Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/1BC91E9CC1A111F1BCF9FA416D11F970.roa
File: 1BC91E9CC1A111F1BCF9FA416D11F970.roa (raw, json)
Hash identifier: /1D9KuobeJ1b1mRW71UQY7A5fSr0LeiOukelwrY1sUI=
Subject key identifier: EC:66:46:6F:50:F4:0E:65:8E:76:C3:83:F2:F5:0A:02:A9:9F:07:7C
Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial: 1AF0
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/1BC91E9CC1A111F1BCF9FA416D11F970.roa
Signing time: Tue 06 Oct 2026 16:15:13 +0000
ROA not before: Tue 06 Oct 2026 16:15:12 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 20940
IP address blocks: 43.254.120.0/22 maxlen: 22
59.151.128.0/18 maxlen: 18
60.254.128.0/18 maxlen: 18
60.254.143.0/24 maxlen: 24
60.254.148.0/24 maxlen: 24
60.254.173.0/24 maxlen: 24
103.238.148.0/22 maxlen: 22
118.214.0.0/16 maxlen: 16
118.214.1.0/24 maxlen: 24
118.214.167.0/24 maxlen: 24
118.214.171.0/24 maxlen: 24
118.214.178.0/24 maxlen: 24
118.214.181.0/24 maxlen: 24
118.214.185.0/24 maxlen: 24
118.214.186.0/24 maxlen: 24
118.214.187.0/24 maxlen: 24
118.214.188.0/23 maxlen: 23
118.214.190.0/24 maxlen: 24
118.215.0.0/17 maxlen: 17
118.215.128.0/18 maxlen: 18
122.252.32.0/19 maxlen: 19
122.252.128.0/20 maxlen: 20
125.56.184.0/24 maxlen: 24
125.56.186.0/24 maxlen: 24
125.56.205.0/24 maxlen: 24
125.56.219.0/24 maxlen: 24
125.56.222.0/24 maxlen: 24
125.252.192.0/18 maxlen: 18
125.252.224.0/24 maxlen: 24
2405:9600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6896 (0x1af0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Validity
Not Before: Oct 6 16:15:12 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6ac51e90-b39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:33:34:85:35:bb:7f:52:17:6f:ce:89:67:ae:
62:8f:10:ef:f5:3c:ea:c6:da:71:05:9f:df:51:63:
cc:bb:16:b1:d4:97:c9:e0:10:d7:be:78:d0:e5:38:
84:47:2a:d4:21:c2:4f:2b:87:71:6b:0f:9f:6a:66:
56:a8:72:34:d7:3b:b8:1d:7c:1b:bf:05:d9:31:c3:
29:1d:09:61:50:45:14:f2:ef:a6:66:40:93:a2:9b:
c9:19:19:85:11:91:4c:49:b3:b6:5f:8e:84:ce:73:
d1:cd:f2:78:a5:f1:c2:a6:42:62:27:79:fd:ae:85:
e3:c8:63:a0:87:3a:a8:41:39:98:3f:42:e4:41:5b:
87:a2:20:78:06:3e:1c:14:fa:7f:ae:1b:57:bd:dd:
ae:48:55:e3:96:02:c4:c8:6e:bf:1f:ae:8e:2f:12:
c4:a1:75:be:d0:90:da:32:bc:bd:39:bf:37:07:8f:
c1:da:c1:7a:b7:09:b9:1c:3a:25:2c:16:54:6b:46:
ab:51:c0:2f:89:45:3b:81:f6:bb:39:b9:3e:65:08:
52:6f:34:2c:b9:a8:69:00:77:fb:29:4e:78:0d:ef:
12:0b:f9:b7:ae:58:e5:61:87:62:5e:5b:32:f5:58:
f9:b8:84:37:f1:f4:14:1d:4a:b9:56:73:71:e4:2e:
95:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:66:46:6F:50:F4:0E:65:8E:76:C3:83:F2:F5:0A:02:A9:9F:07:7C
X509v3 Authority Key Identifier:
keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/1BC91E9CC1A111F1BCF9FA416D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.254.120.0/22
59.151.128.0/18
60.254.128.0/18
103.238.148.0/22
118.214.0.0-118.215.191.255
122.252.32.0/19
122.252.128.0/20
125.56.184.0/24
125.56.186.0/24
125.56.205.0/24
125.56.219.0/24
125.56.222.0/24
125.252.192.0/18
IPv6:
2405:9600::/32
Signature Algorithm: sha256WithRSAEncryption
cd:94:7c:14:cd:ff:40:b4:44:70:31:6b:14:a7:95:12:bd:74:
9b:16:22:9e:2f:1b:1e:27:eb:d2:40:45:fd:44:ac:d4:d6:f1:
b3:0b:fd:77:4e:2a:b6:88:82:a2:60:66:e6:76:3b:e3:c0:67:
1b:b3:7b:e4:c7:91:1a:b5:f2:18:79:1c:44:1c:6d:96:24:3f:
c7:76:ee:02:45:2e:ad:e9:40:bf:d2:71:3f:cd:0b:62:56:c3:
71:d6:cd:8a:b8:9e:6b:7b:bb:59:35:02:10:4b:14:60:25:d5:
73:c7:34:d1:25:ee:e4:97:25:66:1c:b7:cb:63:95:79:da:c1:
6d:dc:91:5e:b0:da:5b:9e:e4:87:d9:1f:da:ee:7f:16:c5:0c:
d8:a5:17:d6:30:0d:4c:75:69:4a:92:d6:97:c1:9d:28:46:23:
e3:af:99:e6:f3:dd:3e:04:6b:68:31:ff:a6:5a:33:58:1c:b2:
83:cb:0f:26:58:23:cc:80:dc:64:13:1d:c1:0c:0d:9a:2d:2e:
db:76:63:26:92:25:a2:52:45:f2:4c:b5:8c:2b:fc:40:e2:6f:
a0:3d:44:bc:c1:7e:cd:22:81:82:47:6f:d4:9d:16:49:55:73:
56:1a:ad:3f:48:de:ad:4f:c4:c4:5a:a6:2f:ab:fe:33:77:7a:
38:af:db:84
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgICGvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQwM0ExMTAvBgNVBAUTKDYxNUVEODRDNDRFNjU3RjcwOTVFMDIxMkFGRUEwNTJD
NTQyQTBEOTEwHhcNMjYxMDA2MTYxNTEyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWM1MWU5MC1iMzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3jM0hTW7f1IXb86JZ65ijxDv9TzqxtpxBZ/fUWPMuxax1JfJ4BDXvnjQ5TiE
RyrUIcJPK4dxaw+famZWqHI01zu4HXwbvwXZMcMpHQlhUEUU8u+mZkCTopvJGRmF
EZFMSbO2X46EznPRzfJ4pfHCpkJiJ3n9roXjyGOghzqoQTmYP0LkQVuHoiB4Bj4c
FPp/rhtXvd2uSFXjlgLEyG6/H66OLxLEoXW+0JDaMry9Ob83B4/B2sF6twm5HDol
LBZUa0arUcAviUU7gfa7Obk+ZQhSbzQsuahpAHf7KU54De8SC/m3rljlYYdiXlsy
9Vj5uIQ38fQUHUq5VnNx5C6VPwIDAQABo4ICvjCCArowHQYDVR0OBBYEFOxmRm9Q
9A5ljnbDg/L1CgKpnwd8MB8GA1UdIwQYMBaAFGFe2ExE5lf3CV4CEq/qBSxUKg2R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAzQS8xQjY0NzcxMDky
NDYxMUU3OUFBRUJFMTBDNEY5QUUwMi9ZVjdZVEVUbVZfY0pYZ0lTci1vRkxGUXFE
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lWN1lURVRtVl9jSlhnSVNyLW9GTEZRcURaRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQwM0EvMUI2NDc3MTA5MjQ2MTFFNzlBQUVCRTEwQzRGOUFFMDIvMUJDOTFFOUND
MUExMTFGMUJDRjlGQTQxNkQxMUY5NzAucm9hMH0GCCsGAQUFBwEHAQH/BG4wbDBb
BAIAATBVAwQCK/54AwQGO5eAAwQGPP6AAwQCZ+6UMAsDAwF21gMEBnbXgAMEBXr8
IAMEBHr8gAMEAH04uAMEAH04ugMEAH04zQMEAH042wMEAH043gMEBn38wDANBAIA
AjAHAwUAJAWWADANBgkqhkiG9w0BAQsFAAOCAQEAzZR8FM3/QLREcDFrFKeVEr10
mxYini8bHifr0kBF/USs1Nbxswv9d04qtoiComBm5nY748BnG7N75MeRGrXyGHkc
RBxtliQ/x3buAkUurelAv9JxP80LYlbDcdbNiriea3u7WTUCEEsUYCXVc8c00SXu
5JclZhy3y2OVedrBbdyRXrDaW57kh9kf2u5/FsUM2KUX1jANTHVpSpLWl8GdKEYj
46+Z5vPdPgRraDH/plozWByyg8sPJlgjzIDcZBMdwQwNmi0u23ZjJpIlolJF8ky1
jCv8QOJvoD1EvMF+zSKBgkdv1J0WSVVzVhqtP0jerU/ExFqmL6v+M3d6OK/bhA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 06:08:17 2026 by rpki-client