Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/DA947ECEA06911F181CDFB264711F970.roa
File: DA947ECEA06911F181CDFB264711F970.roa (raw, json)
Hash identifier: tkCYSUL0auwIwvzR+3cYc/QP9+7dCDSRR8SU4BpDT7U=
Subject key identifier: 70:A3:B0:00:F0:6A:49:8A:13:07:C9:02:33:B3:17:D6:9A:CC:49:7E
Certificate issuer: /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial: 01B3
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/DA947ECEA06911F181CDFB264711F970.roa
Signing time: Mon 12 Oct 2026 15:18:13 +0000
ROA not before: Mon 12 Oct 2026 15:18:13 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 17439
IP address blocks: 45.64.16.0/22 maxlen: 22
103.4.208.0/22 maxlen: 22
103.30.152.0/23 maxlen: 24
103.30.154.0/24 maxlen: 24
103.30.155.0/24 maxlen: 24
103.216.164.0/22 maxlen: 22
120.88.176.0/22 maxlen: 22
120.88.188.0/22 maxlen: 22
123.108.32.0/19 maxlen: 24
124.153.64.0/19 maxlen: 24
124.153.96.0/19 maxlen: 24
180.179.0.0/21 maxlen: 24
180.179.8.0/21 maxlen: 24
180.179.16.0/20 maxlen: 24
180.179.32.0/19 maxlen: 24
180.179.64.0/19 maxlen: 24
180.179.96.0/19 maxlen: 24
180.179.128.0/19 maxlen: 20
180.179.128.0/24 maxlen: 24
180.179.129.0/24 maxlen: 24
180.179.130.0/24 maxlen: 24
180.179.132.0/24 maxlen: 24
180.179.133.0/24 maxlen: 24
180.179.134.0/24 maxlen: 24
180.179.135.0/24 maxlen: 24
180.179.136.0/23 maxlen: 24
180.179.138.0/24 maxlen: 24
180.179.139.0/24 maxlen: 24
180.179.140.0/23 maxlen: 24
180.179.142.0/24 maxlen: 24
180.179.143.0/24 maxlen: 24
180.179.144.0/24 maxlen: 24
180.179.145.0/24 maxlen: 24
180.179.146.0/24 maxlen: 24
180.179.149.0/24 maxlen: 24
180.179.151.0/24 maxlen: 24
180.179.153.0/24 maxlen: 24
180.179.154.0/24 maxlen: 24
180.179.155.0/24 maxlen: 24
180.179.156.0/24 maxlen: 24
180.179.157.0/24 maxlen: 24
180.179.158.0/24 maxlen: 24
180.179.159.0/24 maxlen: 24
180.179.160.0/19 maxlen: 20
180.179.160.0/24 maxlen: 24
180.179.161.0/24 maxlen: 24
180.179.162.0/23 maxlen: 23
180.179.164.0/24 maxlen: 24
180.179.165.0/24 maxlen: 24
180.179.166.0/24 maxlen: 24
180.179.167.0/24 maxlen: 24
180.179.168.0/24 maxlen: 24
180.179.169.0/24 maxlen: 24
180.179.170.0/23 maxlen: 23
180.179.172.0/24 maxlen: 24
180.179.173.0/24 maxlen: 24
180.179.174.0/24 maxlen: 24
180.179.175.0/24 maxlen: 24
180.179.177.0/24 maxlen: 24
180.179.178.0/24 maxlen: 24
180.179.179.0/24 maxlen: 24
180.179.180.0/24 maxlen: 24
180.179.182.0/23 maxlen: 23
180.179.184.0/24 maxlen: 24
180.179.185.0/24 maxlen: 24
180.179.186.0/24 maxlen: 24
180.179.192.0/19 maxlen: 20
180.179.192.0/22 maxlen: 22
180.179.192.0/24 maxlen: 24
180.179.193.0/24 maxlen: 24
180.179.194.0/24 maxlen: 24
180.179.195.0/24 maxlen: 24
180.179.196.0/22 maxlen: 22
180.179.196.0/24 maxlen: 24
180.179.197.0/24 maxlen: 24
180.179.198.0/24 maxlen: 24
180.179.199.0/24 maxlen: 24
180.179.200.0/22 maxlen: 22
180.179.200.0/24 maxlen: 24
180.179.201.0/24 maxlen: 24
180.179.202.0/24 maxlen: 24
180.179.203.0/24 maxlen: 24
180.179.204.0/22 maxlen: 23
180.179.206.0/23 maxlen: 24
180.179.208.0/24 maxlen: 24
180.179.209.0/24 maxlen: 24
180.179.211.0/24 maxlen: 24
180.179.212.0/24 maxlen: 24
180.179.213.0/24 maxlen: 24
180.179.214.0/24 maxlen: 24
180.179.215.0/24 maxlen: 24
180.179.216.0/24 maxlen: 24
180.179.217.0/24 maxlen: 24
180.179.218.0/24 maxlen: 24
180.179.219.0/24 maxlen: 24
180.179.220.0/24 maxlen: 24
180.179.221.0/24 maxlen: 24
180.179.222.0/24 maxlen: 24
180.179.223.0/24 maxlen: 24
180.179.224.0/19 maxlen: 20
180.179.224.0/23 maxlen: 23
180.179.224.0/24 maxlen: 24
180.179.226.0/24 maxlen: 24
180.179.227.0/24 maxlen: 24
180.179.228.0/24 maxlen: 24
180.179.229.0/24 maxlen: 24
180.179.230.0/24 maxlen: 24
180.179.231.0/24 maxlen: 24
180.179.232.0/24 maxlen: 24
180.179.233.0/24 maxlen: 24
180.179.234.0/24 maxlen: 24
180.179.235.0/24 maxlen: 24
180.179.236.0/24 maxlen: 24
180.179.237.0/24 maxlen: 24
180.179.239.0/24 maxlen: 24
180.179.240.0/20 maxlen: 21
180.179.240.0/24 maxlen: 24
180.179.242.0/24 maxlen: 24
180.179.243.0/24 maxlen: 24
180.179.244.0/24 maxlen: 24
180.179.245.0/24 maxlen: 24
180.179.246.0/24 maxlen: 24
180.179.247.0/24 maxlen: 24
180.179.248.0/24 maxlen: 24
180.179.249.0/24 maxlen: 24
180.179.253.0/24 maxlen: 24
180.179.255.0/24 maxlen: 24
183.87.196.0/22 maxlen: 22
202.87.32.0/19 maxlen: 24
2401:8800::/40 maxlen: 40
2401:8800:200::/40 maxlen: 40
2401:8800:400::/40 maxlen: 40
2401:8800:47f::/48 maxlen: 48
2401:8800:600::/40 maxlen: 40
2401:8800:800::/40 maxlen: 40
2401:8800:a00::/40 maxlen: 40
2401:8800:a00::/48 maxlen: 48
2401:8800:a03::/48 maxlen: 48
2401:8800:a50::/48 maxlen: 48
2401:8800:c00::/40 maxlen: 40
2401:8800:c05::/48 maxlen: 48
2401:8800:e00::/40 maxlen: 40
2401:8800:1000::/40 maxlen: 40
2401:8800:1100::/40 maxlen: 40
2401:8800:1200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Validity
Not Before: Oct 12 15:18:13 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6accfa35-0259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:03:ad:90:06:6e:16:6c:90:bd:3f:06:ef:
69:bc:a2:1c:3c:b6:68:0f:27:f6:eb:16:54:92:f9:
49:e9:d9:75:81:53:5a:2b:9a:a9:87:91:0e:c3:a6:
5a:be:99:06:f5:0b:f7:b9:8b:43:da:16:35:16:20:
6a:13:e7:9b:59:d4:78:07:e5:58:d0:4c:c1:c8:39:
e4:d8:97:32:c9:42:41:72:86:c6:42:f8:5c:90:c1:
74:96:a9:a9:fd:66:69:54:17:f5:f3:2d:bf:d6:2e:
eb:b4:5d:9a:0f:8d:af:80:95:93:6d:a7:92:04:33:
9f:03:68:1f:ac:b0:6a:4c:a4:2e:8e:26:2e:54:d5:
15:5b:99:fc:ae:3e:3a:0b:0d:82:33:fc:b6:b1:44:
a0:04:16:26:f5:b5:8f:2a:1b:59:13:04:cd:4f:35:
ff:12:ed:be:9a:50:bb:5b:c2:2a:51:ff:97:15:7d:
b4:87:11:5a:a3:73:7f:56:36:4a:e9:30:01:c0:7a:
eb:4e:79:71:52:e5:39:de:18:5e:31:51:19:b7:f3:
0d:81:38:7c:71:b7:9d:12:ba:f1:01:16:93:30:dc:
2f:d1:d0:b9:91:d2:bc:56:5e:03:a8:d8:8b:6a:3c:
42:5e:14:45:1c:cb:2a:ac:30:3a:b0:8f:00:5e:d3:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A3:B0:00:F0:6A:49:8A:13:07:C9:02:33:B3:17:D6:9A:CC:49:7E
X509v3 Authority Key Identifier:
keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/DA947ECEA06911F181CDFB264711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.64.16.0/22
103.4.208.0/22
103.30.152.0/22
103.216.164.0/22
120.88.176.0/22
120.88.188.0/22
123.108.32.0/19
124.153.64.0/18
180.179.0.0/16
183.87.196.0/22
202.87.32.0/19
IPv6:
2401:8800::/40
2401:8800:200::/40
2401:8800:400::/40
2401:8800:600::/40
2401:8800:800::/40
2401:8800:a00::/40
2401:8800:c00::/40
2401:8800:e00::/40
2401:8800:1000::-2401:8800:12ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
48:78:18:49:62:3d:0a:b8:c6:1f:91:2f:84:5b:ad:2d:49:c9:
8c:d2:30:1e:85:f9:92:2b:3f:d6:02:10:74:05:04:a9:8f:44:
7a:38:68:fc:58:ae:58:8e:9f:d7:b8:c3:ee:cd:98:fb:f1:1f:
88:48:9e:3b:95:f2:d7:ae:75:14:10:52:fd:36:dc:ab:0e:3b:
13:98:2b:22:5c:dc:87:ce:fa:37:b3:15:a1:b4:ab:1b:22:87:
e5:66:d7:b0:3c:f9:29:85:58:2c:67:c2:26:f6:e0:a0:df:e1:
8a:4a:94:75:c7:76:6c:a6:72:29:59:c1:12:bf:4c:f1:d4:71:
81:d1:e1:13:89:fa:56:33:6e:48:8f:53:b7:ef:9e:f2:5f:90:
98:c3:59:a6:f2:9d:49:55:bf:b1:c2:ff:ae:a1:3a:20:8f:b0:
e4:65:96:69:31:9a:a2:97:11:5e:af:c9:80:6d:a9:ee:5c:ef:
61:2e:de:db:c5:24:41:33:53:70:5f:6a:c6:ac:91:6b:22:84:
49:4a:35:9e:df:62:0d:78:f2:b0:84:28:68:2f:a0:4b:9c:78:
aa:b5:37:b6:7e:1f:07:22:10:7a:7f:8f:01:41:7c:79:72:15:
9a:3d:79:5a:57:63:48:1e:e7:fe:e7:29:a8:eb:10:9b:4e:5a:
39:c0:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:56:39 2026 by rpki-client