Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/A0121BD4871711EA924C6626C4F9AE02.roa
File: A0121BD4871711EA924C6626C4F9AE02.roa (raw, json)
Hash identifier: oVwBBdf2MoqEQJnLpO/RZy7KNjQCvi9PCorLcBRov58=
Subject key identifier: 94:62:35:FD:1D:9A:E5:2D:4E:27:33:6E:F5:70:23:EB:73:29:1D:AA
Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Certificate serial: 35B3
Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/A0121BD4871711EA924C6626C4F9AE02.roa
Signing time: Fri 25 Sep 2026 06:52:50 +0000
ROA not before: Fri 25 Sep 2026 06:52:50 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 23673
IP address blocks: 27.0.88.0/22 maxlen: 24
43.230.192.0/22 maxlen: 22
43.230.192.0/24 maxlen: 24
43.230.193.0/24 maxlen: 24
43.230.194.0/24 maxlen: 24
43.230.195.0/24 maxlen: 24
103.197.240.0/22 maxlen: 24
103.206.68.0/22 maxlen: 24
103.239.52.0/22 maxlen: 22
103.239.52.0/24 maxlen: 24
103.239.53.0/24 maxlen: 24
103.239.54.0/24 maxlen: 24
103.239.55.0/24 maxlen: 24
110.235.240.0/20 maxlen: 20
110.235.240.0/24 maxlen: 24
110.235.241.0/24 maxlen: 24
110.235.242.0/24 maxlen: 24
110.235.243.0/24 maxlen: 24
110.235.244.0/24 maxlen: 24
110.235.245.0/24 maxlen: 24
110.235.246.0/24 maxlen: 24
110.235.247.0/24 maxlen: 24
110.235.248.0/24 maxlen: 24
110.235.249.0/24 maxlen: 24
110.235.250.0/24 maxlen: 24
110.235.251.0/24 maxlen: 24
110.235.252.0/24 maxlen: 24
110.235.253.0/24 maxlen: 24
110.235.254.0/24 maxlen: 24
110.235.255.0/24 maxlen: 24
124.248.160.0/19 maxlen: 19
124.248.160.0/24 maxlen: 24
124.248.161.0/24 maxlen: 24
124.248.162.0/24 maxlen: 24
124.248.163.0/24 maxlen: 24
124.248.164.0/24 maxlen: 24
124.248.165.0/24 maxlen: 24
124.248.166.0/24 maxlen: 24
124.248.167.0/24 maxlen: 24
124.248.168.0/24 maxlen: 24
124.248.169.0/24 maxlen: 24
124.248.170.0/24 maxlen: 24
124.248.171.0/24 maxlen: 24
124.248.172.0/24 maxlen: 24
124.248.173.0/24 maxlen: 24
124.248.174.0/24 maxlen: 24
124.248.175.0/24 maxlen: 24
124.248.176.0/24 maxlen: 24
124.248.177.0/24 maxlen: 24
124.248.178.0/24 maxlen: 24
124.248.179.0/24 maxlen: 24
124.248.180.0/24 maxlen: 24
124.248.181.0/24 maxlen: 24
124.248.182.0/24 maxlen: 24
124.248.183.0/24 maxlen: 24
124.248.184.0/24 maxlen: 24
124.248.185.0/24 maxlen: 24
124.248.186.0/24 maxlen: 24
124.248.187.0/24 maxlen: 24
124.248.188.0/24 maxlen: 24
124.248.189.0/24 maxlen: 24
124.248.190.0/24 maxlen: 24
124.248.191.0/24 maxlen: 24
202.62.32.0/19 maxlen: 19
202.62.32.0/24 maxlen: 24
202.62.33.0/24 maxlen: 24
202.62.34.0/24 maxlen: 24
202.62.35.0/24 maxlen: 24
202.62.36.0/24 maxlen: 24
202.62.37.0/24 maxlen: 24
202.62.38.0/24 maxlen: 24
202.62.39.0/24 maxlen: 24
202.62.40.0/24 maxlen: 24
202.62.41.0/24 maxlen: 24
202.62.42.0/24 maxlen: 24
202.62.43.0/24 maxlen: 24
202.62.44.0/24 maxlen: 24
202.62.45.0/24 maxlen: 24
202.62.46.0/24 maxlen: 24
202.62.47.0/24 maxlen: 24
202.62.48.0/24 maxlen: 24
202.62.49.0/24 maxlen: 24
202.62.50.0/24 maxlen: 24
202.62.51.0/24 maxlen: 24
202.62.52.0/24 maxlen: 24
202.62.53.0/24 maxlen: 24
202.62.54.0/24 maxlen: 24
202.62.55.0/24 maxlen: 24
202.62.56.0/24 maxlen: 24
202.62.57.0/24 maxlen: 24
202.62.58.0/24 maxlen: 24
202.62.59.0/24 maxlen: 24
202.62.60.0/24 maxlen: 24
202.62.61.0/24 maxlen: 24
202.62.62.0/24 maxlen: 24
202.62.63.0/24 maxlen: 24
203.189.128.0/19 maxlen: 19
203.189.128.0/24 maxlen: 24
203.189.129.0/24 maxlen: 24
203.189.130.0/24 maxlen: 24
203.189.131.0/24 maxlen: 24
203.189.132.0/22 maxlen: 24
203.189.136.0/23 maxlen: 24
203.189.138.0/23 maxlen: 24
203.189.140.0/23 maxlen: 24
203.189.142.0/23 maxlen: 24
203.189.144.0/22 maxlen: 24
203.189.148.0/22 maxlen: 24
203.189.152.0/23 maxlen: 24
203.189.154.0/23 maxlen: 24
203.189.156.0/23 maxlen: 24
203.189.158.0/23 maxlen: 24
2402:c100::/32 maxlen: 32
2402:c100::/48 maxlen: 48
2402:c100:c00::/48 maxlen: 48
2402:c100:c01::/48 maxlen: 48
2402:c100:c02::/48 maxlen: 48
2402:c100:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 14:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13747 (0x35b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Validity
Not Before: Sep 25 06:52:50 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ab61a42-42a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:b5:78:d0:81:e8:1a:12:0e:a2:1d:a7:4b:
1e:6d:b6:4b:fb:ec:c7:b8:cb:9f:4e:3e:20:99:0b:
d1:51:b1:0f:de:4f:cf:3d:ec:e5:d0:9c:fa:c5:35:
73:2b:45:5d:23:99:f4:74:01:c8:3e:36:36:a4:bd:
ad:ac:b8:90:ae:e5:74:bf:c3:04:c5:96:1b:c6:54:
d4:c3:13:4e:b2:b2:e9:74:d3:ba:42:4e:14:fc:3a:
7c:a9:b9:68:ef:e8:5d:0b:71:39:13:a5:b0:a2:be:
88:ec:18:3e:12:49:61:c3:64:5e:fd:42:c4:f1:44:
cf:b1:e2:aa:f9:e5:bc:b3:fa:ce:4c:62:47:a8:93:
83:8c:0e:44:c3:1c:d8:6b:2e:71:5a:12:fd:94:7b:
64:60:23:f4:4f:a7:b8:f6:0a:f7:e4:9e:b4:47:8f:
c1:e0:ba:d6:c0:a1:e1:ae:b9:d7:f8:1f:f6:c6:c4:
11:0e:60:21:e7:a4:f6:4b:09:25:7f:a8:1e:d1:c3:
e9:78:dc:47:c8:40:66:1a:40:17:58:e6:0d:22:5d:
4f:d6:fa:2b:9a:cc:1b:57:7e:a1:89:00:be:07:11:
91:9e:07:e8:7d:c0:65:fa:8c:85:e7:e8:79:6c:87:
55:76:6e:f7:f7:d8:52:c3:19:4e:8c:cb:55:9b:08:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:62:35:FD:1D:9A:E5:2D:4E:27:33:6E:F5:70:23:EB:73:29:1D:AA
X509v3 Authority Key Identifier:
keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/A0121BD4871711EA924C6626C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.88.0/22
43.230.192.0/22
103.197.240.0/22
103.206.68.0/22
103.239.52.0/22
110.235.240.0/20
124.248.160.0/19
202.62.32.0/19
203.189.128.0/19
IPv6:
2402:c100::/32
Signature Algorithm: sha256WithRSAEncryption
11:1c:4d:16:03:f8:6b:fb:6c:40:c8:81:c6:2f:f2:6e:21:ad:
1d:e3:c6:77:71:a1:c2:c7:61:72:72:ed:4d:46:38:f5:4c:12:
84:75:e6:6c:42:03:bf:c6:93:5d:d2:82:6e:76:76:64:f0:12:
5c:7d:70:2b:e5:f3:6f:b9:8c:2e:92:36:a9:65:f7:7d:97:22:
bc:c3:14:01:2b:99:7d:a9:2c:e0:4a:bb:87:69:1c:db:23:05:
c7:4a:14:de:75:36:cd:b4:a1:96:74:5c:15:de:98:36:7d:7d:
0f:9e:4c:68:15:db:37:f4:88:00:3d:b3:ea:f6:cc:44:4d:b5:
5a:e0:47:c5:b2:44:c0:8a:52:18:b9:47:df:c2:24:d6:b9:33:
43:19:1a:ff:ea:d4:9f:22:a0:d0:f2:a9:05:d4:09:9e:af:b6:
40:44:22:ad:f3:1a:f7:78:69:19:f3:c9:d6:ea:d2:65:18:b3:
76:6c:60:93:bf:6e:7b:38:fc:82:52:c0:04:f1:a6:f2:00:54:
ab:7d:59:10:02:18:fb:65:41:d4:2e:29:47:18:80:57:be:97:
5b:cd:cb:f7:79:72:89:81:69:e6:d4:79:5b:f6:21:96:d7:da:
fe:db:50:2e:cf:97:3a:5f:09:bd:af:38:e9:74:69:1b:8f:cc:
0c:ce:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:32:47 2026 by rpki-client