Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/08B3D71E068611EDA1C2070DC4F9AE02.roa
File: 08B3D71E068611EDA1C2070DC4F9AE02.roa (raw, json)
Hash identifier: b4u3dfsDuybqvr0kZPhKkmwiMIVugEa5w4W6+npSizw=
Subject key identifier: AC:D4:67:8E:D6:C1:EE:12:EE:80:CA:E3:3C:A0:C0:2D:5E:48:B0:EA
Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Certificate serial: 355F
Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/08B3D71E068611EDA1C2070DC4F9AE02.roa
Signing time: Tue 30 Jun 2026 15:12:46 +0000
ROA not before: Tue 30 Jun 2026 15:12:46 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 4844
IP address blocks: 210.23.0.0/19 maxlen: 19
210.23.0.0/20 maxlen: 20
210.23.16.0/20 maxlen: 20
2406:f000::/32 maxlen: 32
2406:f000:1::/48 maxlen: 48
2406:f000:1:32::/64 maxlen: 64
2406:f000:1:e000::/64 maxlen: 64
2406:f000:1:e003::/64 maxlen: 64
2406:f000:2:e004::/64 maxlen: 64
2406:f000:3:e000::/64 maxlen: 64
2406:f000:3:e001::/64 maxlen: 64
2406:f000:3:e005::/64 maxlen: 64
2406:f000:3:e007::/64 maxlen: 64
2406:f000:3:e00a::/64 maxlen: 64
2406:f000:3:e00d::/64 maxlen: 64
2406:f000:20ff:200::/56 maxlen: 56
2406:f000:20ff:300::/56 maxlen: 56
2406:f000:30f0::/56 maxlen: 56
2406:f000:30f0:100::/56 maxlen: 56
2406:f000:30f0:300::/56 maxlen: 56
2406:f000:30f0:400::/56 maxlen: 56
2406:f000:30f0:600::/56 maxlen: 56
2406:f000:30f0:700::/56 maxlen: 56
2406:f000:30f0:800::/56 maxlen: 56
2406:f000:30f0:900::/56 maxlen: 56
2406:f000:30f1:ff00::/64 maxlen: 64
2406:f000:30f1:ff01::/64 maxlen: 64
2406:f000:30ff:1::/64 maxlen: 64
2406:f000:30ff:2::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 14:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13663 (0x355f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Validity
Not Before: Jun 30 15:12:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a43dcee-1783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:b5:ff:d0:36:d2:6c:1d:7d:31:76:df:6c:
5c:7b:e3:b9:72:1c:c1:c6:38:67:e5:6d:b8:69:44:
d5:44:f4:49:0d:16:9b:9a:fd:ca:cb:3f:5e:14:06:
1c:b7:4c:77:99:aa:cb:d8:e5:36:15:39:6e:94:c1:
3c:d8:65:fe:fe:ed:d7:52:ac:50:4b:44:3f:6f:ec:
5c:d8:7e:ac:01:d1:d7:79:19:f1:4d:72:69:a3:73:
fa:7b:d4:5a:6d:38:10:4c:9e:41:98:5a:d3:fc:16:
ab:d9:91:67:3f:46:51:f9:2b:24:d4:38:82:cc:fb:
d1:5c:d8:08:df:52:db:4d:4d:ae:0b:44:da:10:04:
1f:d4:71:d9:d9:ea:24:33:c4:5b:27:5a:00:96:24:
22:d6:57:8e:5c:42:6e:bd:01:08:96:44:9e:a9:22:
b5:e8:f4:a3:01:39:53:78:b4:29:6f:78:e1:12:18:
17:64:8f:92:5f:5b:79:90:9d:84:1c:58:6e:ef:e5:
fc:50:a7:78:7d:2c:b0:20:ce:bd:50:2a:38:13:f4:
aa:a8:a4:37:5a:6a:84:ce:19:a7:19:32:bd:ed:4f:
f4:69:54:bb:2e:95:33:8a:0b:2a:25:b8:eb:e0:05:
b7:a4:67:e1:1d:d8:ff:23:79:6f:32:dc:0a:a3:6c:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D4:67:8E:D6:C1:EE:12:EE:80:CA:E3:3C:A0:C0:2D:5E:48:B0:EA
X509v3 Authority Key Identifier:
keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/08B3D71E068611EDA1C2070DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.23.0.0/19
IPv6:
2406:f000::/32
Signature Algorithm: sha256WithRSAEncryption
9a:e5:e5:d2:86:ba:3e:c9:92:71:96:75:87:41:5c:4e:e1:e8:
b2:f0:56:a3:5a:cb:28:31:68:4d:5f:88:a2:07:93:bb:a9:d4:
12:73:23:e0:a5:e3:a9:ce:c3:8e:21:65:be:0b:18:ce:c1:9c:
c0:cd:9a:23:f6:35:38:f4:b2:96:14:7f:ab:d5:7a:4d:a1:50:
a7:83:81:29:40:c0:21:f7:ef:18:d9:4c:93:83:34:69:c2:a7:
b6:a2:7d:65:9c:7e:f6:21:71:5c:b0:85:df:98:09:44:89:15:
7a:da:63:c1:aa:ee:3f:5f:46:61:4f:64:f2:58:10:4e:c1:16:
ee:08:58:72:fe:de:ac:1d:3e:df:1d:22:72:8e:ae:a2:68:34:
7b:b2:c1:49:35:8e:f3:12:7d:09:44:2e:22:c2:34:0d:0c:ab:
2a:11:0a:78:7c:d8:72:8e:95:d3:4a:15:35:aa:d3:56:6f:be:
ae:7c:32:5b:c1:8a:23:ea:cf:24:77:87:28:06:be:ce:dd:f0:
99:fa:4e:8d:7c:19:d5:db:50:48:02:69:db:8a:fd:1c:27:80:
7c:92:87:0b:e7:ce:16:97:0e:4c:4e:41:51:a3:08:14:be:a3:
98:9b:99:f7:98:5f:8b:29:52:36:c1:c7:04:e3:56:f8:95:8c:
18:2b:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:23 2026 by rpki-client