Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa
File: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (raw, json)
Hash identifier: UJCq0SmFw9sWHh+96DNpsldPwu6Exl7/eRSPuxIMu8s=
Subject key identifier: 77:12:B8:07:9A:B7:88:85:EA:2A:6F:17:9A:A4:A1:EB:6C:AC:0C:C9
Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
Certificate serial: 361A
Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:14:42 +0000
ROA not before: Fri 02 Oct 2026 15:14:42 +0000
ROA not after: Mon 01 Feb 2027 00:00:00 +0000
asID: 18399
IP address blocks: 61.4.65.0/24 maxlen: 24
61.4.68.0/24 maxlen: 24
61.4.69.0/24 maxlen: 24
61.4.70.0/24 maxlen: 24
61.4.71.0/24 maxlen: 24
61.4.72.0/24 maxlen: 24
61.4.73.0/24 maxlen: 24
61.4.74.0/24 maxlen: 24
61.4.75.0/24 maxlen: 24
61.4.76.0/24 maxlen: 24
61.4.77.0/24 maxlen: 24
61.4.78.0/24 maxlen: 24
61.4.79.0/24 maxlen: 24
122.248.100.0/24 maxlen: 24
122.248.101.0/24 maxlen: 24
122.248.102.0/24 maxlen: 24
122.248.103.0/24 maxlen: 24
122.248.104.0/24 maxlen: 24
122.248.105.0/24 maxlen: 24
122.248.106.0/24 maxlen: 24
122.248.112.0/24 maxlen: 24
122.248.113.0/24 maxlen: 24
122.248.118.0/24 maxlen: 24
122.248.119.0/24 maxlen: 24
122.248.120.0/24 maxlen: 24
122.248.121.0/24 maxlen: 24
122.248.122.0/24 maxlen: 24
122.248.126.0/24 maxlen: 24
203.81.160.0/24 maxlen: 24
203.81.161.0/24 maxlen: 24
203.81.162.0/24 maxlen: 24
203.81.163.0/24 maxlen: 24
203.81.164.0/24 maxlen: 24
203.81.165.0/24 maxlen: 24
203.81.168.0/24 maxlen: 24
203.81.169.0/24 maxlen: 24
203.81.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl
rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13850 (0x361a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
Validity
Not Before: Oct 2 15:14:42 2026 GMT
Not After : Feb 1 00:00:00 2027 GMT
Subject: CN=6abfca62-c97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:08:e3:c5:71:b0:f5:e0:14:ad:a0:a3:07:
07:11:a3:d8:b3:6c:15:ad:f3:43:5a:f0:9b:3e:2e:
5a:36:55:00:25:a1:46:66:6b:4d:fb:b4:ed:1f:57:
c9:a1:69:2e:2f:75:c9:4a:4b:33:5e:4d:e8:08:a8:
e1:b8:df:1e:60:27:64:5f:fa:70:e8:73:f1:9e:7d:
b8:5f:83:1e:62:b4:f7:37:2a:73:88:65:91:8a:36:
c4:d0:63:60:47:ad:7c:e2:aa:03:17:7c:2a:6e:c8:
9e:18:a1:c0:05:b6:24:ad:dd:df:17:99:45:ba:51:
10:8b:e6:2b:14:94:3f:d4:c2:c4:56:2a:d2:f6:1a:
01:60:41:b8:34:30:e0:da:39:f2:ee:99:87:fa:55:
7f:f6:39:70:10:ed:dc:c3:de:f9:62:69:2d:14:49:
38:9e:83:df:81:67:55:69:e6:1f:0a:d8:c6:d5:b0:
08:2c:5f:b7:64:e0:1d:35:27:8d:59:44:3b:3c:93:
6e:39:0b:92:e2:1f:a5:20:d6:67:04:b5:01:7d:35:
07:04:82:eb:e8:03:f9:ef:7e:12:51:1f:89:72:38:
a8:84:96:50:0e:b8:52:af:a5:72:5d:d3:13:cd:7d:
4e:a3:ce:9f:b8:30:5a:9c:7b:04:41:de:54:09:08:
00:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:12:B8:07:9A:B7:88:85:EA:2A:6F:17:9A:A4:A1:EB:6C:AC:0C:C9
X509v3 Authority Key Identifier:
keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.4.65.0/24
61.4.68.0-61.4.79.255
122.248.100.0-122.248.106.255
122.248.112.0/23
122.248.118.0-122.248.122.255
122.248.126.0/24
203.81.160.0-203.81.165.255
203.81.168.0/23
203.81.172.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:79:61:1f:7b:32:f1:5a:d6:85:a2:cd:35:a0:19:f7:21:66:
be:f8:47:62:b9:66:15:f3:9a:fe:5f:2a:eb:a6:a9:3e:9a:90:
92:8a:e9:5c:aa:7e:c8:1f:7b:25:80:01:9b:3c:bf:e6:28:21:
6c:10:cc:9b:49:54:4e:12:3a:1d:48:9e:b4:4a:9b:cf:40:19:
83:60:10:3d:a2:ba:e9:97:ad:82:76:ac:98:eb:49:f1:5e:3c:
f6:39:65:fa:c6:f2:92:36:27:84:9b:72:62:20:32:ac:16:70:
d1:c1:a0:52:66:88:ec:04:dd:66:62:34:ac:9c:9f:87:93:ee:
fd:89:e9:8e:94:05:0f:76:ec:89:34:8e:eb:ac:05:b2:d7:e3:
2b:7e:e9:f8:d0:63:ae:61:32:f8:16:21:07:db:4f:ce:57:a1:
f8:73:28:cc:91:b1:8f:a1:01:75:e7:f1:50:c8:e8:48:c8:3e:
c4:23:7d:5b:fe:57:55:63:32:ff:d6:c9:eb:bb:90:40:b8:d4:
63:00:27:35:c8:4b:f2:b4:93:66:0b:42:f7:c4:db:d9:06:de:
ac:a8:99:ed:f0:4e:5f:a7:c4:3d:c2:9a:aa:36:f4:7c:d6:34:
bf:48:0f:25:6b:33:16:1d:a1:88:ff:81:75:38:80:98:86:e9:
ec:f4:fd:3b
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICNhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5
QzMzOTlDQjIwHhcNMjYxMDAyMTUxNDQyWhcNMjcwMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2E2Mi1jOTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAicAI48VxsPXgFK2gowcHEaPYs2wVrfNDWvCbPi5aNlUAJaFGZmtN+7TtH1fJ
oWkuL3XJSkszXk3oCKjhuN8eYCdkX/pw6HPxnn24X4MeYrT3NypziGWRijbE0GNg
R6184qoDF3wqbsieGKHABbYkrd3fF5lFulEQi+YrFJQ/1MLEVirS9hoBYEG4NDDg
2jny7pmH+lV/9jlwEO3cw975YmktFEk4noPfgWdVaeYfCtjG1bAILF+3ZOAdNSeN
WUQ7PJNuOQuS4h+lINZnBLUBfTUHBILr6AP5734SUR+JcjiohJZQDrhSr6VyXdMT
zX1Oo86fuDBanHsEQd5UCQgAvQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHcSuAea
t4iF6ipvF5qkoetsrAzJMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE
OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzI4NzgvNEM5OThBMzYxRDhBMTFFMjhBMUYyM0U0MDhCMDJDRDIvOEQyREVERjRD
MkE4MTFFQkE3OUE3MDU1QzRGOUFFMDIucm9hMG8GCCsGAQUFBwEHAQH/BGAwXjBc
BAIAATBWAwQAPQRBMAwDBAI9BEQDBAQ9BEAwDAMEAnr4ZAMEAHr4agMEAXr4cDAM
AwQBevh2AwQAevh6AwQAevh+MAwDBAXLUaADBAHLUaQDBAHLUagDBALLUawwDQYJ
KoZIhvcNAQELBQADggEBAL15YR97MvFa1oWizTWgGfchZr74R2K5ZhXzmv5fKuum
qT6akJKK6VyqfsgfeyWAAZs8v+YoIWwQzJtJVE4SOh1InrRKm89AGYNgED2iuumX
rYJ2rJjrSfFePPY5ZfrG8pI2J4SbcmIgMqwWcNHBoFJmiOwE3WZiNKycn4eT7v2J
6Y6UBQ927Ik0juusBbLX4yt+6fjQY65hMvgWIQfbT85XofhzKMyRsY+hAXXn8VDI
6EjIPsQjfVv+V1VjMv/Wyeu7kEC41GMAJzXIS/K0k2YLQvfE29kG3qyome3wTl+n
xD3Cmqo29HzWNL9IDyVrMxYdoYj/gXU4gJiG6ez0/Ts=
-----END CERTIFICATE-----
Generated at Mon Oct 5 07:04:02 2026 by rpki-client