Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/B538B552701211EFB6868329C4F9AE02.roa
File: B538B552701211EFB6868329C4F9AE02.roa (raw, json)
Hash identifier: +r7tbi6WVUntCm60F2BN4Gz2em1ApwcRGlCJmDJjK9I=
Subject key identifier: B0:D3:AB:25:79:AB:B4:27:46:AC:72:F4:BF:B1:C5:E8:3C:03:4D:D9
Certificate issuer: /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial: 0126
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/B538B552701211EFB6868329C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:05:12 +0000
ROA not before: Thu 11 Sep 2025 06:45:48 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 17439
IP address blocks: 103.30.152.0/23 maxlen: 24
103.30.154.0/24 maxlen: 24
103.30.155.0/24 maxlen: 24
123.108.32.0/19 maxlen: 24
124.153.64.0/19 maxlen: 24
124.153.96.0/19 maxlen: 24
180.179.0.0/21 maxlen: 24
180.179.8.0/21 maxlen: 24
180.179.16.0/20 maxlen: 24
180.179.32.0/19 maxlen: 24
180.179.64.0/19 maxlen: 24
180.179.96.0/19 maxlen: 23
180.179.96.0/20 maxlen: 24
180.179.112.0/21 maxlen: 24
180.179.120.0/22 maxlen: 24
180.179.124.0/23 maxlen: 24
180.179.128.0/19 maxlen: 20
180.179.128.0/24 maxlen: 24
180.179.129.0/24 maxlen: 24
180.179.130.0/24 maxlen: 24
180.179.132.0/24 maxlen: 24
180.179.133.0/24 maxlen: 24
180.179.134.0/24 maxlen: 24
180.179.135.0/24 maxlen: 24
180.179.136.0/23 maxlen: 24
180.179.138.0/24 maxlen: 24
180.179.139.0/24 maxlen: 24
180.179.140.0/23 maxlen: 24
180.179.142.0/24 maxlen: 24
180.179.143.0/24 maxlen: 24
180.179.144.0/24 maxlen: 24
180.179.145.0/24 maxlen: 24
180.179.146.0/24 maxlen: 24
180.179.149.0/24 maxlen: 24
180.179.151.0/24 maxlen: 24
180.179.153.0/24 maxlen: 24
180.179.154.0/24 maxlen: 24
180.179.155.0/24 maxlen: 24
180.179.156.0/24 maxlen: 24
180.179.157.0/24 maxlen: 24
180.179.158.0/24 maxlen: 24
180.179.159.0/24 maxlen: 24
180.179.160.0/19 maxlen: 20
180.179.160.0/24 maxlen: 24
180.179.161.0/24 maxlen: 24
180.179.162.0/23 maxlen: 23
180.179.164.0/24 maxlen: 24
180.179.165.0/24 maxlen: 24
180.179.166.0/24 maxlen: 24
180.179.167.0/24 maxlen: 24
180.179.168.0/24 maxlen: 24
180.179.169.0/24 maxlen: 24
180.179.170.0/23 maxlen: 23
180.179.172.0/24 maxlen: 24
180.179.173.0/24 maxlen: 24
180.179.174.0/24 maxlen: 24
180.179.175.0/24 maxlen: 24
180.179.177.0/24 maxlen: 24
180.179.178.0/24 maxlen: 24
180.179.179.0/24 maxlen: 24
180.179.180.0/24 maxlen: 24
180.179.182.0/23 maxlen: 23
180.179.184.0/24 maxlen: 24
180.179.185.0/24 maxlen: 24
180.179.186.0/24 maxlen: 24
180.179.192.0/19 maxlen: 20
180.179.192.0/22 maxlen: 22
180.179.192.0/24 maxlen: 24
180.179.193.0/24 maxlen: 24
180.179.194.0/24 maxlen: 24
180.179.195.0/24 maxlen: 24
180.179.196.0/22 maxlen: 22
180.179.196.0/24 maxlen: 24
180.179.197.0/24 maxlen: 24
180.179.198.0/24 maxlen: 24
180.179.199.0/24 maxlen: 24
180.179.200.0/22 maxlen: 22
180.179.200.0/24 maxlen: 24
180.179.201.0/24 maxlen: 24
180.179.202.0/24 maxlen: 24
180.179.203.0/24 maxlen: 24
180.179.204.0/22 maxlen: 23
180.179.206.0/23 maxlen: 24
180.179.208.0/24 maxlen: 24
180.179.209.0/24 maxlen: 24
180.179.211.0/24 maxlen: 24
180.179.212.0/24 maxlen: 24
180.179.213.0/24 maxlen: 24
180.179.214.0/24 maxlen: 24
180.179.215.0/24 maxlen: 24
180.179.216.0/24 maxlen: 24
180.179.217.0/24 maxlen: 24
180.179.218.0/24 maxlen: 24
180.179.219.0/24 maxlen: 24
180.179.220.0/24 maxlen: 24
180.179.221.0/24 maxlen: 24
180.179.222.0/24 maxlen: 24
180.179.223.0/24 maxlen: 24
180.179.224.0/19 maxlen: 20
180.179.224.0/23 maxlen: 23
180.179.224.0/24 maxlen: 24
180.179.226.0/24 maxlen: 24
180.179.227.0/24 maxlen: 24
180.179.228.0/24 maxlen: 24
180.179.229.0/24 maxlen: 24
180.179.230.0/24 maxlen: 24
180.179.231.0/24 maxlen: 24
180.179.232.0/24 maxlen: 24
180.179.233.0/24 maxlen: 24
180.179.234.0/24 maxlen: 24
180.179.235.0/24 maxlen: 24
180.179.236.0/24 maxlen: 24
180.179.237.0/24 maxlen: 24
180.179.239.0/24 maxlen: 24
180.179.240.0/20 maxlen: 21
180.179.240.0/24 maxlen: 24
180.179.242.0/24 maxlen: 24
180.179.243.0/24 maxlen: 24
180.179.244.0/24 maxlen: 24
180.179.245.0/24 maxlen: 24
180.179.246.0/24 maxlen: 24
180.179.247.0/24 maxlen: 24
180.179.248.0/24 maxlen: 24
180.179.249.0/24 maxlen: 24
180.179.253.0/24 maxlen: 24
180.179.255.0/24 maxlen: 24
202.87.32.0/19 maxlen: 24
2401:8800::/40 maxlen: 40
2401:8800:200::/40 maxlen: 40
2401:8800:400::/40 maxlen: 40
2401:8800:600::/40 maxlen: 40
2401:8800:800::/40 maxlen: 40
2401:8800:a00::/40 maxlen: 40
2401:8800:a00::/48 maxlen: 48
2401:8800:a03::/48 maxlen: 48
2401:8800:c00::/40 maxlen: 40
2401:8800:c05::/48 maxlen: 48
2401:8800:e00::/40 maxlen: 40
2401:8800:1000::/40 maxlen: 40
2401:8800:1100::/40 maxlen: 40
2401:8800:1200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Validity
Not Before: Sep 11 06:45:48 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a58b08-fb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:84:52:f6:f3:b0:0d:4f:6f:1c:ce:50:97:8e:
e1:8a:bc:67:74:42:c8:61:f6:c4:3e:a4:21:76:e2:
bf:c1:18:a0:a7:99:cb:1a:82:ff:25:4f:b8:62:d4:
8a:86:3e:7d:9a:d4:64:8e:2a:6a:15:58:63:a8:9b:
0e:13:5f:9b:cf:6a:90:ae:7f:d0:f4:fd:d8:ff:db:
90:5c:af:3e:35:b1:77:7f:7f:c4:48:b5:14:80:68:
6f:cc:0e:cc:e4:ae:6d:fb:2c:17:f4:0f:a1:2d:00:
32:67:c1:a0:a4:ca:18:d8:d0:ac:ce:37:80:5a:df:
37:ed:79:68:fb:ef:6f:94:c8:20:71:25:98:c9:80:
9e:4d:6a:1d:fc:68:79:f6:d5:77:0c:af:31:6f:ca:
82:bf:fe:6e:f5:75:ac:ca:ce:aa:78:f0:0d:2e:38:
29:41:53:4b:41:ef:9e:6b:d7:e8:54:47:de:19:f5:
f0:89:0d:2e:eb:f2:16:ff:5b:88:82:ea:3e:95:39:
4f:1f:bb:37:e3:90:8e:e3:f3:e1:83:23:b3:c8:19:
c4:99:15:df:aa:8b:64:85:8a:5a:40:58:22:1f:b7:
d3:4d:9c:36:9a:c4:54:15:e3:07:e4:0d:61:57:15:
ab:b6:e9:cd:b8:1e:d0:c6:50:fd:ed:78:4e:73:83:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D3:AB:25:79:AB:B4:27:46:AC:72:F4:BF:B1:C5:E8:3C:03:4D:D9
X509v3 Authority Key Identifier:
keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/B538B552701211EFB6868329C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.30.152.0/22
123.108.32.0/19
124.153.64.0/18
180.179.0.0/16
202.87.32.0/19
IPv6:
2401:8800::/40
2401:8800:200::/40
2401:8800:400::/40
2401:8800:600::/40
2401:8800:800::/40
2401:8800:a00::/40
2401:8800:c00::/40
2401:8800:e00::/40
2401:8800:1000::-2401:8800:12ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b1:08:d2:08:e6:7c:1f:d8:cc:15:ac:29:09:06:06:9a:91:ef:
32:4a:20:97:05:2e:cf:18:d5:8a:ba:62:68:7e:a8:df:13:7b:
88:ce:09:6c:a1:eb:b6:32:6a:b6:b0:0e:6c:dc:a9:5a:8f:45:
28:cf:84:e1:77:8b:99:cc:b0:1a:66:1e:7a:24:30:f0:ee:2f:
73:42:b5:d4:3b:02:77:6d:ef:82:0d:2c:72:f5:74:e8:f5:3b:
18:d5:5e:83:86:ef:f5:42:b2:31:a3:70:06:a9:da:e7:be:0b:
ef:b5:b7:97:10:de:88:26:81:03:e1:01:02:aa:0e:8d:9e:6f:
be:77:3d:ac:63:d7:0d:c7:d0:92:22:6c:f3:a9:b2:15:2b:ea:
b6:69:a3:f5:6a:7e:e5:15:fd:4c:a8:9b:f7:b5:9d:3d:00:f8:
2c:c2:47:34:d7:6d:3c:64:f0:46:c6:f6:98:13:fd:7d:f4:e0:
4c:f6:a7:fb:ff:cb:cf:aa:ba:c9:39:c5:d1:8d:b4:fa:cd:a5:
bc:aa:6a:b7:1c:73:4b:5d:36:bb:a7:37:bb:db:d2:64:2d:be:
76:cd:b2:b8:8c:97:dc:36:0b:b3:8b:ee:10:94:fc:4f:ca:06:
a1:10:e3:5c:39:63:a7:07:72:d5:7f:5c:2f:8d:af:b8:b3:a6:
e5:c5:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:19:31 2026 by rpki-client