Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/95348E36452511F1967953B89A833773.roa
File: 95348E36452511F1967953B89A833773.roa (raw, json)
Hash identifier: E41yGFHb49hfpp6fDTgF/iaLt4YgdcwSMAc8N/0HCUU=
Subject key identifier: CC:F6:14:DE:45:AA:E2:53:DE:A2:4F:FF:E5:DD:53:05:1C:25:A3:7C
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 0985
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/95348E36452511F1967953B89A833773.roa
Signing time: Wed 13 May 2026 00:45:21 +0000
ROA not before: Wed 13 May 2026 00:45:21 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.120.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.52.128.0/24 maxlen: 24
126.52.129.0/24 maxlen: 24
126.52.130.0/24 maxlen: 24
126.52.131.0/24 maxlen: 24
126.52.132.0/24 maxlen: 24
126.52.133.0/24 maxlen: 24
126.52.134.0/24 maxlen: 24
126.52.135.0/24 maxlen: 24
126.52.136.0/24 maxlen: 24
126.52.137.0/24 maxlen: 24
126.52.138.0/24 maxlen: 24
126.52.139.0/24 maxlen: 24
126.52.140.0/24 maxlen: 24
126.52.141.0/24 maxlen: 24
126.52.142.0/24 maxlen: 24
126.52.143.0/24 maxlen: 24
126.52.144.0/24 maxlen: 24
126.52.145.0/24 maxlen: 24
126.52.146.0/24 maxlen: 24
126.52.147.0/24 maxlen: 24
126.52.148.0/24 maxlen: 24
126.52.149.0/24 maxlen: 24
126.52.150.0/24 maxlen: 24
126.52.151.0/24 maxlen: 24
126.52.152.0/24 maxlen: 24
126.52.153.0/24 maxlen: 24
126.52.154.0/24 maxlen: 24
126.52.155.0/24 maxlen: 24
126.52.156.0/24 maxlen: 24
126.52.157.0/24 maxlen: 24
126.52.158.0/24 maxlen: 24
126.52.159.0/24 maxlen: 24
126.209.0.0/22 maxlen: 24
126.209.4.0/22 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.64.0/24 maxlen: 24
126.209.65.0/24 maxlen: 24
126.209.66.0/24 maxlen: 24
126.209.67.0/24 maxlen: 24
126.209.68.0/24 maxlen: 24
126.209.69.0/24 maxlen: 24
126.209.70.0/24 maxlen: 24
126.209.71.0/24 maxlen: 24
126.209.72.0/24 maxlen: 24
126.209.73.0/24 maxlen: 24
126.209.74.0/24 maxlen: 24
126.209.75.0/24 maxlen: 24
126.209.76.0/24 maxlen: 24
126.209.77.0/24 maxlen: 24
126.209.78.0/24 maxlen: 24
126.209.79.0/24 maxlen: 24
126.209.82.0/24 maxlen: 24
126.209.83.0/24 maxlen: 24
126.209.84.0/24 maxlen: 24
126.209.87.0/24 maxlen: 24
126.209.92.0/24 maxlen: 24
126.209.93.0/24 maxlen: 24
126.209.95.0/24 maxlen: 24
126.209.104.0/24 maxlen: 24
126.209.105.0/24 maxlen: 24
126.209.106.0/24 maxlen: 24
126.209.107.0/24 maxlen: 24
126.209.108.0/24 maxlen: 24
126.209.109.0/24 maxlen: 24
126.209.110.0/24 maxlen: 24
126.209.111.0/24 maxlen: 24
126.209.112.0/24 maxlen: 24
126.209.113.0/24 maxlen: 24
126.209.114.0/24 maxlen: 24
126.209.115.0/24 maxlen: 24
126.209.124.0/24 maxlen: 24
126.209.125.0/24 maxlen: 24
126.209.126.0/24 maxlen: 24
126.209.127.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2437 (0x985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: May 13 00:45:21 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a03c9a1-20d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:6e:f1:c2:fd:31:f5:65:25:36:5e:4e:00:
73:2e:46:d4:22:45:57:9f:fe:e5:8e:c4:03:7e:96:
b8:db:53:cd:52:11:9b:9f:f8:75:90:6e:6b:d9:b9:
4b:3d:c7:27:67:0e:5c:86:7b:47:5b:2f:a4:d1:e5:
92:dc:2a:da:5f:d9:13:3e:62:ee:87:9c:cc:7e:35:
e4:96:ea:45:d1:fb:32:23:41:0d:25:9c:70:28:b5:
fd:0d:d8:46:c9:51:a4:51:0c:29:64:5e:d4:1a:d2:
38:15:cb:dd:13:11:fe:e6:5e:ec:61:1e:02:81:89:
81:d0:50:dd:b1:3a:b6:58:fc:ea:ab:e0:89:44:8f:
ec:6d:6b:21:8d:35:a6:d0:74:af:54:b6:df:ae:66:
21:b9:ef:4d:e3:b6:37:0e:16:1e:f0:7a:82:ae:5c:
9a:9b:0f:91:cb:51:08:da:d1:72:51:a9:40:47:21:
88:64:e7:bd:1c:be:89:d9:2b:33:a7:ac:5d:a2:0f:
10:4b:95:3e:82:09:b9:ec:21:39:83:b7:f8:bb:db:
af:e9:11:40:37:90:aa:04:9d:9c:7b:86:84:31:eb:
a3:6f:a5:c9:52:2f:b9:3e:76:fa:49:8d:1b:82:3e:
96:0b:4a:0b:37:a2:c9:41:ab:0f:5e:f2:ac:02:4f:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F6:14:DE:45:AA:E2:53:DE:A2:4F:FF:E5:DD:53:05:1C:25:A3:7C
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/95348E36452511F1967953B89A833773.roa
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.120.0/22
103.76.160.0/23
103.100.100.0/23
126.52.128.0/19
126.209.0.0-126.209.14.255
126.209.16.0-126.209.32.255
126.209.34.0-126.209.36.255
126.209.39.0/24
126.209.41.0/24
126.209.44.0-126.209.50.255
126.209.52.0-126.209.57.255
126.209.61.0-126.209.62.255
126.209.64.0/20
126.209.82.0-126.209.84.255
126.209.87.0/24
126.209.92.0/23
126.209.95.0/24
126.209.104.0-126.209.115.255
126.209.124.0/22
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
3f:c6:a8:26:17:97:93:d7:2e:0f:76:16:df:23:f1:a4:2e:d1:
a3:44:6a:34:5d:1c:5f:e1:94:cb:13:26:27:81:51:f0:c1:88:
7b:e3:35:45:b3:98:71:ba:0c:07:ea:99:9d:ba:c8:1f:d9:65:
73:bd:82:a7:8d:31:ab:29:18:e3:8c:2e:98:5c:7d:ec:a9:b9:
26:11:2d:8a:d9:91:29:ae:52:45:b1:db:60:2b:90:dc:79:01:
72:c4:f8:75:ed:76:ef:4d:92:b7:36:d4:d9:2c:31:f1:56:fb:
94:65:49:6f:7b:0e:8c:2f:98:2d:2f:3e:94:94:9e:33:74:13:
c3:81:77:d0:53:b3:f0:26:71:2e:a6:15:a4:46:84:a0:2f:f1:
f4:5a:56:b3:46:03:a3:a8:43:e4:90:83:47:11:e4:bc:94:0f:
0c:2a:af:8e:34:f8:fc:d0:6c:b9:4c:e4:49:0e:78:55:cc:35:
1c:45:12:b6:10:cf:f7:2b:55:4c:cd:92:e3:ae:e3:f9:30:9c:
d2:63:7a:43:16:5b:6f:91:c9:2f:92:d9:dd:07:61:61:2d:bc:
a6:7a:21:87:17:45:06:3d:46:70:31:fb:47:16:06:e3:98:08:
0a:f5:00:7e:0e:ac:14:27:7d:c8:d9:f7:58:5b:9a:54:91:17:
8a:9f:20:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:19 2026 by rpki-client