Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/70F51BEE4B0D11EF94975151C4F9AE02.roa
File: 70F51BEE4B0D11EF94975151C4F9AE02.roa (raw, json)
Hash identifier: NBQabKoJ61OdWD6yytnri78eV79GGqtVtjZrPzmt/5c=
Subject key identifier: 53:0E:70:BA:3F:F8:6D:A5:ED:AA:08:D5:E6:BC:05:9C:26:BE:D7:9B
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 09CE
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/70F51BEE4B0D11EF94975151C4F9AE02.roa
Signing time: Thu 22 Oct 2026 08:25:39 +0000
ROA not before: Thu 22 Oct 2026 08:25:39 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 45609
IP address blocks: 27.56.0.0/13 maxlen: 24
103.235.8.0/22 maxlen: 24
106.192.0.0/11 maxlen: 24
110.224.0.0/14 maxlen: 24
117.96.0.0/17 maxlen: 22
117.96.0.0/18 maxlen: 24
117.96.64.0/19 maxlen: 24
117.96.96.0/20 maxlen: 24
117.96.112.0/21 maxlen: 24
117.96.120.0/22 maxlen: 24
117.96.124.0/23 maxlen: 23
117.96.128.0/20 maxlen: 24
117.96.144.0/21 maxlen: 24
117.96.153.0/24 maxlen: 24
117.96.154.0/24 maxlen: 24
117.96.160.0/20 maxlen: 24
117.96.176.0/20 maxlen: 24
117.97.0.0/17 maxlen: 19
117.97.0.0/18 maxlen: 24
117.97.64.0/19 maxlen: 20
117.97.64.0/20 maxlen: 24
117.97.80.0/21 maxlen: 21
117.97.80.0/22 maxlen: 24
117.97.91.0/24 maxlen: 24
117.97.92.0/24 maxlen: 24
117.97.93.0/24 maxlen: 24
117.97.94.0/24 maxlen: 24
117.97.128.0/17 maxlen: 24
117.98.0.0/17 maxlen: 24
150.129.212.0/22 maxlen: 24
223.176.0.0/12 maxlen: 24
223.224.32.0/19 maxlen: 24
223.224.64.0/18 maxlen: 24
223.224.128.0/17 maxlen: 24
223.225.0.0/16 maxlen: 24
223.226.0.0/15 maxlen: 24
223.228.0.0/14 maxlen: 24
223.232.0.0/13 maxlen: 24
2401:4900:800::/37 maxlen: 48
2401:4900:1000::/37 maxlen: 48
2401:4900:1800::/37 maxlen: 48
2401:4900:2000::/37 maxlen: 48
2401:4900:2800::/37 maxlen: 48
2401:4900:3000::/37 maxlen: 48
2401:4900:3800::/37 maxlen: 48
2401:4900:4000::/37 maxlen: 48
2401:4900:4800::/37 maxlen: 48
2401:4900:5000::/37 maxlen: 48
2401:4900:5800::/37 maxlen: 48
2401:4900:6000::/37 maxlen: 48
2401:4900:7000::/37 maxlen: 48
2401:4900:7800::/37 maxlen: 48
2401:4900:8000::/37 maxlen: 48
2401:4900:9000::/37 maxlen: 48
2401:4900:a000::/37 maxlen: 48
2401:4900:a800::/37 maxlen: 44
2401:4900:a820::/45 maxlen: 48
2401:4900:a828::/45 maxlen: 48
2401:4900:a830::/45 maxlen: 48
2401:4900:a838::/45 maxlen: 48
2401:4900:a9f0::/45 maxlen: 48
2401:4900:a9f8::/45 maxlen: 48
2401:4900:aa00::/45 maxlen: 48
2401:4900:aa08::/45 maxlen: 48
2401:4900:aa30::/45 maxlen: 48
2401:4900:aa38::/45 maxlen: 48
2401:4900:aa40::/45 maxlen: 48
2401:4900:aa48::/45 maxlen: 48
2401:4900:aa70::/45 maxlen: 48
2401:4900:aa78::/45 maxlen: 48
2401:4900:aa80::/45 maxlen: 48
2401:4900:aa88::/45 maxlen: 48
2401:4900:ab78::/45 maxlen: 48
2401:4900:ad10::/45 maxlen: 48
2401:4900:ad18::/45 maxlen: 48
2401:4900:b000::/37 maxlen: 48
2401:4900:b800::/37 maxlen: 48
2401:4900:c000::/37 maxlen: 48
2401:4900:c800::/37 maxlen: 48
2401:4900:d000::/37 maxlen: 48
2401:4900:d800::/37 maxlen: 44
2401:4900:da40::/48 maxlen: 48
2401:4900:e000::/37 maxlen: 44
2401:4900:e800::/37 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 20:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2510 (0x9ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Oct 22 08:25:39 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ad9c882-9866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:34:5f:a0:9a:5f:31:d8:75:93:7f:62:b1:
12:21:bb:81:82:b6:88:31:02:46:71:9b:e1:13:06:
2d:40:69:d2:be:53:d0:5e:63:2e:c4:b6:84:b2:5c:
b5:7f:9c:56:07:85:1c:ee:51:b1:15:a1:73:47:3c:
1b:74:89:51:c9:c0:62:08:f2:5d:d0:53:f1:0b:f7:
37:62:ad:ff:c3:54:1a:e1:2e:5f:d7:97:79:1d:a4:
6d:15:5e:26:0c:a9:76:ac:f0:be:ab:dd:7c:c9:bd:
ab:02:de:7b:f5:85:7e:b9:8c:43:de:e6:50:0d:3e:
bd:68:fb:eb:94:c6:ae:20:42:cd:dd:20:e8:64:63:
b1:37:30:82:1e:46:f7:c3:14:e5:72:fd:bd:0d:8b:
f8:c1:77:dd:7d:83:43:b6:a0:71:61:fe:b8:46:a6:
37:25:ff:39:3e:82:56:fe:2c:53:a5:9b:3d:cb:1e:
92:55:ef:f4:ec:a9:49:8f:3b:88:23:6d:b7:60:e4:
94:9e:f3:db:10:20:05:4d:ec:6c:1f:ed:03:e2:fe:
f6:2d:a2:b8:a6:93:6f:37:d1:a6:d1:55:b9:35:22:
d1:dc:85:eb:ed:70:81:c2:bc:ad:21:1f:57:da:6d:
37:4d:a7:a3:fe:82:1d:d9:0f:a4:c9:e2:27:37:9b:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0E:70:BA:3F:F8:6D:A5:ED:AA:08:D5:E6:BC:05:9C:26:BE:D7:9B
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/70F51BEE4B0D11EF94975151C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.56.0.0/13
103.235.8.0/22
106.192.0.0/11
110.224.0.0/14
117.96.0.0-117.96.151.255
117.96.153.0-117.96.154.255
117.96.160.0/19
117.97.0.0-117.98.127.255
150.129.212.0/22
223.176.0.0/12
223.224.32.0-223.239.255.255
IPv6:
2401:4900:800::-2401:4900:67ff:ffff:ffff:ffff:ffff:ffff
2401:4900:7000::-2401:4900:87ff:ffff:ffff:ffff:ffff:ffff
2401:4900:9000::/37
2401:4900:a000::-2401:4900:efff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7d:28:8c:4b:2b:52:47:99:92:74:c6:85:fa:d7:04:49:e3:79:
23:5c:be:79:3f:a3:3e:6e:3e:7c:da:27:30:4e:42:1c:5d:8e:
1d:68:94:7c:10:c8:ef:f4:65:f1:c3:9a:06:ce:bd:c8:2f:bc:
ad:e3:76:3c:e3:d3:e1:c2:4b:09:6d:45:6c:6b:e1:31:ae:9d:
6f:26:94:70:6d:4d:c2:d1:8e:d1:3d:b0:82:a9:17:c4:0b:13:
96:94:31:b8:08:af:9a:b0:c9:50:c9:a7:c7:82:54:5a:87:49:
a5:0f:4f:5e:76:12:6b:61:c8:8c:c3:f4:c7:0b:f8:2c:a7:26:
0f:f6:ef:27:4d:07:1b:54:af:b6:ff:57:99:68:db:0e:37:2f:
49:98:f1:52:c4:67:60:4e:f6:79:68:f1:fb:c4:fc:0c:80:a2:
c2:a8:e7:2e:15:89:be:06:0f:10:11:64:2e:fd:9f:b8:ad:42:
cd:8c:bb:6b:b6:ad:8c:cb:84:d5:2d:30:24:81:e8:41:e6:58:
e3:0c:13:04:18:4b:0c:75:2f:a4:92:38:ac:02:0b:64:3c:ea:
79:76:f5:7c:5f:6f:39:96:12:de:75:4e:b7:6a:04:0f:6c:b4:
d8:4b:15:92:5b:09:30:be:f5:47:6f:55:a0:2e:09:f7:4e:f8:
12:26:f9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:51:54 2026 by rpki-client