Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa
File: C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa (raw, json)
Hash identifier: 56iFltMvcWWzpgKTSJKCJMcFxtjBPwUJV2j1BYAuQeY=
Subject key identifier: B0:F2:E1:01:C0:52:18:8C:6E:B9:26:41:9A:75:8C:84:6D:1E:9C:41
Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial: 3582
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa
Signing time: Tue 16 Jun 2026 15:13:32 +0000
ROA not before: Tue 16 Jun 2026 15:13:32 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 133159
IP address blocks: 43.224.180.0/22 maxlen: 22
45.124.52.0/22 maxlen: 22
103.1.184.0/22 maxlen: 22
103.16.128.0/22 maxlen: 22
103.17.56.0/24 maxlen: 24
103.17.57.0/24 maxlen: 24
103.100.36.0/22 maxlen: 23
103.249.236.0/22 maxlen: 22
110.232.112.0/22 maxlen: 22
112.213.32.0/21 maxlen: 21
112.213.36.0/24 maxlen: 24
119.42.52.0/23 maxlen: 23
119.42.54.0/23 maxlen: 23
150.107.72.0/22 maxlen: 22
150.107.75.0/24 maxlen: 24
175.45.180.0/22 maxlen: 23
175.45.182.0/23 maxlen: 24
203.18.30.0/24 maxlen: 24
203.29.240.0/22 maxlen: 22
203.57.50.0/23 maxlen: 24
203.57.114.0/23 maxlen: 23
2404:9400::/48 maxlen: 48
2404:9400:1::/48 maxlen: 48
2404:9400:2::/48 maxlen: 48
2404:9400:3::/48 maxlen: 48
2404:9400:4::/48 maxlen: 48
2404:9400:5::/48 maxlen: 48
2404:9400:6::/48 maxlen: 48
2404:9400:e::/48 maxlen: 48
2404:9400:f::/48 maxlen: 48
2404:9400:101::/48 maxlen: 48
2404:9400:102::/48 maxlen: 48
2404:9400:103::/48 maxlen: 48
2404:9400:104::/48 maxlen: 48
2404:9400:105::/48 maxlen: 48
2404:9400:106::/48 maxlen: 48
2404:9400:1000::/36 maxlen: 36
2404:9400:2000::/36 maxlen: 36
2404:9400:3000::/36 maxlen: 36
2404:9400:4000::/36 maxlen: 36
2404:9400:5000::/36 maxlen: 36
2404:9400:6000::/36 maxlen: 36
2404:9400:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13698 (0x3582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Validity
Not Before: Jun 16 15:13:32 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a31681c-4d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:33:09:43:6e:32:d1:41:ba:d7:69:09:dd:
a3:1a:1d:6a:f8:86:7b:7e:ec:6a:40:3d:05:58:e5:
60:a7:d7:e5:f1:b3:f5:d1:f1:6b:12:bb:2b:82:1d:
a0:f4:1c:3c:99:e3:95:61:99:ec:00:02:9b:77:97:
01:99:99:df:66:3c:2d:da:9b:2d:1e:61:fe:40:89:
cb:cf:31:48:99:27:17:8d:27:07:50:ac:9c:1d:83:
1c:9f:d7:31:5b:07:70:11:ea:17:49:b6:d0:1e:ed:
80:57:73:9e:8d:df:cb:4b:eb:e0:95:5f:31:94:e8:
0e:3f:95:d1:8d:8e:bf:fa:5b:49:c6:90:27:e4:66:
01:ba:14:ed:37:5f:a3:30:e8:17:8e:22:37:f0:73:
8f:62:42:37:cd:1c:19:d5:68:97:89:2e:e6:97:03:
17:a5:7e:08:0f:c8:11:b7:86:e7:66:16:aa:1a:e4:
c1:a5:f4:99:8f:f1:97:db:0b:e3:aa:d1:55:e1:e0:
4e:0a:e4:e1:02:4f:63:c5:71:0a:83:0c:e9:80:8c:
a5:cd:44:18:d6:c5:02:e6:d5:9c:bd:b0:e1:f3:08:
46:c8:52:3c:64:89:1c:66:57:e2:e1:59:47:52:18:
f3:8f:fd:c6:36:2d:1f:44:dd:a9:54:ab:bc:09:23:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F2:E1:01:C0:52:18:8C:6E:B9:26:41:9A:75:8C:84:6D:1E:9C:41
X509v3 Authority Key Identifier:
keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.224.180.0/22
45.124.52.0/22
103.1.184.0/22
103.16.128.0/22
103.17.56.0/23
103.100.36.0/22
103.249.236.0/22
110.232.112.0/22
112.213.32.0/21
119.42.52.0/22
150.107.72.0/22
175.45.180.0/22
203.18.30.0/24
203.29.240.0/22
203.57.50.0/23
203.57.114.0/23
IPv6:
2404:9400::-2404:9400:6:ffff:ffff:ffff:ffff:ffff
2404:9400:e::/47
2404:9400:101::-2404:9400:106:ffff:ffff:ffff:ffff:ffff
2404:9400:1000::-2404:9400:6fff:ffff:ffff:ffff:ffff:ffff
2404:9400:e000::/36
Signature Algorithm: sha256WithRSAEncryption
22:e4:cf:57:9d:47:73:fe:8c:fe:29:95:ad:c1:bd:7b:8e:b2:
a5:6f:af:f5:58:fb:9c:c6:5e:6f:fd:f0:48:ed:1a:79:12:43:
ab:8b:b0:45:01:44:c4:fe:fb:4d:6d:f2:43:e0:a0:ca:0e:5e:
98:fb:e2:00:65:85:5f:ef:e8:e6:6e:c2:20:0f:ab:b9:b5:d9:
51:49:cf:21:08:8e:2f:e1:61:01:9e:26:f5:a2:d9:ed:b9:6c:
b0:91:da:20:3e:eb:89:b1:b5:0e:c2:d4:6e:fc:4d:3c:5d:5b:
46:49:25:fa:e3:1d:be:2e:07:c3:09:45:fc:6c:87:83:ce:1b:
71:f7:39:41:ee:0b:7d:28:ca:03:08:fe:4b:f7:b1:4f:97:d3:
52:34:87:43:f6:e4:45:20:3a:56:6b:60:d4:1e:0b:8d:84:da:
6a:f0:e5:a1:e4:2a:6e:77:e6:27:9b:55:b3:e4:7f:6c:bd:76:
48:b0:b7:1d:b8:43:9d:78:f8:e5:76:28:a7:d3:ff:5a:82:a0:
c8:c4:a6:57:7c:3a:03:ad:fd:fc:b9:1c:fd:92:ad:e6:07:48:
a4:b1:3e:54:81:9c:cc:bc:19:df:bc:87:13:7b:bc:05:4b:0a:
95:68:c5:64:91:27:95:f1:04:bf:ad:a2:59:98:c1:4f:f8:87:
a9:6b:80:3b
-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgICNYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCOUQxMTAvBgNVBAUTKEVGNjhCREJDMDcyQ0FCNDU1QjZEQTMxNjBFREY4RkI2
QzQ4OEREMTUwHhcNMjYwNjE2MTUxMzMyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTMxNjgxYy00ZDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtMozCUNuMtFButdpCd2jGh1q+IZ7fuxqQD0FWOVgp9fl8bP10fFrErsrgh2g
9Bw8meOVYZnsAAKbd5cBmZnfZjwt2pstHmH+QInLzzFImScXjScHUKycHYMcn9cx
WwdwEeoXSbbQHu2AV3Oejd/LS+vglV8xlOgOP5XRjY6/+ltJxpAn5GYBuhTtN1+j
MOgXjiI38HOPYkI3zRwZ1WiXiS7mlwMXpX4ID8gRt4bnZhaqGuTBpfSZj/GX2wvj
qtFV4eBOCuThAk9jxXEKgwzpgIylzUQY1sUC5tWcvbDh8whGyFI8ZIkcZlfi4VlH
Uhjzj/3GNi0fRN2pVKu8CSMyKQIDAQABo4IDDTCCAwkwHQYDVR0OBBYEFLDy4QHA
UhiMbrkmQZp1jIRtHpxBMB8GA1UdIwQYMBaAFO9ovbwHLKtFW22jFg7fj7bEiN0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEI5RC85NUFEMDM4ODFE
OUUxMUUyODgwRTg2OEUwOEIwMkNEMi83Mmk5dkFjc3EwVmJiYU1XRHQtUHRzU0kz
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyaTl2QWNzcTBWYmJhTVdEdC1QdHNTSTNSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRCOUQvOTVBRDAzODgxRDlFMTFFMjg4MEU4NjhFMDhCMDJDRDIvQzZCQ0VGOEVD
RjIzMTFGMDlCRTlERjYyQzRGOUFFMDIucm9hMIHLBggrBgEFBQcBBwEB/wSBuzCB
uDBmBAIAATBgAwQCK+C0AwQCLXw0AwQCZwG4AwQCZxCAAwQBZxE4AwQCZ2QkAwQC
Z/nsAwQCbuhwAwQDcNUgAwQCdyo0AwQClmtIAwQCry20AwQAyxIeAwQCyx3wAwQB
yzkyAwQByzlyME4EAgACMEgwDwMEAiQElAMHACQElAAABgMHASQElAAADjASAwcA
JASUAAEBAwcAJASUAAEGMBADBgQkBJQAEAMGBCQElABgAwYEJASUAOAwDQYJKoZI
hvcNAQELBQADggEBACLkz1edR3P+jP4pla3BvXuOsqVvr/VY+5zGXm/98EjtGnkS
Q6uLsEUBRMT++01t8kPgoMoOXpj74gBlhV/v6OZuwiAPq7m12VFJzyEIji/hYQGe
JvWi2e25bLCR2iA+64mxtQ7C1G78TTxdW0ZJJfrjHb4uB8MJRfxsh4POG3H3OUHu
C30oygMI/kv3sU+X01I0h0P25EUgOlZrYNQeC42E2mrw5aHkKm535iebVbPkf2y9
dkiwtx24Q514+OV2KKfT/1qCoMjEpld8OgOt/fy5HP2SreYHSKSxPlSBnMy8Gd+8
hxN7vAVLCpVoxWSRJ5XxBL+tolmYwU/4h6lrgDs=
-----END CERTIFICATE-----
Generated at Sat Jul 18 06:29:30 2026 by rpki-client