Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/20151124C8EE11F0BD2FFA4CC4F9AE02.roa
File: 20151124C8EE11F0BD2FFA4CC4F9AE02.roa (raw, json)
Hash identifier: V4KzQo4wZ81qbo+MqiN5pgO8Y+Nc0vatL2esSSR0mec=
Subject key identifier: A8:D5:45:8C:21:87:3E:C7:97:CC:CC:E8:4F:FF:5C:D0:D3:DB:B3:06
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: 0132
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/20151124C8EE11F0BD2FFA4CC4F9AE02.roa
Signing time: Wed 06 May 2026 04:48:45 +0000
ROA not before: Wed 06 May 2026 04:48:45 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9335
IP address blocks: 61.19.240.0/20 maxlen: 20
61.19.242.0/24 maxlen: 24
61.19.245.0/24 maxlen: 24
61.19.246.0/24 maxlen: 24
61.19.247.0/24 maxlen: 24
61.19.248.0/24 maxlen: 24
61.19.249.0/24 maxlen: 24
61.19.250.0/24 maxlen: 24
61.19.251.0/24 maxlen: 24
61.19.252.0/24 maxlen: 24
110.78.192.0/20 maxlen: 24
110.78.208.0/21 maxlen: 24
110.78.216.0/22 maxlen: 24
110.78.220.0/22 maxlen: 24
110.78.228.0/22 maxlen: 24
110.78.252.0/22 maxlen: 24
122.154.133.0/24 maxlen: 24
122.155.0.0/19 maxlen: 20
122.155.0.0/24 maxlen: 24
122.155.1.0/24 maxlen: 24
122.155.2.0/24 maxlen: 24
122.155.3.0/24 maxlen: 24
122.155.4.0/24 maxlen: 24
122.155.5.0/24 maxlen: 24
122.155.6.0/24 maxlen: 24
122.155.7.0/24 maxlen: 24
122.155.8.0/24 maxlen: 24
122.155.9.0/24 maxlen: 24
122.155.10.0/24 maxlen: 24
122.155.11.0/24 maxlen: 24
122.155.12.0/24 maxlen: 24
122.155.13.0/24 maxlen: 24
122.155.14.0/24 maxlen: 24
122.155.16.0/24 maxlen: 24
122.155.17.0/24 maxlen: 24
122.155.18.0/24 maxlen: 24
122.155.19.0/24 maxlen: 24
122.155.21.0/24 maxlen: 24
122.155.22.0/24 maxlen: 24
122.155.23.0/24 maxlen: 24
122.155.28.0/24 maxlen: 24
122.155.29.0/24 maxlen: 24
122.155.55.0/24 maxlen: 24
122.155.144.0/21 maxlen: 21
122.155.144.0/24 maxlen: 24
122.155.145.0/24 maxlen: 24
122.155.146.0/24 maxlen: 24
122.155.147.0/24 maxlen: 24
122.155.148.0/24 maxlen: 24
122.155.149.0/24 maxlen: 24
122.155.150.0/24 maxlen: 24
122.155.151.0/24 maxlen: 24
122.155.160.0/19 maxlen: 19
122.155.164.0/24 maxlen: 24
122.155.165.0/24 maxlen: 24
122.155.166.0/24 maxlen: 24
122.155.167.0/24 maxlen: 24
122.155.168.0/24 maxlen: 24
122.155.169.0/24 maxlen: 24
122.155.170.0/24 maxlen: 24
122.155.171.0/24 maxlen: 24
122.155.172.0/24 maxlen: 24
122.155.173.0/24 maxlen: 24
122.155.174.0/24 maxlen: 24
122.155.175.0/24 maxlen: 24
122.155.177.0/24 maxlen: 24
122.155.180.0/24 maxlen: 24
122.155.184.0/21 maxlen: 21
122.155.184.0/22 maxlen: 24
122.155.191.0/24 maxlen: 24
122.155.192.0/24 maxlen: 24
122.155.193.0/24 maxlen: 24
122.155.194.0/24 maxlen: 24
122.155.195.0/24 maxlen: 24
122.155.196.0/24 maxlen: 24
122.155.197.0/24 maxlen: 24
122.155.198.0/24 maxlen: 24
122.155.199.0/24 maxlen: 24
122.155.200.0/24 maxlen: 24
122.155.201.0/24 maxlen: 24
122.155.202.0/24 maxlen: 24
122.155.203.0/24 maxlen: 24
122.155.204.0/24 maxlen: 24
122.155.205.0/24 maxlen: 24
122.155.206.0/24 maxlen: 24
122.155.207.0/24 maxlen: 24
122.155.208.0/24 maxlen: 24
122.155.209.0/24 maxlen: 24
122.155.210.0/24 maxlen: 24
122.155.211.0/24 maxlen: 24
122.155.212.0/24 maxlen: 24
122.155.215.0/24 maxlen: 24
122.155.216.0/24 maxlen: 24
122.155.220.0/24 maxlen: 24
122.155.221.0/24 maxlen: 24
122.155.222.0/24 maxlen: 24
122.155.223.0/24 maxlen: 24
202.3.68.0/24 maxlen: 24
202.3.69.0/24 maxlen: 24
202.3.70.0/24 maxlen: 24
202.3.71.0/24 maxlen: 24
202.129.2.0/24 maxlen: 24
202.129.50.0/24 maxlen: 24
202.139.192.0/22 maxlen: 22
202.139.192.0/24 maxlen: 24
202.139.193.0/24 maxlen: 24
202.139.194.0/24 maxlen: 24
202.139.195.0/24 maxlen: 24
202.139.196.0/24 maxlen: 24
202.139.198.0/24 maxlen: 24
202.139.199.0/24 maxlen: 24
202.139.223.0/24 maxlen: 24
2001:c38:1000::/36 maxlen: 36
2001:c38:1000::/48 maxlen: 48
2001:c38:2000::/36 maxlen: 36
2001:c38:2000::/48 maxlen: 48
2001:c38:20f8::/48 maxlen: 48
2001:c38:3001::/48 maxlen: 48
2001:c38:3002::/48 maxlen: 48
2001:c38:3003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:17:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: May 6 04:48:45 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69fac82d-3541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:6a:d4:f4:fb:66:51:5a:9b:14:b3:d8:92:
1c:a9:33:56:ec:c1:e9:59:31:88:61:ef:27:67:ef:
71:fc:91:c8:bd:0b:01:4d:68:7a:0e:fa:df:c5:8f:
a2:6a:80:2d:7a:67:c2:55:44:61:5a:b0:49:a2:50:
34:4c:be:a2:68:2b:7c:a6:56:5e:1e:0a:c0:ae:fe:
c3:2a:36:df:33:dd:98:32:0d:7b:67:8f:73:8f:02:
d6:69:a7:0a:29:25:d8:3a:ae:f4:26:2a:b3:ff:cf:
39:69:c2:77:dd:4f:bd:5e:0c:62:87:f3:bf:3f:ff:
d8:e6:86:64:6c:57:6d:58:68:85:bd:79:86:e6:7f:
10:83:04:61:16:8f:60:2c:7d:37:fe:ea:f6:78:a1:
06:a1:0e:71:73:75:4f:4f:9e:79:58:dc:56:4f:b0:
2b:56:cc:4a:50:d3:eb:0c:c5:4a:2a:19:08:7f:58:
ae:02:dc:4a:ae:30:6b:82:7f:69:db:95:ae:89:94:
38:57:a2:46:3e:cb:a3:bd:d6:dc:7a:61:a7:6b:08:
8d:ce:d3:b2:82:02:46:69:f3:f2:d6:51:3a:b4:41:
44:2e:99:5e:4c:f8:c0:04:16:9e:67:71:a6:75:07:
2f:42:f0:7c:b3:45:05:a2:e5:62:46:3f:ca:ea:35:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D5:45:8C:21:87:3E:C7:97:CC:CC:E8:4F:FF:5C:D0:D3:DB:B3:06
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/20151124C8EE11F0BD2FFA4CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.19.240.0/20
110.78.192.0/19
110.78.228.0/22
110.78.252.0/22
122.154.133.0/24
122.155.0.0/19
122.155.55.0/24
122.155.144.0/21
122.155.160.0-122.155.212.255
122.155.215.0-122.155.216.255
122.155.220.0/22
202.3.68.0/22
202.129.2.0/24
202.129.50.0/24
202.139.192.0-202.139.196.255
202.139.198.0/23
202.139.223.0/24
IPv6:
2001:c38:1000::-2001:c38:2fff:ffff:ffff:ffff:ffff:ffff
2001:c38:3001::-2001:c38:3003:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
66:4a:6c:ff:60:83:dc:28:d3:2a:42:be:fe:95:2c:29:f5:f9:
eb:f6:28:ae:3f:fb:d9:19:07:a0:7d:21:2f:0b:8a:8b:71:0d:
e9:1f:aa:17:d2:a5:bb:aa:68:e7:f8:22:f8:49:8e:08:14:c2:
a3:e0:59:85:ee:70:aa:be:67:3b:c2:52:4c:0a:82:e5:bf:94:
80:f5:cb:4f:31:7f:ea:ed:91:c9:60:0c:0c:d2:52:67:df:68:
ea:41:c8:54:26:7a:4b:06:b7:36:b5:7e:33:58:c3:5c:15:cd:
e8:c1:1e:a4:f1:84:68:54:d9:68:70:7b:0a:16:28:3e:e0:c6:
47:79:a4:0b:62:f9:15:26:91:e3:c1:b3:93:a7:2d:29:bf:67:
5f:a6:c1:21:e1:74:93:40:5f:5c:a2:2c:2f:8a:67:c3:9a:0b:
82:f6:6d:b1:3b:f5:31:6e:b7:18:8e:a0:58:e0:c9:9f:73:cf:
23:8b:78:1d:d0:27:23:01:1c:33:6d:6f:ab:f0:86:0f:36:43:
b0:fd:7f:69:16:a3:9c:5b:f7:4d:20:33:dd:6c:3b:16:ae:9d:
66:18:da:8d:3b:91:2b:e2:40:fc:88:59:01:b5:53:61:36:e3:
54:7e:ad:03:11:c4:91:01:3f:88:4f:df:7e:85:dd:0e:24:11:
f2:2b:8b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:21 2026 by rpki-client