Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa
File: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (raw, json)
Hash identifier: 1EvYa4g0ny35NvavzoObDfjafUpRKiAIL6vfsDblpTA=
Subject key identifier: D4:39:5D:86:C2:51:F1:B9:8B:00:3F:5B:62:88:88:E2:25:37:2F:3E
Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
Certificate serial: 35E7
Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa
Signing time: Thu 02 Jul 2026 15:10:40 +0000
ROA not before: Thu 02 Jul 2026 15:10:40 +0000
ROA not after: Sun 01 Nov 2026 00:00:00 +0000
asID: 18399
IP address blocks: 61.4.65.0/24 maxlen: 24
61.4.68.0/24 maxlen: 24
61.4.69.0/24 maxlen: 24
61.4.70.0/24 maxlen: 24
61.4.71.0/24 maxlen: 24
61.4.72.0/24 maxlen: 24
61.4.73.0/24 maxlen: 24
61.4.74.0/24 maxlen: 24
61.4.75.0/24 maxlen: 24
61.4.76.0/24 maxlen: 24
61.4.77.0/24 maxlen: 24
61.4.78.0/24 maxlen: 24
61.4.79.0/24 maxlen: 24
122.248.100.0/24 maxlen: 24
122.248.101.0/24 maxlen: 24
122.248.102.0/24 maxlen: 24
122.248.103.0/24 maxlen: 24
122.248.104.0/24 maxlen: 24
122.248.105.0/24 maxlen: 24
122.248.106.0/24 maxlen: 24
122.248.112.0/24 maxlen: 24
122.248.113.0/24 maxlen: 24
122.248.118.0/24 maxlen: 24
122.248.119.0/24 maxlen: 24
122.248.120.0/24 maxlen: 24
122.248.121.0/24 maxlen: 24
122.248.122.0/24 maxlen: 24
122.248.126.0/24 maxlen: 24
203.81.160.0/24 maxlen: 24
203.81.161.0/24 maxlen: 24
203.81.162.0/24 maxlen: 24
203.81.163.0/24 maxlen: 24
203.81.164.0/24 maxlen: 24
203.81.165.0/24 maxlen: 24
203.81.168.0/24 maxlen: 24
203.81.169.0/24 maxlen: 24
203.81.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl
rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13799 (0x35e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2
Validity
Not Before: Jul 2 15:10:40 2026 GMT
Not After : Nov 1 00:00:00 2026 GMT
Subject: CN=6a467f70-8c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:2b:af:f7:ef:99:41:b0:85:39:95:17:b3:
01:34:02:f8:45:86:5a:c3:df:ab:c8:5e:75:bd:e7:
f4:09:77:d4:4a:4f:a7:84:2f:c4:d7:16:08:f6:23:
f3:16:eb:63:33:f9:15:3e:0a:4a:d7:f4:0e:08:11:
01:33:12:83:7c:22:96:85:ee:8c:74:58:63:9a:0c:
34:20:64:dd:b0:ee:8c:6b:4d:df:cb:68:eb:d0:6c:
4e:32:67:31:b2:b0:09:58:27:ed:99:ea:07:0a:80:
94:ce:e6:e1:f6:50:d3:a8:22:73:e1:e1:3b:fa:38:
46:4f:e8:7f:53:22:fa:ea:0d:92:ba:1b:04:7e:81:
9a:4b:37:11:02:07:fe:3e:98:ea:1c:9a:8b:3f:84:
0c:94:10:e8:fc:43:4b:c6:29:43:fc:f6:dd:8e:61:
5f:ba:e5:72:e8:ad:06:5c:79:f9:31:96:45:d0:81:
cf:2c:0f:be:3e:60:a6:ce:80:10:ec:a2:c0:30:b1:
ae:2c:ce:73:67:e0:5c:a3:7c:e0:26:62:07:56:52:
9e:d2:e7:d7:c1:d3:45:8e:fe:70:c8:01:1c:7d:90:
4f:ae:90:00:92:8e:32:90:d9:16:ff:a7:83:24:05:
8f:74:a0:a3:f7:a8:5f:de:c3:d4:84:e9:37:07:c9:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:39:5D:86:C2:51:F1:B9:8B:00:3F:5B:62:88:88:E2:25:37:2F:3E
X509v3 Authority Key Identifier:
keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/8D2DEDF4C2A811EBA79A7055C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.4.65.0/24
61.4.68.0-61.4.79.255
122.248.100.0-122.248.106.255
122.248.112.0/23
122.248.118.0-122.248.122.255
122.248.126.0/24
203.81.160.0-203.81.165.255
203.81.168.0/23
203.81.172.0/22
Signature Algorithm: sha256WithRSAEncryption
81:88:57:23:14:28:d0:71:23:3e:c5:42:e8:59:11:2c:ae:78:
fe:cf:37:22:c7:9f:ed:c8:af:ea:74:17:b2:b6:df:e7:d5:d3:
94:3b:cb:a0:61:7e:c7:81:71:6b:b7:02:50:6e:3f:6f:5e:7f:
06:97:a0:23:44:a6:c8:8e:a2:88:09:2b:61:ef:0d:3e:7b:37:
42:1c:97:58:7e:2f:f2:46:57:06:3d:e2:6f:3f:6e:1b:9b:ea:
9b:8e:bb:52:7e:86:36:44:e5:56:c9:b1:6e:a3:09:7c:2d:46:
da:63:0a:0a:e3:01:61:08:ea:10:e5:9f:82:9f:65:7f:fc:b2:
9a:c9:82:ef:63:dd:0e:43:40:a6:50:7f:4e:17:ff:b2:6b:39:
26:39:5f:af:3b:17:51:6e:c2:7d:ec:0d:4a:1f:d4:0f:e5:e2:
14:f0:e4:39:cc:c8:5c:79:c1:e8:20:9b:19:b0:cb:6d:71:55:
db:fe:21:87:d6:c5:83:df:71:ba:30:aa:6f:b8:3f:1b:04:8b:
1a:98:b7:51:e3:45:62:5b:eb:f6:e9:91:5c:93:05:07:98:43:
5a:7a:f5:6f:ba:bf:4c:41:2a:a2:83:b2:f4:98:a3:6a:df:a5:
51:dd:32:0d:98:4b:93:07:92:97:1d:31:bf:b6:8c:ca:ee:73:
c4:77:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:52 2026 by rpki-client