Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/08754752218611EAA5DF883CC4F9AE02.roa
File: 08754752218611EAA5DF883CC4F9AE02.roa (raw, json)
Hash identifier: 9BPurM+bulBYlNNGJgaGdzigQeRd9Aok8jx7Ea5CeBI=
Subject key identifier: E1:44:5B:2A:6D:B7:69:13:AA:4D:A3:59:4A:CD:D6:C5:CA:AC:41:40
Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial: 0C54
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/08754752218611EAA5DF883CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:56:14 +0000
ROA not before: Fri 28 Nov 2025 18:22:59 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 38562
IP address blocks: 103.253.246.0/23 maxlen: 23
103.253.246.0/24 maxlen: 24
103.253.247.0/24 maxlen: 24
122.152.48.0/23 maxlen: 24
122.152.50.0/24 maxlen: 24
122.152.51.0/24 maxlen: 24
122.152.52.0/22 maxlen: 22
122.152.52.0/24 maxlen: 24
122.152.53.0/24 maxlen: 24
122.152.54.0/24 maxlen: 24
122.152.55.0/24 maxlen: 24
2405:a840::/32 maxlen: 32
2405:a840::/34 maxlen: 34
2405:a840::/36 maxlen: 36
2405:a840:1000::/36 maxlen: 36
2405:a840:2000::/36 maxlen: 36
2405:a840:3000::/36 maxlen: 36
2405:a840:4000::/34 maxlen: 34
2405:a840:4000::/36 maxlen: 36
2405:a840:5000::/36 maxlen: 36
2405:a840:6000::/36 maxlen: 36
2405:a840:7000::/36 maxlen: 36
2405:a840:8000::/34 maxlen: 34
2405:a840:8000::/36 maxlen: 36
2405:a840:9000::/36 maxlen: 36
2405:a840:a000::/36 maxlen: 36
2405:a840:b000::/36 maxlen: 36
2405:a840:c000::/36 maxlen: 36
2405:a840:d000::/36 maxlen: 36
2405:a840:e000::/36 maxlen: 36
2405:a840:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3156 (0xc54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Validity
Not Before: Nov 28 18:22:59 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4457e-13c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:a2:b6:c7:78:b2:1c:2d:d5:24:99:ec:79:
93:d4:68:e7:a5:ff:55:fd:78:01:a1:bf:73:4d:47:
a0:5e:f3:73:34:5d:f3:9e:a0:9a:78:b1:99:c0:01:
4d:36:c7:fe:c9:91:26:ab:21:3e:08:c1:0f:80:47:
eb:98:87:ca:da:c4:2d:ac:0f:e7:79:57:81:02:78:
d6:aa:ad:09:b2:80:91:ed:97:87:99:ff:74:61:17:
34:ec:a2:39:a1:27:d1:4e:a6:fd:f1:69:c1:f6:ae:
3b:fb:2d:7c:de:4b:75:d8:91:b5:9b:72:a1:68:17:
e3:d7:c4:81:53:86:da:15:0e:48:6e:3e:c9:70:ec:
ec:7c:00:24:cd:f5:a5:b7:1b:d6:ac:80:0f:b0:68:
d7:10:1e:bb:94:a7:62:ce:95:aa:2a:40:b2:ef:de:
10:cd:56:55:25:95:43:f5:d5:9e:78:55:5e:af:fc:
60:13:cf:8b:b6:93:3c:26:09:b9:cd:7f:44:a1:69:
be:19:99:fb:4d:86:6e:3d:05:ed:e7:c3:fb:44:d9:
4a:f2:18:85:a9:11:98:66:1c:0c:91:05:95:83:fc:
ec:eb:1b:8b:c3:b8:c5:7d:56:17:75:6d:fd:d5:67:
42:65:23:ac:a1:f6:7a:54:45:31:07:f5:04:22:b4:
98:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:44:5B:2A:6D:B7:69:13:AA:4D:A3:59:4A:CD:D6:C5:CA:AC:41:40
X509v3 Authority Key Identifier:
keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/08754752218611EAA5DF883CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.253.246.0/23
122.152.48.0/21
IPv6:
2405:a840::/32
Signature Algorithm: sha256WithRSAEncryption
77:56:2e:12:e9:f6:75:84:ef:6c:0a:d5:6a:bf:d2:b5:2d:ac:
90:d9:ba:d7:b7:78:b6:85:4a:eb:a2:d2:cc:11:0e:8e:71:47:
41:62:eb:3f:8e:38:1b:c1:b5:95:d7:af:cd:39:71:0d:2f:b1:
0c:3e:34:33:b7:2a:4c:4b:9e:f3:a9:a9:f2:69:f6:52:a0:03:
1a:10:28:fd:01:ef:11:5e:58:dd:bb:d5:b4:f1:0c:15:04:9c:
cc:11:f0:1c:6c:5b:52:c7:35:65:6b:ea:b2:ae:52:1c:b2:98:
36:6f:cd:c5:d5:ed:c7:df:10:41:31:ee:5b:8b:ff:6d:13:dc:
73:79:21:2f:fb:d3:03:2b:60:a3:ca:ee:49:e5:a2:15:38:cd:
8b:fd:67:fe:fb:0a:01:d5:36:07:cd:30:9c:17:f2:2e:59:b5:
bb:9f:e4:3c:64:56:57:7a:a5:fb:fa:d1:b0:26:9e:66:2d:ee:
f8:90:06:5f:45:58:34:cb:d5:3e:9b:c2:e7:fd:e2:f0:88:a4:
a1:76:fd:84:34:2e:78:68:6e:cb:b4:ee:51:dd:e4:6f:f7:c4:
d4:a0:4f:a4:c7:19:98:dd:c5:a9:68:0b:f1:ba:cf:52:e2:26:
fe:a5:43:4b:e7:06:99:4f:79:c9:93:4f:4a:c0:e0:b0:5c:52:
53:85:d6:40
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx
OENENjhFMzEwHhcNMjUxMTI4MTgyMjU5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDU3ZS0xM2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2T2itsd4shwt1SSZ7HmT1Gjnpf9V/XgBob9zTUegXvNzNF3znqCaeLGZwAFN
Nsf+yZEmqyE+CMEPgEfrmIfK2sQtrA/neVeBAnjWqq0JsoCR7ZeHmf90YRc07KI5
oSfRTqb98WnB9q47+y183kt12JG1m3KhaBfj18SBU4baFQ5Ibj7JcOzsfAAkzfWl
txvWrIAPsGjXEB67lKdizpWqKkCy794QzVZVJZVD9dWeeFVer/xgE8+LtpM8Jgm5
zX9EoWm+GZn7TYZuPQXt58P7RNlK8hiFqRGYZhwMkQWVg/zs6xuLw7jFfVYXdW39
1WdCZSOsofZ6VEUxB/UEIrSYLQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFOFEWypt
t2kTqk2jWUrN1sXKrEFAMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx
ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq
akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzBFQTQvQjYyQ0NFODAyMTg0MTFFQUEyRDA0MTNBQzRGOUFFMDIvMDg3NTQ3NTIy
MTg2MTFFQUE1REY4ODNDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQBZ/32AwQDepgwMA0EAgACMAcDBQAkBahAMA0GCSqGSIb3DQEBCwUA
A4IBAQB3Vi4S6fZ1hO9sCtVqv9K1LayQ2brXt3i2hUrrotLMEQ6OcUdBYus/jjgb
wbWV16/NOXENL7EMPjQztypMS57zqanyafZSoAMaECj9Ae8RXljdu9W08QwVBJzM
EfAcbFtSxzVla+qyrlIcspg2b83F1e3H3xBBMe5bi/9tE9xzeSEv+9MDK2Cjyu5J
5aIVOM2L/Wf++woB1TYHzTCcF/IuWbW7n+Q8ZFZXeqX7+tGwJp5mLe74kAZfRVg0
y9U+m8Ln/eLwiKShdv2ENC54aG7LtO5R3eRv98TUoE+kxxmY3cWpaAvxus9S4ib+
pUNL5waZT3nJk09KwOCwXFJThdZA
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:23:16 2026 by rpki-client