6:55:7D:B2:77:28:17:39:64:22:C9:C8:51
X509v3 Authority Key Identifier:
keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/F09B48C8CA4511F1A80A0C6C5811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.254.120.0/22
59.151.128.0/18
60.254.128.0/18
103.238.148.0/22
118.214.0.0-118.215.191.255
122.252.32.0/19
122.252.128.0/20
125.56.186.0/24
125.56.205.0/24
125.56.219.0/24
125.56.222.0/24
125.252.192.0/18
IPv6:
2405:9600::/32
Signature Algorithm: sha256WithRSAEncryption
4b:dd:10:76:98:b5:55:e3:6f:f9:db:dd:5f:63:9e:4f:87:8a:
7d:be:6b:ba:0f:e6:f5:0f:1d:93:df:6d:18:b6:1a:fd:d4:2f:
84:c7:d8:a1:1a:de:4f:fb:1b:b3:f4:5c:55:0a:9c:9c:a3:10:
8c:0f:74:fa:c2:3c:1d:80:3e:db:4d:d9:7b:9c:bd:fa:4d:df:
2a:9e:0c:ba:93:42:89:a7:a2:90:2b:02:f3:cd:68:8b:46:73:
f8:be:2a:8a:97:3c:72:8e:4c:f3:7c:ed:6c:be:ac:09:ab:fc:
a5:ab:66:72:6c:d4:c2:ab:8c:da:f6:ec:69:22:24:3b:14:45:
92:bb:7d:9a:1e:7f:a0:9e:74:b8:5e:6f:7b:94:bf:2e:91:72:
5a:62:fa:4e:4c:50:52:f5:fa:13:70:dd:93:d3:84:9f:63:b9:
aa:08:85:a5:2a:4a:8c:85:f8:71:18:69:ef:90:09:40:20:32:
32:87:d6:17:fa:dd:23:c9:31:86:62:30:3d:c5:8d:cc:6a:a0:
b6:bd:86:5d:f2:00:f3:c2:3f:b5:65:22:e4:15:51:71:7a:d0:
89:c1:c6:b2:ff:71:07:e3:24:9d:25:a0:0d:ab:9a:aa:c5:ae:
fb:e2:8d:7c:59:af:9e:52:f4:f0:af:92:47:77:1e:ff:36:0e:
83:21:e8:08
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICGvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQwM0ExMTAvBgNVBAUTKDYxNUVEODRDNDRFNjU3RjcwOTVFMDIxMkFGRUEwNTJD
NTQyQTBEOTEwHhcNMjYxMDE3MTYxNTE2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQzOWYxNC05YTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7xgWFawprMOkjEJPRseMumeloxns713dgBDYRe2gTM8b//aSoOgeb+Djkqx4
GE/rElQZsIcXOqP0d4UPm1i7sALyg6RrLPd7NznJ8EdYeJBjCrPudo7BjihU+6HY
qYv5oVgSri9//M58dPzLn4bri1/ZCnHlTv/yM4pLQk078ZOc6iTgvQZzDE1GfYdX
uhBgocnrw33b1emz5qw4PT1Or82tntnelstHK5i80o1UQ+PlK5PfxCLfD14PDy1d
mGXZhorJsqXRQ6ITqfCcaR3iDOiAsLKBGT57cPc3rATNJyeIool+M5DErSplrKua
7EqzVHt0XuMCBHKbK8C7FKpLMQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFLUBqAMW
gCbGVX2ydygXOWQiychRMB8GA1UdIwQYMBaAFGFe2ExE5lf3CV4CEq/qBSxUKg2R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAzQS8xQjY0NzcxMDky
NDYxMUU3OUFBRUJFMTBDNEY5QUUwMi9ZVjdZVEVUbVZfY0pYZ0lTci1vRkxGUXFE
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lWN1lURVRtVl9jSlhnSVNyLW9GTEZRcURaRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQwM0EvMUI2NDc3MTA5MjQ2MTFFNzlBQUVCRTEwQzRGOUFFMDIvRjA5QjQ4QzhD
QTQ1MTFGMUE4MEEwQzZDNTgxMUY5NzAucm9hMHcGCCsGAQUFBwEHAQH/BGgwZjBV
BAIAATBPAwQCK/54AwQGO5eAAwQGPP6AAwQCZ+6UMAsDAwF21gMEBnbXgAMEBXr8
IAMEBHr8gAMEAH04ugMEAH04zQMEAH042wMEAH043gMEBn38wDANBAIAAjAHAwUA
JAWWADANBgkqhkiG9w0BAQsFAAOCAQEAS90Qdpi1VeNv+dvdX2OeT4eKfb5rug/m
9Q8dk99tGLYa/dQvhMfYoRreT/sbs/RcVQqcnKMQjA90+sI8HYA+203Ze5y9+k3f
Kp4MupNCiaeikCsC881oi0Zz+L4qipc8co5M83ztbL6sCav8patmcmzUwquM2vbs
aSIkOxRFkrt9mh5/oJ50uF5ve5S/LpFyWmL6TkxQUvX6E3Ddk9OEn2O5qgiFpSpK
jIX4cRhp75AJQCAyMofWF/rdI8kxhmIwPcWNzGqgtr2GXfIA88I/tWUi5BVRcXrQ
icHGsv9xB+MknSWgDauaqsWu++KNfFmvnlL08K+SR3ce/zYOgyHoCA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 21:12:35 2026 by rpki-client