Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/BBDA65F6479111F1892030F49D833773.roa
File: BBDA65F6479111F1892030F49D833773.roa (raw, json)
Hash identifier: Cd/9ZCibOCZHn6hlsPJ2mGAq/MQ8q2/mTiMUOLXRUAI=
Subject key identifier: BD:30:56:85:37:86:CD:32:7F:3A:A2:77:1A:E2:E3:09:65:F3:D9:F7
Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Certificate serial: 3576
Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/BBDA65F6479111F1892030F49D833773.roa
Signing time: Mon 04 May 2026 08:17:47 +0000
ROA not before: Mon 04 May 2026 08:17:47 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 38182
IP address blocks: 58.84.16.0/22 maxlen: 24
113.23.128.0/17 maxlen: 17
113.23.128.0/24 maxlen: 24
113.23.129.0/24 maxlen: 24
113.23.130.0/23 maxlen: 23
113.23.130.0/24 maxlen: 24
113.23.131.0/24 maxlen: 24
113.23.132.0/23 maxlen: 23
113.23.132.0/24 maxlen: 24
113.23.133.0/24 maxlen: 24
113.23.134.0/24 maxlen: 24
113.23.135.0/24 maxlen: 24
113.23.136.0/24 maxlen: 24
113.23.137.0/24 maxlen: 24
113.23.138.0/24 maxlen: 24
113.23.139.0/24 maxlen: 24
113.23.140.0/24 maxlen: 24
113.23.141.0/24 maxlen: 24
113.23.142.0/24 maxlen: 24
113.23.143.0/24 maxlen: 24
113.23.144.0/24 maxlen: 24
113.23.145.0/24 maxlen: 24
113.23.146.0/24 maxlen: 24
113.23.147.0/24 maxlen: 24
113.23.148.0/24 maxlen: 24
113.23.149.0/24 maxlen: 24
113.23.150.0/24 maxlen: 24
113.23.151.0/24 maxlen: 24
113.23.152.0/24 maxlen: 24
113.23.153.0/24 maxlen: 24
113.23.154.0/24 maxlen: 24
113.23.155.0/24 maxlen: 24
113.23.156.0/24 maxlen: 24
113.23.157.0/24 maxlen: 24
113.23.158.0/24 maxlen: 24
113.23.159.0/24 maxlen: 24
113.23.160.0/22 maxlen: 22
113.23.160.0/24 maxlen: 24
113.23.161.0/24 maxlen: 24
113.23.162.0/24 maxlen: 24
113.23.163.0/24 maxlen: 24
113.23.164.0/24 maxlen: 24
113.23.165.0/24 maxlen: 24
113.23.166.0/24 maxlen: 24
113.23.167.0/24 maxlen: 24
113.23.168.0/24 maxlen: 24
113.23.169.0/24 maxlen: 24
113.23.170.0/24 maxlen: 24
113.23.171.0/24 maxlen: 24
113.23.172.0/24 maxlen: 24
113.23.173.0/24 maxlen: 24
113.23.174.0/24 maxlen: 24
113.23.175.0/24 maxlen: 24
113.23.176.0/24 maxlen: 24
113.23.177.0/24 maxlen: 24
113.23.178.0/24 maxlen: 24
113.23.179.0/24 maxlen: 24
113.23.180.0/24 maxlen: 24
113.23.181.0/24 maxlen: 24
113.23.182.0/24 maxlen: 24
113.23.183.0/24 maxlen: 24
113.23.184.0/24 maxlen: 24
113.23.185.0/24 maxlen: 24
113.23.186.0/24 maxlen: 24
113.23.187.0/24 maxlen: 24
113.23.188.0/24 maxlen: 24
113.23.189.0/24 maxlen: 24
113.23.190.0/24 maxlen: 24
113.23.191.0/24 maxlen: 24
113.23.192.0/24 maxlen: 24
113.23.193.0/24 maxlen: 24
113.23.194.0/24 maxlen: 24
113.23.195.0/24 maxlen: 24
113.23.196.0/24 maxlen: 24
113.23.197.0/24 maxlen: 24
113.23.198.0/24 maxlen: 24
113.23.199.0/24 maxlen: 24
113.23.200.0/24 maxlen: 28
113.23.201.0/24 maxlen: 24
113.23.202.0/24 maxlen: 24
113.23.203.0/24 maxlen: 24
113.23.204.0/24 maxlen: 24
113.23.205.0/24 maxlen: 24
113.23.206.0/24 maxlen: 24
113.23.207.0/24 maxlen: 24
113.23.208.0/24 maxlen: 24
113.23.209.0/24 maxlen: 24
113.23.210.0/24 maxlen: 24
113.23.211.0/24 maxlen: 24
113.23.212.0/24 maxlen: 24
113.23.213.0/24 maxlen: 24
113.23.214.0/24 maxlen: 24
113.23.215.0/24 maxlen: 24
113.23.216.0/24 maxlen: 24
113.23.217.0/24 maxlen: 24
113.23.218.0/24 maxlen: 24
113.23.219.0/24 maxlen: 24
113.23.220.0/24 maxlen: 24
113.23.221.0/24 maxlen: 24
113.23.222.0/24 maxlen: 24
113.23.223.0/24 maxlen: 24
113.23.224.0/24 maxlen: 24
113.23.225.0/24 maxlen: 24
113.23.226.0/24 maxlen: 24
113.23.227.0/24 maxlen: 24
113.23.228.0/24 maxlen: 24
113.23.229.0/24 maxlen: 24
113.23.230.0/24 maxlen: 24
113.23.231.0/24 maxlen: 24
113.23.232.0/24 maxlen: 24
113.23.233.0/24 maxlen: 24
113.23.234.0/24 maxlen: 24
113.23.235.0/24 maxlen: 24
113.23.236.0/24 maxlen: 24
113.23.237.0/24 maxlen: 30
113.23.238.0/24 maxlen: 24
113.23.239.0/24 maxlen: 24
113.23.240.0/24 maxlen: 24
113.23.241.0/24 maxlen: 24
113.23.242.0/24 maxlen: 24
113.23.243.0/24 maxlen: 24
113.23.244.0/24 maxlen: 24
113.23.245.0/24 maxlen: 24
113.23.246.0/24 maxlen: 24
113.23.247.0/24 maxlen: 24
113.23.248.0/24 maxlen: 24
113.23.249.0/24 maxlen: 24
113.23.250.0/24 maxlen: 29
113.23.251.0/24 maxlen: 24
113.23.252.0/24 maxlen: 24
113.23.253.0/24 maxlen: 24
113.23.254.0/24 maxlen: 24
113.23.255.0/24 maxlen: 24
203.188.232.0/21 maxlen: 21
203.188.232.0/24 maxlen: 24
203.188.233.0/24 maxlen: 24
203.188.234.0/23 maxlen: 23
203.188.234.0/24 maxlen: 24
203.188.235.0/24 maxlen: 24
203.188.236.0/24 maxlen: 24
203.188.237.0/24 maxlen: 24
203.188.238.0/24 maxlen: 24
203.188.239.0/24 maxlen: 24
2407:f800::/40 maxlen: 40
2407:f800::/48 maxlen: 48
2407:f800::3:0:0/96 maxlen: 96
2407:f800:100::/40 maxlen: 40
2407:f800:200::/40 maxlen: 40
2407:f800:200::/48 maxlen: 48
2407:f800:300::/40 maxlen: 40
2407:f800:300::/48 maxlen: 48
2407:f800:400::/40 maxlen: 40
2407:f800:400::/48 maxlen: 48
2407:f800:500::/40 maxlen: 40
2407:f800:500::/48 maxlen: 48
2407:f800:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13686 (0x3576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Validity
Not Before: May 4 08:17:47 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69f8562b-5877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:45:cc:24:d6:11:17:0e:11:1e:a1:61:c2:
aa:d2:e8:e3:30:df:12:8a:48:ae:fd:21:4e:42:ec:
f6:9f:c6:ba:ff:8f:7f:3e:24:d9:7a:63:dc:53:a0:
3b:d0:82:10:33:d1:ea:61:bc:79:86:da:3b:6f:42:
d2:4c:34:44:b1:2c:93:1a:a8:dc:f8:b9:cc:9c:d1:
87:ac:ab:68:7f:4a:d2:8e:30:43:c8:03:42:96:04:
63:df:a4:b2:87:61:9f:9a:4e:a5:23:9b:aa:5b:74:
53:47:84:e2:0d:9d:0f:bd:56:9a:48:b0:28:b0:40:
d2:82:3a:53:c2:0e:d7:4e:4e:3b:62:a2:b3:15:62:
9d:5c:54:bb:36:ad:e1:11:87:31:cd:0f:fb:d3:a5:
d3:b0:ca:c4:6b:a4:f8:ba:42:08:b0:62:05:fd:32:
e3:56:39:14:5a:8f:aa:64:12:75:8c:23:1f:98:ff:
f3:df:52:0d:21:41:02:b4:07:05:73:48:aa:34:da:
d7:b1:2f:dd:ca:ce:c0:73:ed:bc:35:10:71:d0:63:
2d:6b:16:e9:4b:b5:f1:e3:d5:3e:41:76:48:95:b5:
a9:d3:4d:42:8f:9f:58:09:56:ce:1f:47:01:8b:e6:
c6:f3:ac:60:ba:eb:b8:b9:a7:0c:89:08:4b:b7:63:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:30:56:85:37:86:CD:32:7F:3A:A2:77:1A:E2:E3:09:65:F3:D9:F7
X509v3 Authority Key Identifier:
keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/BBDA65F6479111F1892030F49D833773.roa
sbgp-ipAddrBlock: critical
IPv4:
58.84.16.0/22
113.23.128.0/17
203.188.232.0/21
IPv6:
2407:f800::-2407:f800:5ff:ffff:ffff:ffff:ffff:ffff
2407:f800:800::/40
Signature Algorithm: sha256WithRSAEncryption
34:c5:cd:9e:f7:4d:a6:d4:89:3d:c7:17:bb:68:69:fe:79:e3:
5e:ec:78:f0:c8:3a:17:61:8d:4f:e5:7b:fe:66:cb:82:f3:3b:
59:b2:f2:8e:fe:80:d1:90:52:f4:2e:8e:0c:da:c8:9a:96:b2:
d7:9a:1d:87:a7:55:36:a5:06:b0:20:54:98:b4:5d:ee:c5:4b:
9b:6d:a3:d0:08:ca:f1:c8:20:da:ee:b7:9c:ec:a3:ea:89:3b:
41:ad:8c:90:75:0a:5d:35:81:a7:85:ab:d0:7d:6c:53:c3:41:
6a:74:75:dd:20:89:a2:06:83:08:96:ae:86:69:0e:45:8e:61:
da:aa:46:ef:20:d1:de:34:42:10:0c:08:35:39:ca:06:24:48:
f5:28:91:e9:d3:20:62:03:98:b1:a2:2d:c6:ed:1c:81:f9:eb:
ec:61:26:f2:5d:f8:10:bc:38:81:fe:2d:ef:e1:f2:6f:e9:15:
77:8f:1b:f3:00:f3:6d:24:12:e2:fb:43:ab:ff:b6:00:59:55:
42:25:58:03:b9:4b:b3:7a:f7:1f:b8:17:0f:ab:6e:e7:43:8c:
fb:c6:2e:b9:43:cd:a2:55:2b:a3:8f:bd:84:27:0b:fd:d4:82:
e2:59:22:d7:d8:f6:03:66:65:14:c4:b0:58:06:48:77:30:ef:
c5:e1:18:56
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgICNXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF
MEE0MTkzMjEwHhcNMjYwNTA0MDgxNzQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY4NTYyYi01ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4v5FzCTWERcOER6hYcKq0ujjMN8Sikiu/SFOQuz2n8a6/49/PiTZemPcU6A7
0IIQM9HqYbx5hto7b0LSTDREsSyTGqjc+LnMnNGHrKtof0rSjjBDyANClgRj36Sy
h2Gfmk6lI5uqW3RTR4TiDZ0PvVaaSLAosEDSgjpTwg7XTk47YqKzFWKdXFS7Nq3h
EYcxzQ/706XTsMrEa6T4ukIIsGIF/TLjVjkUWo+qZBJ1jCMfmP/z31INIUECtAcF
c0iqNNrXsS/dys7Ac+28NRBx0GMtaxbpS7Xx49U+QXZIlbWp001Cj59YCVbOH0cB
i+bG86xguuu4uacMiQhLt2Nv7wIDAQABo4ICjDCCAogwHQYDVR0OBBYEFL0wVoU3
hs0yfzqidxri4wll89n3MB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE
OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDFGRDYvNkVFQzY0MzAxRDkxMTFFMkI2ODdBNUYzMDhCMDJDRDIvQkJEQTY1RjY0
NzkxMTFGMTg5MjAzMEY0OUQ4MzM3NzMucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjAY
BAIAATASAwQCOlQQAwQHcReAAwQDy7zoMB4EAgACMBgwDgMEAyQH+AMGASQH+AAE
AwYAJAf4AAgwDQYJKoZIhvcNAQELBQADggEBADTFzZ73TabUiT3HF7toaf55417s
ePDIOhdhjU/le/5my4LzO1my8o7+gNGQUvQujgzayJqWsteaHYenVTalBrAgVJi0
Xe7FS5tto9AIyvHIINrut5zso+qJO0GtjJB1Cl01gaeFq9B9bFPDQWp0dd0giaIG
gwiWroZpDkWOYdqqRu8g0d40QhAMCDU5ygYkSPUokenTIGIDmLGiLcbtHIH56+xh
JvJd+BC8OIH+Le/h8m/pFXePG/MA820kEuL7Q6v/tgBZVUIlWAO5S7N69x+4Fw+r
budDjPvGLrlDzaJVK6OPvYQnC/3UguJZItfY9gNmZRTEsFgGSHcw78XhGFY=
-----END CERTIFICATE-----
Generated at Wed May 13 07:41:23 2026 by rpki-client