Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/C1D6AD981EA111F1B2DD47B2123D8C67.roa
File: C1D6AD981EA111F1B2DD47B2123D8C67.roa (raw, json)
Hash identifier: OkNv/7szzx08zlUxugWaxnTZ4og4B61T42moC8uiKwU=
Subject key identifier: AA:D4:ED:6C:53:AC:C5:4D:10:08:A8:4E:66:DF:47:72:33:F3:E0:D1
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 0A79
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/C1D6AD981EA111F1B2DD47B2123D8C67.roa
Signing time: Fri 21 Aug 2026 05:54:38 +0000
ROA not before: Fri 13 Mar 2026 06:02:24 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 135060
IP address blocks: 103.93.150.0/24 maxlen: 24
103.93.151.0/24 maxlen: 24
103.152.128.0/24 maxlen: 24
103.152.129.0/24 maxlen: 24
103.208.4.0/22 maxlen: 22
103.208.4.0/24 maxlen: 24
103.208.5.0/24 maxlen: 24
103.208.6.0/24 maxlen: 24
103.208.7.0/24 maxlen: 24
116.206.128.0/24 maxlen: 24
116.206.129.0/24 maxlen: 24
123.100.140.0/23 maxlen: 24
123.100.143.0/24 maxlen: 24
123.100.144.0/24 maxlen: 24
123.100.145.0/24 maxlen: 24
123.100.146.0/24 maxlen: 24
123.100.147.0/24 maxlen: 24
123.100.148.0/22 maxlen: 22
123.100.148.0/24 maxlen: 24
123.100.149.0/24 maxlen: 24
123.100.150.0/24 maxlen: 24
123.100.151.0/24 maxlen: 24
123.100.152.0/24 maxlen: 24
123.253.192.0/24 maxlen: 24
123.253.193.0/24 maxlen: 24
123.253.194.0/24 maxlen: 24
202.86.52.0/24 maxlen: 24
202.86.53.0/24 maxlen: 24
202.86.54.0/24 maxlen: 24
202.86.55.0/24 maxlen: 24
2404:6a80::/41 maxlen: 41
2404:6a80:200::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2681 (0xa79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4, serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: Mar 13 06:02:24 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a87e81e-139c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:3b:5b:08:9c:5f:27:f7:de:35:cc:83:b7:
6b:ab:7d:74:6b:d8:86:2a:a1:a5:8e:c8:cf:9f:c3:
fe:c1:d9:17:77:e7:d8:f4:1c:4a:96:81:f5:84:a6:
ce:24:f4:0c:15:75:a3:0a:39:7a:a4:85:b0:d0:6c:
ad:00:4a:32:a3:3d:5d:d3:48:4f:20:5f:4e:65:c1:
5a:f6:57:41:92:c9:10:47:0d:27:8b:6f:40:37:22:
b9:bb:83:e5:d9:33:31:f0:d4:f7:20:05:60:59:7b:
01:c0:41:92:92:3d:27:5f:69:3f:58:7b:e6:21:c7:
4a:e1:a1:10:d3:34:9e:55:e5:7c:7f:33:4b:c6:65:
97:35:19:c4:25:ec:fe:cb:20:cc:ea:a3:61:25:c4:
7c:0c:f7:5d:15:aa:68:7c:b8:98:2a:42:f6:44:28:
44:56:c2:03:8d:cb:4f:52:6c:cd:cd:ba:9b:5f:25:
7a:50:a6:1d:08:fc:84:45:07:58:fb:61:24:9c:0e:
98:a2:a4:07:ec:8a:04:71:0c:b8:c7:e3:0a:3a:e1:
a1:e2:97:e1:15:89:da:f8:e1:1f:fa:22:59:14:ef:
6a:b6:c4:3d:74:d9:a2:ee:b0:ce:4a:eb:f2:94:58:
5a:4f:eb:92:8b:7f:b9:b3:a2:8a:a5:1e:0f:0b:fb:
af:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D4:ED:6C:53:AC:C5:4D:10:08:A8:4E:66:DF:47:72:33:F3:E0:D1
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/C1D6AD981EA111F1B2DD47B2123D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.93.150.0/23
103.152.128.0/23
103.208.4.0/22
116.206.128.0/23
123.100.140.0/23
123.100.143.0-123.100.152.255
123.253.192.0-123.253.194.255
202.86.52.0/22
IPv6:
2404:6a80::/41
2404:6a80:200::/41
Signature Algorithm: sha256WithRSAEncryption
33:5e:e0:c2:92:be:b8:79:a4:df:48:cb:e7:f3:ff:5f:16:07:
bd:bd:2b:9b:2c:f2:4c:31:c1:5e:14:61:b5:90:1d:62:ed:ab:
a2:20:78:1f:7c:60:b3:2c:cb:fd:45:7e:0f:4b:f7:01:cc:52:
1e:24:af:d2:4b:e8:7b:52:f3:84:0c:e0:a9:57:5b:9a:d9:aa:
b5:a6:1e:05:43:56:e2:cc:26:85:ef:64:e5:0e:23:d3:b5:25:
18:ce:90:16:9d:ed:3c:50:72:1b:26:03:23:aa:f2:97:ff:be:
09:6e:11:70:c0:15:14:4a:6b:76:b3:19:25:16:85:ee:88:11:
b8:6f:c8:47:1a:f3:f1:e9:15:79:47:c7:e6:0b:db:b9:80:ae:
5d:64:c5:f3:08:06:f8:ab:24:1b:58:59:d0:43:62:54:46:db:
2b:2d:ac:68:5d:c9:2b:d0:2f:8a:cb:8d:71:4e:e2:31:45:5d:
5c:55:eb:4e:83:50:60:69:b6:1a:54:e0:b3:88:eb:bb:46:de:
af:09:33:bf:51:90:b5:d9:70:38:94:36:af:7b:ba:2a:57:88:
24:9c:75:f6:6d:87:3e:95:e9:24:84:8b:23:6c:19:dd:95:b4:
2c:b6:d6:94:01:c4:f3:b3:6a:0f:47:c1:d2:1c:67:a0:0d:0a:
f2:20:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:52:04 2026 by rpki-client