Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/653CF2F6F25A11E9937D9D73C4F9AE02.roa
File: 653CF2F6F25A11E9937D9D73C4F9AE02.roa (raw, json)
Hash identifier: z3Qd25DfenB+NjP0z1LSh5qAD8RfB85Kuus6ORYlZO8=
Subject key identifier: 8B:51:61:A5:C6:EC:BF:E2:3B:DA:4E:74:21:08:B3:0F:7F:41:25:F9
Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930
Certificate serial: 0E26
Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/653CF2F6F25A11E9937D9D73C4F9AE02.roa
Signing time: Wed 30 Sep 2026 18:35:35 +0000
ROA not before: Wed 30 Sep 2026 18:35:35 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 58715
IP address blocks: 45.113.132.0/22 maxlen: 24
59.152.96.0/20 maxlen: 24
103.21.40.0/22 maxlen: 24
103.85.156.0/22 maxlen: 24
144.48.116.0/22 maxlen: 24
182.48.64.0/19 maxlen: 24
2404:4f80::/32 maxlen: 36
2404:4f80::/48 maxlen: 48
2404:4f80:f::/48 maxlen: 48
2404:4f80:10::/48 maxlen: 48
2404:4f80:11::/48 maxlen: 48
2404:4f80:12::/48 maxlen: 48
2404:4f80:13::/48 maxlen: 48
2404:4f80:14::/48 maxlen: 48
2404:4f80:15::/48 maxlen: 48
2404:4f80:16::/48 maxlen: 48
2404:4f80:17::/48 maxlen: 48
2404:4f80:18::/48 maxlen: 48
2404:4f80:19::/48 maxlen: 48
2404:4f80:1a::/48 maxlen: 48
2404:4f80:1b::/48 maxlen: 48
2404:4f80:1c::/48 maxlen: 48
2404:4f80:1d::/48 maxlen: 48
2404:4f80:1e::/48 maxlen: 48
2404:4f80:1f::/48 maxlen: 48
2404:4f80:20::/48 maxlen: 48
2404:4f80:21::/48 maxlen: 48
2404:4f80:22::/48 maxlen: 48
2404:4f80:23::/48 maxlen: 48
2404:4f80:29::/48 maxlen: 48
2404:4f80:30::/48 maxlen: 48
2404:4f80:31::/48 maxlen: 48
2404:4f80:32::/48 maxlen: 48
2404:4f80:33::/48 maxlen: 48
2404:4f80:34::/48 maxlen: 48
2404:4f80:35::/48 maxlen: 48
2404:4f80:36::/48 maxlen: 48
2404:4f80:37::/48 maxlen: 48
2404:4f80:38::/48 maxlen: 48
2404:4f80:39::/48 maxlen: 48
2404:4f80:3a::/48 maxlen: 48
2404:4f80:3b::/48 maxlen: 48
2404:4f80:3c::/48 maxlen: 48
2404:4f80:3d::/48 maxlen: 48
2404:4f80:3e::/48 maxlen: 48
2404:4f80:71::/48 maxlen: 48
2404:4f80:72::/48 maxlen: 48
2404:4f80:73::/48 maxlen: 48
2404:4f80:310::/48 maxlen: 48
2404:4f80:311::/48 maxlen: 48
2404:4f80:312::/48 maxlen: 48
2404:4f80:313::/48 maxlen: 48
2404:4f80:314::/48 maxlen: 48
2404:4f80:315::/48 maxlen: 48
2404:4f80:316::/48 maxlen: 48
2404:4f80:317::/48 maxlen: 48
2404:4f80:318::/48 maxlen: 48
2404:4f80:319::/48 maxlen: 48
2404:4f80:31a::/48 maxlen: 48
2404:4f80:31b::/48 maxlen: 48
2404:4f80:31c::/48 maxlen: 48
2404:4f80:31d::/48 maxlen: 48
2404:4f80:31e::/48 maxlen: 48
2404:4f80:31f::/48 maxlen: 48
2404:4f80:320::/48 maxlen: 48
2404:4f80:321::/48 maxlen: 48
2404:4f80:322::/48 maxlen: 48
2404:4f80:323::/48 maxlen: 48
2404:4f80:324::/48 maxlen: 48
2404:4f80:325::/48 maxlen: 48
2404:4f80:326::/48 maxlen: 48
2404:4f80:327::/48 maxlen: 48
2404:4f80:328::/48 maxlen: 48
2404:4f80:329::/48 maxlen: 48
2404:4f80:32a::/48 maxlen: 48
2404:4f80:32b::/48 maxlen: 48
2404:4f80:32c::/48 maxlen: 48
2404:4f80:32d::/48 maxlen: 48
2404:4f80:330::/48 maxlen: 48
2404:4f80:331::/48 maxlen: 48
2404:4f80:332::/48 maxlen: 48
2404:4f80:333::/48 maxlen: 48
2404:4f80:334::/48 maxlen: 48
2404:4f80:335::/48 maxlen: 48
2404:4f80:336::/48 maxlen: 48
2404:4f80:337::/48 maxlen: 48
2404:4f80:338::/48 maxlen: 48
2404:4f80:339::/48 maxlen: 48
2404:4f80:33b::/48 maxlen: 48
2404:4f80:33c::/48 maxlen: 48
2404:4f80:33d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl
rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 17:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3622 (0xe26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930
Validity
Not Before: Sep 30 18:35:35 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd5677-3ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:69:df:db:9f:1f:7b:1d:30:cb:99:33:74:
5a:d4:9e:01:3f:0f:43:7a:08:c5:54:74:62:6e:d3:
c9:84:8e:55:8e:43:48:39:1a:a1:92:d0:71:6b:13:
ef:31:4b:39:3c:3c:48:f2:5d:90:91:bf:21:dd:44:
6b:d9:51:f1:4e:3a:dc:0a:ff:e7:f5:48:f0:fe:c2:
f1:07:43:3a:37:ec:f7:4a:bc:4c:28:e7:5f:e6:4c:
ad:1f:18:90:91:dd:7c:46:a4:1b:d7:59:c9:7b:ac:
24:19:59:d0:41:66:06:88:09:94:d6:5f:63:73:f5:
30:cb:85:38:ef:40:06:d9:b7:84:59:09:1a:b1:1a:
73:aa:b2:4e:11:b5:bb:3e:8e:79:a6:39:d7:f1:4d:
a5:81:69:2b:07:52:99:62:c5:06:f0:b6:21:51:ff:
d2:58:8e:7e:59:2b:fa:24:8b:a9:13:4e:02:f6:b3:
04:cb:a0:45:59:d5:0d:e0:8b:4f:37:d3:ad:7c:b7:
dd:c8:ee:5a:1a:2b:a5:4f:42:6e:d3:ab:e1:06:f0:
73:70:7f:74:3e:d9:0c:fb:78:07:16:14:ad:b2:aa:
1f:5f:0f:ef:63:76:36:e0:da:2c:a1:82:69:7f:7a:
f6:47:2f:2b:7b:de:cf:34:75:90:94:22:f1:01:21:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:61:A5:C6:EC:BF:E2:3B:DA:4E:74:21:08:B3:0F:7F:41:25:F9
X509v3 Authority Key Identifier:
keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/653CF2F6F25A11E9937D9D73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.113.132.0/22
59.152.96.0/20
103.21.40.0/22
103.85.156.0/22
144.48.116.0/22
182.48.64.0/19
IPv6:
2404:4f80::/32
Signature Algorithm: sha256WithRSAEncryption
2e:9f:51:63:5c:44:25:6c:dc:66:cc:30:46:b3:50:64:e1:31:
b3:03:ca:df:ed:d9:bf:36:44:93:53:1b:06:cb:ea:91:40:24:
b7:e7:34:6f:4b:4e:af:26:e7:e9:9c:38:f5:bc:f5:f9:f2:32:
3f:7a:6e:de:60:7d:01:3b:ed:c8:f1:8f:c2:d1:98:28:0c:ea:
7e:95:fd:97:2c:f6:5b:08:57:32:ba:b5:b3:5d:8e:66:ec:77:
1e:07:0f:c4:4d:2a:ff:95:85:8a:87:3e:f3:9e:0a:ae:e1:a5:
da:fd:08:7c:a5:27:56:8b:01:67:04:20:e8:8b:6e:26:29:c7:
33:d3:06:1f:09:ad:c9:a0:3a:87:69:47:d6:c5:79:4d:b7:c8:
a2:5b:b5:3a:1b:72:63:6d:d2:bf:3e:c3:21:db:93:1e:72:d5:
6c:06:05:89:6f:e1:f7:45:a5:14:c1:6a:80:b5:8b:70:c8:45:
99:02:22:c2:30:a0:2e:31:63:00:ed:6f:2d:bc:69:59:26:a4:
e6:15:31:b2:bd:89:56:0f:3b:bd:a3:35:98:68:00:2e:62:b9:
d5:1a:fe:8f:4e:99:f7:62:ac:57:98:a1:53:40:c5:81:e5:e0:
43:6e:03:8f:40:68:39:3a:ce:98:7f:82:79:8a:11:08:db:85:
5a:60:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:41:32 2026 by rpki-client