Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4BDAE70EB7A911EF9D4E880CC4F9AE02.roa
File: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (raw, json)
Hash identifier: yJXJ5SLj4VwXuD8Ehh1ZIDkhmlJob+LgqphoaUYaKIg=
Subject key identifier: D9:D3:58:06:B4:D0:5F:19:F6:96:A8:FA:3D:0C:15:45:C2:5C:05:F6
Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial: 1F33
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4BDAE70EB7A911EF9D4E880CC4F9AE02.roa
Signing time: Fri 28 Aug 2026 16:26:55 +0000
ROA not before: Fri 28 Aug 2026 16:26:55 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 23932
IP address blocks: 180.128.0.0/24 maxlen: 24
180.128.1.0/24 maxlen: 24
180.128.2.0/24 maxlen: 24
180.128.3.0/24 maxlen: 24
180.128.4.0/24 maxlen: 24
180.128.5.0/24 maxlen: 24
180.128.6.0/24 maxlen: 24
180.128.7.0/24 maxlen: 24
180.128.8.0/24 maxlen: 24
180.128.9.0/24 maxlen: 24
180.128.10.0/24 maxlen: 24
180.128.11.0/24 maxlen: 24
180.128.12.0/24 maxlen: 24
180.128.13.0/24 maxlen: 24
180.128.14.0/24 maxlen: 24
180.128.15.0/24 maxlen: 24
180.128.16.0/24 maxlen: 24
180.128.17.0/24 maxlen: 24
180.128.18.0/24 maxlen: 24
180.128.19.0/24 maxlen: 24
180.128.20.0/24 maxlen: 24
180.128.21.0/24 maxlen: 24
180.128.22.0/24 maxlen: 24
180.128.23.0/24 maxlen: 24
180.128.24.0/24 maxlen: 24
180.128.25.0/24 maxlen: 24
180.128.26.0/24 maxlen: 24
180.128.27.0/24 maxlen: 24
180.128.28.0/24 maxlen: 24
180.128.29.0/24 maxlen: 24
180.128.30.0/24 maxlen: 24
180.128.31.0/24 maxlen: 24
180.128.32.0/24 maxlen: 24
180.128.33.0/24 maxlen: 24
180.128.34.0/24 maxlen: 24
180.128.35.0/24 maxlen: 24
180.128.240.0/24 maxlen: 24
180.128.241.0/24 maxlen: 24
180.128.242.0/24 maxlen: 24
180.128.243.0/24 maxlen: 24
180.128.244.0/24 maxlen: 24
180.128.245.0/24 maxlen: 24
180.128.246.0/24 maxlen: 24
180.128.247.0/24 maxlen: 24
202.44.52.0/24 maxlen: 24
202.44.53.0/24 maxlen: 24
202.44.54.0/24 maxlen: 24
202.44.55.0/24 maxlen: 24
202.52.4.0/24 maxlen: 24
202.52.5.0/24 maxlen: 24
202.52.6.0/24 maxlen: 24
202.52.7.0/24 maxlen: 24
203.145.112.0/24 maxlen: 24
203.145.113.0/24 maxlen: 24
203.145.114.0/24 maxlen: 24
203.145.115.0/24 maxlen: 24
203.145.116.0/24 maxlen: 24
203.145.117.0/24 maxlen: 24
203.145.118.0/24 maxlen: 24
203.145.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 15:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7987 (0x1f33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Validity
Not Before: Aug 28 16:26:55 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a91b6cf-04a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:b8:ee:41:e6:a2:bb:52:8f:25:58:be:f2:
a1:61:19:70:cf:89:55:82:86:08:dc:d6:09:66:c2:
6f:85:f4:e2:9b:84:01:28:c6:f5:7b:73:6f:13:3a:
5a:f0:be:b8:22:6d:bb:84:23:01:3d:99:2a:85:e5:
84:0d:51:88:da:c6:da:96:a2:8a:6b:b5:c7:5d:9a:
c1:15:23:aa:bf:8e:31:31:f5:35:90:39:b8:9c:bc:
14:e4:04:13:6a:2e:cc:cd:fc:81:38:05:1c:a3:0d:
3a:16:44:4f:d8:37:0a:c1:c2:d6:b7:7d:1b:5e:ac:
30:ef:38:06:89:38:97:98:65:21:42:cd:48:65:0e:
a3:7a:0b:79:27:12:a6:ee:6c:61:c5:b9:26:7d:34:
bd:a1:85:1b:a0:14:f1:d9:f9:01:a6:6e:36:53:d3:
23:8d:b5:97:49:81:1c:f0:ba:90:51:e8:0e:ad:73:
cb:d6:2c:04:28:3c:bd:c7:fb:ab:5a:40:ff:44:e1:
4b:c1:b8:29:a4:89:d4:6d:b5:cb:6e:8a:6c:fa:f3:
9d:e8:23:60:52:e2:14:87:dc:1b:41:4b:c1:c9:a2:
64:af:63:e1:62:e9:72:6f:9e:9a:86:84:94:e8:50:
08:2b:18:29:dc:aa:f0:78:72:e3:b8:f7:06:45:68:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D3:58:06:B4:D0:5F:19:F6:96:A8:FA:3D:0C:15:45:C2:5C:05:F6
X509v3 Authority Key Identifier:
keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4BDAE70EB7A911EF9D4E880CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
180.128.0.0-180.128.35.255
180.128.240.0/21
202.44.52.0/22
202.52.4.0/22
203.145.112.0/21
Signature Algorithm: sha256WithRSAEncryption
d5:e1:16:c1:87:9d:cc:1f:c5:29:97:79:53:32:91:67:ae:fc:
de:e0:16:dd:d7:e0:c4:ea:63:ff:a4:c5:57:3e:7a:2b:9f:24:
5b:cf:e6:83:9a:78:fb:ea:83:16:ac:37:a0:2f:7d:c5:0d:19:
55:13:96:6c:8d:6d:71:0d:a8:c2:d7:ae:19:8a:14:22:8a:98:
f9:fe:93:39:b3:65:91:cd:88:a5:4d:69:0b:70:b8:fd:31:d9:
e8:36:1a:bc:68:32:ef:46:e8:f4:ac:fe:f7:8b:78:63:bc:15:
fd:56:7a:e2:62:26:0c:5a:73:6c:bf:52:1e:38:5e:a1:b5:b8:
dc:c3:7a:ba:36:bb:5c:ce:78:7c:6e:df:7d:49:f0:e5:c7:6f:
19:6a:69:79:8c:11:75:77:47:ef:fa:34:2b:39:70:d3:25:38:
5e:7c:6f:89:53:29:3c:45:80:99:3a:4b:c1:0f:b4:de:d9:4b:
c6:b2:71:0e:1d:bf:d5:50:fd:f7:5a:9e:98:4e:7e:08:11:ad:
0e:fc:99:34:6f:83:a5:e7:b5:1c:11:e0:eb:58:c0:42:b6:14:
9b:30:2d:bf:d4:6f:6d:96:10:4d:95:e8:3d:5c:2a:5d:3c:98:
ff:3d:42:57:d8:d3:d9:64:51:20:3c:d5:ab:70:ed:17:bf:3e:
f3:c1:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:17:45 2026 by rpki-client