Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa
File: 6492D4985B9011EF8DB48C24C4F9AE02.roa (raw, json)
Hash identifier: QEKWRIaz5rVdXFnVefwWj5qXkTtKhbq7VuHmNmjPbRM=
Subject key identifier: D1:5E:8A:C8:5C:CB:EA:1B:B2:A0:76:C2:EA:46:BE:10:76:FF:7A:1B
Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Certificate serial: 01F3
Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa
Signing time: Sun 05 Jul 2026 05:31:34 +0000
ROA not before: Sun 05 Jul 2026 05:31:34 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 146943
IP address blocks: 43.230.200.0/24 maxlen: 24
43.230.201.0/24 maxlen: 24
43.230.202.0/24 maxlen: 24
43.230.203.0/24 maxlen: 24
45.64.107.0/24 maxlen: 24
45.113.224.0/24 maxlen: 24
45.113.225.0/24 maxlen: 24
45.113.226.0/24 maxlen: 24
45.113.227.0/24 maxlen: 24
45.120.137.0/24 maxlen: 24
45.120.138.0/24 maxlen: 24
103.13.112.0/24 maxlen: 24
103.13.113.0/24 maxlen: 24
103.13.114.0/24 maxlen: 24
103.13.115.0/24 maxlen: 24
103.26.205.0/24 maxlen: 24
103.26.207.0/24 maxlen: 24
103.250.186.0/24 maxlen: 24
157.119.40.0/24 maxlen: 24
157.119.41.0/24 maxlen: 24
157.119.42.0/24 maxlen: 24
157.119.43.0/24 maxlen: 24
2405:7140:1::/48 maxlen: 48
2405:7140:2::/48 maxlen: 48
2405:7140:4::/48 maxlen: 48
2405:7140:5::/48 maxlen: 48
2405:7140:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Validity
Not Before: Jul 5 05:31:34 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a49ec35-cf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:98:d0:82:c2:7c:61:c9:67:6c:e0:25:e0:
48:38:f9:aa:f3:2f:d1:3f:90:15:98:e6:8a:14:38:
c8:cd:b0:53:5d:ca:fd:8f:54:a2:3d:54:84:c7:32:
f6:77:c6:e2:5c:36:d8:b8:41:b4:23:7e:9f:1a:8d:
60:f8:61:f2:ab:4e:dd:50:85:e5:24:b2:7f:d6:7b:
47:ba:2a:0c:8c:89:64:3b:23:13:89:ca:b6:db:50:
a0:0b:d7:af:21:74:c7:c3:f4:5a:73:43:1d:a2:c9:
bf:66:4c:34:38:3d:61:b2:d9:8d:29:cc:e9:e7:6e:
17:bb:61:42:3e:01:bf:80:f5:18:77:8a:5f:14:54:
c6:1f:53:eb:23:fa:06:b3:c8:fa:56:92:eb:49:6b:
84:55:3b:ca:1d:41:ad:1f:67:12:8d:2a:d6:48:ef:
bc:9d:c0:6a:ac:c5:48:42:9b:29:c4:c4:68:ec:b4:
0a:ef:c7:1e:bb:0f:f6:21:6c:a7:f0:91:12:2a:bd:
1b:af:e3:ab:19:26:60:d3:8d:2f:fd:1a:fd:3b:ec:
f7:cc:68:62:15:2e:08:66:32:28:f9:bd:04:ab:d2:
9e:3e:5f:f0:25:5d:6d:de:e4:50:f2:19:17:3b:be:
da:37:b0:e7:4a:11:f0:55:e9:27:bd:e2:69:16:36:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:8A:C8:5C:CB:EA:1B:B2:A0:76:C2:EA:46:BE:10:76:FF:7A:1B
X509v3 Authority Key Identifier:
keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.230.200.0/22
45.64.107.0/24
45.113.224.0/22
45.120.137.0-45.120.138.255
103.13.112.0/22
103.26.205.0/24
103.26.207.0/24
103.250.186.0/24
157.119.40.0/22
IPv6:
2405:7140:1::-2405:7140:2:ffff:ffff:ffff:ffff:ffff
2405:7140:4::-2405:7140:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
19:43:2f:ec:6d:f7:d7:46:bb:3c:a9:06:63:04:3b:22:69:f3:
0e:67:e2:e9:f9:aa:de:0d:84:48:40:ee:a3:1f:e1:1e:ca:1f:
b1:e3:57:87:c9:d9:fc:36:9c:df:03:40:22:c4:ad:9e:4b:1f:
53:dd:76:bf:49:d5:f4:e5:c8:dc:28:78:95:6a:00:72:97:0d:
b2:a2:d3:d1:a2:5e:0d:75:f3:e2:8a:78:d1:90:d8:a5:6b:08:
5d:90:2d:ea:4e:b2:8a:d2:d0:18:5c:24:f4:17:fd:6c:05:08:
48:66:3e:ac:ba:98:52:fe:76:cf:de:b4:5e:bf:8a:a2:56:fc:
c2:da:06:8d:f8:53:c8:b1:db:b4:fb:98:7b:00:1c:5a:23:1c:
72:ab:7a:13:e0:00:8c:7b:2a:6b:5f:83:5f:0b:4d:c7:57:87:
a5:82:66:a9:b4:19:9b:b0:77:1d:b9:dd:7b:36:7e:73:5a:c9:
90:92:dd:89:a8:fe:d2:48:d2:15:9c:fc:f4:46:d1:e6:3b:cb:
27:a6:36:87:d8:30:be:2b:04:c3:d8:af:d0:83:8d:e0:6d:85:
3d:fe:72:81:e2:87:54:76:b9:6e:81:83:8e:f3:e0:5b:3d:6b:
13:f9:00:fc:80:24:29:36:d4:25:4a:37:8a:c9:79:fd:cf:c8:
2c:0d:36:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:22:51 2026 by rpki-client