Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/DB9D2EDA8B6311F1BE3015DD5011F970.roa
File: DB9D2EDA8B6311F1BE3015DD5011F970.roa (raw, json)
Hash identifier: PxR/0RyR6Js/JI8WBCRgtBu0jrNkQBg+FdIwvgRcULc=
Subject key identifier: B2:F8:2A:D5:F4:13:C5:7F:CC:B6:51:5F:BE:81:A9:F8:5E:AD:22:B7
Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial: 1CF2
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/DB9D2EDA8B6311F1BE3015DD5011F970.roa
Signing time: Wed 29 Jul 2026 15:40:43 +0000
ROA not before: Wed 29 Jul 2026 15:40:43 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 0
IP address blocks: 203.144.49.0/24 maxlen: 24
203.144.54.0/23 maxlen: 23
203.144.56.0/23 maxlen: 23
203.144.62.0/23 maxlen: 23
2402:79c0:4::/46 maxlen: 46
2402:79c0:8::/45 maxlen: 45
2402:79c0:10::/44 maxlen: 44
2402:79c0:20::/43 maxlen: 43
2402:79c0:40::/42 maxlen: 42
2402:79c0:80::/41 maxlen: 41
2402:79c0:10c::/46 maxlen: 46
2402:79c0:110::/44 maxlen: 44
2402:79c0:120::/43 maxlen: 43
2402:79c0:140::/42 maxlen: 42
2402:79c0:180::/41 maxlen: 41
2402:79c0:200::/39 maxlen: 39
2402:79c0:400::/38 maxlen: 38
2402:79c0:800::/37 maxlen: 37
2402:79c0:1000::/40 maxlen: 40
2402:79c0:1100::/43 maxlen: 43
2402:79c0:1120::/46 maxlen: 46
2402:79c0:1124::/47 maxlen: 47
2402:79c0:1127::/48 maxlen: 48
2402:79c0:1128::/45 maxlen: 45
2402:79c0:1130::/44 maxlen: 44
2402:79c0:1140::/46 maxlen: 46
2402:79c0:1145::/48 maxlen: 48
2402:79c0:1146::/47 maxlen: 47
2402:79c0:1149::/48 maxlen: 48
2402:79c0:114a::/47 maxlen: 47
2402:79c0:114c::/46 maxlen: 46
2402:79c0:1150::/44 maxlen: 44
2402:79c0:1160::/44 maxlen: 44
2402:79c0:1170::/45 maxlen: 45
2402:79c0:1179::/48 maxlen: 48
2402:79c0:117a::/47 maxlen: 47
2402:79c0:117c::/46 maxlen: 46
2402:79c0:1180::/41 maxlen: 41
2402:79c0:1200::/39 maxlen: 39
2402:79c0:1400::/38 maxlen: 38
2402:79c0:1800::/37 maxlen: 37
2402:79c0:2000::/35 maxlen: 35
2402:79c0:4000::/34 maxlen: 34
2402:79c0:8000::/34 maxlen: 34
2402:79c0:c000::/35 maxlen: 35
2402:79c0:e000::/36 maxlen: 36
2402:79c0:f000::/45 maxlen: 45
2402:79c0:f009::/48 maxlen: 48
2402:79c0:f00c::/46 maxlen: 46
2402:79c0:f010::/44 maxlen: 44
2402:79c0:f020::/43 maxlen: 43
2402:79c0:f040::/42 maxlen: 42
2402:79c0:f080::/42 maxlen: 42
2402:79c0:f0c0::/43 maxlen: 43
2402:79c0:f0e0::/44 maxlen: 44
2402:79c0:f0f0::/45 maxlen: 45
2402:79c0:f0f8::/48 maxlen: 48
2402:79c0:f0fa::/47 maxlen: 47
2402:79c0:f0fc::/46 maxlen: 46
2402:79c0:f100::/40 maxlen: 40
2402:79c0:f200::/39 maxlen: 39
2402:79c0:f400::/38 maxlen: 38
2402:79c0:f800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7410 (0x1cf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Validity
Not Before: Jul 29 15:40:43 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a6a1efb-a4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:dd:c3:9b:93:b7:4c:dd:c6:7e:5f:93:ef:
07:f8:57:eb:f3:c7:b3:1a:49:a8:b4:44:c1:d6:b0:
5e:8a:e4:4e:a0:c2:62:33:ca:a7:ed:5f:c9:af:a7:
f6:e0:f5:93:cf:c9:f5:3b:79:c7:ab:e3:35:4d:0b:
18:c3:43:b9:e3:e1:73:c6:65:e6:1e:7d:c8:55:e2:
c1:4a:d3:27:ca:dc:45:3c:41:d3:94:6b:94:d2:94:
bf:bb:cf:42:7c:ea:dc:66:97:a1:1b:1f:a3:4b:bd:
97:b5:18:ad:1d:4c:c6:3a:41:0b:50:2e:40:e8:f3:
31:42:e0:d9:e0:c5:cd:d1:11:0e:65:a0:29:4e:2d:
d6:c2:00:0b:05:22:d1:09:48:13:f1:27:27:e6:82:
fe:c1:48:94:ae:a4:d6:78:ff:78:92:3c:9c:41:f7:
57:d1:c7:a8:c0:91:69:d2:1f:09:9e:2f:82:f4:5c:
43:dc:a4:0b:0e:f1:38:9f:92:3f:29:88:e6:db:46:
d5:0d:69:48:3b:cf:2d:39:3d:07:91:d4:ce:3a:4a:
cb:2e:93:2f:56:10:11:f0:80:9e:4a:e9:70:17:9f:
e3:fc:2f:bf:a9:b2:c1:c1:db:7c:04:fa:95:49:7d:
5b:da:f8:8e:90:ef:12:1b:4c:7d:9b:0f:61:a3:71:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F8:2A:D5:F4:13:C5:7F:CC:B6:51:5F:BE:81:A9:F8:5E:AD:22:B7
X509v3 Authority Key Identifier:
keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/DB9D2EDA8B6311F1BE3015DD5011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.144.49.0/24
203.144.54.0-203.144.57.255
203.144.62.0/23
IPv6:
2402:79c0:4::-2402:79c0:ff:ffff:ffff:ffff:ffff:ffff
2402:79c0:10c::-2402:79c0:1125:ffff:ffff:ffff:ffff:ffff
2402:79c0:1127::-2402:79c0:1143:ffff:ffff:ffff:ffff:ffff
2402:79c0:1145::-2402:79c0:1147:ffff:ffff:ffff:ffff:ffff
2402:79c0:1149::-2402:79c0:1177:ffff:ffff:ffff:ffff:ffff
2402:79c0:1179::-2402:79c0:f007:ffff:ffff:ffff:ffff:ffff
2402:79c0:f009::/48
2402:79c0:f00c::-2402:79c0:f0f8:ffff:ffff:ffff:ffff:ffff
2402:79c0:f0fa::-2402:79c0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5c:65:f9:ad:d7:ea:2f:81:ce:e8:01:aa:72:96:f5:38:8a:d2:
5b:c5:86:97:e2:7a:7e:43:36:b9:86:ce:6b:72:59:73:b1:09:
1c:bf:bf:ad:cd:e3:56:40:ae:42:02:4c:0f:87:5e:d5:8b:34:
fd:09:84:18:c3:7a:0e:37:ea:e5:6a:f5:6b:f3:0e:6d:8a:a4:
67:a3:92:48:ff:1d:40:ae:d5:e2:d7:a9:84:ce:7d:70:fb:f9:
32:79:42:fd:39:53:51:e9:be:a5:71:3d:07:64:7f:29:91:aa:
41:be:72:99:3a:b1:5c:f0:e4:14:9e:ea:79:c0:e5:2c:8e:38:
ab:43:9d:92:33:f1:93:a3:b2:e8:3b:73:3b:69:7f:44:c4:6b:
a1:e1:40:04:2b:f4:74:f2:df:a6:67:7b:66:2d:8e:55:80:07:
32:ea:c9:7c:e4:a4:b1:5b:b9:8e:fc:a4:b0:91:ce:05:49:7c:
46:e3:61:e8:bb:17:de:ee:f6:65:ac:81:c0:7a:97:a0:b7:a6:
69:db:3e:a2:a4:91:cd:80:01:90:90:66:c7:97:58:9c:36:be:
49:75:24:74:9c:87:ae:0a:19:c9:a2:88:75:54:77:2d:d7:b8:
32:cb:a5:f4:a8:77:91:92:38:75:fe:28:28:8d:f4:b9:f2:e0:
45:24:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:25:21 2026 by rpki-client