Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/089DB16C769111F1BA451BEF65A30FBC.roa
File: 089DB16C769111F1BA451BEF65A30FBC.roa (raw, json)
Hash identifier: 8p6Re7pqOXecnmQu/NSydvCbJad68BH9Gn7yDp3+bDg=
Subject key identifier: C6:71:49:C0:BE:81:45:B6:FA:29:B1:00:84:AC:14:76:10:C3:8F:E4
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1E43
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/089DB16C769111F1BA451BEF65A30FBC.roa
Signing time: Thu 16 Jul 2026 19:03:37 +0000
ROA not before: Thu 16 Jul 2026 19:03:37 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132165
IP address blocks: 43.245.128.0/24 maxlen: 24
43.245.129.0/24 maxlen: 24
43.245.130.0/24 maxlen: 24
43.245.131.0/24 maxlen: 24
103.12.120.0/24 maxlen: 24
103.12.121.0/24 maxlen: 24
103.12.122.0/24 maxlen: 24
103.12.123.0/24 maxlen: 24
103.246.108.0/22 maxlen: 22
103.246.108.0/24 maxlen: 24
103.246.109.0/24 maxlen: 24
111.88.2.0/24 maxlen: 24
111.88.3.0/24 maxlen: 24
111.88.4.0/24 maxlen: 24
111.88.5.0/24 maxlen: 24
111.88.6.0/24 maxlen: 24
111.88.7.0/24 maxlen: 24
111.119.160.0/24 maxlen: 24
111.119.161.0/24 maxlen: 24
111.119.162.0/24 maxlen: 24
111.119.163.0/24 maxlen: 24
111.119.164.0/24 maxlen: 24
111.119.165.0/24 maxlen: 24
111.119.166.0/24 maxlen: 24
111.119.167.0/24 maxlen: 24
113.203.192.0/24 maxlen: 24
113.203.193.0/24 maxlen: 24
113.203.195.0/24 maxlen: 24
113.203.200.0/24 maxlen: 24
113.203.201.0/24 maxlen: 24
113.203.202.0/24 maxlen: 24
113.203.203.0/24 maxlen: 24
113.203.204.0/24 maxlen: 24
113.203.205.0/24 maxlen: 24
113.203.207.0/24 maxlen: 24
115.42.64.0/24 maxlen: 24
115.42.65.0/24 maxlen: 24
115.42.66.0/24 maxlen: 24
115.42.67.0/24 maxlen: 24
115.42.68.0/24 maxlen: 24
115.42.69.0/24 maxlen: 24
115.42.70.0/24 maxlen: 24
115.42.71.0/24 maxlen: 24
118.103.226.0/24 maxlen: 24
118.103.227.0/24 maxlen: 24
118.103.228.0/24 maxlen: 24
118.103.229.0/24 maxlen: 24
118.103.230.0/24 maxlen: 24
118.103.231.0/24 maxlen: 24
118.103.232.0/24 maxlen: 24
118.103.233.0/24 maxlen: 24
118.103.234.0/24 maxlen: 24
118.103.235.0/24 maxlen: 24
118.103.236.0/24 maxlen: 24
118.103.237.0/24 maxlen: 24
118.103.238.0/24 maxlen: 24
118.103.239.0/24 maxlen: 24
2406:d00::/48 maxlen: 48
2406:d00:2222::/48 maxlen: 48
2406:d00:5555::/48 maxlen: 48
2406:d00:6666::/48 maxlen: 48
2406:d00:aaaa::/48 maxlen: 48
2406:d00:bbbb::/48 maxlen: 48
2406:d00:ccaa::/47 maxlen: 48
2406:d00:ccad::/48 maxlen: 48
2406:d00:ccc0::/46 maxlen: 48
2406:d00:cccc::/46 maxlen: 48
2406:d00:cce0::/48 maxlen: 48
2406:d00:ccea::/48 maxlen: 48
2406:d00:ddc1::/48 maxlen: 48
2406:d00:ddcc::/48 maxlen: 48
2406:d00:ddd1::/48 maxlen: 48
2406:d00:dddd::/48 maxlen: 48
2406:d00:ddf1::/48 maxlen: 48
2406:d00:ddff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7747 (0x1e43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Jul 16 19:03:37 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a592b09-d629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:65:52:8f:9a:b1:28:e5:ec:da:f1:4b:3d:92:
fc:9e:8a:3a:55:28:fa:e4:56:3c:72:36:b1:81:3b:
01:bc:d4:6f:f4:b6:db:3f:2b:87:f6:16:27:fc:7a:
d9:28:1c:da:42:d6:cd:55:b0:6a:b5:50:40:4b:28:
f2:c5:d2:28:ad:9e:68:b3:8b:cc:e5:7b:28:b3:45:
e3:6c:68:d0:f8:3d:63:cd:c2:c2:f6:38:a4:f7:e4:
05:e7:22:91:01:45:c6:6a:61:4e:12:c4:e4:ab:28:
db:aa:96:9a:32:f1:ca:d9:9f:1e:41:8c:6d:0d:58:
47:db:86:eb:ab:e5:89:a3:4b:4e:73:7c:18:43:89:
49:97:be:3b:f9:de:61:02:ad:62:ea:85:00:e0:20:
6f:02:36:d3:29:6c:ab:17:4f:0b:65:4f:e3:e3:19:
a0:f0:2a:17:59:13:8c:b0:de:56:5a:20:a0:a3:7c:
bd:33:03:f0:7a:c6:8f:af:a0:d1:ba:43:c1:0c:15:
5d:17:ee:94:6a:92:ae:d7:0e:88:2c:a6:79:ff:8e:
b4:62:33:15:2a:ef:31:ed:57:dd:98:c1:e1:1f:7f:
11:18:21:6b:a1:fe:fa:c2:40:31:b3:5f:85:f9:a7:
82:78:7e:c8:af:d3:71:7d:5f:07:15:c5:24:ed:e2:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:71:49:C0:BE:81:45:B6:FA:29:B1:00:84:AC:14:76:10:C3:8F:E4
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/089DB16C769111F1BA451BEF65A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.128.0/22
103.12.120.0/22
103.246.108.0/22
111.88.2.0-111.88.7.255
111.119.160.0/21
113.203.192.0/23
113.203.195.0/24
113.203.200.0-113.203.205.255
113.203.207.0/24
115.42.64.0/21
118.103.226.0-118.103.239.255
IPv6:
2406:d00::/48
2406:d00:2222::/48
2406:d00:5555::/48
2406:d00:6666::/48
2406:d00:aaaa::/48
2406:d00:bbbb::/48
2406:d00:ccaa::/47
2406:d00:ccad::/48
2406:d00:ccc0::/46
2406:d00:cccc::/46
2406:d00:cce0::/48
2406:d00:ccea::/48
2406:d00:ddc1::/48
2406:d00:ddcc::/48
2406:d00:ddd1::/48
2406:d00:dddd::/48
2406:d00:ddf1::/48
2406:d00:ddff::/48
Signature Algorithm: sha256WithRSAEncryption
ab:ac:9b:ea:80:ee:82:98:f6:ba:8c:0c:49:2a:79:5a:4d:09:
9d:35:d0:9c:79:ed:24:87:97:e4:05:e6:7b:d2:1d:fa:39:fb:
e6:8e:01:09:bd:f2:ee:00:2e:94:5e:71:34:dc:b2:76:56:ce:
5f:3a:40:ad:7e:50:85:50:70:ce:72:cf:b1:09:27:9f:9a:a8:
ba:be:5c:b3:0e:2e:b3:a6:54:66:74:81:84:d0:e7:83:eb:7e:
67:6c:a6:84:ea:72:23:b3:f8:91:15:35:de:73:84:a9:01:95:
10:4b:ac:66:01:af:61:f3:47:94:37:80:13:62:da:a9:bb:3a:
a2:99:71:fe:68:7f:d9:cd:3c:e5:e0:c5:45:97:e9:b5:7b:94:
1d:f8:0a:6c:a1:e6:d3:1f:30:ed:33:05:18:99:7f:4f:ad:c1:
75:5b:78:2d:f7:79:f3:2b:54:c8:cd:f5:ac:86:c2:99:10:bd:
e7:95:81:b6:d8:09:d8:f7:fa:e9:1a:79:c0:e6:78:a4:fd:8c:
e5:ac:48:dc:ed:e8:17:93:1c:ab:c1:85:c8:47:fe:c2:90:f4:
29:26:ac:6b:31:ad:6f:19:ce:cd:81:b8:0b:2c:3f:54:14:d7:
fd:85:e2:44:0e:66:5b:5f:9c:3c:75:28:9a:ff:2e:76:9a:d5:
d8:ad:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:23 2026 by rpki-client