Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
File: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (raw, json)
Hash identifier: KWvwHruv1KceHBzzUFVoKpJPfw5czAZyyAOarnbSqBw=
Subject key identifier: 4A:53:7B:87:61:B2:D7:4C:FA:76:D2:64:68:35:44:08:79:62:6A:17
Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial: 0A42
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
Signing time: Wed 01 Jul 2026 08:00:09 +0000
ROA not before: Wed 01 Jul 2026 08:00:09 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 9260
IP address blocks: 43.245.204.0/24 maxlen: 24
43.245.205.0/24 maxlen: 24
43.245.206.0/24 maxlen: 24
43.245.207.0/24 maxlen: 24
103.31.80.0/22 maxlen: 22
103.31.80.0/23 maxlen: 24
103.31.82.0/24 maxlen: 24
103.31.83.0/24 maxlen: 24
125.209.64.0/18 maxlen: 18
125.209.64.0/24 maxlen: 24
125.209.65.0/24 maxlen: 24
125.209.66.0/24 maxlen: 24
125.209.67.0/24 maxlen: 24
125.209.68.0/24 maxlen: 24
125.209.69.0/24 maxlen: 24
125.209.70.0/24 maxlen: 24
125.209.71.0/24 maxlen: 24
125.209.72.0/24 maxlen: 24
125.209.73.0/24 maxlen: 24
125.209.74.0/24 maxlen: 24
125.209.75.0/24 maxlen: 24
125.209.76.0/24 maxlen: 24
125.209.77.0/24 maxlen: 24
125.209.78.0/24 maxlen: 24
125.209.79.0/24 maxlen: 24
125.209.80.0/24 maxlen: 24
125.209.81.0/24 maxlen: 24
125.209.82.0/24 maxlen: 24
125.209.83.0/24 maxlen: 24
125.209.84.0/24 maxlen: 24
125.209.85.0/24 maxlen: 24
125.209.86.0/24 maxlen: 24
125.209.87.0/24 maxlen: 24
125.209.88.0/24 maxlen: 24
125.209.89.0/24 maxlen: 24
125.209.90.0/24 maxlen: 24
125.209.91.0/24 maxlen: 24
125.209.92.0/24 maxlen: 24
125.209.93.0/24 maxlen: 24
125.209.94.0/24 maxlen: 24
125.209.95.0/24 maxlen: 24
125.209.96.0/24 maxlen: 24
125.209.97.0/24 maxlen: 24
125.209.98.0/24 maxlen: 24
125.209.99.0/24 maxlen: 24
125.209.100.0/24 maxlen: 24
125.209.101.0/24 maxlen: 24
125.209.102.0/24 maxlen: 24
125.209.103.0/24 maxlen: 24
125.209.104.0/24 maxlen: 24
125.209.105.0/24 maxlen: 24
125.209.106.0/24 maxlen: 24
125.209.107.0/24 maxlen: 24
125.209.108.0/24 maxlen: 24
125.209.109.0/24 maxlen: 24
125.209.110.0/24 maxlen: 24
125.209.111.0/24 maxlen: 24
125.209.112.0/24 maxlen: 24
125.209.113.0/24 maxlen: 24
125.209.114.0/24 maxlen: 24
125.209.115.0/24 maxlen: 24
125.209.116.0/24 maxlen: 24
125.209.117.0/24 maxlen: 24
125.209.118.0/24 maxlen: 24
125.209.119.0/24 maxlen: 24
125.209.120.0/21 maxlen: 21
125.209.120.0/24 maxlen: 24
125.209.121.0/24 maxlen: 24
125.209.122.0/24 maxlen: 24
125.209.123.0/24 maxlen: 24
125.209.124.0/24 maxlen: 24
125.209.125.0/24 maxlen: 24
125.209.126.0/24 maxlen: 24
125.209.127.0/24 maxlen: 24
202.141.224.0/19 maxlen: 19
202.141.224.0/20 maxlen: 20
202.141.224.0/21 maxlen: 21
202.141.224.0/22 maxlen: 24
202.141.228.0/24 maxlen: 24
202.141.229.0/24 maxlen: 24
202.141.231.0/24 maxlen: 24
202.141.232.0/24 maxlen: 24
202.141.233.0/24 maxlen: 24
202.141.234.0/24 maxlen: 24
202.141.235.0/24 maxlen: 24
202.141.237.0/24 maxlen: 24
202.141.238.0/24 maxlen: 24
202.141.239.0/24 maxlen: 24
202.141.240.0/24 maxlen: 24
202.141.241.0/24 maxlen: 24
202.141.242.0/24 maxlen: 24
202.141.243.0/24 maxlen: 24
202.141.245.0/24 maxlen: 24
202.141.246.0/24 maxlen: 24
202.141.247.0/24 maxlen: 24
202.141.248.0/24 maxlen: 24
202.141.249.0/24 maxlen: 24
202.141.250.0/24 maxlen: 24
202.141.251.0/24 maxlen: 24
202.141.252.0/24 maxlen: 24
202.141.253.0/24 maxlen: 24
202.141.254.0/24 maxlen: 24
202.141.255.0/24 maxlen: 24
202.142.160.0/19 maxlen: 19
202.142.160.0/21 maxlen: 21
202.142.160.0/24 maxlen: 24
202.142.161.0/24 maxlen: 24
202.142.162.0/24 maxlen: 24
202.142.163.0/24 maxlen: 24
202.142.164.0/24 maxlen: 24
202.142.165.0/24 maxlen: 24
202.142.166.0/24 maxlen: 24
202.142.167.0/24 maxlen: 24
202.142.168.0/24 maxlen: 24
202.142.169.0/24 maxlen: 24
202.142.170.0/24 maxlen: 24
202.142.171.0/24 maxlen: 24
202.142.172.0/24 maxlen: 24
202.142.173.0/24 maxlen: 24
202.142.174.0/24 maxlen: 24
202.142.175.0/24 maxlen: 24
202.142.176.0/24 maxlen: 24
202.142.177.0/24 maxlen: 24
202.142.178.0/24 maxlen: 24
202.142.179.0/24 maxlen: 24
202.142.180.0/24 maxlen: 24
202.142.181.0/24 maxlen: 24
202.142.182.0/24 maxlen: 24
202.142.183.0/24 maxlen: 24
202.142.184.0/24 maxlen: 24
202.142.185.0/24 maxlen: 24
202.142.186.0/24 maxlen: 24
202.142.187.0/24 maxlen: 24
202.142.188.0/24 maxlen: 24
202.142.189.0/24 maxlen: 24
202.142.190.0/24 maxlen: 24
202.142.191.0/24 maxlen: 24
2401:8e00::/32 maxlen: 32
2401:8e00:800::/48 maxlen: 48
2401:8e00:2000::/38 maxlen: 38
2401:8e00:2400::/38 maxlen: 38
2401:8e00:2800::/48 maxlen: 48
2401:8e00:3400::/38 maxlen: 38
2401:8e00:4000::/36 maxlen: 36
2401:8e00:4000::/38 maxlen: 38
2401:8e00:4004::/48 maxlen: 48
2401:8e00:4005::/48 maxlen: 48
2401:8e00:4006::/48 maxlen: 48
2401:8e00:400f::/48 maxlen: 48
2401:8e00:5000::/36 maxlen: 36
2401:8e00:5000::/48 maxlen: 48
2401:8e00:5001::/48 maxlen: 48
2401:8e00:6000::/36 maxlen: 36
2401:8e00:7000::/36 maxlen: 36
2401:8e00:8000::/48 maxlen: 48
2401:8e00:8004::/48 maxlen: 48
2401:8e00:9000::/40 maxlen: 40
2401:8e00:9100::/48 maxlen: 48
2401:8e00:9101::/48 maxlen: 48
2401:8e00:d000::/48 maxlen: 48
2401:8e00:d100::/48 maxlen: 48
2401:8e00:d101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2626 (0xa42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Validity
Not Before: Jul 1 08:00:09 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a44c909-ab19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:ae:0f:cb:3a:61:77:2b:ad:3c:33:ee:3e:
18:6c:3e:06:2a:e7:54:04:90:a3:c5:68:c8:11:3f:
b8:fc:49:d6:63:2a:b1:f7:7c:4a:0d:36:9f:54:3e:
a3:ef:e0:8f:8d:04:5f:6a:8a:43:3e:18:f5:97:28:
99:21:ff:52:94:90:c3:72:92:75:8d:9f:3a:7d:41:
47:28:ce:8b:2b:4f:f7:5d:63:ee:07:df:80:ff:84:
1c:52:3c:19:8d:a0:b9:90:f8:cb:91:83:9f:87:e0:
8d:e0:6b:11:78:ee:84:34:02:9e:a9:9b:bd:b0:5a:
32:79:ed:7a:a3:64:4c:9a:02:30:16:0f:91:5d:3c:
45:69:c3:0e:24:78:88:5d:0c:88:ad:6e:32:cb:b9:
57:84:69:3d:24:ac:dd:5b:4a:47:7b:4e:4c:cd:44:
e1:f7:c7:f3:26:c1:4e:5b:54:c6:b9:64:2d:3b:c8:
73:d5:8b:ed:c0:81:d0:46:0c:38:a7:94:21:93:0b:
26:e8:31:93:11:d6:ff:14:75:26:6f:36:68:65:49:
de:5a:bc:2a:f4:7f:a5:88:3d:2d:fc:85:ad:c5:85:
1e:8c:f1:30:81:14:30:79:fb:31:d6:ec:54:c6:6a:
61:f2:ae:5a:df:ed:83:0e:ce:83:df:e6:64:c6:9a:
1c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:53:7B:87:61:B2:D7:4C:FA:76:D2:64:68:35:44:08:79:62:6A:17
X509v3 Authority Key Identifier:
keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.204.0/22
103.31.80.0/22
125.209.64.0/18
202.141.224.0/19
202.142.160.0/19
IPv6:
2401:8e00::/32
Signature Algorithm: sha256WithRSAEncryption
6e:25:0d:e6:37:a4:d7:b4:b2:81:46:4d:53:45:32:55:35:a1:
d3:ea:e6:85:76:6d:52:b9:b5:ce:9b:73:35:53:f8:19:d9:60:
ac:10:43:75:26:e4:02:82:35:f0:f6:f2:37:c3:90:71:99:ca:
7d:9c:49:b9:e9:d0:93:20:a0:65:0e:25:f9:98:9d:93:e1:82:
f1:2e:a0:77:4e:b0:f0:4d:25:56:a5:4c:11:c8:c3:bd:2b:94:
27:6e:73:37:e4:32:84:36:2e:6b:8e:9d:9c:27:22:ee:bb:80:
d8:5e:f9:68:a8:ad:56:be:f5:50:7a:48:74:a7:68:4a:45:e3:
cf:62:b2:32:d2:35:61:67:18:1b:40:67:ee:37:9b:20:fa:d1:
3b:d7:2b:eb:d3:73:45:cc:da:81:a8:d3:e1:54:2f:29:ac:96:
22:97:3d:4f:2f:15:f2:5f:fb:5d:52:a5:db:27:ff:9e:0b:75:
14:01:03:9a:1b:6c:2c:1d:6d:4c:52:e8:2d:85:f6:99:6e:ed:
07:69:8c:1b:66:f8:9b:13:9e:92:3f:15:07:76:71:0a:9d:0b:
58:eb:99:da:54:dd:3a:55:1e:08:74:36:3e:a3:ab:a8:74:2c:
6d:bc:e3:22:b8:68:2b:4f:92:89:d0:12:0e:e3:77:fc:c4:ed:
cc:c3:c5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:25 2026 by rpki-client