Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
File: CD692AAEF65311EAA7E5A684C4F9AE02.roa (raw, json)
Hash identifier: id2mRaIy2h7nVg/sc/ikSWNLePF2FrfpCr04A5Jbft8=
Subject key identifier: 7A:F4:71:93:75:37:B8:A4:0B:45:6D:89:04:0D:AD:BF:90:DD:C4:4A
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 35D9
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
Signing time: Wed 08 Jul 2026 04:08:44 +0000
ROA not before: Wed 08 Jul 2026 04:08:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45671
IP address blocks: 27.50.64.0/19 maxlen: 24
27.111.80.0/24 maxlen: 24
27.111.85.0/24 maxlen: 24
27.111.87.0/24 maxlen: 24
27.111.90.0/23 maxlen: 24
43.242.68.0/22 maxlen: 24
43.250.204.0/22 maxlen: 24
45.65.12.0/24 maxlen: 24
103.2.196.0/22 maxlen: 24
103.11.52.0/22 maxlen: 24
103.12.8.0/23 maxlen: 24
103.12.10.0/24 maxlen: 24
103.13.100.0/22 maxlen: 24
103.13.186.0/23 maxlen: 24
103.24.14.0/24 maxlen: 24
103.50.34.0/23 maxlen: 24
103.227.28.0/23 maxlen: 24
103.227.30.0/23 maxlen: 24
103.235.52.0/22 maxlen: 24
103.248.189.0/24 maxlen: 24
103.248.190.0/24 maxlen: 24
103.248.191.0/24 maxlen: 24
103.255.249.0/24 maxlen: 24
114.141.192.0/24 maxlen: 24
114.141.193.0/24 maxlen: 24
114.141.194.0/24 maxlen: 24
114.141.195.0/24 maxlen: 24
114.141.196.0/22 maxlen: 24
114.141.200.0/22 maxlen: 24
117.20.0.0/20 maxlen: 24
117.120.8.0/21 maxlen: 24
118.127.0.0/18 maxlen: 24
163.53.232.0/22 maxlen: 24
180.92.192.0/21 maxlen: 24
202.51.160.0/20 maxlen: 24
202.60.64.0/20 maxlen: 24
202.60.80.0/20 maxlen: 24
202.125.32.0/20 maxlen: 20
202.130.32.0/22 maxlen: 24
202.131.88.0/24 maxlen: 24
202.131.89.0/24 maxlen: 24
202.131.90.0/24 maxlen: 24
202.131.91.0/24 maxlen: 24
202.131.92.0/24 maxlen: 24
202.131.93.0/24 maxlen: 24
202.131.94.0/24 maxlen: 24
203.26.196.0/22 maxlen: 24
203.28.51.0/24 maxlen: 24
221.121.128.0/19 maxlen: 24
223.252.0.0/18 maxlen: 24
223.252.96.0/20 maxlen: 24
2400:8100::/32 maxlen: 32
2400:8100:6afc::/48 maxlen: 48
2400:d400:1::/48 maxlen: 48
2400:d400:2::/48 maxlen: 48
2400:d400:6::/48 maxlen: 48
2400:d400:18::/48 maxlen: 48
2400:d400:b97::/48 maxlen: 48
2400:d400:d51::/48 maxlen: 48
2400:d400:1008::/48 maxlen: 48
2400:d400:1337::/48 maxlen: 48
2400:d400:5648::/48 maxlen: 48
2400:d400:9897::/48 maxlen: 48
2400:d400:9898::/48 maxlen: 48
2400:d400:b00b::/48 maxlen: 48
2400:d400:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13785 (0x35d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Validity
Not Before: Jul 8 04:08:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4dcd4c-1e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:72:b2:e3:f1:e2:c7:c7:ff:ac:ea:c1:9f:
ab:54:47:68:a2:4a:09:46:62:1c:1c:79:4b:68:9a:
8d:7a:d9:01:6e:33:fa:e7:16:b6:eb:92:53:73:2d:
78:3a:ef:61:1e:f5:41:b7:94:03:8d:0f:6b:bd:a4:
c7:db:e3:1c:0a:b2:54:52:9a:59:b5:0d:9b:c4:76:
87:90:da:97:97:23:f0:76:4e:93:b0:28:fb:d1:42:
03:64:84:22:69:e7:44:f9:9b:dd:e9:c4:87:6f:f3:
04:f2:0c:88:2b:43:f6:50:f5:0d:d7:06:8d:ad:c1:
bd:dd:b3:6b:3f:b7:51:fc:b2:0c:cd:8c:cf:83:c7:
85:d9:e9:0a:12:f6:5c:6b:1f:ec:01:29:b9:4e:a4:
e6:0d:05:60:aa:a1:b5:3f:ac:d2:e4:5d:5c:59:36:
f9:3f:5c:7f:12:e8:b1:86:4c:87:68:b3:6c:10:f7:
1a:70:e3:fd:ce:f0:c0:81:19:12:80:88:7e:fa:25:
79:93:34:40:a9:3d:ce:01:68:81:33:b9:2d:7e:ed:
32:4d:f4:7d:6b:bd:25:96:76:64:b3:22:f3:74:39:
90:fa:54:94:6c:fe:92:9c:de:3f:f7:98:25:31:9e:
82:78:ea:70:8e:a6:ad:03:3d:42:73:ca:54:f4:58:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F4:71:93:75:37:B8:A4:0B:45:6D:89:04:0D:AD:BF:90:DD:C4:4A
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.50.64.0/19
27.111.80.0/24
27.111.85.0/24
27.111.87.0/24
27.111.90.0/23
43.242.68.0/22
43.250.204.0/22
45.65.12.0/24
103.2.196.0/22
103.11.52.0/22
103.12.8.0-103.12.10.255
103.13.100.0/22
103.13.186.0/23
103.24.14.0/24
103.50.34.0/23
103.227.28.0/22
103.235.52.0/22
103.248.189.0-103.248.191.255
103.255.249.0/24
114.141.192.0-114.141.203.255
117.20.0.0/20
117.120.8.0/21
118.127.0.0/18
163.53.232.0/22
180.92.192.0/21
202.51.160.0/20
202.60.64.0/19
202.125.32.0/20
202.130.32.0/22
202.131.88.0-202.131.94.255
203.26.196.0/22
203.28.51.0/24
221.121.128.0/19
223.252.0.0/18
223.252.96.0/20
IPv6:
2400:8100::/32
2400:d400:1::-2400:d400:2:ffff:ffff:ffff:ffff:ffff
2400:d400:6::/48
2400:d400:18::/48
2400:d400:b97::/48
2400:d400:d51::/48
2400:d400:1008::/48
2400:d400:1337::/48
2400:d400:5648::/48
2400:d400:9897::-2400:d400:9898:ffff:ffff:ffff:ffff:ffff
2400:d400:b00b::/48
2400:d400:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
3c:05:0a:d6:c8:d3:0d:6d:53:7e:3e:99:2e:00:df:17:1d:6b:
fe:16:9f:e6:bf:54:44:cd:52:67:fb:6b:8f:88:37:16:0a:30:
2d:45:02:1a:7d:db:9d:b8:29:e4:3e:5d:34:f3:7a:4a:ef:c8:
1c:f9:58:ab:84:15:30:77:9a:c2:98:1e:9c:70:94:87:95:8a:
b5:66:c2:75:12:3d:72:cd:8e:6f:c0:8a:9b:46:44:49:d5:bd:
fa:d1:49:13:73:61:e4:8a:74:b6:cb:27:ac:40:7b:59:7b:85:
92:55:bb:bb:6c:34:0f:56:44:25:cb:be:26:79:0e:ba:ca:30:
57:e6:ee:30:4c:0f:f6:e3:98:99:5d:63:56:fd:f3:29:8b:b5:
07:c2:81:37:99:91:d9:c7:06:72:a7:24:8f:69:b0:90:69:51:
4f:55:5c:10:82:ac:05:64:c5:98:26:49:ef:da:58:b8:95:2e:
78:7c:f8:3d:af:53:48:58:a5:01:3a:6c:a8:9e:04:07:15:1c:
62:d9:fd:c8:93:76:20:e5:97:74:34:0c:10:0c:25:ec:6f:4a:
7e:25:cc:f6:6a:1c:85:46:60:60:3a:bf:4c:8a:bc:1c:ab:b5:
fb:0c:94:3e:1b:b2:7c:14:5e:a8:90:23:d1:d1:2a:d7:57:9e:
16:e6:5b:31
-----BEGIN CERTIFICATE-----
MIIGujCCBaKgAwIBAgICNdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF
OTgyNjU0RkUwHhcNMjYwNzA4MDQwODQ0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRkY2Q0Yy0xZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqnFysuPx4sfH/6zqwZ+rVEdookoJRmIcHHlLaJqNetkBbjP65xa265JTcy14
Ou9hHvVBt5QDjQ9rvaTH2+McCrJUUppZtQ2bxHaHkNqXlyPwdk6TsCj70UIDZIQi
aedE+Zvd6cSHb/ME8gyIK0P2UPUN1waNrcG93bNrP7dR/LIMzYzPg8eF2ekKEvZc
ax/sASm5TqTmDQVgqqG1P6zS5F1cWTb5P1x/EuixhkyHaLNsEPcacOP9zvDAgRkS
gIh++iV5kzRAqT3OAWiBM7ktfu0yTfR9a70llnZksyLzdDmQ+lSUbP6SnN4/95gl
MZ6CeOpwjqatAz1Cc8pU9Fiy7QIDAQABo4ID3jCCA9owHQYDVR0OBBYEFHr0cZN1
N7ikC0VtiQQNrb+Q3cRKMB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE
OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUZEQkEvMDc3ODUxQTQxRDlEMTFFMjk4N0NFRThCMDhCMDJDRDIvQ0Q2OTJBQUVG
NjUzMTFFQUE3RTVBNjg0QzRGOUFFMDIucm9hMIIBmwYIKwYBBQUHAQcBAf8EggGK
MIIBhjCB+QQCAAEwgfIDBAUbMkADBAAbb1ADBAAbb1UDBAAbb1cDBAEbb1oDBAIr
8kQDBAIr+swDBAAtQQwDBAJnAsQDBAJnCzQwDAMEA2cMCAMEAGcMCgMEAmcNZAME
AWcNugMEAGcYDgMEAWcyIgMEAmfjHAMEAmfrNDAMAwQAZ/i9AwQGZ/iAAwQAZ//5
MAwDBAZyjcADBAJyjcgDBAR1FAADBAN1eAgDBAZ2fwADBAKjNegDBAO0XMADBATK
M6ADBAXKPEADBATKfSADBALKgiAwDAMEA8qDWAMEAMqDXgMEAssaxAMEAMscMwME
Bd15gAMEBt/8AAMEBN/8YDCBhwQCAAIwgYADBQAkAIEAMBIDBwAkANQAAAEDBwAk
ANQAAAIDBwAkANQAAAYDBwAkANQAABgDBwAkANQAC5cDBwAkANQADVEDBwAkANQA
EAgDBwAkANQAEzcDBwAkANQAVkgwEgMHACQA1ACYlwMHACQA1ACYmAMHACQA1ACw
CwMHACQA1AD//zANBgkqhkiG9w0BAQsFAAOCAQEAPAUK1sjTDW1Tfj6ZLgDfFx1r
/haf5r9URM1SZ/trj4g3FgowLUUCGn3bnbgp5D5dNPN6Su/IHPlYq4QVMHeawpge
nHCUh5WKtWbCdRI9cs2Ob8CKm0ZESdW9+tFJE3Nh5Ip0tssnrEB7WXuFklW7u2w0
D1ZEJcu+JnkOusowV+buMEwP9uOYmV1jVv3zKYu1B8KBN5mR2ccGcqckj2mwkGlR
T1VcEIKsBWTFmCZJ79pYuJUueHz4Pa9TSFilATpsqJ4EBxUcYtn9yJN2IOWXdDQM
EAwl7G9KfiXM9mochUZgYDq/TIq8HKu1+wyUPhuyfBReqJAj0dEq11eeFuZbMQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:12 2026 by rpki-client