Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/F0C8DB1CA54E11EF8592FD66C4F9AE02.roa
File: F0C8DB1CA54E11EF8592FD66C4F9AE02.roa (raw, json)
Hash identifier: W9u5qlB4WlP9CIfe+lgCw0P7bcpuJCWbMFYa3TvAgqM=
Subject key identifier: 45:6D:46:DA:91:81:72:38:04:96:4F:99:74:09:EE:E0:EE:B0:8F:DA
Certificate issuer: /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Certificate serial: 0163
Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/F0C8DB1CA54E11EF8592FD66C4F9AE02.roa
Signing time: Thu 23 Jul 2026 07:32:06 +0000
ROA not before: Thu 23 Jul 2026 07:32:06 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9266
IP address blocks: 103.36.152.0/22 maxlen: 22
103.65.216.0/22 maxlen: 22
103.225.108.0/22 maxlen: 22
202.1.116.0/22 maxlen: 22
202.1.116.0/24 maxlen: 24
202.1.117.0/24 maxlen: 24
202.1.118.0/24 maxlen: 24
202.1.119.0/24 maxlen: 24
203.5.244.0/24 maxlen: 24
203.10.124.0/24 maxlen: 24
203.12.116.0/24 maxlen: 24
203.14.106.0/24 maxlen: 24
203.14.193.0/24 maxlen: 24
203.18.151.0/24 maxlen: 24
203.19.52.0/24 maxlen: 24
203.19.220.0/24 maxlen: 24
203.20.110.0/24 maxlen: 24
203.20.111.0/24 maxlen: 24
203.21.22.0/24 maxlen: 24
203.22.169.0/24 maxlen: 24
203.23.50.0/24 maxlen: 24
203.23.71.0/24 maxlen: 24
203.24.174.0/23 maxlen: 24
203.25.68.0/22 maxlen: 22
203.25.69.0/24 maxlen: 24
203.25.70.0/24 maxlen: 24
203.25.71.0/24 maxlen: 24
203.25.123.0/24 maxlen: 24
203.25.158.0/24 maxlen: 24
203.26.171.0/24 maxlen: 24
203.26.226.0/23 maxlen: 23
203.29.21.0/24 maxlen: 24
203.29.127.0/24 maxlen: 24
203.30.78.0/24 maxlen: 24
203.31.214.0/24 maxlen: 24
203.32.44.0/23 maxlen: 24
203.32.47.0/24 maxlen: 24
203.33.28.0/24 maxlen: 24
203.33.58.0/23 maxlen: 24
203.33.108.0/23 maxlen: 24
203.34.167.0/24 maxlen: 24
203.55.194.0/23 maxlen: 24
203.62.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D848, serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Validity
Not Before: Jul 23 07:32:06 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a61c376-cb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:88:28:a9:db:24:37:e5:aa:bd:ba:19:d8:
89:a1:8b:ac:9e:ab:0b:23:b5:8a:21:ed:cd:b1:aa:
43:a2:b6:59:08:33:56:82:b7:97:93:23:b4:d1:72:
b0:63:df:ec:0f:78:e4:fa:ae:9e:5a:2e:7f:07:69:
f8:fd:b4:9a:bf:82:42:1a:8d:bd:96:65:78:33:41:
2a:42:71:1b:0c:65:f8:47:f2:b4:e5:ed:cb:69:4f:
48:0a:c6:cb:bd:38:63:99:f0:c1:90:0e:da:b2:2f:
df:1e:b4:9c:20:68:51:39:e6:4f:6f:32:b9:cc:37:
bd:31:4b:a7:14:a7:49:5e:30:56:79:1f:46:c3:c5:
4d:c3:45:92:5f:9f:09:d0:80:79:cf:fb:59:e6:aa:
7e:9b:d8:f7:50:07:18:33:27:97:21:16:7b:25:e8:
90:2a:e1:8f:39:7b:82:fe:50:d3:bb:97:42:62:ed:
87:d0:b7:4b:89:41:83:d8:4a:8f:5c:a6:0f:7d:e0:
73:a7:a3:6b:31:f9:43:0a:02:8b:b8:93:64:7e:2f:
17:99:1d:e4:ed:3a:bd:d2:1a:79:73:9e:90:e0:2a:
69:6e:2a:e1:ef:b4:bc:3e:61:38:f0:0d:61:9f:a6:
f1:1d:63:c6:03:e1:76:be:8d:27:1d:d2:43:e9:9e:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6D:46:DA:91:81:72:38:04:96:4F:99:74:09:EE:E0:EE:B0:8F:DA
X509v3 Authority Key Identifier:
keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/F0C8DB1CA54E11EF8592FD66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.36.152.0/22
103.65.216.0/22
103.225.108.0/22
202.1.116.0/22
203.5.244.0/24
203.10.124.0/24
203.12.116.0/24
203.14.106.0/24
203.14.193.0/24
203.18.151.0/24
203.19.52.0/24
203.19.220.0/24
203.20.110.0/23
203.21.22.0/24
203.22.169.0/24
203.23.50.0/24
203.23.71.0/24
203.24.174.0/23
203.25.68.0/22
203.25.123.0/24
203.25.158.0/24
203.26.171.0/24
203.26.226.0/23
203.29.21.0/24
203.29.127.0/24
203.30.78.0/24
203.31.214.0/24
203.32.44.0/23
203.32.47.0/24
203.33.28.0/24
203.33.58.0/23
203.33.108.0/23
203.34.167.0/24
203.55.194.0/23
203.62.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9d:96:e7:4b:95:3c:0d:c1:f4:12:32:d1:2b:a7:c0:7b:c6:
6e:90:d4:5a:cc:75:09:64:02:ac:46:89:4f:45:d4:a0:d0:4b:
68:ac:c9:c5:fe:40:0b:d3:0d:24:73:c3:3f:0b:83:cc:d1:59:
6f:59:96:c7:8d:b2:16:f5:c5:a7:b5:b4:34:08:cf:f8:a5:84:
ff:27:a3:dd:ec:11:2c:95:2c:14:8d:9d:ca:22:19:8a:9b:1b:
c9:34:74:36:80:07:0a:1c:3c:75:0e:a2:30:a6:ac:ff:2f:27:
c0:73:90:98:60:d6:87:76:8a:be:0f:bb:e8:24:a9:70:c0:88:
d0:c0:ff:ed:fc:bb:e1:9b:cb:80:24:29:4b:41:87:a6:2e:d7:
bb:87:df:03:7d:67:84:33:37:3d:44:af:ce:c3:b8:79:71:20:
c2:2c:52:76:86:1c:14:09:06:96:85:d2:3e:5c:2a:fd:ba:1d:
ae:d5:d0:df:77:eb:06:8e:f3:e5:96:ee:a3:3a:aa:3b:68:e5:
be:78:97:ae:7c:ee:5c:95:24:32:65:b7:81:71:ed:25:b7:0e:
58:f0:c7:e4:f7:dc:7c:51:59:ed:45:a2:b1:7c:58:f6:39:6e:
eb:f9:2d:ce:49:1d:d6:8b:ea:67:4f:24:68:b4:db:5e:11:30:
b0:5c:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:06:28 2026 by rpki-client