Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/33930A2290C511F1A86DF5B63D11F970.roa
File: 33930A2290C511F1A86DF5B63D11F970.roa (raw, json)
Hash identifier: rKHsD2A4KQ4g2VCGA+h0LfT3mUPTTCYrABSxKM6lgxI=
Subject key identifier: FA:BE:1B:A6:B8:45:73:A2:B8:72:2E:AF:12:77:70:86:B4:FE:51:2C
Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial: 0537
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/33930A2290C511F1A86DF5B63D11F970.roa
Signing time: Tue 13 Oct 2026 00:48:17 +0000
ROA not before: Tue 13 Oct 2026 00:48:17 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 147049
IP address blocks: 103.173.150.0/23 maxlen: 23
103.173.150.0/24 maxlen: 24
116.204.193.0/24 maxlen: 24
116.204.194.0/24 maxlen: 24
116.204.195.0/24 maxlen: 24
2407:e8c0::/48 maxlen: 48
2407:e8c0:1::/48 maxlen: 48
2407:e8c0:2::/48 maxlen: 48
2407:e8c0:3::/48 maxlen: 48
2407:e8c0:4::/48 maxlen: 48
2407:e8c0:5::/48 maxlen: 48
2407:e8c0:6::/48 maxlen: 48
2407:e8c0:7::/48 maxlen: 48
2407:e8c0:8::/48 maxlen: 48
2407:e8c0:9::/48 maxlen: 48
2407:e8c0:a::/48 maxlen: 48
2407:e8c0:b::/48 maxlen: 48
2407:e8c0:c::/48 maxlen: 48
2407:e8c0:d::/48 maxlen: 48
2407:e8c0:e::/48 maxlen: 48
2407:e8c0:f::/48 maxlen: 48
2407:e8c0:11::/48 maxlen: 48
2407:e8c0:12::/48 maxlen: 48
2407:e8c0:13::/48 maxlen: 48
2407:e8c0:1f::/48 maxlen: 48
2407:e8c0:20::/48 maxlen: 48
2407:e8c0:21::/48 maxlen: 48
2407:e8c0:22::/48 maxlen: 48
2407:e8c0:23::/48 maxlen: 48
2407:e8c0:24::/48 maxlen: 48
2407:e8c0:25::/48 maxlen: 48
2407:e8c0:26::/48 maxlen: 48
2407:e8c0:4a00::/40 maxlen: 40
2407:e8c0:4b00::/40 maxlen: 40
2407:e8c0:4c00::/40 maxlen: 40
2407:e8c0:4d00::/40 maxlen: 40
2407:e8c0:4e00::/40 maxlen: 40
2407:e8c0:4f00::/40 maxlen: 40
2407:e8c0:5000::/40 maxlen: 40
2407:e8c0:5100::/40 maxlen: 40
2407:e8c0:5200::/40 maxlen: 40
2407:e8c0:5300::/40 maxlen: 40
2407:e8c0:5400::/40 maxlen: 40
2407:e8c0:5500::/40 maxlen: 40
2407:e8c0:5600::/40 maxlen: 40
2407:e8c0:5700::/40 maxlen: 40
2407:e8c0:5800::/40 maxlen: 40
2407:e8c0:5a00::/40 maxlen: 40
2407:e8c0:5b00::/40 maxlen: 40
2407:e8c0:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 23:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1335 (0x537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Validity
Not Before: Oct 13 00:48:17 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acd7fd1-ebe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:8a:5a:2d:bf:a6:ef:fd:ae:4c:38:0d:94:
eb:39:02:67:92:02:68:89:25:dc:ca:f9:42:9b:26:
55:6f:3c:44:2e:26:b7:7a:0c:c6:71:83:02:bc:5a:
3c:dc:c1:d9:01:ec:11:bd:28:01:46:f2:fb:96:f9:
44:38:c9:91:5e:15:f5:eb:d7:f6:80:55:74:f6:97:
09:ee:33:8c:7e:49:75:cc:a9:73:b2:71:5c:79:1d:
c9:6b:9b:d0:f9:0a:e3:91:e5:db:54:be:2a:6f:7c:
6f:db:ee:1e:90:ed:24:f2:c3:f1:52:bc:26:75:db:
d3:f3:c7:8a:08:6b:88:29:f1:a6:d5:66:c1:42:c9:
dc:f0:60:3c:fe:62:0b:03:12:c1:ed:b1:e5:45:d4:
5b:d7:11:73:63:f9:24:74:75:19:3a:ea:9d:3e:eb:
57:3a:b0:64:8f:db:e6:04:61:a0:b8:31:7c:cb:14:
a6:2b:f7:e3:99:e3:20:2b:2f:57:e1:39:86:c5:7d:
04:18:28:88:4a:99:5d:c7:d7:30:f8:0a:eb:c7:c5:
c7:57:50:34:af:19:52:80:cf:60:a2:59:1b:2d:21:
15:76:36:43:a2:d0:d8:20:36:1b:88:a7:68:24:c8:
b1:d3:09:d4:68:14:85:cd:b4:41:7a:f7:97:13:eb:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:1B:A6:B8:45:73:A2:B8:72:2E:AF:12:77:70:86:B4:FE:51:2C
X509v3 Authority Key Identifier:
keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/33930A2290C511F1A86DF5B63D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.150.0/23
116.204.193.0-116.204.195.255
IPv6:
2407:e8c0::/44
2407:e8c0:11::-2407:e8c0:13:ffff:ffff:ffff:ffff:ffff
2407:e8c0:1f::-2407:e8c0:26:ffff:ffff:ffff:ffff:ffff
2407:e8c0:4a00::-2407:e8c0:58ff:ffff:ffff:ffff:ffff:ffff
2407:e8c0:5a00::/39
2407:e8c0:6000::/40
Signature Algorithm: sha256WithRSAEncryption
0d:e2:e5:8c:80:bc:df:03:43:4d:be:52:52:6f:28:43:41:45:
dc:39:ec:34:8c:5c:25:50:e4:04:bc:00:47:3a:b2:b7:29:fc:
2c:e2:83:c2:2a:03:6f:0f:ab:82:fc:5b:6a:51:ff:69:85:62:
42:41:2b:b6:9d:5a:8d:ad:49:57:6c:b0:d2:ed:6d:f0:4d:d7:
f9:0b:6b:2f:c1:6e:5d:f9:6a:70:59:c9:c2:7c:4b:b3:b1:40:
66:56:7c:27:bb:41:6f:e1:51:5d:2b:35:3e:43:9c:b2:4f:a3:
6d:e6:56:9c:89:f8:eb:fc:29:e1:bf:ad:cc:fc:a0:0b:98:4a:
7c:df:74:d4:f3:c3:c6:f8:fc:6b:5d:84:cf:dc:35:53:d9:44:
35:22:0b:6c:80:0f:8c:b0:b2:6f:21:14:4a:2a:56:55:65:81:
33:d6:c6:01:4c:a7:40:81:85:a9:74:37:d6:c2:1c:63:03:ef:
7a:3b:f7:44:bf:61:44:2e:d2:3c:cc:3d:bb:c9:c6:5f:bb:0e:
70:6d:f7:91:37:a7:b9:2b:b8:25:2f:67:2a:53:25:24:32:93:
79:49:bf:e8:0c:8f:da:16:b5:c8:47:51:81:60:88:88:cb:5b:
e2:62:85:99:e5:09:f9:04:36:24:6f:9d:f6:75:f2:56:f9:47:
a1:4e:27:ce
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4
QzQ0Mzk4QjIwHhcNMjYxMDEzMDA0ODE3WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNkN2ZkMS1lYmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArF6KWi2/pu/9rkw4DZTrOQJnkgJoiSXcyvlCmyZVbzxELia3egzGcYMCvFo8
3MHZAewRvSgBRvL7lvlEOMmRXhX169f2gFV09pcJ7jOMfkl1zKlzsnFceR3Ja5vQ
+QrjkeXbVL4qb3xv2+4ekO0k8sPxUrwmddvT88eKCGuIKfGm1WbBQsnc8GA8/mIL
AxLB7bHlRdRb1xFzY/kkdHUZOuqdPutXOrBkj9vmBGGguDF8yxSmK/fjmeMgKy9X
4TmGxX0EGCiISpldx9cw+Arrx8XHV1A0rxlSgM9golkbLSEVdjZDotDYIDYbiKdo
JMix0wnUaBSFzbRBeveXE+tMzQIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFPq+G6a4
RXOiuHIurxJ3cIa0/lEsMB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG
RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjJFRTEvNzUyRDQyRTg4RkQyMTFFQzk0OEE5MzdFQzRGOUFFMDIvMzM5MzBBMjI5
MEM1MTFGMUE4NkRGNUI2M0QxMUY5NzAucm9hMIGIBggrBgEFBQcBBwEB/wR5MHcw
GgQCAAEwFAMEAWetljAMAwQAdMzBAwQCdMzAMFkEAgACMFMDBwQkB+jAAAAwEgMH
ACQH6MAAEQMHAiQH6MAAEDASAwcAJAfowAAfAwcAJAfowAAmMBADBgEkB+jASgMG
ACQH6MBYAwYBJAfowFoDBgAkB+jAYDANBgkqhkiG9w0BAQsFAAOCAQEADeLljIC8
3wNDTb5SUm8oQ0FF3DnsNIxcJVDkBLwARzqytyn8LOKDwioDbw+rgvxbalH/aYVi
QkErtp1aja1JV2yw0u1t8E3X+QtrL8FuXflqcFnJwnxLs7FAZlZ8J7tBb+FRXSs1
PkOcsk+jbeZWnIn46/wp4b+tzPygC5hKfN901PPDxvj8a12Ez9w1U9lENSILbIAP
jLCybyEUSipWVWWBM9bGAUynQIGFqXQ31sIcYwPvejv3RL9hRC7SPMw9u8nGX7sO
cG33kTenuSu4JS9nKlMlJDKTeUm/6AyP2ha1yEdRgWCIiMtb4mKFmeUJ+QQ2JG+d
9nXyVvlHoU4nzg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:48:10 2026 by rpki-client