Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa
File: C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa (raw, json)
Hash identifier: UYJjUuDuK1W3HsQFdJ/davmP3gSwAU5pFdDlWucm3no=
Subject key identifier: 24:5D:5A:5D:B7:30:B1:C9:16:DD:84:35:D7:6F:D5:EF:58:12:EC:6D
Certificate issuer: /CN=A919E1AE/serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Certificate serial: 0A18
Authority key identifier: 53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa
Signing time: Tue 18 Aug 2026 20:39:59 +0000
ROA not before: Tue 18 Aug 2026 20:39:59 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 17924
IP address blocks: 45.64.240.0/22 maxlen: 24
49.130.0.0/15 maxlen: 15
49.130.0.0/17 maxlen: 18
49.130.128.0/24 maxlen: 24
49.130.129.0/24 maxlen: 24
49.130.130.0/24 maxlen: 24
49.130.131.0/24 maxlen: 24
49.130.132.0/23 maxlen: 24
49.130.134.0/23 maxlen: 24
49.130.136.0/21 maxlen: 21
49.130.144.0/20 maxlen: 20
49.130.160.0/19 maxlen: 19
49.130.192.0/18 maxlen: 18
49.131.0.0/17 maxlen: 18
49.131.128.0/17 maxlen: 17
103.1.16.0/22 maxlen: 22
121.202.0.0/15 maxlen: 15
121.202.0.0/18 maxlen: 18
121.202.64.0/19 maxlen: 19
121.202.96.0/20 maxlen: 20
121.202.112.0/24 maxlen: 24
121.202.113.0/24 maxlen: 24
121.202.124.0/24 maxlen: 24
121.202.126.0/24 maxlen: 24
121.202.127.0/24 maxlen: 24
121.202.128.0/17 maxlen: 17
121.202.131.0/24 maxlen: 24
121.202.132.0/24 maxlen: 24
121.202.137.0/24 maxlen: 24
121.202.142.0/24 maxlen: 24
121.202.150.0/24 maxlen: 24
121.202.160.0/19 maxlen: 19
121.202.206.0/24 maxlen: 24
121.202.232.0/22 maxlen: 22
121.202.236.0/22 maxlen: 22
121.202.251.0/24 maxlen: 24
121.202.252.0/24 maxlen: 24
121.202.253.0/24 maxlen: 24
121.202.254.0/24 maxlen: 24
121.203.0.0/20 maxlen: 20
121.203.16.0/20 maxlen: 20
121.203.32.0/20 maxlen: 20
121.203.48.0/20 maxlen: 20
121.203.64.0/18 maxlen: 18
121.203.64.0/21 maxlen: 21
121.203.72.0/21 maxlen: 21
121.203.80.0/21 maxlen: 21
121.203.88.0/21 maxlen: 21
121.203.96.0/21 maxlen: 21
121.203.104.0/21 maxlen: 21
121.203.112.0/21 maxlen: 21
121.203.120.0/21 maxlen: 21
121.203.128.0/18 maxlen: 18
121.203.192.0/19 maxlen: 19
121.203.224.0/20 maxlen: 20
121.203.240.0/21 maxlen: 21
121.203.244.0/24 maxlen: 24
121.203.245.0/24 maxlen: 24
121.203.246.0/24 maxlen: 24
121.203.247.0/24 maxlen: 24
121.203.248.0/21 maxlen: 21
180.219.0.0/16 maxlen: 16
180.219.0.0/20 maxlen: 24
180.219.16.0/20 maxlen: 24
180.219.32.0/20 maxlen: 24
180.219.48.0/20 maxlen: 24
180.219.64.0/20 maxlen: 24
180.219.80.0/20 maxlen: 24
180.219.96.0/20 maxlen: 24
180.219.112.0/20 maxlen: 24
180.219.128.0/20 maxlen: 24
180.219.144.0/20 maxlen: 24
180.219.160.0/20 maxlen: 24
180.219.176.0/20 maxlen: 24
180.219.192.0/19 maxlen: 19
180.219.192.0/20 maxlen: 24
180.219.208.0/21 maxlen: 24
180.219.216.0/21 maxlen: 24
180.219.224.0/19 maxlen: 19
180.219.224.0/21 maxlen: 24
180.219.232.0/21 maxlen: 24
180.219.240.0/21 maxlen: 24
180.219.248.0/21 maxlen: 24
182.152.0.0/15 maxlen: 15
182.152.0.0/17 maxlen: 17
182.152.128.0/17 maxlen: 17
182.152.128.0/21 maxlen: 21
182.152.136.0/21 maxlen: 21
182.152.144.0/21 maxlen: 21
182.152.152.0/21 maxlen: 21
182.152.160.0/21 maxlen: 21
182.152.168.0/21 maxlen: 21
182.152.176.0/21 maxlen: 21
182.152.184.0/21 maxlen: 21
182.152.192.0/21 maxlen: 21
182.152.200.0/21 maxlen: 21
182.152.208.0/21 maxlen: 21
182.152.216.0/21 maxlen: 21
182.152.224.0/21 maxlen: 21
182.152.232.0/21 maxlen: 21
182.152.240.0/21 maxlen: 21
182.152.248.0/21 maxlen: 21
182.153.0.0/18 maxlen: 19
182.153.64.0/19 maxlen: 19
182.153.128.0/19 maxlen: 19
182.153.160.0/19 maxlen: 19
182.153.192.0/19 maxlen: 19
182.153.224.0/19 maxlen: 19
182.153.248.0/21 maxlen: 21
203.78.32.0/21 maxlen: 21
203.78.32.0/24 maxlen: 24
203.78.36.0/24 maxlen: 24
203.78.37.0/24 maxlen: 24
203.78.40.0/22 maxlen: 22
203.78.40.0/24 maxlen: 24
203.78.41.0/24 maxlen: 24
203.78.42.0/24 maxlen: 24
2407:b400::/32 maxlen: 32
2407:b400:31:11::/64 maxlen: 64
2407:b400:51:3::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2584 (0xa18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E1AE, serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Validity
Not Before: Aug 18 20:39:59 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a84c31f-62d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:c7:cc:57:d5:c1:88:00:36:10:0d:8f:13:
be:01:97:ca:82:28:ce:ff:7a:41:9b:ed:52:16:ef:
91:12:bc:22:07:78:0c:72:06:39:64:e0:38:31:cd:
49:7d:47:60:12:2a:df:96:db:8d:14:1c:2a:4b:76:
0f:66:45:ba:ff:12:9a:54:b2:1c:29:60:87:ee:be:
65:de:67:f7:19:d3:05:b9:d6:45:54:83:7d:df:5c:
1d:ee:6b:b9:d2:6a:29:97:66:28:21:85:45:64:cc:
f9:dc:33:e4:07:e8:45:a5:66:fb:df:2a:48:ac:8c:
33:26:62:c5:e7:e7:46:f5:3f:79:89:c8:4d:fe:a9:
f6:58:45:25:1c:fa:11:d2:e4:1c:fc:4f:1a:db:2f:
30:98:cc:08:fb:86:2f:35:1d:bf:91:8f:82:2f:7e:
01:27:bc:df:a0:45:d1:69:a9:8f:98:1b:40:c7:57:
35:56:63:3e:2c:57:23:34:0a:7a:4a:61:02:6f:59:
b6:ae:7f:08:9d:85:67:59:9c:b6:f0:f1:bd:b8:54:
c4:4b:61:ec:d5:f0:b8:dd:30:90:bf:ac:ea:97:72:
2b:cc:ac:73:59:97:cb:da:60:6a:04:a4:6f:26:ed:
79:b8:38:de:c4:57:5c:2d:3d:e6:2b:58:02:db:1e:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5D:5A:5D:B7:30:B1:C9:16:DD:84:35:D7:6F:D5:EF:58:12:EC:6D
X509v3 Authority Key Identifier:
keyid:53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.64.240.0/22
49.130.0.0/15
103.1.16.0/22
121.202.0.0/15
180.219.0.0/16
182.152.0.0/15
203.78.32.0-203.78.43.255
IPv6:
2407:b400::/32
Signature Algorithm: sha256WithRSAEncryption
a8:61:fe:46:a9:48:c6:1e:de:fe:11:a9:4c:7a:b0:86:4f:4f:
82:66:e3:d1:42:7d:e1:36:3f:52:f7:21:8a:82:20:1d:bf:dc:
c7:27:81:93:19:de:a8:f1:e5:f8:8b:be:43:f3:2c:eb:ee:ed:
b4:78:20:fb:82:08:2e:27:47:80:d9:49:b9:7d:db:0d:93:b3:
24:6c:71:32:8c:3b:4d:f6:03:ed:66:0d:12:28:9c:50:e4:51:
6d:2d:39:96:67:13:6f:68:21:c5:67:00:f3:c1:59:91:2d:87:
b3:fe:2c:95:13:d6:d5:73:f7:e0:f4:63:27:89:ee:3e:42:6d:
69:9d:98:a0:64:6a:18:54:a0:19:ab:5a:15:f5:dd:0e:c2:58:
ea:4a:1a:c5:48:2a:fa:70:fe:56:24:5a:c5:1b:9e:2b:c8:1b:
71:b9:09:9b:84:ee:25:5e:ac:99:c8:50:ff:2b:f2:12:8e:a0:
07:a7:99:38:49:52:b0:d8:c9:43:c9:ff:7a:be:ce:8f:ba:27:
93:c6:07:c2:4e:28:29:2b:34:2b:41:9d:b2:97:a4:da:6d:4f:
28:6a:91:31:97:44:f7:5b:1b:a3:8b:e8:e4:69:14:e5:84:bd:
9b:54:78:8f:fa:07:39:58:c7:a2:1b:dc:82:24:1c:8a:e8:35:
28:b0:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:17:04 2026 by rpki-client