Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/A0632940737D11F091340126C4F9AE02.roa
File: A0632940737D11F091340126C4F9AE02.roa (raw, json)
Hash identifier: KiWodE7g29mdgVRNK7L30SURwioKiTKo6BT0dA3M818=
Subject key identifier: FB:B6:24:F2:1B:3A:63:89:14:2E:7C:87:FD:11:68:55:9A:F2:52:EC
Certificate issuer: /CN=A917C615/serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E
Certificate serial: 0D09
Authority key identifier: 19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/A0632940737D11F091340126C4F9AE02.roa
Signing time: Sun 15 Feb 2026 06:24:53 +0000
ROA not before: Sun 15 Feb 2026 06:24:53 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 64043
IP address blocks: 59.153.16.0/22 maxlen: 22
59.153.16.0/23 maxlen: 23
59.153.16.0/24 maxlen: 24
59.153.17.0/24 maxlen: 24
59.153.18.0/23 maxlen: 23
59.153.18.0/24 maxlen: 24
59.153.19.0/24 maxlen: 24
103.197.248.0/22 maxlen: 22
103.197.248.0/23 maxlen: 23
103.197.248.0/24 maxlen: 24
103.197.249.0/24 maxlen: 24
103.197.250.0/23 maxlen: 23
103.197.250.0/24 maxlen: 24
103.197.251.0/24 maxlen: 24
2403:f2c0::/32 maxlen: 32
2403:f2c0::/36 maxlen: 36
2403:f2c0:efb::/48 maxlen: 48
2403:f2c0:efb:fb::/64 maxlen: 64
2403:f2c0:1000::/36 maxlen: 36
2403:f2c0:2000::/36 maxlen: 36
2403:f2c0:3000::/36 maxlen: 36
2403:f2c0:4000::/36 maxlen: 36
2403:f2c0:5000::/36 maxlen: 36
2403:f2c0:6000::/36 maxlen: 36
2403:f2c0:7000::/36 maxlen: 36
2403:f2c0:8000::/36 maxlen: 36
2403:f2c0:9000::/36 maxlen: 36
2403:f2c0:a000::/36 maxlen: 36
2403:f2c0:b000::/36 maxlen: 36
2403:f2c0:c000::/36 maxlen: 36
2403:f2c0:d000::/36 maxlen: 36
2403:f2c0:e000::/36 maxlen: 36
2403:f2c0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl
rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 17:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3337 (0xd09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C615, serialNumber=1948CC14F30ED83CAA52C8EC4B08C44CA83A629E
Validity
Not Before: Feb 15 06:24:53 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=699166b5-3190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:d6:db:be:19:fa:e8:bb:a2:31:81:6a:d1:
89:4b:8a:3b:dc:5e:70:2b:4f:f8:9c:65:26:4b:1e:
1d:27:d1:c3:80:7d:d1:61:28:8c:5b:cc:a0:25:88:
72:ad:ea:54:de:30:b8:56:bd:c6:e6:50:53:98:58:
31:22:a0:0a:ee:f1:f4:2b:04:b9:66:4a:b4:db:ed:
8d:24:da:30:74:03:25:0b:dd:ce:05:38:9f:6a:bd:
0f:44:fd:94:64:9a:14:ae:cb:f0:a6:05:e5:29:f7:
cc:aa:f7:6f:25:51:06:ab:23:63:b1:42:4e:5e:35:
da:91:e1:74:63:ae:61:7a:b5:b9:cf:b1:e9:4e:f5:
f7:9f:c0:6e:ec:c5:75:65:38:16:2a:89:0c:83:fb:
5e:44:87:2d:44:54:76:f2:9b:da:4e:a5:be:80:a4:
01:c5:bd:69:4f:b3:0c:dd:73:27:ca:ba:4e:ef:67:
ff:4a:9c:c2:3c:cd:ff:d5:ca:9b:26:6b:12:10:48:
17:2e:c1:57:c0:30:1c:91:bc:0c:72:7a:ec:b7:c6:
aa:92:fa:29:f2:7d:99:6f:4c:ca:17:b9:45:28:52:
f5:21:17:dc:8e:44:89:ac:b6:2f:2c:12:d3:fb:24:
47:46:6c:4d:fd:59:2c:bb:8b:77:ba:ce:35:28:8b:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B6:24:F2:1B:3A:63:89:14:2E:7C:87:FD:11:68:55:9A:F2:52:EC
X509v3 Authority Key Identifier:
keyid:19:48:CC:14:F3:0E:D8:3C:AA:52:C8:EC:4B:08:C4:4C:A8:3A:62:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/GUjMFPMO2DyqUsjsSwjETKg6Yp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUjMFPMO2DyqUsjsSwjETKg6Yp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C615/4200C9E6006C11EAA363C264C4F9AE02/A0632940737D11F091340126C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.153.16.0/22
103.197.248.0/22
IPv6:
2403:f2c0::/32
Signature Algorithm: sha256WithRSAEncryption
40:c9:f9:83:89:b1:f0:c0:00:c9:f0:35:cc:aa:c5:83:6f:74:
bf:d9:a5:5e:0e:d1:62:2a:8c:95:b2:fc:9e:3a:44:7c:d6:1d:
6a:55:13:37:fc:e5:c0:1e:9d:d6:84:b9:e7:2b:59:77:7b:9d:
d5:0f:a2:45:26:1a:0e:02:b3:3e:ce:c0:17:54:e6:23:56:ed:
44:89:5f:d6:4c:56:e8:bf:45:65:14:71:58:41:af:20:ef:ac:
b7:ed:55:3e:c3:3c:4c:d1:4d:b7:31:d1:ec:31:49:5e:28:d5:
58:d4:92:1b:92:b3:8f:cb:fa:4a:f9:75:af:84:6c:dc:51:46:
a9:68:35:d6:df:c8:a2:bf:98:90:2b:3a:66:77:40:d0:7a:47:
7a:46:dd:cc:70:b3:0d:67:f4:c0:70:51:f6:df:1d:f5:b2:0a:
50:27:ef:78:74:04:79:da:ae:48:de:2e:c8:2e:74:fb:73:7d:
8e:da:30:2c:bb:ff:e3:1b:7a:b1:05:59:14:15:60:44:d4:b4:
28:87:8b:a8:1c:7b:45:dc:1a:91:b1:19:51:99:cb:ce:93:6e:
aa:cd:70:6e:bb:1f:2b:a3:ed:91:9d:81:80:d5:20:63:1e:af:
10:a9:a1:c9:fe:c9:7e:32:6d:26:2e:fc:bb:38:40:f5:1d:8b:
21:65:98:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:37 2026 by rpki-client