Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/6E0B5938066711EFA1505F46C4F9AE02.roa
File: 6E0B5938066711EFA1505F46C4F9AE02.roa (raw, json)
Hash identifier: kbr4doxNbltuIDUWde/yGKdUnEjtnAcwkPmKlN8fm0w=
Subject key identifier: 9E:3F:A4:B1:79:74:4C:80:E1:B4:78:45:7B:79:C4:52:86:08:DF:AB
Certificate issuer: /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial: 143A
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/6E0B5938066711EFA1505F46C4F9AE02.roa
Signing time: Sun 30 Aug 2026 17:33:16 +0000
ROA not before: Sun 30 Aug 2026 17:33:16 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 1221
IP address blocks: 1.120.0.0/13 maxlen: 13
1.128.0.0/11 maxlen: 11
58.160.0.0/12 maxlen: 12
60.224.0.0/13 maxlen: 13
61.8.0.0/19 maxlen: 19
61.9.128.0/17 maxlen: 17
101.103.0.0/16 maxlen: 16
101.160.0.0/11 maxlen: 11
103.70.56.0/24 maxlen: 24
103.101.135.0/24 maxlen: 24
103.207.92.0/24 maxlen: 24
110.140.0.0/15 maxlen: 15
110.142.0.0/16 maxlen: 16
110.143.0.0/16 maxlen: 16
110.144.0.0/13 maxlen: 13
120.144.0.0/13 maxlen: 13
120.152.0.0/14 maxlen: 14
120.156.0.0/15 maxlen: 15
120.158.0.0/16 maxlen: 16
121.208.0.0/12 maxlen: 12
123.209.0.0/16 maxlen: 16
123.210.0.0/15 maxlen: 15
124.176.0.0/12 maxlen: 12
125.255.0.0/16 maxlen: 16
202.7.64.0/19 maxlen: 19
202.12.128.0/18 maxlen: 18
202.12.192.0/19 maxlen: 19
202.12.224.0/20 maxlen: 20
202.12.240.0/23 maxlen: 23
202.12.242.0/24 maxlen: 24
203.2.228.0/24 maxlen: 24
203.9.190.0/23 maxlen: 23
203.12.42.0/24 maxlen: 24
203.12.144.0/21 maxlen: 21
203.13.21.0/24 maxlen: 24
203.14.0.0/20 maxlen: 20
203.15.68.0/24 maxlen: 24
203.16.180.0/22 maxlen: 22
203.17.40.0/21 maxlen: 21
203.17.162.0/24 maxlen: 24
203.18.76.0/23 maxlen: 23
203.18.112.0/20 maxlen: 20
203.22.129.0/24 maxlen: 24
203.24.134.0/23 maxlen: 23
203.24.170.0/24 maxlen: 24
203.26.8.0/22 maxlen: 22
203.26.175.0/24 maxlen: 24
203.27.69.0/24 maxlen: 24
203.27.128.0/18 maxlen: 18
203.27.237.0/24 maxlen: 24
203.29.160.0/20 maxlen: 20
203.34.33.0/24 maxlen: 24
203.34.68.0/24 maxlen: 24
203.35.0.0/16 maxlen: 16
203.36.0.0/14 maxlen: 14
203.40.0.0/13 maxlen: 13
203.48.0.0/14 maxlen: 14
203.50.251.0/24 maxlen: 24
203.50.252.0/24 maxlen: 24
203.50.253.0/24 maxlen: 24
203.50.254.0/24 maxlen: 24
203.52.0.0/15 maxlen: 15
203.54.0.0/16 maxlen: 16
203.58.32.0/19 maxlen: 19
203.58.64.0/18 maxlen: 18
203.58.128.0/17 maxlen: 17
203.62.148.0/22 maxlen: 22
203.62.248.0/21 maxlen: 21
203.92.224.0/19 maxlen: 24
203.100.224.0/19 maxlen: 19
203.143.192.0/18 maxlen: 18
203.143.192.0/19 maxlen: 19
203.143.224.0/19 maxlen: 19
210.23.128.0/19 maxlen: 19
2001:df2:b880::/48 maxlen: 48
2001:8000::/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:56:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5178 (0x143a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Validity
Not Before: Aug 30 17:33:16 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94695c-81ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:6a:1e:69:51:ee:a8:7e:97:6d:7d:45:a4:
91:f2:2b:22:77:36:d3:b8:b8:e2:03:af:48:20:2a:
01:f2:fc:c6:9e:fe:cd:58:ad:0e:a7:7c:d1:8f:1c:
30:c1:24:18:6a:cf:b6:5a:5e:54:3f:0a:34:c4:82:
7e:f7:7c:4e:de:2e:15:4c:2f:65:d1:7a:4c:ef:c4:
73:cf:dd:e5:d6:40:57:6b:85:3d:f6:8b:9d:09:68:
d3:1d:e0:b6:1d:b5:c7:28:61:e3:f2:6c:f5:70:db:
ca:bc:f3:dc:6f:3f:72:92:eb:54:58:ba:af:43:d3:
aa:e0:72:3f:83:e8:c4:4a:23:66:11:76:c6:ab:fc:
bd:95:0a:ad:a8:2d:a1:31:e1:a7:e4:a4:e0:49:cc:
1d:75:e5:7f:5f:3b:7a:5e:2e:4d:06:c5:44:71:a9:
76:3f:a8:d0:e7:df:c1:f1:9a:4a:19:04:37:3e:72:
1b:f0:c5:21:51:b8:17:5e:58:dc:44:56:18:62:af:
48:a7:a4:a8:e2:d1:cb:ad:a2:10:c6:d5:39:18:b8:
43:b9:bc:ce:20:97:d8:40:17:80:cd:f5:f5:2a:22:
a2:0d:04:a5:3f:e7:e9:d3:06:e1:07:78:0e:6c:a0:
da:d6:34:51:36:72:cd:ca:4b:1e:6c:6a:8a:0f:a5:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3F:A4:B1:79:74:4C:80:E1:B4:78:45:7B:79:C4:52:86:08:DF:AB
X509v3 Authority Key Identifier:
keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/6E0B5938066711EFA1505F46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.120.0.0-1.159.255.255
58.160.0.0/12
60.224.0.0/13
61.8.0.0/19
61.9.128.0/17
101.103.0.0/16
101.160.0.0/11
103.70.56.0/24
103.101.135.0/24
103.207.92.0/24
110.140.0.0-110.151.255.255
120.144.0.0-120.158.255.255
121.208.0.0/12
123.209.0.0-123.211.255.255
124.176.0.0/12
125.255.0.0/16
202.7.64.0/19
202.12.128.0-202.12.242.255
203.2.228.0/24
203.9.190.0/23
203.12.42.0/24
203.12.144.0/21
203.13.21.0/24
203.14.0.0/20
203.15.68.0/24
203.16.180.0/22
203.17.40.0/21
203.17.162.0/24
203.18.76.0/23
203.18.112.0/20
203.22.129.0/24
203.24.134.0/23
203.24.170.0/24
203.26.8.0/22
203.26.175.0/24
203.27.69.0/24
203.27.128.0/18
203.27.237.0/24
203.29.160.0/20
203.34.33.0/24
203.34.68.0/24
203.35.0.0-203.54.255.255
203.58.32.0-203.58.255.255
203.62.148.0/22
203.62.248.0/21
203.92.224.0/19
203.100.224.0/19
203.143.192.0/18
210.23.128.0/19
IPv6:
2001:df2:b880::/48
2001:8000::/20
Signature Algorithm: sha256WithRSAEncryption
45:d7:96:13:79:de:37:23:78:9a:3c:ae:26:55:22:61:e5:4a:
55:28:ad:a3:14:3c:ff:c1:40:d7:3c:a0:86:bf:b5:01:66:72:
27:7c:3d:c0:65:c9:32:9d:67:f5:59:47:0d:11:1f:bb:ae:e8:
d7:72:a1:90:59:ff:f9:8b:c9:72:8f:74:70:75:bc:15:a0:62:
f7:44:93:1c:8e:f2:0d:ea:3e:1c:7f:33:bd:9d:19:c2:9b:cf:
93:f3:7b:8f:8f:3f:6b:1a:65:85:94:9f:e6:1d:06:29:02:8a:
49:64:4d:d5:5d:f8:98:9c:39:5f:c2:af:78:59:38:1c:69:47:
e6:b5:9a:7f:fc:ab:07:7f:7e:2e:26:43:27:60:6b:b9:01:b2:
5d:53:13:f5:4b:1d:83:08:fc:be:f9:c6:15:71:cc:c1:f5:74:
a9:86:11:1c:d2:c5:95:1b:49:df:98:b8:ce:ed:0e:95:52:8d:
c1:a9:53:38:17:42:b6:3c:78:de:97:c2:a9:f5:01:56:ac:3b:
d0:7f:4b:41:54:8c:c3:5d:ea:ff:02:55:eb:7b:35:b7:43:e4:
cf:7b:5d:47:6b:19:0b:4f:d8:be:ee:17:a7:2a:39:d3:fd:bb:
7e:eb:76:3b:ae:84:9b:bf:24:b3:bf:2c:b6:30:32:2c:2e:e7:
45:91:24:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:38:46 2026 by rpki-client