Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/AFF73BD2BA0811EAB2479081C4F9AE02.roa
File: AFF73BD2BA0811EAB2479081C4F9AE02.roa (raw, json)
Hash identifier: R5wiapQyzv4PFdGIbESWbFC1/ORnX+w1AeINSqKu1Fw=
Subject key identifier: EA:5B:A1:91:95:F9:5C:D0:1F:72:C6:F6:5A:AA:AC:76:2A:C9:D1:CC
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 25C8
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/AFF73BD2BA0811EAB2479081C4F9AE02.roa
Signing time: Tue 18 Aug 2026 16:23:52 +0000
ROA not before: Tue 18 Aug 2026 16:23:52 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 19905
IP address blocks: 203.208.149.0/24 maxlen: 24
203.208.151.0/24 maxlen: 24
203.208.152.0/24 maxlen: 24
203.208.153.0/24 maxlen: 24
203.208.154.0/24 maxlen: 24
203.208.155.0/24 maxlen: 24
203.208.157.0/24 maxlen: 24
203.208.158.0/24 maxlen: 24
203.208.166.0/24 maxlen: 24
203.208.171.0/24 maxlen: 24
203.208.172.0/24 maxlen: 24
203.208.173.0/24 maxlen: 24
203.208.178.0/24 maxlen: 24
203.208.182.0/24 maxlen: 24
203.208.183.0/24 maxlen: 24
203.208.185.0/24 maxlen: 24
203.208.190.0/24 maxlen: 24
203.208.193.0/24 maxlen: 24
203.208.194.0/24 maxlen: 24
203.208.221.0/24 maxlen: 24
203.208.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9672 (0x25c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: Aug 18 16:23:52 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a848718-e6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:5e:b4:99:40:2e:b1:3e:20:f2:a3:0b:1c:
38:9e:4b:c6:13:89:c1:48:bb:b8:64:b2:3f:b9:2a:
4c:d7:c8:97:77:92:fc:a3:1e:a7:7c:c0:bf:af:e3:
65:09:1d:b3:82:ca:07:9b:ba:34:4d:4d:b3:d2:0c:
03:7a:07:a2:e6:12:29:8b:9b:e8:34:d4:11:14:2a:
d8:be:fd:6b:fc:88:50:16:71:8a:e7:34:f3:d1:2f:
e2:a8:25:cc:9e:af:0f:7b:df:1a:b2:c0:20:8b:c8:
ab:df:d9:94:10:6e:67:d0:b9:50:24:8e:f7:df:39:
3e:1f:8e:28:73:a6:f0:52:a2:ad:45:60:86:0e:23:
ee:12:1c:57:30:f6:14:69:78:5c:a0:6c:37:6a:48:
6b:cc:b8:a8:2b:04:e9:33:17:b9:30:76:8a:1a:c6:
b1:82:1f:1c:94:7d:0b:a8:48:16:ac:d5:7a:9a:c1:
07:39:50:0a:30:a8:23:9e:e8:37:41:81:6f:7d:bf:
f5:56:96:d2:9a:af:1f:ab:82:6a:26:6b:e0:03:c4:
23:f0:a0:7f:68:a2:5d:28:37:c2:65:9d:f7:93:5a:
c9:86:37:51:21:62:5e:65:0d:1b:a0:12:87:dc:7e:
39:23:93:be:f3:17:2b:17:30:bc:65:7a:eb:79:d7:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5B:A1:91:95:F9:5C:D0:1F:72:C6:F6:5A:AA:AC:76:2A:C9:D1:CC
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/AFF73BD2BA0811EAB2479081C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.208.149.0/24
203.208.151.0-203.208.155.255
203.208.157.0-203.208.158.255
203.208.166.0/24
203.208.171.0-203.208.173.255
203.208.178.0/24
203.208.182.0/23
203.208.185.0/24
203.208.190.0/24
203.208.193.0-203.208.194.255
203.208.221.0/24
203.208.223.0/24
Signature Algorithm: sha256WithRSAEncryption
41:79:55:70:92:7d:70:19:82:16:e7:e2:e7:1d:76:16:11:17:
6f:91:d1:85:a1:39:19:b6:19:fb:da:a6:fa:70:fc:7e:3f:a0:
65:5f:54:a2:9b:a2:03:ac:d4:53:4e:7f:d3:67:57:08:53:ff:
22:45:84:0c:12:27:85:e7:32:e1:4f:83:0f:06:c2:73:d9:75:
3c:2a:34:40:e1:81:fb:06:cf:22:ac:76:fc:cf:a7:88:d2:58:
7d:62:97:31:bb:54:46:11:13:69:8d:41:ed:69:8c:17:e9:b5:
b4:5f:a5:08:86:f4:b4:a7:a3:de:5f:48:e4:53:04:71:61:74:
9b:64:b6:e5:43:05:8a:b4:0c:16:d5:16:7d:08:a1:eb:a7:96:
38:77:bb:dc:ca:0c:c4:84:cd:43:fb:6a:65:1c:e1:ad:eb:46:
0c:6a:ca:cf:40:0b:8b:d8:11:e4:b1:db:c8:99:66:9a:72:5f:
73:51:de:6f:2f:99:3c:d8:e2:36:84:05:1f:a0:7f:e8:83:f4:
9c:90:90:11:64:7d:a2:45:30:21:83:c9:f0:11:50:6b:d3:85:
4b:40:7b:81:21:85:e2:d6:e8:f9:72:92:28:95:20:a2:c9:94:
18:8e:e7:cc:a3:75:35:de:2e:ac:6c:d6:38:b2:4d:56:9a:99:
78:16:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:49:32 2026 by rpki-client