Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/33A6DBFAD31C11EFA728D52FC4F9AE02.roa
File: 33A6DBFAD31C11EFA728D52FC4F9AE02.roa (raw, json)
Hash identifier: FetMw2yoackfUMHcuBTzNQnU95KRlWCrbTmcHraQtQw=
Subject key identifier: F5:D5:CF:AC:91:28:6E:99:52:AE:C6:59:05:21:2E:53:41:E7:D4:C0
Certificate issuer: /CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E
Certificate serial: 01BE
Authority key identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/33A6DBFAD31C11EFA728D52FC4F9AE02.roa
Signing time: Wed 30 Sep 2026 13:37:50 +0000
ROA not before: Wed 30 Sep 2026 13:37:50 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 59253
IP address blocks: 23.106.48.0/21 maxlen: 21
23.106.50.0/24 maxlen: 24
23.106.64.0/20 maxlen: 20
23.106.67.0/24 maxlen: 24
23.106.120.0/21 maxlen: 21
23.106.248.0/21 maxlen: 21
23.106.248.0/22 maxlen: 22
23.106.252.0/22 maxlen: 22
23.108.96.0/21 maxlen: 21
23.108.96.0/22 maxlen: 22
23.108.100.0/22 maxlen: 22
23.111.12.0/22 maxlen: 22
23.111.14.0/23 maxlen: 23
64.120.92.0/22 maxlen: 22
64.120.110.0/23 maxlen: 24
142.91.96.0/23 maxlen: 23
142.91.98.0/23 maxlen: 23
142.91.100.0/23 maxlen: 23
142.91.102.0/23 maxlen: 23
172.255.208.0/22 maxlen: 22
172.255.212.0/23 maxlen: 23
173.234.0.0/23 maxlen: 23
173.234.2.0/23 maxlen: 23
173.234.4.0/22 maxlen: 22
173.234.8.0/22 maxlen: 22
173.234.12.0/23 maxlen: 23
173.234.14.0/23 maxlen: 23
209.58.160.0/20 maxlen: 20
209.58.160.0/21 maxlen: 21
209.58.168.0/21 maxlen: 21
209.58.176.0/21 maxlen: 21
209.58.176.0/22 maxlen: 22
209.58.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl
rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AC30, serialNumber=576790244CC29275C112356FF620F2620D7D615E
Validity
Not Before: Sep 30 13:37:50 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6abd10ae-d56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:4a:1e:b0:07:56:ce:c3:28:37:f8:f9:6f:
1b:6c:72:af:0d:6d:65:99:25:91:d6:d6:00:ec:1a:
ab:cf:53:5e:8f:38:2d:f2:14:0d:33:4e:76:0f:3b:
e1:b5:0c:1e:15:0f:6b:e7:33:54:8a:a9:5a:54:4a:
e0:6b:a5:20:92:66:e7:d1:5a:d8:97:d4:81:89:40:
08:38:27:f7:82:29:db:28:ea:82:98:c4:73:ae:7c:
1f:0a:a7:f4:82:d1:6d:68:ef:e1:2c:3e:c7:7e:fb:
7d:90:fc:63:f9:73:97:5f:ee:bf:a1:29:f0:42:c8:
47:20:93:94:1e:bd:6f:c3:10:7e:cd:25:79:32:04:
20:33:58:d0:aa:ae:c5:70:d7:89:82:42:95:4f:32:
cd:f5:33:48:52:b2:cf:e2:da:cf:20:7e:6d:63:ae:
7d:60:21:b9:22:c2:3c:03:3e:20:e5:3f:10:3b:a8:
9d:2f:cb:1c:97:d3:38:3d:44:e3:dd:b8:8e:96:fa:
6b:5c:fb:94:8a:72:55:65:d0:f9:a7:cb:e8:2b:b8:
fa:c7:c1:7a:36:64:0d:13:6e:b0:47:70:8b:6b:2f:
29:97:21:f1:9b:5d:53:04:d6:e5:55:0b:33:aa:cc:
e8:ab:bb:b1:54:4f:b7:b3:79:0a:35:21:e2:5a:af:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D5:CF:AC:91:28:6E:99:52:AE:C6:59:05:21:2E:53:41:E7:D4:C0
X509v3 Authority Key Identifier:
keyid:57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/33A6DBFAD31C11EFA728D52FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
23.106.48.0/21
23.106.64.0/20
23.106.120.0/21
23.106.248.0/21
23.108.96.0/21
23.111.12.0/22
64.120.92.0/22
64.120.110.0/23
142.91.96.0/21
172.255.208.0-172.255.213.255
173.234.0.0/20
209.58.160.0-209.58.183.255
Signature Algorithm: sha256WithRSAEncryption
96:b6:fc:61:4e:46:e2:51:32:ac:f1:2c:5b:e4:a1:f3:7a:b5:
84:0f:52:c1:71:d9:03:ee:ce:c5:65:1b:c6:2e:4d:aa:29:f7:
f4:96:4e:9c:65:55:12:7f:5b:4f:4c:8d:d6:92:8e:16:3c:e5:
15:ac:4c:ae:02:c0:6b:2c:bb:4b:31:cf:90:e0:be:9c:1e:9b:
bf:27:f8:b3:b6:91:1b:2c:00:53:bd:c1:4f:31:4e:fe:79:fa:
82:9e:46:e6:f0:fc:4c:dc:2e:47:44:15:d1:c6:e5:b1:4d:19:
9f:fd:7c:67:58:f2:6a:fe:80:c1:a6:01:8c:0a:a3:5e:49:82:
69:f7:ae:e3:19:b0:63:50:43:0f:7c:6a:c0:c7:4c:b2:3a:5b:
81:f9:63:b5:10:e9:a4:e9:05:fd:1b:ff:fe:14:3a:6c:5b:8f:
cf:e8:c4:8c:0e:0d:e7:49:bc:a4:ea:98:7d:a3:49:9d:b1:b4:
2f:63:87:f4:bd:c4:61:1f:1d:88:8a:15:ae:ea:aa:25:2b:05:
48:57:a8:ee:e5:e0:de:d6:fc:6d:34:9e:cb:e2:19:e7:0f:39:
b7:eb:23:72:ad:6b:fc:6a:df:9b:18:89:0c:60:e9:4c:0e:d1:
05:d6:80:5e:2c:31:60:b6:90:05:ca:68:81:70:2f:d5:70:06:
c5:ec:89:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 06:05:13 2026 by rpki-client