Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B68DCB7CB16A11F1BD8DE86A5D11F970.roa
File: B68DCB7CB16A11F1BD8DE86A5D11F970.roa (raw, json)
Hash identifier: Eh5Owq9BmZa7Wb/MYFnakq39koTy1FBPAnzQT0mV0B0=
Subject key identifier: F0:F6:A1:FC:A8:E8:C4:85:D8:90:B5:A3:D8:09:66:CF:B2:FC:92:40
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 3025
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B68DCB7CB16A11F1BD8DE86A5D11F970.roa
Signing time: Wed 16 Sep 2026 05:03:22 +0000
ROA not before: Wed 16 Sep 2026 05:03:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45758
IP address blocks: 14.207.0.0/16 maxlen: 17
27.130.0.0/16 maxlen: 17
43.245.144.0/22 maxlen: 23
49.48.0.0/15 maxlen: 17
103.16.204.0/22 maxlen: 23
110.164.0.0/16 maxlen: 17
110.164.4.0/24 maxlen: 24
110.164.6.0/24 maxlen: 24
110.164.11.0/24 maxlen: 24
110.164.14.0/24 maxlen: 24
110.164.17.0/24 maxlen: 24
110.164.21.0/24 maxlen: 24
110.164.28.0/24 maxlen: 24
110.164.40.0/24 maxlen: 24
110.164.41.0/24 maxlen: 24
171.4.0.0/14 maxlen: 17
180.183.0.0/16 maxlen: 17
183.88.0.0/15 maxlen: 17
223.204.0.0/14 maxlen: 17
2403:6200::/32 maxlen: 33
2403:6200:8810::/44 maxlen: 44
2403:6200:8820::/44 maxlen: 44
2403:6200:8830::/44 maxlen: 44
2403:6200:8840::/44 maxlen: 44
2403:6200:8850::/44 maxlen: 44
2403:6200:8860::/44 maxlen: 44
2403:6200:8870::/44 maxlen: 44
2403:6200:8880::/44 maxlen: 44
2403:6200:8890::/44 maxlen: 44
2403:6200:88a0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 15:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12325 (0x3025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Sep 16 05:03:22 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6aaa231a-589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:ef:b9:64:38:55:26:c5:2b:61:e7:2f:c5:
5e:33:76:af:c9:60:b5:ae:4b:b8:f6:51:3d:eb:e5:
97:8a:af:a0:79:da:d3:03:63:32:8f:dc:ac:df:2a:
ac:8e:5c:67:c7:e3:6b:4f:96:e1:35:6f:e4:e6:65:
6c:31:5d:69:2c:3a:11:60:14:24:3b:f7:a4:4b:a4:
f2:57:e6:6a:85:dc:cc:31:9b:e3:ef:9e:7a:18:4a:
fe:d7:53:95:3e:35:a2:22:87:a9:67:00:6f:73:d5:
24:e6:8f:6b:b5:d2:b9:7d:df:b2:b1:c9:d9:c4:f7:
0d:9b:d8:1e:13:c0:07:29:c5:5c:6d:93:ab:b8:33:
a1:60:b3:d7:bd:2c:63:af:4f:3d:76:fb:e9:ee:e6:
9f:a0:3c:6e:6f:9e:93:0e:06:30:24:d5:75:4d:5c:
2b:dd:7b:20:47:56:55:4f:da:ae:d7:3b:a9:43:36:
ee:d3:2b:91:35:83:86:cd:ed:0c:27:fc:36:74:f3:
57:88:33:e7:5d:fd:38:5f:d6:59:46:e5:3f:64:74:
ed:04:e8:b7:43:2a:d2:e2:80:df:73:29:87:7f:43:
90:9f:51:b7:d7:10:16:4f:c6:49:0d:33:94:a9:6b:
8c:58:e4:a0:c9:9a:e2:e0:90:2f:a6:17:65:fe:f6:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F6:A1:FC:A8:E8:C4:85:D8:90:B5:A3:D8:09:66:CF:B2:FC:92:40
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/B68DCB7CB16A11F1BD8DE86A5D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
14.207.0.0/16
27.130.0.0/16
43.245.144.0/22
49.48.0.0/15
103.16.204.0/22
110.164.0.0/16
171.4.0.0/14
180.183.0.0/16
183.88.0.0/15
223.204.0.0/14
IPv6:
2403:6200::/32
Signature Algorithm: sha256WithRSAEncryption
44:41:2e:25:08:7c:aa:45:58:a8:90:2f:36:2b:03:38:3d:d0:
69:9d:a8:62:41:6c:3b:af:38:ec:b4:99:cf:21:f0:f6:1f:e7:
5f:c1:88:8f:22:c9:b8:9f:12:17:0b:20:05:ac:5d:eb:78:28:
19:1d:89:d5:6e:32:d3:50:ec:05:d3:bf:4c:7a:6c:06:22:cc:
1b:8c:47:8f:51:7c:be:09:c0:94:7b:da:65:4f:ee:9a:87:34:
42:aa:16:82:29:e6:04:1a:0d:2d:58:27:cb:46:cf:1d:77:02:
09:6c:53:5b:6a:22:b8:cd:00:82:94:a3:4c:da:05:ba:64:0a:
f8:3f:20:8f:03:4c:b5:95:3f:76:4e:e2:8c:b4:52:69:09:f0:
0b:b3:1f:3c:c0:4d:80:70:ed:dd:26:85:58:85:fc:30:44:0b:
46:c7:d7:93:de:6f:b7:f1:52:ce:33:d1:8c:aa:6c:19:98:26:
e5:5a:fa:16:4b:2e:16:bd:4c:7f:21:bd:29:a1:58:aa:62:8d:
ce:1b:85:59:6a:58:d8:96:b0:62:8a:4e:10:12:c2:4f:cc:c0:
c7:b6:b5:eb:cc:cc:95:b8:a2:0c:1c:f5:01:16:e7:18:56:a0:
2f:7a:ba:54:1c:ec:ae:59:41:23:da:97:d3:b4:11:0c:70:4e:
e8:a8:ac:0a
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICMCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwOTE2MDUwMzIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFhMjMxYS01ODljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhqbvuWQ4VSbFK2HnL8VeM3avyWC1rku49lE96+WXiq+gedrTA2Myj9ys3yqs
jlxnx+NrT5bhNW/k5mVsMV1pLDoRYBQkO/ekS6TyV+ZqhdzMMZvj7556GEr+11OV
PjWiIoepZwBvc9Uk5o9rtdK5fd+yscnZxPcNm9geE8AHKcVcbZOruDOhYLPXvSxj
r089dvvp7uafoDxub56TDgYwJNV1TVwr3XsgR1ZVT9qu1zupQzbu0yuRNYOGze0M
J/w2dPNXiDPnXf04X9ZZRuU/ZHTtBOi3QyrS4oDfcymHf0OQn1G31xAWT8ZJDTOU
qWuMWOSgyZri4JAvphdl/vaGmwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFPD2ofyo
6MSF2JC1o9gJZs+y/JJAMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQjY4RENCN0NC
MTZBMTFGMUJEOERFODZBNUQxMUY5NzAucm9hMFwGCCsGAQUFBwEHAQH/BE0wSzA6
BAIAATA0AwMADs8DAwAbggMEAiv1kAMDATEwAwQCZxDMAwMAbqQDAwKrBAMDALS3
AwMBt1gDAwLfzDANBAIAAjAHAwUAJANiADANBgkqhkiG9w0BAQsFAAOCAQEAREEu
JQh8qkVYqJAvNisDOD3QaZ2oYkFsO6847LSZzyHw9h/nX8GIjyLJuJ8SFwsgBaxd
63goGR2J1W4y01DsBdO/THpsBiLMG4xHj1F8vgnAlHvaZU/umoc0QqoWginmBBoN
LVgny0bPHXcCCWxTW2oiuM0AgpSjTNoFumQK+D8gjwNMtZU/dk7ijLRSaQnwC7Mf
PMBNgHDt3SaFWIX8MEQLRsfXk95vt/FSzjPRjKpsGZgm5Vr6FksuFr1MfyG9KaFY
qmKNzhuFWWpY2JawYopOEBLCT8zAx7a168zMlbiiDBz1ARbnGFagL3q6VBzsrllB
I9qX07QRDHBO6KisCg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:35:00 2026 by rpki-client