Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/443C3AF2D3F611EFB03C5C14C4F9AE02.roa
File: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (raw, json)
Hash identifier: kvJG9W7BesVloRiSNTznQQ2Vu/TG695dXNyQ/qNO4G8=
Subject key identifier: D7:88:3F:60:58:92:CE:12:D4:ED:84:B5:37:17:BE:FA:5E:B3:A8:53
Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Certificate serial: 2370
Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/443C3AF2D3F611EFB03C5C14C4F9AE02.roa
Signing time: Tue 21 Apr 2026 07:03:00 +0000
ROA not before: Tue 21 Apr 2026 07:03:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45650
IP address blocks: 43.245.84.0/22 maxlen: 24
45.64.114.0/24 maxlen: 24
45.64.115.0/24 maxlen: 24
103.10.28.0/22 maxlen: 24
103.41.172.0/22 maxlen: 24
103.129.132.0/22 maxlen: 24
110.44.112.0/20 maxlen: 24
150.107.106.0/23 maxlen: 24
2404:7c00::/48 maxlen: 48
2404:7c00:1::/48 maxlen: 48
2404:7c00:40::/44 maxlen: 44
2404:7c00:40::/48 maxlen: 48
2404:7c00:41::/48 maxlen: 48
2404:7c00:42::/48 maxlen: 48
2404:7c00:43::/48 maxlen: 48
2404:7c00:44::/48 maxlen: 48
2404:7c00:45::/48 maxlen: 48
2404:7c00:46::/48 maxlen: 48
2404:7c00:47::/48 maxlen: 48
2404:7c00:48::/48 maxlen: 48
2404:7c00:49::/48 maxlen: 48
2404:7c00:4a::/48 maxlen: 48
2404:7c00:4b::/48 maxlen: 48
2404:7c00:4c::/48 maxlen: 48
2404:7c00:4d::/48 maxlen: 48
2404:7c00:4e::/48 maxlen: 48
2404:7c00:4f::/48 maxlen: 48
2404:7c00:50::/44 maxlen: 44
2404:7c00:51::/48 maxlen: 48
2404:7c00:52::/48 maxlen: 48
2404:7c00:53::/48 maxlen: 48
2404:7c00:60::/44 maxlen: 44
2404:7c00:61::/48 maxlen: 48
2404:7c00:62::/48 maxlen: 48
2404:7c00:63::/48 maxlen: 48
2404:7c00:64::/48 maxlen: 48
2404:7c00:65::/48 maxlen: 48
2404:7c00:70::/44 maxlen: 44
2404:7c00:80::/44 maxlen: 44
2404:7c00:81::/48 maxlen: 48
2404:7c00:100::/40 maxlen: 48
2404:7c00:7c00::/44 maxlen: 44
2404:7c00:7c10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9072 (0x2370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Validity
Not Before: Apr 21 07:03:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e72123-7b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:ec:53:a1:a7:95:66:db:81:c4:02:34:e7:
ca:ab:b8:28:30:16:4d:c0:3d:b4:2c:6f:3f:e1:76:
83:b9:af:b8:34:32:6c:ed:c0:f2:b7:17:b2:23:1b:
f4:5b:e7:c1:2c:f4:24:8d:93:0d:ee:f1:03:a2:66:
dc:e6:5c:8c:08:25:9f:bb:5c:be:d2:ad:88:26:0d:
e6:b6:97:e8:9b:93:78:5e:fc:c7:59:16:88:a6:0a:
7c:e5:88:a1:c2:86:8c:f2:c8:1e:49:54:7a:6e:f7:
57:76:10:95:60:97:72:6a:f9:d6:93:f7:f8:27:16:
e7:fc:0a:58:21:29:75:2b:6b:95:1b:cd:0c:88:fc:
98:9d:83:f3:e8:6b:9d:21:a4:9f:90:49:7a:95:4c:
d1:0c:ee:02:01:4b:99:26:c1:47:5c:a3:fc:19:ac:
f9:29:78:c0:c8:12:bf:a3:89:1d:8a:2c:92:f9:59:
18:0d:af:c2:39:16:13:92:ff:79:dd:f8:91:52:49:
38:57:42:53:46:74:82:67:85:8d:8f:d0:4a:8d:56:
e9:ec:fd:40:72:c9:81:d2:a6:ce:f5:85:0e:6d:1e:
95:47:88:7f:3b:53:84:f5:b5:f1:86:45:a9:67:e4:
f7:79:63:80:a3:c1:37:a7:28:23:ca:43:f8:fb:36:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:88:3F:60:58:92:CE:12:D4:ED:84:B5:37:17:BE:FA:5E:B3:A8:53
X509v3 Authority Key Identifier:
keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/443C3AF2D3F611EFB03C5C14C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.84.0/22
45.64.114.0/23
103.10.28.0/22
103.41.172.0/22
103.129.132.0/22
110.44.112.0/20
150.107.106.0/23
IPv6:
2404:7c00::/47
2404:7c00:40::-2404:7c00:8f:ffff:ffff:ffff:ffff:ffff
2404:7c00:100::/40
2404:7c00:7c00::/43
Signature Algorithm: sha256WithRSAEncryption
84:61:d4:82:be:14:2e:91:8c:23:47:e6:95:ac:6c:d6:be:36:
6a:c9:b3:61:01:93:7a:e7:3f:6b:ba:89:1c:51:ad:1c:4e:f0:
fb:40:24:ba:ef:93:0a:0f:5e:d4:60:21:c5:b6:22:cd:3e:be:
d7:0a:88:4d:2d:e5:b9:a4:86:dc:67:fd:81:70:0f:82:5b:9a:
c7:1d:a3:1a:92:f0:4c:f7:4e:f1:09:35:1b:6c:bc:84:52:0a:
10:4b:88:02:9e:ba:49:ac:4a:f0:25:0c:24:e4:cb:2e:63:11:
5d:e2:db:9c:f2:f6:bd:88:9b:ca:02:2e:7c:27:99:2f:cc:fc:
f6:df:ee:20:5a:c2:01:98:50:f3:7e:57:9e:08:9c:d9:61:b4:
87:34:28:90:6a:99:64:6b:95:a5:2b:38:ab:60:64:91:3c:3c:
3e:bf:71:d0:6d:e4:15:c6:8e:f8:83:57:99:a0:1a:3d:65:ff:
28:2a:ce:47:49:3f:5a:15:29:a5:23:43:56:65:41:6f:ad:20:
17:3a:14:2c:3a:2d:ec:bb:df:41:4f:d3:c7:d5:f9:92:fb:0e:
85:41:cb:59:8d:83:ef:59:eb:13:71:a3:dc:43:dd:a0:d5:8b:
e9:7e:ed:3c:b1:36:74:3f:f7:3e:a8:92:5b:d7:ff:20:88:24:
0b:64:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:36 2026 by rpki-client