Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/089DB16C769111F1BA451BEF65A30FBC.roa
File: 089DB16C769111F1BA451BEF65A30FBC.roa (raw, json)
Hash identifier: YnVwsY9P0yxeDFkxaSWuBD4BbfVBBuPKP1V9I0C0XiI=
Subject key identifier: 21:8A:6D:FD:99:27:CB:DC:8B:97:27:1A:DA:34:A0:CE:7C:17:95:8B
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1E6D
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/089DB16C769111F1BA451BEF65A30FBC.roa
Signing time: Wed 30 Sep 2026 16:29:35 +0000
ROA not before: Wed 30 Sep 2026 16:29:35 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 132165
IP address blocks: 43.245.128.0/24 maxlen: 24
43.245.129.0/24 maxlen: 24
43.245.130.0/24 maxlen: 24
43.245.131.0/24 maxlen: 24
103.12.120.0/24 maxlen: 24
103.12.121.0/24 maxlen: 24
103.12.122.0/24 maxlen: 24
103.12.123.0/24 maxlen: 24
103.246.108.0/22 maxlen: 22
103.246.108.0/24 maxlen: 24
103.246.109.0/24 maxlen: 24
111.88.2.0/24 maxlen: 24
111.88.3.0/24 maxlen: 24
111.88.4.0/24 maxlen: 24
111.88.5.0/24 maxlen: 24
111.88.6.0/24 maxlen: 24
111.88.7.0/24 maxlen: 24
111.119.160.0/24 maxlen: 24
111.119.161.0/24 maxlen: 24
111.119.162.0/24 maxlen: 24
111.119.163.0/24 maxlen: 24
111.119.164.0/24 maxlen: 24
111.119.165.0/24 maxlen: 24
111.119.166.0/24 maxlen: 24
111.119.167.0/24 maxlen: 24
113.203.192.0/24 maxlen: 24
113.203.193.0/24 maxlen: 24
113.203.195.0/24 maxlen: 24
113.203.200.0/24 maxlen: 24
113.203.201.0/24 maxlen: 24
113.203.202.0/24 maxlen: 24
113.203.203.0/24 maxlen: 24
113.203.204.0/24 maxlen: 24
113.203.205.0/24 maxlen: 24
113.203.207.0/24 maxlen: 24
115.42.64.0/24 maxlen: 24
115.42.65.0/24 maxlen: 24
115.42.66.0/24 maxlen: 24
115.42.67.0/24 maxlen: 24
115.42.68.0/24 maxlen: 24
115.42.69.0/24 maxlen: 24
115.42.70.0/24 maxlen: 24
115.42.71.0/24 maxlen: 24
118.103.226.0/24 maxlen: 24
118.103.227.0/24 maxlen: 24
118.103.228.0/24 maxlen: 24
118.103.229.0/24 maxlen: 24
118.103.230.0/24 maxlen: 24
118.103.231.0/24 maxlen: 24
118.103.232.0/24 maxlen: 24
118.103.233.0/24 maxlen: 24
118.103.234.0/24 maxlen: 24
118.103.235.0/24 maxlen: 24
118.103.236.0/24 maxlen: 24
118.103.237.0/24 maxlen: 24
118.103.238.0/24 maxlen: 24
118.103.239.0/24 maxlen: 24
2406:d00::/48 maxlen: 48
2406:d00:2222::/48 maxlen: 48
2406:d00:5555::/48 maxlen: 48
2406:d00:6666::/48 maxlen: 48
2406:d00:aaaa::/48 maxlen: 48
2406:d00:bbbb::/48 maxlen: 48
2406:d00:ccaa::/47 maxlen: 48
2406:d00:ccad::/48 maxlen: 48
2406:d00:ccc0::/46 maxlen: 48
2406:d00:cccc::/46 maxlen: 48
2406:d00:cce0::/48 maxlen: 48
2406:d00:ccea::/48 maxlen: 48
2406:d00:ddc1::/48 maxlen: 48
2406:d00:ddcc::/48 maxlen: 48
2406:d00:ddd1::/48 maxlen: 48
2406:d00:dddd::/48 maxlen: 48
2406:d00:ddf1::/48 maxlen: 48
2406:d00:ddff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 16:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7789 (0x1e6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Sep 30 16:29:35 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd38ef-cb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:06:66:5c:4b:b8:23:56:b3:16:2c:f6:17:
9d:74:c6:58:c7:a6:96:e8:5a:c5:ef:91:7c:83:79:
ab:0b:03:75:e9:75:d8:b5:ff:ef:00:b7:46:b3:43:
61:06:0e:e3:01:29:76:52:08:5b:e2:d4:c6:3f:f2:
7d:66:67:52:28:6e:b4:01:8c:1b:4a:30:ed:5e:80:
ef:74:ac:17:e3:b7:1c:e0:d1:0c:4b:43:7f:8e:bb:
07:46:40:43:f4:7b:c5:9b:d2:44:40:c7:56:c4:a5:
d0:9c:40:88:e4:30:a3:6f:ee:42:84:57:b5:1d:11:
da:18:0c:1e:15:bf:1e:32:84:b3:0f:5c:a3:e8:54:
ba:ed:ee:50:cf:a3:df:3c:18:d4:72:e4:70:02:bd:
69:a1:0a:26:92:22:ca:e3:44:76:6d:f8:b2:bd:b8:
41:62:ba:69:56:16:cf:63:62:02:88:63:29:8b:f8:
09:dc:4b:d2:10:f1:51:81:9f:44:44:11:3f:01:5e:
de:fd:7f:67:f8:9c:c7:d2:ea:f2:96:a4:77:c3:ec:
7f:ce:5c:08:af:85:89:22:d2:b0:86:a0:d8:8d:fc:
48:8b:73:96:07:01:a7:eb:7f:89:a1:d8:57:5e:59:
3b:b0:a7:53:ba:30:a6:d9:63:1f:81:85:aa:e1:63:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8A:6D:FD:99:27:CB:DC:8B:97:27:1A:DA:34:A0:CE:7C:17:95:8B
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/089DB16C769111F1BA451BEF65A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.128.0/22
103.12.120.0/22
103.246.108.0/22
111.88.2.0-111.88.7.255
111.119.160.0/21
113.203.192.0/23
113.203.195.0/24
113.203.200.0-113.203.205.255
113.203.207.0/24
115.42.64.0/21
118.103.226.0-118.103.239.255
IPv6:
2406:d00::/48
2406:d00:2222::/48
2406:d00:5555::/48
2406:d00:6666::/48
2406:d00:aaaa::/48
2406:d00:bbbb::/48
2406:d00:ccaa::/47
2406:d00:ccad::/48
2406:d00:ccc0::/46
2406:d00:cccc::/46
2406:d00:cce0::/48
2406:d00:ccea::/48
2406:d00:ddc1::/48
2406:d00:ddcc::/48
2406:d00:ddd1::/48
2406:d00:dddd::/48
2406:d00:ddf1::/48
2406:d00:ddff::/48
Signature Algorithm: sha256WithRSAEncryption
79:6e:9c:81:f9:ea:21:6b:c5:12:db:42:0c:8a:25:73:98:43:
00:b3:c5:de:5e:6f:4d:d1:66:cb:a8:f7:c1:da:0f:5e:af:e6:
e2:58:77:98:ba:dd:1c:ab:67:0a:02:92:f4:d1:07:a1:94:51:
b2:e4:dd:ef:86:9d:75:c2:c5:2a:eb:66:52:07:a3:25:e9:0c:
63:05:9a:84:c1:90:2a:b4:09:56:51:b1:e7:fc:7a:5b:2c:9e:
fe:8b:f2:2e:ab:bc:81:0d:a0:ce:eb:12:40:87:27:3f:a6:d4:
de:96:3b:da:79:79:08:a7:11:87:ce:d5:97:19:4e:dd:93:21:
32:43:c7:5b:68:01:8d:d9:4a:a4:f1:04:e3:47:f0:fd:83:83:
67:f0:0a:3e:3e:dd:bc:fd:2b:8c:33:e6:47:74:c2:aa:16:1c:
05:19:9d:c2:ba:90:d3:c9:48:fc:96:18:5e:90:d9:df:6b:8b:
98:ac:a4:d2:f2:cb:56:da:d8:1a:d4:20:75:7f:f4:36:02:86:
64:4e:a3:2e:de:08:56:f3:e1:8c:bd:a7:2b:99:ef:07:24:21:
d7:4a:a2:74:94:ec:03:1a:1b:ec:c3:05:89:a5:8d:6e:4f:41:
7e:06:e6:15:0d:50:35:16:f5:25:1e:15:21:65:d2:ac:ef:3a:
36:0f:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:48 2026 by rpki-client