Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/202A51EA52D611EFA0333E23C4F9AE02.roa
File: 202A51EA52D611EFA0333E23C4F9AE02.roa (raw, json)
Hash identifier: ukG+QjLIfQYYrJeHpmMVcGo76w8dZis2VZOGGlLuRHw=
Subject key identifier: 27:5D:B5:7C:FE:B6:8E:FC:38:41:7D:7F:85:05:0A:2A:DC:E4:1D:FF
Certificate issuer: /CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3
Certificate serial: 0776
Authority key identifier: D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/202A51EA52D611EFA0333E23C4F9AE02.roa
Signing time: Thu 24 Sep 2026 21:43:02 +0000
ROA not before: Thu 24 Sep 2026 21:43:02 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 133771
IP address blocks: 59.153.56.0/22 maxlen: 22
59.153.56.0/24 maxlen: 24
59.153.57.0/24 maxlen: 24
59.153.58.0/24 maxlen: 24
59.153.59.0/24 maxlen: 24
103.198.56.0/22 maxlen: 24
116.251.224.0/19 maxlen: 19
116.251.224.0/22 maxlen: 22
116.251.224.0/24 maxlen: 24
116.251.225.0/24 maxlen: 24
116.251.226.0/23 maxlen: 24
116.251.228.0/22 maxlen: 22
116.251.228.0/24 maxlen: 24
116.251.229.0/24 maxlen: 24
116.251.230.0/24 maxlen: 24
116.251.231.0/24 maxlen: 24
116.251.232.0/22 maxlen: 22
116.251.232.0/24 maxlen: 24
116.251.233.0/24 maxlen: 24
116.251.234.0/23 maxlen: 24
116.251.236.0/22 maxlen: 22
116.251.236.0/23 maxlen: 24
116.251.238.0/24 maxlen: 24
116.251.239.0/24 maxlen: 24
116.251.240.0/22 maxlen: 22
116.251.240.0/24 maxlen: 24
116.251.241.0/24 maxlen: 24
116.251.242.0/24 maxlen: 24
116.251.243.0/24 maxlen: 24
116.251.244.0/22 maxlen: 22
116.251.244.0/24 maxlen: 24
116.251.245.0/24 maxlen: 24
116.251.246.0/24 maxlen: 24
116.251.247.0/24 maxlen: 24
116.251.248.0/22 maxlen: 22
116.251.248.0/24 maxlen: 24
116.251.249.0/24 maxlen: 24
116.251.250.0/24 maxlen: 24
116.251.251.0/24 maxlen: 24
116.251.252.0/22 maxlen: 22
116.251.252.0/24 maxlen: 24
116.251.253.0/24 maxlen: 24
116.251.254.0/24 maxlen: 24
116.251.255.0/24 maxlen: 24
138.43.32.0/20 maxlen: 24
138.43.192.0/20 maxlen: 24
2401:d280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl
rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 21:51:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1910 (0x776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C22, serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3
Validity
Not Before: Sep 24 21:43:02 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ab59966-6a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:bb:af:e5:76:99:8d:25:4a:dd:02:17:71:
0c:1b:92:04:5d:25:b9:3c:2b:b2:8f:37:80:e9:0e:
3f:ce:c0:d8:3c:25:de:e0:80:2d:76:f7:42:8a:a6:
7a:da:f8:0b:c0:eb:14:00:0f:5c:a0:f4:a5:eb:9b:
56:68:d0:a3:cb:b5:04:20:f8:f1:2c:d4:ef:37:ad:
a7:1b:d0:76:56:75:be:b6:81:c0:6f:7e:b7:88:d9:
48:f9:a4:36:c5:c7:2c:bb:f3:78:0e:61:64:42:0c:
ed:2d:a1:7a:88:04:21:3f:37:5b:0c:bd:f4:0d:5b:
1b:f8:5c:05:16:80:b3:ab:d1:6a:49:23:4c:50:55:
4a:2e:c9:ab:6e:a9:b5:73:97:c5:41:58:28:ba:1e:
2b:3c:39:fc:5a:35:68:99:d1:82:4c:0f:fe:d3:89:
70:19:f6:d4:23:82:2e:3b:08:d2:95:ef:e6:3c:44:
4b:35:07:4c:49:7c:5e:e3:5b:2d:df:fe:a6:93:0b:
68:1c:2a:26:0f:4f:fc:88:05:e9:3e:91:2d:ea:4d:
08:f3:9c:c7:1f:32:e4:95:27:d0:dc:f9:0f:82:47:
58:63:b8:6b:38:e5:c9:c5:e2:fc:ea:fe:ea:13:b9:
a5:df:9b:d3:13:0a:e6:78:c9:6e:3f:ba:76:28:f7:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5D:B5:7C:FE:B6:8E:FC:38:41:7D:7F:85:05:0A:2A:DC:E4:1D:FF
X509v3 Authority Key Identifier:
keyid:D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/202A51EA52D611EFA0333E23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.153.56.0/22
103.198.56.0/22
116.251.224.0/19
138.43.32.0/20
138.43.192.0/20
IPv6:
2401:d280::/32
Signature Algorithm: sha256WithRSAEncryption
09:87:68:29:76:cb:f8:3c:69:e9:26:52:07:19:9b:da:2e:2f:
d5:47:cb:1f:55:dc:ff:3a:84:d4:89:e4:92:93:be:13:cf:0b:
ea:27:27:2c:a6:b8:0a:82:98:32:56:4e:a7:9d:5d:ad:6c:30:
23:f8:2a:b9:b8:49:c2:09:02:ec:2b:95:a1:6d:d0:ca:de:62:
0b:7c:b3:07:f3:6c:6c:73:c5:49:69:f8:51:7e:1c:18:70:4e:
17:91:7a:75:d0:a9:ac:6e:49:db:0d:ae:32:22:0c:6c:ce:5c:
a6:43:ee:79:44:61:0c:81:1b:f5:54:8d:4e:c4:d1:6b:bd:d4:
5d:18:39:96:2d:38:a5:f4:65:f2:61:4b:75:a7:12:40:8c:4e:
84:36:d1:87:87:46:01:58:c7:28:59:5d:fa:89:0b:1d:79:81:
77:54:6a:a6:a6:c3:4a:d9:88:57:a1:b4:ea:b5:99:96:45:10:
2f:60:2c:39:07:7b:33:34:25:25:06:ec:45:f1:89:3e:aa:e0:
42:6f:7f:82:11:16:8b:7d:d2:45:e1:51:0d:4b:07:be:41:ff:
fe:bf:54:ad:31:8c:14:53:43:ec:99:d1:8c:5b:59:cb:b7:e5:
8e:79:de:a4:45:23:75:73:ff:29:79:0b:e1:de:4d:d6:5c:49:
9c:61:fd:f8
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgICB3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjVDMjIxMTAvBgNVBAUTKEQ5MDY5MzkxQTNFNzgwNEE2RUJEREY5RDQxRjJERTRE
OTFCRDUxQjMwHhcNMjYwOTI0MjE0MzAyWhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWI1OTk2Ni02YTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupu7r+V2mY0lSt0CF3EMG5IEXSW5PCuyjzeA6Q4/zsDYPCXe4IAtdvdCiqZ6
2vgLwOsUAA9coPSl65tWaNCjy7UEIPjxLNTvN62nG9B2VnW+toHAb363iNlI+aQ2
xccsu/N4DmFkQgztLaF6iAQhPzdbDL30DVsb+FwFFoCzq9FqSSNMUFVKLsmrbqm1
c5fFQVgouh4rPDn8WjVomdGCTA/+04lwGfbUI4IuOwjSle/mPERLNQdMSXxe41st
3/6mkwtoHComD0/8iAXpPpEt6k0I85zHHzLklSfQ3PkPgkdYY7hrOOXJxeL86v7q
E7ml35vTEwrmeMluP7p2KPeALQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFCddtXz+
to78OEF9f4UFCirc5B3/MB8GA1UdIwQYMBaAFNkGk5Gj54BKbr3fnUHy3k2RvVGz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMyMi8wNDU2OTVCODdG
QUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdFcHV2ZC1kUWZMZVRaRzlV
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJRYVRrYVBuZ0VwdXZkLWRRZkxlVFpHOVViTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjVDMjIvMDQ1Njk1Qjg3RkFFMTFFQjk3N0I1MzM1QzRGOUFFMDIvMjAyQTUxRUE1
MkQ2MTFFRkEwMzMzRTIzQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk
BAIAATAeAwQCO5k4AwQCZ8Y4AwQFdPvgAwQEiisgAwQEiivAMA0EAgACMAcDBQAk
AdKAMA0GCSqGSIb3DQEBCwUAA4IBAQAJh2gpdsv4PGnpJlIHGZvaLi/VR8sfVdz/
OoTUieSSk74TzwvqJycsprgKgpgyVk6nnV2tbDAj+Cq5uEnCCQLsK5WhbdDK3mIL
fLMH82xsc8VJafhRfhwYcE4XkXp10KmsbknbDa4yIgxszlymQ+55RGEMgRv1VI1O
xNFrvdRdGDmWLTil9GXyYUt1pxJAjE6ENtGHh0YBWMcoWV36iQsdeYF3VGqmpsNK
2YhXobTqtZmWRRAvYCw5B3szNCUlBuxF8Yk+quBCb3+CERaLfdJF4VENSwe+Qf/+
v1StMYwUU0PsmdGMW1nLt+WOed6kRSN1c/8peQvh3k3WXEmcYf34
-----END CERTIFICATE-----
Generated at Tue Sep 29 23:37:33 2026 by rpki-client