Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/93069024F98111E9BCD2807EC4F9AE02.roa
File: 93069024F98111E9BCD2807EC4F9AE02.roa (raw, json)
Hash identifier: c/Qr5qwe2XjYyojHVXuLw/e48mfxjyzRLR2wQ3jn7Ds=
Subject key identifier: E2:A6:E0:69:EE:3A:39:FB:E0:F2:1B:3C:DC:1C:66:AD:70:94:85:AE
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3B99
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/93069024F98111E9BCD2807EC4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:23:52 +0000
ROA not before: Thu 20 Aug 2026 16:23:52 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 24203
IP address blocks: 112.215.36.0/24 maxlen: 24
112.215.44.0/24 maxlen: 24
112.215.45.0/24 maxlen: 24
112.215.50.0/24 maxlen: 24
112.215.63.0/24 maxlen: 24
112.215.64.0/24 maxlen: 24
112.215.66.0/24 maxlen: 24
112.215.79.0/24 maxlen: 24
112.215.151.0/24 maxlen: 24
112.215.153.0/24 maxlen: 24
112.215.170.0/24 maxlen: 24
112.215.171.0/24 maxlen: 24
112.215.172.0/24 maxlen: 24
112.215.200.0/24 maxlen: 24
112.215.209.0/24 maxlen: 24
112.215.211.0/24 maxlen: 24
112.215.238.0/24 maxlen: 24
112.215.253.0/24 maxlen: 24
121.52.41.0/24 maxlen: 24
202.152.240.0/24 maxlen: 24
202.152.243.0/24 maxlen: 24
2400:9800:3::/48 maxlen: 48
2400:9800:4::/48 maxlen: 48
2400:9800:5::/48 maxlen: 48
2400:9800:6::/48 maxlen: 48
2400:9800:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15257 (0x3b99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 20 16:23:52 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a872a18-c33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:fc:e2:f1:65:c9:4a:42:78:4f:2e:d6:58:
cf:68:b4:3f:2c:0a:b4:f3:51:1b:09:f3:ba:06:bf:
63:ae:f1:ef:31:af:77:8f:fd:ce:e7:c0:72:c5:95:
ee:f6:d4:c9:3b:6d:e3:e4:fb:d4:16:4a:73:b8:5a:
f1:30:8c:72:fb:0b:4f:e5:91:06:97:9c:06:a5:a8:
bb:4e:64:d8:05:44:91:d4:55:84:0d:0d:0d:ea:85:
e1:27:a2:34:fc:1f:4f:02:72:2d:99:31:1f:5b:11:
a0:5a:1a:34:2a:bf:7a:a0:16:b9:a5:0a:7d:e0:a6:
f3:4d:72:ce:6e:2d:36:fb:76:fc:ca:0b:03:19:d8:
d1:70:67:7b:c5:a4:06:56:40:7b:fb:45:5b:51:fa:
79:82:0c:73:60:08:13:34:53:20:ae:e0:e1:79:cb:
bb:b8:72:08:54:51:1c:ba:51:15:3b:4c:c9:00:a1:
96:59:e6:14:f1:0c:6e:91:06:77:ea:ee:5c:62:a4:
8c:45:2d:79:85:76:0f:c5:7b:fe:67:37:60:99:b5:
57:68:bc:4c:12:a4:91:16:22:f9:a5:9d:6f:0e:e6:
c3:65:bb:ca:cb:38:5c:14:7a:d1:03:a0:6d:f8:1e:
ce:0c:fc:1b:57:40:fd:fb:a7:3e:ad:4b:2e:86:cb:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A6:E0:69:EE:3A:39:FB:E0:F2:1B:3C:DC:1C:66:AD:70:94:85:AE
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/93069024F98111E9BCD2807EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
112.215.36.0/24
112.215.44.0/23
112.215.50.0/24
112.215.63.0-112.215.64.255
112.215.66.0/24
112.215.79.0/24
112.215.151.0/24
112.215.153.0/24
112.215.170.0-112.215.172.255
112.215.200.0/24
112.215.209.0/24
112.215.211.0/24
112.215.238.0/24
112.215.253.0/24
121.52.41.0/24
202.152.240.0/24
202.152.243.0/24
IPv6:
2400:9800:3::-2400:9800:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:c4:0c:a1:e2:5a:4e:80:34:c8:32:31:5f:be:a3:ab:33:f2:
3a:17:8a:05:09:db:1b:68:2c:90:50:5c:6a:83:db:f4:38:d7:
fc:c3:9f:21:04:46:87:8c:75:31:49:c8:ed:34:89:f9:c0:f6:
f6:5c:4f:38:50:55:43:47:b1:07:24:27:96:ce:6c:87:fd:e8:
cb:09:76:4b:40:57:1f:9b:af:7c:20:56:86:96:c3:34:d4:b3:
b0:fc:3b:00:7a:a1:9a:51:f0:70:34:91:5d:29:0f:8f:64:8d:
18:bb:17:88:d4:95:99:0b:83:8c:bc:bc:51:c1:48:2e:6c:85:
d8:68:18:f7:51:23:da:43:46:a7:d4:03:50:23:63:50:44:b8:
98:bc:14:75:23:f9:49:d5:87:ff:da:72:28:c8:ea:26:ff:c5:
1e:a5:9d:ca:49:85:00:a2:6c:ac:52:e3:38:7d:e4:fa:6c:e2:
bf:ce:2c:9c:2a:6a:41:64:66:97:ea:00:38:46:cd:2d:8b:c1:
fc:bc:a3:94:56:28:ee:84:02:6b:c1:c1:f4:40:7c:12:51:99:
0a:4f:af:c3:17:35:9f:80:78:39:a3:be:83:5a:3c:5b:47:89:
78:71:f7:18:28:2e:28:61:69:fd:55:8f:d5:b1:9e:22:0e:19:
1e:56:49:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:18 2026 by rpki-client