Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/8BD2406E632411F1916C95348547A888.roa
File: 8BD2406E632411F1916C95348547A888.roa (raw, json)
Hash identifier: o2XLZVnmlmr0E794XWdap0fS3wuVeBwaDRGcz48WvaE=
Subject key identifier: AD:A9:2B:0E:C8:01:19:36:93:93:B6:83:09:6D:E3:4C:F8:7D:27:8C
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 09C4
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/8BD2406E632411F1916C95348547A888.roa
Signing time: Wed 22 Jul 2026 05:46:18 +0000
ROA not before: Wed 22 Jul 2026 05:46:18 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 152584
IP address blocks: 126.52.130.0/24 maxlen: 24
126.209.15.0/24 maxlen: 24
126.209.33.0/24 maxlen: 24
126.209.37.0/24 maxlen: 24
126.209.38.0/24 maxlen: 24
126.209.40.0/24 maxlen: 24
126.209.51.0/24 maxlen: 24
126.209.60.0/24 maxlen: 24
126.209.63.0/24 maxlen: 24
126.209.80.0/24 maxlen: 24
126.209.81.0/24 maxlen: 24
126.209.85.0/24 maxlen: 24
126.209.86.0/24 maxlen: 24
126.209.96.0/21 maxlen: 24
126.209.111.0/24 maxlen: 24
126.209.116.0/22 maxlen: 24
126.209.120.0/24 maxlen: 24
126.209.121.0/24 maxlen: 24
126.209.123.0/24 maxlen: 24
126.209.126.0/24 maxlen: 24
126.209.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 03:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500 (0x9c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Jul 22 05:46:18 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a60592a-7074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:5a:be:b9:92:f2:b4:ec:35:da:72:68:35:
f8:e3:30:25:e8:bb:29:45:8e:93:c8:2b:1e:eb:b9:
fd:79:52:b3:ed:45:fa:2e:4c:88:48:b2:5d:a6:90:
2b:75:b5:ed:ad:20:6f:93:dd:d9:98:cf:7f:d2:ec:
e2:6f:18:da:97:3c:99:97:54:0e:cf:20:53:f2:9e:
6e:39:4e:df:3e:31:c4:b0:82:37:3e:b8:a3:91:55:
32:2b:77:2f:b3:7f:39:b6:ba:64:ee:04:74:74:a3:
b1:79:ae:3c:1a:8a:9d:60:f8:ab:0b:44:98:26:bc:
28:18:00:d6:55:93:75:0e:d5:50:00:da:62:7d:8f:
9a:a3:01:31:6b:8e:ee:19:7a:ba:c7:dd:84:d1:f8:
60:4a:6a:90:6e:e8:20:7b:f1:a5:1a:d9:64:b0:3d:
09:69:f2:e9:1d:ca:d0:27:c8:76:3f:ac:89:1c:a7:
2f:c5:36:ce:0c:32:f7:bc:29:34:16:3e:d6:03:9b:
c3:f7:76:28:89:3b:13:4b:00:ac:95:ae:e0:c3:56:
c8:49:68:4e:c7:ec:1f:66:bd:46:59:53:da:9f:83:
f8:0d:0f:43:3b:71:f3:f0:b1:01:9f:8c:de:0d:8f:
b1:4e:28:b0:b6:f8:94:26:ea:a7:9e:c8:ad:4f:f4:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A9:2B:0E:C8:01:19:36:93:93:B6:83:09:6D:E3:4C:F8:7D:27:8C
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/8BD2406E632411F1916C95348547A888.roa
sbgp-ipAddrBlock: critical
IPv4:
126.52.130.0/24
126.209.15.0/24
126.209.33.0/24
126.209.37.0-126.209.38.255
126.209.40.0/24
126.209.51.0/24
126.209.60.0/24
126.209.63.0/24
126.209.80.0/23
126.209.85.0-126.209.86.255
126.209.96.0/21
126.209.111.0/24
126.209.116.0-126.209.121.255
126.209.123.0/24
126.209.126.0/23
Signature Algorithm: sha256WithRSAEncryption
43:20:9d:83:0c:a1:c1:f7:19:ba:54:34:57:b9:b4:77:75:7b:
b4:ba:e6:e3:cb:d8:a9:57:a0:67:3c:9b:e9:fb:ec:ba:45:ef:
a9:d6:64:ce:bb:fa:8f:23:f0:1a:72:00:02:07:9b:74:36:9f:
f2:ce:13:41:eb:75:e3:c3:90:20:9f:d8:44:3f:6f:0d:92:ce:
e7:ec:e5:84:02:c6:39:ac:6f:76:05:bd:2b:e7:00:2a:31:64:
a8:cd:b2:87:44:52:da:45:c1:ec:83:17:35:15:73:3c:ff:16:
bf:30:a1:af:36:20:a3:25:09:80:37:0a:b8:51:27:3f:c6:e7:
dd:18:55:22:35:72:62:45:a7:09:72:73:60:b1:e3:20:ff:5e:
b4:ad:3e:42:49:c9:93:32:ac:cb:ab:7e:bb:fc:1b:ce:c0:95:
b7:9c:fb:52:0b:52:90:c7:f4:af:e2:e5:60:7a:06:63:8a:92:
bb:7a:f3:77:26:7d:2e:bf:a4:31:17:e1:56:d2:5c:cb:42:3b:
e6:51:36:61:07:1b:2d:4b:49:19:84:34:35:fe:bb:1a:a4:dd:
dc:c8:42:35:bc:f2:59:65:6e:72:c7:da:24:87:e9:19:5a:3c:
9a:6f:64:e1:5b:da:34:36:64:d4:fc:95:97:28:a6:4e:d3:d7:
8c:5a:65:54
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgICCcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE
QzNDQkNENjMwHhcNMjYwNzIyMDU0NjE4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYwNTkyYS03MDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuT5avrmS8rTsNdpyaDX44zAl6LspRY6TyCse67n9eVKz7UX6LkyISLJdppAr
dbXtrSBvk93ZmM9/0uzibxjalzyZl1QOzyBT8p5uOU7fPjHEsII3PrijkVUyK3cv
s385trpk7gR0dKOxea48GoqdYPirC0SYJrwoGADWVZN1DtVQANpifY+aowExa47u
GXq6x92E0fhgSmqQbugge/GlGtlksD0JafLpHcrQJ8h2P6yJHKcvxTbODDL3vCk0
Fj7WA5vD93YoiTsTSwCsla7gw1bISWhOx+wfZr1GWVPan4P4DQ9DO3Hz8LEBn4ze
DY+xTiiwtviUJuqnnsitT/T5yQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFK2pKw7I
ARk2k5O2gwlt40z4fSeMMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3
M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0QxRUEvOUM5MzJCNDgxNzNBMTFFQkEzQjk3RTdGQzRGOUFFMDIvOEJEMjQwNkU2
MzI0MTFGMTkxNkM5NTM0ODU0N0E4ODgucm9hMIGLBggrBgEFBQcBBwEB/wR8MHow
eAQCAAEwcgMEAH40ggMEAH7RDwMEAH7RITAMAwQAftElAwQAftEmAwQAftEoAwQA
ftEzAwQAftE8AwQAftE/AwQBftFQMAwDBAB+0VUDBAB+0VYDBAN+0WADBAB+0W8w
DAMEAn7RdAMEAX7ReAMEAH7RewMEAX7RfjANBgkqhkiG9w0BAQsFAAOCAQEAQyCd
gwyhwfcZulQ0V7m0d3V7tLrm48vYqVegZzyb6fvsukXvqdZkzrv6jyPwGnIAAgeb
dDaf8s4TQet148OQIJ/YRD9vDZLO5+zlhALGOaxvdgW9K+cAKjFkqM2yh0RS2kXB
7IMXNRVzPP8WvzChrzYgoyUJgDcKuFEnP8bn3RhVIjVyYkWnCXJzYLHjIP9etK0+
QknJkzKsy6t+u/wbzsCVt5z7UgtSkMf0r+LlYHoGY4qSu3rzdyZ9Lr+kMRfhVtJc
y0I75lE2YQcbLUtJGYQ0Nf67GqTd3MhCNbzyWWVucsfaJIfpGVo8mm9k4VvaNDZk
1PyVlyimTtPXjFplVA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:31:54 2026 by rpki-client