Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/BF80484C737D11E8950B2925C4F9AE02.roa
File: BF80484C737D11E8950B2925C4F9AE02.roa (raw, json)
Hash identifier: 7v3dyJdoDsJvDrBppBxWFTiAD21NwtkFWr12ws0ED2k=
Subject key identifier: 11:78:14:4A:EE:22:FB:68:DA:5D:DC:2A:0D:02:8E:01:0D:1E:A4:BC
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 304B
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/BF80484C737D11E8950B2925C4F9AE02.roa
Signing time: Wed 16 Sep 2026 05:13:46 +0000
ROA not before: Wed 16 Sep 2026 05:13:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134240
IP address blocks: 14.207.245.0/24 maxlen: 24
27.254.4.0/24 maxlen: 24
27.254.11.0/24 maxlen: 24
27.254.15.0/24 maxlen: 24
27.254.22.0/24 maxlen: 24
27.254.31.0/24 maxlen: 24
27.254.177.0/24 maxlen: 24
27.254.185.0/24 maxlen: 24
27.254.186.0/24 maxlen: 24
27.254.205.0/24 maxlen: 24
27.254.231.0/24 maxlen: 24
27.254.233.0/24 maxlen: 24
49.229.88.0/23 maxlen: 23
49.229.90.0/23 maxlen: 23
58.64.24.0/24 maxlen: 24
58.64.27.0/24 maxlen: 24
58.137.6.0/24 maxlen: 24
58.137.26.0/24 maxlen: 24
103.20.204.0/22 maxlen: 24
110.49.141.0/24 maxlen: 24
110.49.142.0/23 maxlen: 24
2405:9800:d000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:43:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12363 (0x304b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Sep 16 05:13:46 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6aaa258a-bfdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:e2:66:18:e2:09:ae:80:92:8b:66:80:14:
c0:af:5f:f8:86:2f:86:64:c3:b2:65:2d:18:cc:f8:
f4:41:d4:01:ee:6c:89:a7:94:d0:0d:b5:b7:19:af:
2b:a6:16:e9:0d:4a:e2:b3:75:7a:36:41:e9:20:21:
08:90:07:94:e6:28:1b:88:02:2c:86:34:fb:d7:5b:
1a:19:6a:06:95:12:5d:51:4e:b6:9d:ed:71:80:67:
01:36:cf:05:f4:97:22:df:24:b5:56:42:4a:e3:a3:
fb:9f:5a:9d:4e:16:a6:b7:e6:ea:40:cd:de:97:a9:
70:e3:35:38:6d:03:d0:45:1c:24:f4:a3:c9:34:7e:
a4:3c:66:87:d7:fe:bc:e7:11:72:02:18:23:e0:f4:
f5:4e:63:23:b3:71:f5:2f:b9:e5:e9:9f:f8:f2:82:
7a:e4:ac:51:43:a9:29:cc:c3:32:fd:f2:a9:03:1a:
95:0d:05:92:8a:2f:93:e0:aa:b7:00:7c:56:92:67:
fb:84:6f:de:0d:38:45:c9:5e:9c:a2:12:56:8a:1b:
c2:40:39:35:d8:3c:65:4a:bc:ca:0f:f4:cf:76:f0:
6b:1d:f5:3e:37:2c:6b:fd:6c:b5:d0:04:e3:7e:3f:
ee:f5:f9:32:b9:dc:89:d8:4e:42:78:89:16:44:3b:
94:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:78:14:4A:EE:22:FB:68:DA:5D:DC:2A:0D:02:8E:01:0D:1E:A4:BC
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/BF80484C737D11E8950B2925C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.207.245.0/24
27.254.4.0/24
27.254.11.0/24
27.254.15.0/24
27.254.22.0/24
27.254.31.0/24
27.254.177.0/24
27.254.185.0-27.254.186.255
27.254.205.0/24
27.254.231.0/24
27.254.233.0/24
49.229.88.0/22
58.64.24.0/24
58.64.27.0/24
58.137.6.0/24
58.137.26.0/24
103.20.204.0/22
110.49.141.0-110.49.143.255
IPv6:
2405:9800:d000::/36
Signature Algorithm: sha256WithRSAEncryption
3f:01:be:ac:52:4f:83:58:72:7d:9e:08:af:15:f8:f2:a4:64:
66:a0:c3:b9:6f:fd:c1:cc:6c:0a:b1:3a:2b:a5:ee:0a:ae:50:
0d:1d:01:44:a1:c6:d3:74:47:81:33:9b:ba:b6:16:72:93:07:
d6:67:0b:09:d4:49:af:ee:10:5c:bd:2d:f8:eb:87:d6:6a:d5:
1c:5a:e5:c5:f6:4b:9c:7d:a8:91:98:c6:4f:7b:77:3f:27:12:
40:b3:80:55:f0:65:59:8f:8c:32:02:d6:94:fd:05:77:0f:87:
d8:d9:8c:13:17:91:53:1b:0f:a3:47:4e:f0:88:d3:44:a2:e5:
20:8f:87:90:22:3d:e7:b4:e1:38:e4:3c:2b:3e:1d:80:53:fe:
fd:10:7a:50:c8:07:86:07:03:1c:ee:a6:86:fc:93:b7:99:07:
b8:07:59:0c:43:8d:86:7d:d8:b8:d5:f6:09:43:41:42:2c:05:
bf:66:3b:a1:5c:af:87:24:4c:8f:d9:3e:62:f1:aa:6d:3e:59:
f4:b8:dd:de:52:62:1e:5a:be:cf:eb:d4:74:2f:b0:88:61:b3:
16:b8:1c:7f:d4:44:b6:11:35:3d:e3:1e:ee:ad:27:9c:ea:94:
8b:ca:1b:0c:0e:40:21:6f:0a:71:5d:0a:d2:1d:8b:20:f6:fd:
78:6e:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:10:42 2026 by rpki-client