Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/956DEFE80CDB11EAB14B9162C4F9AE02.roa
File: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (raw, json)
Hash identifier: XdeY3ZDU1gYVo5EdHhvTECPUKXRrCiVs/YpC5WS4lcg=
Subject key identifier: 8F:65:B8:1F:EB:E4:4C:4A:3A:20:6A:E3:AB:8F:9F:79:99:C4:1E:91
Certificate issuer: /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Certificate serial: 0D42
Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/956DEFE80CDB11EAB14B9162C4F9AE02.roa
Signing time: Mon 31 Aug 2026 18:36:01 +0000
ROA not before: Mon 31 Aug 2026 18:36:01 +0000
ROA not after: Fri 01 Jan 2027 00:00:00 +0000
asID: 133385
IP address blocks: 45.120.84.0/22 maxlen: 22
45.120.84.0/24 maxlen: 24
45.120.85.0/24 maxlen: 24
45.120.86.0/24 maxlen: 24
45.120.87.0/24 maxlen: 24
103.255.172.0/22 maxlen: 22
103.255.172.0/24 maxlen: 24
103.255.172.64/26 maxlen: 26
103.255.172.128/25 maxlen: 25
103.255.173.0/24 maxlen: 24
103.255.174.0/24 maxlen: 24
103.255.175.0/24 maxlen: 24
2400:8480:1000::/48 maxlen: 48
2400:8480:1100::/48 maxlen: 48
2400:8480:2010::/44 maxlen: 44
2400:8480:2020::/44 maxlen: 44
2400:8480:2030::/44 maxlen: 44
2400:8480:2040::/44 maxlen: 44
2400:8480:2110::/44 maxlen: 44
2400:8480:2120::/44 maxlen: 44
2400:8480:2130::/44 maxlen: 44
2400:8480:2140::/44 maxlen: 44
2400:8480:3010::/44 maxlen: 44
2400:8480:3020::/44 maxlen: 44
2400:8480:3030::/44 maxlen: 44
2400:8480:3040::/44 maxlen: 44
2400:8480:3110::/44 maxlen: 44
2400:8480:3120::/44 maxlen: 44
2400:8480:3130::/44 maxlen: 44
2400:8480:3140::/44 maxlen: 44
2400:8480:4000::/36 maxlen: 36
2400:8480:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 18:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Validity
Not Before: Aug 31 18:36:01 2026 GMT
Not After : Jan 1 00:00:00 2027 GMT
Subject: CN=6a95c991-16b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:96:a1:4b:e3:8d:1c:cc:c7:6a:ca:72:f2:c0:
59:b1:c8:1c:4e:5f:1a:b0:1e:b4:f5:16:96:01:c6:
ba:84:e8:56:20:5d:f9:34:97:5e:82:54:9c:40:40:
80:75:62:62:ca:28:42:d9:d9:5e:4e:c2:bc:07:50:
8f:0d:7d:0b:fa:86:27:c6:82:90:b8:65:be:da:3a:
c2:ea:31:2d:d7:d8:fa:dc:ed:05:53:cb:0b:c3:f6:
08:94:46:f5:53:13:5b:2b:11:08:18:a4:e6:6b:b6:
12:60:0d:84:ff:51:9a:f3:5f:f1:87:b1:0c:1e:c9:
2f:92:56:40:a9:50:1f:19:41:06:d3:3d:ca:d4:4d:
40:31:b5:3c:de:35:a4:f5:e1:c7:19:d3:dd:c5:9e:
fe:ce:ce:1e:f4:6c:4c:5a:45:e7:19:4e:14:4a:4c:
8d:14:0f:07:5b:87:0f:0f:f3:3a:f8:ff:4b:3d:9c:
98:ae:89:27:38:3e:a0:6d:35:7f:d4:cf:55:3a:6e:
8a:19:00:6d:9d:74:28:7e:c6:7a:b8:f7:62:e1:d7:
03:f6:38:24:14:a8:76:d4:f9:21:c7:ef:72:01:02:
83:f3:3b:0e:c0:63:c4:f1:0c:68:68:2d:4e:08:31:
e7:be:f7:dc:44:9b:7c:20:be:6d:b5:37:93:f1:9a:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:65:B8:1F:EB:E4:4C:4A:3A:20:6A:E3:AB:8F:9F:79:99:C4:1E:91
X509v3 Authority Key Identifier:
keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/956DEFE80CDB11EAB14B9162C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.120.84.0/22
103.255.172.0/22
IPv6:
2400:8480:1000::/48
2400:8480:1100::/48
2400:8480:2010::-2400:8480:204f:ffff:ffff:ffff:ffff:ffff
2400:8480:2110::-2400:8480:214f:ffff:ffff:ffff:ffff:ffff
2400:8480:3010::-2400:8480:304f:ffff:ffff:ffff:ffff:ffff
2400:8480:3110::-2400:8480:314f:ffff:ffff:ffff:ffff:ffff
2400:8480:4000::/35
Signature Algorithm: sha256WithRSAEncryption
03:ee:ad:9b:da:d8:5f:7f:19:8d:df:c8:b2:01:fc:7d:b8:63:
8b:23:31:f2:5e:c7:9e:fd:4b:56:6e:41:7e:c8:2e:06:a1:13:
52:80:74:d8:ac:5a:ef:88:c6:e7:98:56:29:6e:d9:fe:bd:87:
f8:d2:91:0d:b1:7d:69:4c:8a:d4:c8:e3:d8:cd:01:70:de:31:
bb:28:2a:33:81:d4:99:82:9e:ef:37:f8:17:74:61:2d:86:54:
84:dc:41:83:b1:28:2c:a0:40:ac:4f:dd:5c:1d:62:cb:76:95:
3a:f6:76:0d:f2:2c:76:3b:62:ed:92:bf:c4:69:24:24:0a:73:
90:ef:9d:65:2a:40:a3:64:66:0b:16:e7:aa:cf:2d:5c:a8:be:
e5:12:14:1b:89:0f:0d:db:bd:12:77:e4:e2:f8:f9:bf:6b:5e:
57:6e:a1:98:9a:5b:82:d8:1e:af:3e:f6:2f:c8:9c:ed:9f:53:
cb:b7:39:92:6c:44:9f:5f:ef:21:81:0c:fb:85:17:1c:4a:4d:
46:07:bd:27:da:ae:48:35:68:53:f3:f7:39:12:95:47:9b:8d:
55:41:8e:29:95:61:4f:32:3e:71:6d:08:c5:52:00:74:8b:d6:
06:60:8f:39:ea:64:64:4f:67:08:b8:f1:71:5e:ff:aa:df:69:
78:8a:22:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:07 2026 by rpki-client