Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/AC61350A4E3C11EF9286040CC4F9AE02.roa
File: AC61350A4E3C11EF9286040CC4F9AE02.roa (raw, json)
Hash identifier: 20nujIzl+CA8w05nEFFC5K5q9fFkxYmC8tuXnrC1GWI=
Subject key identifier: 5B:5B:62:32:BB:BE:28:F4:C3:5F:B1:03:C1:65:99:BD:38:BC:B5:75
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: 02C3
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/AC61350A4E3C11EF9286040CC4F9AE02.roa
Signing time: Thu 23 Jul 2026 07:16:31 +0000
ROA not before: Thu 23 Jul 2026 07:16:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10235
IP address blocks: 155.60.100.0/24 maxlen: 32
164.53.0.0/16 maxlen: 16
164.53.28.0/24 maxlen: 24
164.53.29.0/24 maxlen: 24
164.53.42.0/24 maxlen: 24
164.53.43.0/24 maxlen: 24
164.53.44.0/23 maxlen: 23
164.53.46.0/23 maxlen: 23
164.53.65.0/24 maxlen: 24
164.53.67.0/24 maxlen: 24
164.53.70.0/24 maxlen: 24
164.53.71.0/24 maxlen: 24
164.53.78.0/24 maxlen: 24
164.53.85.0/24 maxlen: 24
164.53.86.0/24 maxlen: 24
164.53.87.0/24 maxlen: 24
164.53.92.0/24 maxlen: 24
164.53.97.0/24 maxlen: 24
164.53.98.0/23 maxlen: 23
164.53.99.254/32 maxlen: 32
164.53.122.0/24 maxlen: 24
164.53.124.0/24 maxlen: 24
164.53.125.0/24 maxlen: 24
164.53.139.0/24 maxlen: 24
164.53.152.0/24 maxlen: 24
164.53.158.0/23 maxlen: 23
164.53.160.0/23 maxlen: 23
164.53.162.0/24 maxlen: 24
164.53.164.0/23 maxlen: 23
164.53.166.0/23 maxlen: 23
164.53.168.0/23 maxlen: 23
164.53.170.0/24 maxlen: 24
164.53.171.0/24 maxlen: 24
164.53.176.16/28 maxlen: 28
164.53.182.0/23 maxlen: 23
164.53.184.0/24 maxlen: 24
164.53.185.0/24 maxlen: 24
164.53.186.0/24 maxlen: 24
164.53.187.0/24 maxlen: 24
164.53.192.0/24 maxlen: 24
164.53.192.254/32 maxlen: 32
164.53.193.0/24 maxlen: 24
164.53.195.0/24 maxlen: 24
164.53.200.0/24 maxlen: 24
164.53.201.0/24 maxlen: 24
164.53.202.0/24 maxlen: 24
164.53.203.0/24 maxlen: 24
164.53.204.0/22 maxlen: 22
164.53.214.0/23 maxlen: 23
164.53.215.254/32 maxlen: 32
164.53.216.0/24 maxlen: 24
164.53.218.0/23 maxlen: 23
164.53.220.0/23 maxlen: 23
164.53.222.0/23 maxlen: 23
164.53.224.0/22 maxlen: 22
164.53.230.0/23 maxlen: 23
164.53.232.0/24 maxlen: 24
164.53.234.0/23 maxlen: 23
164.53.238.0/24 maxlen: 24
164.53.239.0/24 maxlen: 24
164.53.241.0/24 maxlen: 24
164.53.244.0/24 maxlen: 24
164.53.246.0/24 maxlen: 24
164.53.252.0/24 maxlen: 24
164.53.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 707 (0x2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Jul 23 07:16:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a61bfcf-8a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:d4:28:5a:b7:13:b5:be:e5:10:53:56:b3:
ba:4e:63:7c:14:a1:f5:7d:e3:81:f9:ed:b8:16:45:
93:ba:c9:5e:a7:a6:9b:a3:0a:11:cd:fb:3c:2b:7e:
e3:da:ee:d4:1a:f2:b4:61:ac:92:ae:b3:2e:4e:08:
29:4e:0f:93:9b:04:34:97:26:fe:b5:d7:a6:28:5c:
9a:70:ec:18:8f:15:5d:59:67:9d:20:cc:79:76:68:
c5:21:f2:97:9c:31:26:4a:df:a0:49:18:54:40:9b:
2f:2d:8e:18:af:c1:61:45:f9:6f:58:c1:c6:40:51:
0d:1b:4d:3b:cb:50:52:c6:79:aa:fc:8c:b2:35:ae:
e8:c2:01:99:d6:f4:00:86:ec:41:5a:78:32:39:a1:
e2:39:3e:cf:68:6b:67:f0:6a:86:0b:fa:da:0f:a2:
7f:71:c5:c1:41:c7:62:77:b6:b4:23:28:b0:5a:38:
8a:24:bd:55:05:82:f1:b8:f6:51:4f:c8:21:c4:78:
5b:3b:1f:ca:0d:db:40:e4:0b:36:7e:22:21:fc:33:
cc:36:e5:21:56:e4:26:bc:87:8d:15:79:69:ef:c1:
d7:4f:22:28:52:75:a2:c0:1d:71:ea:af:1a:6a:69:
5e:90:8c:f6:20:f5:d2:41:e5:90:fc:2b:70:97:12:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:62:32:BB:BE:28:F4:C3:5F:B1:03:C1:65:99:BD:38:BC:B5:75
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/AC61350A4E3C11EF9286040CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
155.60.100.0/24
164.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:96:bc:89:08:45:87:ae:a6:25:8d:36:e2:52:89:44:dc:41:
05:84:df:33:0c:c2:fd:cb:bc:99:a8:62:f8:a8:84:f7:2d:4a:
14:11:21:45:f6:69:ac:62:38:30:e5:8f:53:0c:28:11:69:81:
13:d9:7f:33:45:66:db:84:9c:5a:4e:75:46:52:3d:fb:99:56:
6c:e1:9f:18:f3:d3:74:ba:7e:74:68:1c:bb:50:b5:e6:2c:eb:
78:db:1a:a2:63:4c:12:6e:6b:1b:1a:ae:e6:20:51:57:ad:36:
fe:de:0a:d8:f6:9d:4d:13:7d:f0:75:47:de:00:0c:08:d1:42:
36:17:19:d2:3c:39:64:99:e2:ce:9c:cc:54:95:99:32:6b:f1:
78:7b:f8:2c:46:44:7a:ff:a5:a3:42:b0:56:fd:27:a6:b7:6a:
5f:24:0c:1d:0d:e7:fc:f1:72:df:a2:bf:26:cc:c8:9b:56:82:
53:c1:d4:b6:88:70:92:c8:8e:46:c7:20:01:61:00:bd:fd:ba:
92:77:ea:58:be:62:51:2c:51:cf:4e:28:ef:83:cd:67:b4:24:
33:53:14:5f:18:b1:7c:5c:7f:1e:15:3e:ed:d4:cd:94:13:7a:
fe:52:eb:5a:78:8d:31:a0:aa:d2:1c:c8:5d:aa:3b:91:72:d8:
bc:40:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:37 2026 by rpki-client