Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/E99C5D78999011F09D326581C4F9AE02.roa
File: E99C5D78999011F09D326581C4F9AE02.roa (raw, json)
Hash identifier: EDqH2s3Y6d4ANcs5gpeBF0bpJwlhgUPDq1qQiNVrKbk=
Subject key identifier: E2:35:B8:D7:AE:D3:25:AB:13:83:D5:0D:C8:2B:39:0F:12:34:8F:F4
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 078F
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/E99C5D78999011F09D326581C4F9AE02.roa
Signing time: Sat 04 Jul 2026 22:23:25 +0000
ROA not before: Sat 04 Jul 2026 22:23:25 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 17766
IP address blocks: 43.251.108.0/22 maxlen: 24
103.1.228.0/24 maxlen: 24
103.1.229.0/24 maxlen: 24
103.1.230.0/23 maxlen: 23
103.16.148.0/22 maxlen: 22
103.16.148.0/24 maxlen: 24
103.16.149.0/24 maxlen: 24
103.252.191.0/24 maxlen: 24
116.213.0.0/23 maxlen: 23
116.213.3.0/24 maxlen: 24
116.213.4.0/24 maxlen: 24
116.213.6.0/23 maxlen: 23
116.213.7.0/24 maxlen: 24
116.213.8.0/22 maxlen: 22
116.213.12.0/22 maxlen: 22
116.213.16.0/22 maxlen: 22
124.109.64.0/19 maxlen: 19
150.129.84.0/22 maxlen: 22
150.129.84.0/24 maxlen: 24
202.9.87.0/24 maxlen: 24
202.125.164.0/23 maxlen: 23
202.125.168.0/21 maxlen: 21
202.155.160.0/20 maxlen: 20
203.1.248.0/22 maxlen: 22
203.3.166.0/24 maxlen: 24
203.9.152.0/22 maxlen: 22
203.9.152.0/23 maxlen: 23
203.9.246.0/23 maxlen: 23
203.9.248.0/23 maxlen: 23
203.12.234.0/24 maxlen: 24
203.17.76.0/22 maxlen: 22
203.19.214.0/23 maxlen: 23
203.19.244.0/22 maxlen: 22
203.25.126.0/23 maxlen: 23
203.26.138.0/24 maxlen: 24
203.26.139.0/24 maxlen: 24
203.28.121.0/24 maxlen: 24
203.30.164.0/23 maxlen: 24
203.30.199.0/24 maxlen: 24
203.31.116.0/23 maxlen: 24
203.32.160.0/20 maxlen: 20
203.32.161.0/24 maxlen: 24
203.33.150.0/24 maxlen: 24
203.55.1.0/24 maxlen: 24
203.56.26.0/24 maxlen: 24
203.76.0.0/18 maxlen: 18
203.149.64.0/20 maxlen: 20
203.149.64.0/22 maxlen: 22
203.149.64.0/24 maxlen: 24
203.149.65.0/24 maxlen: 24
203.149.66.0/24 maxlen: 24
203.149.67.0/24 maxlen: 24
203.149.68.0/22 maxlen: 22
203.149.68.0/24 maxlen: 24
203.149.69.0/24 maxlen: 24
203.149.70.0/24 maxlen: 24
203.149.71.0/24 maxlen: 24
203.149.72.0/22 maxlen: 22
203.149.72.0/24 maxlen: 24
203.149.73.0/24 maxlen: 24
203.149.74.0/24 maxlen: 24
203.149.75.0/24 maxlen: 24
203.149.76.0/22 maxlen: 22
203.149.76.0/24 maxlen: 24
203.149.77.0/24 maxlen: 24
203.149.78.0/24 maxlen: 24
203.149.79.0/24 maxlen: 24
203.149.80.0/21 maxlen: 22
203.149.80.0/24 maxlen: 24
203.149.81.0/24 maxlen: 24
203.149.82.0/24 maxlen: 24
203.149.83.0/24 maxlen: 24
203.149.84.0/24 maxlen: 24
203.149.85.0/24 maxlen: 24
203.149.86.0/24 maxlen: 24
203.149.87.0/24 maxlen: 24
210.215.0.0/16 maxlen: 16
210.215.5.0/24 maxlen: 24
210.215.6.0/24 maxlen: 24
210.215.8.0/24 maxlen: 24
210.215.48.0/24 maxlen: 24
210.215.72.0/24 maxlen: 24
210.215.75.0/24 maxlen: 24
210.215.77.0/24 maxlen: 24
210.215.83.0/24 maxlen: 24
210.215.84.0/24 maxlen: 24
210.215.85.0/24 maxlen: 24
210.215.87.0/24 maxlen: 24
210.215.90.0/24 maxlen: 24
210.215.101.0/24 maxlen: 24
210.215.102.0/24 maxlen: 24
210.215.104.0/24 maxlen: 24
210.215.112.0/24 maxlen: 24
210.215.113.0/24 maxlen: 24
210.215.130.0/24 maxlen: 24
210.215.131.0/24 maxlen: 24
210.215.136.0/24 maxlen: 24
210.215.151.0/24 maxlen: 24
2001:db0::/32 maxlen: 32
2001:db0::/36 maxlen: 36
2001:db0:1000::/36 maxlen: 36
2001:db0:2000::/36 maxlen: 36
2001:db0:3000::/36 maxlen: 36
2001:db0:4000::/36 maxlen: 36
2001:db0:5000::/36 maxlen: 36
2001:db0:6000::/36 maxlen: 36
2001:db0:7000::/36 maxlen: 36
2001:db0:8000::/36 maxlen: 36
2001:db0:9000::/36 maxlen: 36
2001:db0:a000::/36 maxlen: 36
2001:db0:b000::/36 maxlen: 36
2001:db0:c000::/36 maxlen: 36
2001:db0:d000::/36 maxlen: 36
2001:db0:e000::/36 maxlen: 36
2001:db0:f000::/36 maxlen: 36
2404:d200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Jul 2026 22:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Jul 4 22:23:25 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4987dd-03e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d1:36:37:6f:dc:ba:b9:60:0e:55:1d:c9:dc:
41:9e:cb:2c:8b:3f:b6:84:95:4b:26:d7:18:4c:79:
7c:b5:57:65:e5:26:46:88:63:ee:bc:94:bf:90:4e:
9e:66:64:9c:7c:10:af:5a:86:7a:42:67:77:5b:3b:
37:6f:06:f1:3d:ba:18:f4:cf:40:a0:1d:d3:c1:b2:
03:4f:f5:36:22:b0:85:47:02:57:4c:c2:96:a4:18:
05:e5:65:0c:e6:d1:c2:ab:9d:0f:98:05:20:aa:75:
c9:99:56:4e:39:ae:8f:32:47:6f:4f:5f:2e:78:ea:
ca:03:07:96:01:ef:13:01:66:c3:35:15:32:71:1e:
0c:01:97:9f:f4:cc:6d:48:64:71:62:3a:43:11:17:
dc:07:5d:69:4f:49:95:f7:bf:2b:2f:96:a0:9e:b1:
75:66:22:02:5f:9c:ec:4a:a4:06:29:c1:a3:8f:9b:
c7:2a:86:09:ad:67:bb:a9:74:93:4f:bd:cc:22:d9:
16:1a:45:e4:95:5e:51:73:7d:9b:59:49:5b:80:a5:
d6:3f:9c:99:aa:73:3d:a1:07:e8:f7:f8:45:3f:9d:
f0:78:9a:37:81:83:47:8c:88:5f:60:e3:71:a7:37:
ed:aa:1c:38:9b:ce:ab:cf:c4:84:ff:91:be:83:e1:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:35:B8:D7:AE:D3:25:AB:13:83:D5:0D:C8:2B:39:0F:12:34:8F:F4
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/E99C5D78999011F09D326581C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.251.108.0/22
103.1.228.0/22
103.16.148.0/22
103.252.191.0/24
116.213.0.0/23
116.213.3.0-116.213.4.255
116.213.6.0-116.213.19.255
124.109.64.0/19
150.129.84.0/22
202.9.87.0/24
202.125.164.0/23
202.125.168.0/21
202.155.160.0/20
203.1.248.0/22
203.3.166.0/24
203.9.152.0/22
203.9.246.0-203.9.249.255
203.12.234.0/24
203.17.76.0/22
203.19.214.0/23
203.19.244.0/22
203.25.126.0/23
203.26.138.0/23
203.28.121.0/24
203.30.164.0/23
203.30.199.0/24
203.31.116.0/23
203.32.160.0/20
203.33.150.0/24
203.55.1.0/24
203.56.26.0/24
203.76.0.0/18
203.149.64.0-203.149.87.255
210.215.0.0/16
IPv6:
2001:db0::/32
2404:d200::/32
Signature Algorithm: sha256WithRSAEncryption
32:99:c8:3c:fe:7c:45:24:d1:81:d4:8f:61:a1:98:4b:95:f1:
fd:94:6b:8f:41:9f:ef:e8:89:f0:b3:00:cc:54:4a:f9:5b:70:
92:b4:7e:fa:40:0d:47:26:10:6a:6a:a9:be:ad:01:14:06:bb:
b1:91:a8:e3:2e:79:09:03:bc:1d:9e:a3:42:fd:6f:22:a2:c4:
03:6b:c3:cc:c0:9e:4f:29:6d:4f:21:dc:ca:a7:dd:a0:92:92:
64:a6:c9:24:1c:84:5b:95:bf:45:24:8d:d0:be:01:ad:5c:70:
fd:e0:7c:2f:78:82:52:83:70:14:2f:7d:9c:63:6b:55:73:30:
e5:4d:43:7d:46:93:6f:ee:31:80:e7:5c:72:f9:15:fa:a3:a0:
4d:61:23:ae:61:c5:3b:d1:13:53:2f:50:0c:de:0f:9d:5f:a1:
be:4a:3c:f4:22:57:34:29:2a:eb:bd:d4:0b:a8:71:bf:46:fe:
a9:6a:c4:3d:26:6b:3e:2e:6d:64:7c:8c:58:6f:55:8c:4e:51:
c7:16:dd:38:f5:87:f1:1e:2a:14:f6:41:19:07:12:ed:72:d4:
f7:65:ac:69:60:fa:74:58:71:a5:cd:45:bc:f0:6f:44:dc:49:
0c:d2:19:34:4d:99:01:83:bf:2a:6e:65:58:4d:c1:90:4f:7a:
79:d0:86:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:39:04 2026 by rpki-client