Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/76494F6E146111ED83A8FB50C4F9AE02.roa
File: 76494F6E146111ED83A8FB50C4F9AE02.roa (raw, json)
Hash identifier: aleDxGkltCMG83BiNVnwleaosOHKlcQfiTqzx3RLirc=
Subject key identifier: 18:9D:29:72:17:A8:46:11:86:FF:9E:59:0C:C1:7D:E8:9F:27:F9:7C
Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial: 0358
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/76494F6E146111ED83A8FB50C4F9AE02.roa
Signing time: Sun 15 Mar 2026 00:34:19 +0000
ROA not before: Sun 15 Mar 2026 00:34:19 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 133414
IP address blocks: 202.10.255.0/24 maxlen: 24
202.80.64.0/19 maxlen: 19
202.80.64.0/24 maxlen: 24
202.80.65.0/24 maxlen: 24
202.80.66.0/24 maxlen: 24
202.80.68.0/24 maxlen: 24
202.80.73.0/24 maxlen: 24
202.80.74.0/24 maxlen: 24
2405:7f00:3200::/48 maxlen: 48
2405:7f00:3201::/48 maxlen: 48
2405:7f00:3204::/48 maxlen: 48
2405:7f00:3250::/48 maxlen: 48
2405:7f00:3260::/48 maxlen: 48
2405:7f00:8000::/43 maxlen: 43
2405:7f00:8100::/43 maxlen: 43
2405:7f00:8120::/43 maxlen: 43
2405:7f00:8140::/43 maxlen: 43
2405:7f00:8160::/43 maxlen: 43
2405:7f00:8180::/43 maxlen: 43
2405:7f00:8200::/43 maxlen: 43
2405:7f00:8220::/43 maxlen: 43
2405:7f00:8240::/43 maxlen: 43
2405:7f00:8260::/43 maxlen: 43
2405:7f00:8280::/43 maxlen: 43
2405:7f00:8300::/43 maxlen: 43
2405:7f00:8320::/43 maxlen: 43
2405:7f00:8340::/43 maxlen: 43
2405:7f00:8500::/43 maxlen: 43
2405:7f00:8800::/40 maxlen: 40
2405:7f00:8a00::/40 maxlen: 40
2405:7f00:c100::/43 maxlen: 43
2405:7f00:c120::/43 maxlen: 43
2405:7f00:c140::/43 maxlen: 43
2405:7f00:c160::/43 maxlen: 43
2405:7f00:c180::/43 maxlen: 43
2405:7f00:c200::/43 maxlen: 43
2405:7f00:c800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856 (0x358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Validity
Not Before: Mar 15 00:34:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b5fe8b-6478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:24:04:77:12:a3:5b:25:07:44:f9:27:52:
60:2a:da:16:fc:e3:29:ba:82:04:73:f0:ad:0d:97:
ca:49:69:07:45:60:45:33:68:f9:38:07:ec:ee:d0:
87:81:45:ef:71:a9:90:f5:1e:33:8c:2d:a8:0e:c8:
88:37:c8:5f:07:44:ec:6b:f1:74:33:05:3f:cd:0b:
af:72:d0:ac:86:2c:85:c7:20:7b:f0:dc:c4:c4:4b:
50:04:7b:6f:ed:ed:0d:b8:7d:b4:74:80:76:ec:a3:
a7:da:d9:f8:ca:b4:e5:24:91:65:87:bc:95:0a:1c:
d1:06:64:29:1c:b9:c2:d4:6d:f6:bf:52:42:77:bd:
8a:20:39:c7:c8:d7:9b:a3:8b:be:7f:e2:3b:43:cc:
03:3f:a8:2d:8d:b6:b6:d0:f5:f2:a3:4a:e0:3d:ab:
52:69:e8:47:01:72:fe:a8:b9:ad:a1:02:49:39:a3:
5c:0f:7b:70:06:ad:d8:88:81:92:ac:f5:84:80:51:
dc:37:46:83:86:d2:f5:c0:07:7b:59:8d:da:ca:ac:
2d:60:0c:0c:79:b1:98:51:04:79:a6:fd:18:d4:d0:
0d:f8:f3:d7:2b:c9:99:00:7d:e7:b1:ec:c6:69:cd:
5e:79:dd:1f:2d:32:8b:50:c9:76:42:05:95:a0:60:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9D:29:72:17:A8:46:11:86:FF:9E:59:0C:C1:7D:E8:9F:27:F9:7C
X509v3 Authority Key Identifier:
keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/76494F6E146111ED83A8FB50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.10.255.0/24
202.80.64.0/19
IPv6:
2405:7f00:3200::/47
2405:7f00:3204::/48
2405:7f00:3250::/48
2405:7f00:3260::/48
2405:7f00:8000::/43
2405:7f00:8100::-2405:7f00:819f:ffff:ffff:ffff:ffff:ffff
2405:7f00:8200::-2405:7f00:829f:ffff:ffff:ffff:ffff:ffff
2405:7f00:8300::-2405:7f00:835f:ffff:ffff:ffff:ffff:ffff
2405:7f00:8500::/43
2405:7f00:8800::/40
2405:7f00:8a00::/40
2405:7f00:c100::-2405:7f00:c19f:ffff:ffff:ffff:ffff:ffff
2405:7f00:c200::/43
2405:7f00:c800::/40
Signature Algorithm: sha256WithRSAEncryption
9a:19:ba:07:9b:55:17:3f:e2:44:bd:83:a1:1b:0d:b5:d2:ed:
c2:38:e2:f3:93:5e:14:a5:1b:42:5f:48:91:50:b2:93:2c:02:
5c:eb:e0:5f:7c:70:72:db:be:83:b4:bc:9d:ab:b5:36:f7:a3:
cc:41:c8:98:5e:37:d2:ce:e1:36:fe:71:6e:41:fe:9d:45:23:
a2:20:22:af:05:70:87:af:a5:26:39:a4:8c:63:34:54:bc:16:
eb:02:34:78:1f:73:7f:5d:0d:15:9f:85:83:d6:8e:65:f4:43:
e2:52:58:04:99:e4:aa:4e:aa:35:70:9d:e6:3e:6e:4d:d5:fc:
52:1b:27:8a:e0:1e:0b:b1:ac:5b:b8:79:b9:2a:aa:b8:1b:35:
38:79:27:23:1e:3a:34:f8:8b:c3:36:d6:d9:f4:27:0a:89:3c:
cb:05:b2:29:4a:20:ed:86:53:c4:48:8f:77:b2:3f:49:b9:02:
79:8a:a1:86:da:e2:4b:42:14:51:98:45:79:dc:5e:ef:58:d9:
5e:3d:66:be:dc:a3:3c:52:eb:21:57:da:f2:20:b6:90:d7:bb:
75:5e:ee:75:7c:61:0e:17:c1:92:b1:13:03:a9:46:af:76:43:
9f:01:8f:83:49:b3:0d:64:78:a8:c5:d6:0f:8b:dc:22:79:01:
49:7b:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:07:20 2026 by rpki-client