Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/CAE3E67AD0E511F189C6C36D3066CEF9.roa
File: CAE3E67AD0E511F189C6C36D3066CEF9.roa (raw, json)
Hash identifier: Juk1tL5uS5b6QIVvSuz/ipJYNDUcxkWPVHny7IM28z4=
Subject key identifier: CB:13:29:43:8D:3E:04:78:53:79:29:46:F0:DE:D8:60:C1:C8:D3:17
Certificate issuer: /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial: 03DA
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/CAE3E67AD0E511F189C6C36D3066CEF9.roa
Signing time: Mon 26 Oct 2026 02:40:08 +0000
ROA not before: Mon 26 Oct 2026 02:40:08 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139285
IP address blocks: 103.28.0.0/22 maxlen: 22
103.28.0.0/23 maxlen: 23
103.28.0.0/24 maxlen: 24
103.28.1.0/24 maxlen: 24
103.28.2.0/23 maxlen: 23
103.28.2.0/24 maxlen: 24
103.28.3.0/24 maxlen: 24
103.140.236.0/23 maxlen: 23
103.140.236.0/24 maxlen: 24
103.140.237.0/24 maxlen: 24
103.148.228.0/23 maxlen: 23
103.148.228.0/24 maxlen: 24
103.148.229.0/24 maxlen: 24
103.227.172.0/22 maxlen: 22
103.227.172.0/23 maxlen: 23
103.227.172.0/24 maxlen: 24
103.227.173.0/24 maxlen: 24
103.227.174.0/23 maxlen: 23
103.227.174.0/24 maxlen: 24
103.227.175.0/24 maxlen: 24
114.134.190.0/23 maxlen: 23
114.134.190.0/24 maxlen: 24
114.134.191.0/24 maxlen: 24
116.214.26.0/23 maxlen: 23
116.214.26.0/24 maxlen: 24
116.214.27.0/24 maxlen: 24
116.214.28.0/23 maxlen: 23
116.214.28.0/24 maxlen: 24
116.214.29.0/24 maxlen: 24
2400:96a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 00:25:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 986 (0x3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Validity
Not Before: Oct 26 02:40:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6adebd88-3da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:dd:9a:56:a5:fe:f5:01:6d:79:14:63:07:
b1:c1:69:df:16:8a:42:41:f2:9e:93:52:ba:de:83:
b1:cd:fe:4d:9a:05:e5:8c:c2:d4:78:d2:d7:e4:62:
11:c5:54:47:0a:0a:0c:9e:ec:c6:4f:3f:01:f2:07:
3b:56:36:2a:d5:e5:b0:14:d8:ca:4d:06:3d:9d:f1:
95:8d:71:af:6c:70:05:a0:b1:8c:4d:30:28:f9:94:
fd:d6:22:a9:b2:28:d2:e5:b8:6a:8e:d4:ae:a7:95:
e0:59:75:b5:02:25:a2:bd:27:0c:72:c9:86:18:db:
75:38:de:c1:b2:ec:32:b7:06:7c:c4:17:5b:e1:35:
6e:b0:68:66:67:90:53:96:9d:12:83:0b:aa:ee:bb:
92:fb:6c:9e:9c:57:46:c1:d5:45:74:b2:46:92:f8:
f9:7f:83:63:ca:7b:79:9f:e1:15:42:7a:b8:7d:c9:
10:bc:1c:56:b5:0d:0d:dc:2d:22:30:43:d0:2f:1e:
f8:77:6f:d6:6c:07:6e:38:e7:20:ed:79:2c:50:69:
06:49:18:ef:90:76:a6:48:cb:cd:e5:8e:3e:08:73:
09:8f:91:3e:a6:d8:9b:65:05:14:c7:f9:4b:3b:40:
76:1b:11:8a:d5:cd:ff:8d:55:78:83:0d:e4:8c:2e:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:13:29:43:8D:3E:04:78:53:79:29:46:F0:DE:D8:60:C1:C8:D3:17
X509v3 Authority Key Identifier:
keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/CAE3E67AD0E511F189C6C36D3066CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
103.28.0.0/22
103.140.236.0/23
103.148.228.0/23
103.227.172.0/22
114.134.190.0/23
116.214.26.0-116.214.29.255
IPv6:
2400:96a0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:90:e3:4b:ea:8f:40:e1:2c:66:a3:69:25:5e:0e:ba:3d:9a:
47:12:5c:8e:eb:da:3e:e3:89:04:b0:b3:ea:d9:03:85:7f:bd:
b0:cb:ab:fa:14:83:e4:db:f7:9f:0c:01:c7:22:51:de:fc:37:
60:11:02:14:13:a4:0d:14:e7:61:e6:8a:33:cf:06:a4:49:c9:
15:e3:e4:48:77:ae:47:0d:0f:29:e6:b0:08:81:3e:99:a1:17:
89:9f:3e:65:6f:fd:a1:b0:a0:ee:53:4f:8d:f2:29:31:52:17:
7e:4f:68:88:06:6e:13:e0:3b:f8:8f:83:c5:56:61:52:19:9c:
71:c4:30:b5:64:a7:6e:97:40:28:eb:2c:d6:37:55:56:be:bc:
c2:88:d6:aa:72:e3:f6:5e:51:13:14:03:b3:a0:82:8c:58:db:
c5:7b:6e:a8:33:29:03:06:55:24:2f:73:c3:54:ef:50:04:91:
56:84:f8:7b:2a:7d:cc:65:29:2a:90:53:12:f8:2b:eb:ff:fd:
99:1a:33:e7:7b:11:26:29:32:cc:08:bb:c5:45:f1:7f:54:1b:
25:95:f9:d6:c1:59:46:4d:4d:96:b2:3b:5b:d2:e4:35:58:c1:
22:bb:2e:77:0a:a4:ee:35:70:aa:b6:59:53:c3:19:13:59:63:
55:9b:13:58
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThFQjIxMTAvBgNVBAUTKDg2MDNBMEFDQTcyMDRCMEVGRUQ2NERCNzBERTUxQzc1
QkEwMzkzNTUwHhcNMjYxMDI2MDI0MDA4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWRlYmQ4OC0zZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Wzdmlal/vUBbXkUYwexwWnfFopCQfKek1K63oOxzf5NmgXljMLUeNLX5GIR
xVRHCgoMnuzGTz8B8gc7VjYq1eWwFNjKTQY9nfGVjXGvbHAFoLGMTTAo+ZT91iKp
sijS5bhqjtSup5XgWXW1AiWivScMcsmGGNt1ON7BsuwytwZ8xBdb4TVusGhmZ5BT
lp0Sgwuq7ruS+2yenFdGwdVFdLJGkvj5f4Njynt5n+EVQnq4fckQvBxWtQ0N3C0i
MEPQLx74d2/WbAduOOcg7XksUGkGSRjvkHamSMvN5Y4+CHMJj5E+ptibZQUUx/lL
O0B2GxGK1c3/jVV4gw3kjC5H+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMsTKUON
PgR4U3kpRvDe2GDByNMXMB8GA1UdIwQYMBaAFIYDoKynIEsO/tZNtw3lHHW6A5NV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVCMi83QUM3NjdERTA2
NjkxMUVEQjBBRThFMzdDNEY5QUUwMi9oZ09ncktjZ1N3Ny0xazIzRGVVY2Rib0Rr
MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hnT2dyS2NnU3c3LTFrMjNEZVVjZGJvRGsxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MThFQjIvN0FDNzY3REUwNjY5MTFFREIwQUU4RTM3QzRGOUFFMDIvQ0FFM0U2N0FE
MEU1MTFGMTg5QzZDMzZEMzA2NkNFRjkucm9hMFQGCCsGAQUFBwEHAQH/BEUwQzAy
BAIAATAsAwQCZxwAAwQBZ4zsAwQBZ5TkAwQCZ+OsAwQBcoa+MAwDBAF01hoDBAF0
1hwwDQQCAAIwBwMFACQAlqAwDQYJKoZIhvcNAQELBQADggEBAD2Q40vqj0DhLGaj
aSVeDro9mkcSXI7r2j7jiQSws+rZA4V/vbDLq/oUg+Tb958MAcciUd78N2ARAhQT
pA0U52HmijPPBqRJyRXj5Eh3rkcNDynmsAiBPpmhF4mfPmVv/aGwoO5TT43yKTFS
F35PaIgGbhPgO/iPg8VWYVIZnHHEMLVkp26XQCjrLNY3VVa+vMKI1qpy4/ZeURMU
A7OggoxY28V7bqgzKQMGVSQvc8NU71AEkVaE+HsqfcxlKSqQUxL4K+v//ZkaM+d7
ESYpMswIu8VF8X9UGyWV+dbBWUZNTZayO1vS5DVYwSK7LncKpO41cKq2WVPDGRNZ
Y1WbE1g=
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:27:14 2026 by rpki-client