Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa
File: 24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa (raw, json)
Hash identifier: qOit09+AVxL4JZOfb7Jk4FlkN3MrFEc/I7m2qFpUON4=
Subject key identifier: 00:A5:42:84:65:3B:E1:F8:0B:87:C2:FE:2C:7B:7D:53:94:EE:46:19
Certificate issuer: /CN=A9123E38/serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A
Certificate serial: 17DF
Authority key identifier: D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa
Signing time: Fri 25 Sep 2026 08:26:00 +0000
ROA not before: Fri 25 Sep 2026 08:26:00 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24337
IP address blocks: 103.228.252.0/22 maxlen: 22
103.228.252.0/24 maxlen: 24
103.228.253.0/24 maxlen: 24
103.228.254.0/24 maxlen: 24
103.228.255.0/24 maxlen: 24
139.5.156.0/22 maxlen: 22
139.5.156.0/24 maxlen: 24
139.5.157.0/24 maxlen: 24
139.5.158.0/24 maxlen: 24
139.5.159.0/24 maxlen: 24
141.164.96.0/20 maxlen: 20
141.164.96.0/24 maxlen: 24
141.164.97.0/24 maxlen: 24
141.164.98.0/24 maxlen: 24
141.164.99.0/24 maxlen: 24
141.164.100.0/24 maxlen: 24
141.164.101.0/24 maxlen: 24
141.164.103.0/24 maxlen: 24
141.164.104.0/24 maxlen: 24
141.164.105.0/24 maxlen: 24
141.164.107.0/24 maxlen: 24
141.164.108.0/24 maxlen: 24
141.164.109.0/24 maxlen: 24
141.164.110.0/24 maxlen: 24
141.164.111.0/24 maxlen: 24
202.123.176.0/21 maxlen: 21
202.123.176.0/24 maxlen: 24
202.123.177.0/24 maxlen: 24
202.123.178.0/24 maxlen: 24
202.123.179.0/24 maxlen: 24
202.123.180.0/24 maxlen: 24
202.123.181.0/24 maxlen: 24
202.123.182.0/24 maxlen: 24
202.123.183.0/24 maxlen: 24
2400:c180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl
rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 16:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6111 (0x17df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123E38, serialNumber=D54BF399BE1B659B132314B821933A20BA38B96A
Validity
Not Before: Sep 25 08:26:00 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ab63017-2c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:d4:5d:91:3f:d2:9d:86:9a:83:0d:8d:5f:
41:26:7c:11:1c:61:45:c2:f5:52:76:9d:34:9c:f8:
0f:52:35:80:25:94:18:37:a8:11:96:2e:ef:50:7f:
9c:cb:14:73:84:82:fd:04:54:0f:85:6c:cd:a6:17:
62:1e:1f:2f:23:c0:38:19:43:c7:e8:9b:79:10:b4:
c3:5d:09:7f:62:50:49:67:a8:f4:9a:16:76:1f:e2:
9a:7e:1e:2d:28:0f:e2:73:53:8c:2f:2f:23:c4:fe:
fe:d2:77:6c:c7:be:0f:01:a4:68:0e:3e:a0:7d:17:
df:17:ff:60:c5:16:cb:48:7b:e3:14:e6:fb:6d:67:
d0:2d:ee:8b:7c:34:01:5c:a1:3d:1e:77:c2:03:88:
f8:23:32:22:29:47:1e:f4:d3:75:29:ef:c8:f7:55:
22:57:44:a5:b0:72:7a:60:86:dd:88:63:1b:a2:d2:
93:28:67:c5:0d:41:92:24:1a:60:fb:a8:c0:96:51:
6b:2b:8e:28:77:ab:61:3e:54:07:5e:2b:56:7b:31:
ea:54:10:75:ee:ae:2a:34:f1:6f:15:78:12:c4:9e:
f0:34:51:e2:51:7d:51:aa:fc:c2:37:59:f1:79:00:
dc:d7:c4:20:1f:05:ad:7b:be:23:3e:4c:36:a6:60:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:42:84:65:3B:E1:F8:0B:87:C2:FE:2C:7B:7D:53:94:EE:46:19
X509v3 Authority Key Identifier:
keyid:D5:4B:F3:99:BE:1B:65:9B:13:23:14:B8:21:93:3A:20:BA:38:B9:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Uvzmb4bZZsTIxS4IZM6ILo4uWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123E38/A1087D3600EA11E8BC93B16BC4F9AE02/24CFDABE00EC11E8AAC4DD6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.228.252.0/22
139.5.156.0/22
141.164.96.0/20
202.123.176.0/21
IPv6:
2400:c180::/32
Signature Algorithm: sha256WithRSAEncryption
7a:22:f3:af:ae:87:ca:81:ad:a1:69:8f:33:7a:77:69:14:ad:
51:4a:d7:fa:2a:34:b4:18:b4:e4:3f:8f:1b:3a:9a:d0:61:bb:
2c:4a:0b:5c:47:76:29:7c:cc:58:f6:55:29:33:b0:fa:ea:6e:
79:84:7b:38:11:3b:7e:a0:d2:19:72:53:35:34:61:09:3f:08:
f9:bf:a1:83:f2:e1:45:e5:0d:63:08:bd:ef:3b:5e:4c:ba:2b:
2d:d1:3d:0e:4c:f9:f5:1f:27:c6:70:9c:c6:ab:00:f6:76:e8:
a4:d2:98:72:b2:ae:b3:40:3a:c3:0e:d5:32:7c:43:63:af:13:
d1:ca:61:3d:36:4f:b8:6e:73:11:2d:4d:13:ab:8a:12:ff:42:
bb:14:8e:b8:b8:e4:7a:7f:56:3c:46:65:fb:64:bf:5f:69:a1:
0f:a2:5c:95:0f:5d:ca:ee:3b:7b:3d:27:1a:32:9d:03:ec:4e:
29:1a:ed:79:8f:4c:1b:dd:bf:19:b9:7d:fb:bc:c9:33:35:61:
7a:5f:f6:ec:d2:44:96:b4:f7:bb:c9:63:3b:29:0e:01:2c:ce:
c2:2b:7a:4d:40:b3:a1:33:10:d1:5f:4a:ab:31:8c:44:58:1d:
29:f8:fe:4c:81:c0:2e:fc:3a:22:44:f1:49:53:40:7d:3d:8d:
54:31:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:36:24 2026 by rpki-client