Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/669662644C4B11EE9AC4B26BC4F9AE02.roa
File: 669662644C4B11EE9AC4B26BC4F9AE02.roa (raw, json)
Hash identifier: vjNJ7t/fR8gZHZFW7rS7pSPlSs4z2F/aS/JSQ3DxuPA=
Subject key identifier: A1:6E:F6:18:33:D2:3C:B4:75:DE:DD:AF:BF:69:85:C9:AD:16:70:EB
Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial: 1ADC
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/669662644C4B11EE9AC4B26BC4F9AE02.roa
Signing time: Fri 08 May 2026 17:20:13 +0000
ROA not before: Fri 08 May 2026 17:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4768
IP address blocks: 121.72.0.0/15 maxlen: 15
202.0.32.0/19 maxlen: 19
202.0.33.0/24 maxlen: 24
202.0.34.0/24 maxlen: 24
202.0.35.0/24 maxlen: 24
202.0.36.0/24 maxlen: 24
202.0.50.0/23 maxlen: 23
202.0.56.0/23 maxlen: 23
202.0.58.0/24 maxlen: 24
202.20.93.0/24 maxlen: 24
202.37.61.0/24 maxlen: 24
202.78.128.0/19 maxlen: 22
203.79.64.0/18 maxlen: 18
203.79.66.0/24 maxlen: 24
203.79.68.0/23 maxlen: 23
203.79.71.0/24 maxlen: 24
203.79.82.0/24 maxlen: 24
203.79.84.0/24 maxlen: 24
203.79.96.0/20 maxlen: 20
203.79.114.0/24 maxlen: 24
203.79.116.0/22 maxlen: 22
203.79.120.0/22 maxlen: 22
203.96.144.0/20 maxlen: 20
203.96.152.0/24 maxlen: 24
203.96.159.0/24 maxlen: 24
203.97.0.0/17 maxlen: 17
203.97.24.0/24 maxlen: 24
203.97.30.0/24 maxlen: 24
203.97.32.0/21 maxlen: 21
203.97.46.0/24 maxlen: 24
203.97.96.0/20 maxlen: 20
203.97.112.0/20 maxlen: 20
203.97.128.0/17 maxlen: 17
203.97.169.0/24 maxlen: 24
203.97.170.0/23 maxlen: 23
203.97.172.0/23 maxlen: 23
203.97.174.0/24 maxlen: 24
203.97.183.0/24 maxlen: 24
203.97.184.0/23 maxlen: 23
203.97.212.0/22 maxlen: 22
203.97.216.0/23 maxlen: 23
203.97.218.0/24 maxlen: 24
203.97.220.0/22 maxlen: 22
203.97.233.0/24 maxlen: 24
203.97.234.0/23 maxlen: 23
203.97.236.0/24 maxlen: 24
203.97.238.0/23 maxlen: 23
203.97.240.0/24 maxlen: 24
203.97.247.0/24 maxlen: 24
203.97.248.0/21 maxlen: 21
203.98.0.0/18 maxlen: 18
203.98.21.0/24 maxlen: 24
203.98.38.0/24 maxlen: 24
203.98.50.0/24 maxlen: 24
203.167.128.0/17 maxlen: 17
203.167.130.0/24 maxlen: 24
203.167.187.0/24 maxlen: 24
218.101.0.0/18 maxlen: 18
218.101.56.0/24 maxlen: 24
2001:4400::/31 maxlen: 31
2001:4403:dd05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6876 (0x1adc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Validity
Not Before: May 8 17:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fe1b4c-d6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:8c:da:19:82:75:b2:28:b0:67:e4:9d:7a:
ed:9c:1e:fd:fe:ac:05:f6:20:c5:4f:43:3d:eb:8d:
85:ca:75:66:78:e9:17:4e:1f:d5:27:71:0f:8b:bc:
34:da:5a:37:90:27:97:67:43:0c:4d:67:87:8a:1c:
04:63:c8:11:77:fc:02:e9:f6:fe:af:b2:65:ca:74:
55:7b:ed:e2:89:cb:4c:35:01:ab:0e:f0:f0:f4:7b:
12:d4:c3:ca:e8:f4:80:79:e7:00:72:d9:21:17:02:
b0:37:14:44:7e:e4:69:85:5b:07:c9:a6:ad:17:6a:
97:cd:25:24:f3:59:23:51:a1:ae:bd:64:2b:64:7e:
40:2d:89:8b:8f:65:d9:12:02:61:2b:bf:c8:e3:60:
43:e1:b4:00:90:56:3f:b4:69:76:4f:5a:14:00:c9:
3e:8c:d6:aa:33:4e:01:e0:52:a0:b7:35:2b:53:32:
7e:b4:40:fb:65:e8:92:0a:3c:cb:25:b6:1c:8b:07:
5b:ee:40:85:3d:f8:aa:2e:e9:9a:7e:c1:1d:ee:26:
ad:9e:04:8c:a2:2d:7d:75:3c:d3:0e:4e:78:bf:ec:
31:01:fa:b0:6f:6f:96:4c:ba:c9:1b:45:73:ba:e2:
54:8c:c7:34:28:cb:76:6c:16:72:a8:da:26:52:c5:
ea:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6E:F6:18:33:D2:3C:B4:75:DE:DD:AF:BF:69:85:C9:AD:16:70:EB
X509v3 Authority Key Identifier:
keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/669662644C4B11EE9AC4B26BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.72.0.0/15
202.0.32.0/19
202.20.93.0/24
202.37.61.0/24
202.78.128.0/19
203.79.64.0/18
203.96.144.0/20
203.97.0.0-203.98.63.255
203.167.128.0/17
218.101.0.0/18
IPv6:
2001:4400::/31
2001:4403:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
5e:b2:d5:5d:59:a9:8a:72:b0:72:6c:c2:ab:87:ab:84:1b:0f:
0f:9e:4f:7e:94:bf:ca:71:5d:a0:29:43:ab:b0:19:91:b7:55:
6e:b5:a6:3d:33:90:68:ca:31:7f:5f:24:a7:29:12:36:c5:be:
32:59:f2:49:de:6a:e5:d5:8c:a6:5d:76:a1:28:ba:8d:bd:88:
82:69:d9:a7:e7:9b:17:07:90:27:63:d5:66:d5:f4:c4:81:f9:
82:fe:9f:72:72:54:b8:aa:38:01:5e:5c:ee:e2:2d:2e:9a:5d:
5f:71:c9:c9:53:08:af:01:0c:c5:85:b9:5c:d5:85:82:91:26:
4f:06:36:7f:b4:5c:fa:2d:84:a6:e9:6a:91:56:be:67:99:07:
c4:17:f9:a1:ef:97:ff:09:84:99:3a:96:ef:3a:99:ac:a1:fd:
79:54:49:ae:32:18:ec:ee:de:0b:84:bf:e3:28:7c:21:5c:91:
89:b5:98:26:d9:74:81:dd:10:70:e5:29:47:df:09:c9:70:c7:
66:b1:87:e3:60:09:d2:ea:7a:9e:d1:73:0d:c4:23:98:f0:6f:
75:74:15:aa:c2:55:93:9f:bd:1e:cd:29:d0:4c:d4:5e:54:c2:
11:da:06:3f:99:c1:6e:16:23:8d:cf:61:a7:fc:98:ad:7a:06:
a3:de:9c:5b
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgICGtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2
RjhFRDkwMDUwHhcNMjYwNTA4MTcyMDEzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZlMWI0Yy1kNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqCqM2hmCdbIosGfknXrtnB79/qwF9iDFT0M9642FynVmeOkXTh/VJ3EPi7w0
2lo3kCeXZ0MMTWeHihwEY8gRd/wC6fb+r7JlynRVe+3iictMNQGrDvDw9HsS1MPK
6PSAeecActkhFwKwNxREfuRphVsHyaatF2qXzSUk81kjUaGuvWQrZH5ALYmLj2XZ
EgJhK7/I42BD4bQAkFY/tGl2T1oUAMk+jNaqM04B4FKgtzUrUzJ+tED7ZeiSCjzL
JbYciwdb7kCFPfiqLumafsEd7iatngSMoi19dTzTDk54v+wxAfqwb2+WTLrJG0Vz
uuJUjMc0KMt2bBZyqNomUsXq1wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKFu9hgz
0jy0dd7dr79phcmtFnDrMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC
ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvNjY5NjYyNjQ0
QzRCMTFFRTlBQzRCMjZCQzRGOUFFMDIucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjBI
BAIAATBCAwMBeUgDBAXKACADBADKFF0DBADKJT0DBAXKToADBAbLT0ADBATLYJAw
CwMDAMthAwQGy2IAAwQHy6eAAwQG2mUAMBYEAgACMBADBQEgAUQAAwcAIAFEA90F
MA0GCSqGSIb3DQEBCwUAA4IBAQBestVdWamKcrBybMKrh6uEGw8Pnk9+lL/KcV2g
KUOrsBmRt1VutaY9M5BoyjF/XySnKRI2xb4yWfJJ3mrl1YymXXahKLqNvYiCadmn
55sXB5AnY9Vm1fTEgfmC/p9yclS4qjgBXlzu4i0uml1fccnJUwivAQzFhblc1YWC
kSZPBjZ/tFz6LYSm6WqRVr5nmQfEF/mh75f/CYSZOpbvOpmsof15VEmuMhjs7t4L
hL/jKHwhXJGJtZgm2XSB3RBw5SlH3wnJcMdmsYfjYAnS6nqe0XMNxCOY8G91dBWq
wlWTn70ezSnQTNReVMIR2gY/mcFuFiONz2Gn/Jitegaj3pxb
-----END CERTIFICATE-----
Generated at Wed May 13 03:12:00 2026 by rpki-client