Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/C96DCB80D00A11F0BC76FE15C4F9AE02.roa
File: C96DCB80D00A11F0BC76FE15C4F9AE02.roa (raw, json)
Hash identifier: 6pZjTPqP9wPmYOVwUXBa4Swz4CDpYv/0dyLoKjy0QaM=
Subject key identifier: 4F:84:B6:69:74:1C:45:89:E7:97:72:1A:AC:51:98:69:DB:00:A8:CF
Certificate issuer: /CN=A911E008/serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4
Certificate serial: 17A7
Authority key identifier: 24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/C96DCB80D00A11F0BC76FE15C4F9AE02.roa
Signing time: Sat 02 May 2026 17:19:47 +0000
ROA not before: Sat 02 May 2026 17:19:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23749
IP address blocks: 112.213.64.0/24 maxlen: 24
112.213.65.0/24 maxlen: 24
112.213.66.0/24 maxlen: 24
112.213.67.0/24 maxlen: 24
112.213.68.0/22 maxlen: 22
112.213.68.0/24 maxlen: 24
112.213.69.0/24 maxlen: 24
112.213.70.0/24 maxlen: 24
112.213.71.0/24 maxlen: 24
112.213.72.0/22 maxlen: 22
112.213.72.0/24 maxlen: 24
112.213.73.0/24 maxlen: 24
112.213.74.0/24 maxlen: 24
112.213.75.0/24 maxlen: 24
202.122.96.0/24 maxlen: 24
202.122.97.0/24 maxlen: 24
202.122.98.0/24 maxlen: 24
202.122.99.0/24 maxlen: 24
202.122.100.0/24 maxlen: 24
202.122.101.0/24 maxlen: 24
202.122.102.0/24 maxlen: 24
202.122.103.0/24 maxlen: 24
202.122.104.0/24 maxlen: 24
202.122.105.0/24 maxlen: 24
202.122.106.0/24 maxlen: 24
202.122.107.0/24 maxlen: 24
202.122.108.0/23 maxlen: 23
202.122.108.0/24 maxlen: 24
202.122.109.0/24 maxlen: 24
202.122.110.0/24 maxlen: 24
2401:3c60::/32 maxlen: 32
2401:3c60:1::/48 maxlen: 48
2401:3c60:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl
rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6055 (0x17a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E008, serialNumber=248F5588EA8FC7DD0A3B4DA1E1558031C0D927E4
Validity
Not Before: May 2 17:19:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f63233-097b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:d0:05:4e:da:ac:fc:51:14:e3:43:67:df:
e3:ec:d2:91:d5:9c:28:0d:8c:db:f6:dd:4b:5e:ee:
73:be:d1:23:0b:04:10:80:3a:e8:6c:27:c6:ba:73:
67:52:56:2a:89:3c:b8:be:f8:d6:5b:20:7a:1b:6d:
7f:da:99:11:97:b3:df:bb:2c:8c:0e:5f:60:94:11:
d3:00:23:95:c5:72:04:bb:6b:b6:af:66:34:10:14:
2c:b0:ef:5d:fa:20:a2:ba:69:d7:33:d7:ea:02:59:
23:5d:df:cb:99:83:49:80:5e:4b:99:a0:76:4d:ac:
5d:52:37:15:da:d1:f3:57:8e:c7:61:a7:38:05:ba:
2d:71:43:8e:03:68:ec:b8:5c:5b:d1:e0:c3:21:3d:
c9:85:bd:15:05:31:e7:10:3e:56:ba:26:f4:af:9e:
96:fc:c8:2b:5a:8a:6d:d8:c3:53:52:29:87:16:19:
ae:91:c1:2c:40:90:4e:9d:e2:4b:c6:31:6f:7d:d9:
22:a5:60:46:07:84:dd:e1:e0:40:23:5b:97:bf:a5:
2f:22:f9:f7:1c:93:9e:83:60:9f:74:bb:c2:57:22:
25:21:01:fd:5c:ac:c6:36:13:1d:67:00:46:c7:fa:
0a:ba:ec:d4:8a:66:c6:94:a5:e5:3a:53:0a:69:7d:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:84:B6:69:74:1C:45:89:E7:97:72:1A:AC:51:98:69:DB:00:A8:CF
X509v3 Authority Key Identifier:
keyid:24:8F:55:88:EA:8F:C7:DD:0A:3B:4D:A1:E1:55:80:31:C0:D9:27:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/JI9ViOqPx90KO02h4VWAMcDZJ-Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JI9ViOqPx90KO02h4VWAMcDZJ-Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E008/DD88C3AEF1D311E797ED4240C4F9AE02/C96DCB80D00A11F0BC76FE15C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
112.213.64.0-112.213.75.255
202.122.96.0-202.122.110.255
IPv6:
2401:3c60::/32
Signature Algorithm: sha256WithRSAEncryption
3b:02:4b:fe:33:bc:1c:cc:53:ae:02:f1:3e:4d:a8:f2:1d:4d:
82:bc:25:c3:8a:b4:c1:ec:9f:ff:1f:80:b7:4c:9f:42:fa:48:
42:0f:9f:08:09:79:d0:76:09:61:21:ea:21:3f:b8:12:86:d6:
01:09:d4:e9:79:1b:fd:d2:16:6f:10:a6:f4:9d:a0:6a:30:21:
39:7a:3f:b7:b7:9f:3d:c2:c1:bb:0e:7e:8d:91:b0:ee:0a:2d:
c8:29:5c:13:61:d3:5c:fc:90:bd:9a:8a:ee:95:e7:c5:10:61:
f6:6d:3d:d6:06:1c:ef:30:7f:a0:98:19:af:4f:45:09:5c:fd:
0e:dd:17:ec:0e:99:96:92:6a:95:ad:bc:1a:07:51:d3:68:c7:
c2:a7:c6:52:91:e9:c7:8f:22:72:9b:cd:be:29:4e:99:65:e7:
94:32:aa:22:a1:6c:1d:1c:8c:c7:f7:43:a3:2f:42:e9:82:20:
8d:0e:c3:3a:c2:5f:4f:34:22:57:f0:22:59:6a:56:2f:3d:b3:
f3:c7:2d:41:c6:46:be:fe:f5:3b:f4:67:0b:93:02:3a:49:2f:
39:32:c0:fe:3b:63:e4:7e:cd:1d:4a:b8:9d:78:9d:bb:87:18:
8f:5f:a2:18:6a:16:ac:3f:24:af:a7:ad:42:de:ae:be:4c:1d:
94:03:36:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:35 2026 by rpki-client