Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/DB9D2EDA8B6311F1BE3015DD5011F970.roa
File: DB9D2EDA8B6311F1BE3015DD5011F970.roa (raw, json)
Hash identifier: 1R5SkJpan6jmwi+k9cfV8krBirJGQC5lCu1Fh4tsvi4=
Subject key identifier: 06:13:CF:25:AC:1C:D9:A0:1A:F4:5A:4E:9C:45:E5:AE:3B:A7:68:F9
Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial: 1D1C
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/DB9D2EDA8B6311F1BE3015DD5011F970.roa
Signing time: Thu 08 Oct 2026 14:41:19 +0000
ROA not before: Thu 08 Oct 2026 14:41:19 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 0
IP address blocks: 103.87.111.0/24 maxlen: 24
203.144.49.0/24 maxlen: 24
203.144.54.0/23 maxlen: 23
203.144.56.0/23 maxlen: 23
203.144.62.0/23 maxlen: 23
2402:79c0:4::/46 maxlen: 46
2402:79c0:8::/45 maxlen: 45
2402:79c0:10::/44 maxlen: 44
2402:79c0:20::/43 maxlen: 43
2402:79c0:40::/42 maxlen: 42
2402:79c0:80::/41 maxlen: 41
2402:79c0:10c::/46 maxlen: 46
2402:79c0:110::/44 maxlen: 44
2402:79c0:120::/43 maxlen: 43
2402:79c0:140::/42 maxlen: 42
2402:79c0:180::/41 maxlen: 41
2402:79c0:200::/39 maxlen: 39
2402:79c0:400::/38 maxlen: 38
2402:79c0:800::/37 maxlen: 37
2402:79c0:1000::/40 maxlen: 40
2402:79c0:1100::/43 maxlen: 43
2402:79c0:1120::/46 maxlen: 46
2402:79c0:1124::/47 maxlen: 47
2402:79c0:1127::/48 maxlen: 48
2402:79c0:1128::/45 maxlen: 45
2402:79c0:1130::/44 maxlen: 44
2402:79c0:1140::/46 maxlen: 46
2402:79c0:1145::/48 maxlen: 48
2402:79c0:1146::/47 maxlen: 47
2402:79c0:1149::/48 maxlen: 48
2402:79c0:114a::/47 maxlen: 47
2402:79c0:114c::/46 maxlen: 46
2402:79c0:1150::/44 maxlen: 44
2402:79c0:1160::/44 maxlen: 44
2402:79c0:1170::/45 maxlen: 45
2402:79c0:1179::/48 maxlen: 48
2402:79c0:117a::/47 maxlen: 47
2402:79c0:117c::/46 maxlen: 46
2402:79c0:1180::/41 maxlen: 41
2402:79c0:1200::/39 maxlen: 39
2402:79c0:1400::/38 maxlen: 38
2402:79c0:1800::/37 maxlen: 37
2402:79c0:2000::/35 maxlen: 35
2402:79c0:4000::/34 maxlen: 34
2402:79c0:8000::/34 maxlen: 34
2402:79c0:c000::/35 maxlen: 35
2402:79c0:e000::/36 maxlen: 36
2402:79c0:f000::/45 maxlen: 45
2402:79c0:f009::/48 maxlen: 48
2402:79c0:f00c::/46 maxlen: 46
2402:79c0:f010::/44 maxlen: 44
2402:79c0:f020::/43 maxlen: 43
2402:79c0:f040::/42 maxlen: 42
2402:79c0:f080::/42 maxlen: 42
2402:79c0:f0c0::/43 maxlen: 43
2402:79c0:f0e0::/44 maxlen: 44
2402:79c0:f0f0::/45 maxlen: 45
2402:79c0:f0f8::/48 maxlen: 48
2402:79c0:f0fa::/47 maxlen: 47
2402:79c0:f0fc::/46 maxlen: 46
2402:79c0:f100::/40 maxlen: 40
2402:79c0:f200::/39 maxlen: 39
2402:79c0:f400::/38 maxlen: 38
2402:79c0:f800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 16:06:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7452 (0x1d1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Validity
Not Before: Oct 8 14:41:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6ac7ab8f-8883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:18:9a:44:40:66:24:c3:6d:b8:6d:40:fa:
be:39:c5:19:18:5b:41:9c:87:bf:4d:ad:f2:98:7a:
95:d5:92:82:0c:31:07:91:cf:8b:26:74:dd:f4:5f:
22:a1:c3:46:87:a7:b3:82:24:b5:72:33:88:e0:3f:
d6:11:4c:8d:67:d4:e9:13:29:1c:aa:dd:60:f2:72:
f6:c1:93:2f:83:35:36:79:b3:42:21:91:76:2b:99:
d2:5d:05:4d:8d:07:4b:06:ff:7d:20:1a:55:0a:e4:
d4:dc:b8:23:f7:ed:3d:74:19:3b:bf:1d:84:63:3b:
11:02:68:ed:68:c1:cd:cd:7a:ed:7d:d8:8c:97:bc:
01:1e:dc:47:ff:39:03:69:5d:0c:d0:4c:73:c1:8a:
b3:42:dd:1a:fd:32:20:b7:31:bb:40:4c:aa:23:c8:
c8:76:61:fd:11:78:b6:6d:c9:e9:8c:21:85:34:2e:
0f:42:40:f7:80:d1:96:f7:ef:cf:1d:4c:22:07:70:
a2:d9:6e:2c:fc:8a:18:09:4b:67:36:e0:31:70:d9:
58:d6:80:42:d2:f1:79:4e:c8:37:b0:59:0a:9a:d6:
7e:46:09:68:b7:5a:c6:b6:40:2b:36:12:bc:c8:55:
b3:21:1e:c5:06:57:69:02:9c:57:a6:f9:63:8b:6d:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:13:CF:25:AC:1C:D9:A0:1A:F4:5A:4E:9C:45:E5:AE:3B:A7:68:F9
X509v3 Authority Key Identifier:
keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/DB9D2EDA8B6311F1BE3015DD5011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.87.111.0/24
203.144.49.0/24
203.144.54.0-203.144.57.255
203.144.62.0/23
IPv6:
2402:79c0:4::-2402:79c0:ff:ffff:ffff:ffff:ffff:ffff
2402:79c0:10c::-2402:79c0:1125:ffff:ffff:ffff:ffff:ffff
2402:79c0:1127::-2402:79c0:1143:ffff:ffff:ffff:ffff:ffff
2402:79c0:1145::-2402:79c0:1147:ffff:ffff:ffff:ffff:ffff
2402:79c0:1149::-2402:79c0:1177:ffff:ffff:ffff:ffff:ffff
2402:79c0:1179::-2402:79c0:f007:ffff:ffff:ffff:ffff:ffff
2402:79c0:f009::/48
2402:79c0:f00c::-2402:79c0:f0f8:ffff:ffff:ffff:ffff:ffff
2402:79c0:f0fa::-2402:79c0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d5:8d:99:cf:a4:f3:98:e0:ca:0b:2b:28:51:be:b3:94:36:aa:
ea:a4:4e:6d:5a:cd:f7:bb:c8:70:33:5b:a1:01:5b:0c:26:38:
d3:15:e7:46:7e:35:ea:c1:77:9f:6c:57:6c:95:c4:f5:a8:76:
11:5f:9d:8d:80:e2:86:2b:9f:42:42:b5:52:25:67:f4:3b:9f:
39:e6:77:d7:ee:a8:00:cf:1c:94:05:c6:7c:e4:0b:72:d6:ab:
58:2f:d7:2d:59:6f:d0:95:31:51:e0:28:3a:00:e8:3f:1b:8e:
a6:fc:b0:79:48:d8:cc:e8:c8:40:28:55:e7:89:10:73:c1:6c:
4b:35:4d:61:94:42:b6:40:ee:ec:a5:b6:44:9f:5b:65:ee:9c:
4a:06:70:87:55:ae:a5:c1:9f:44:cb:25:12:eb:a3:56:ed:5d:
bf:37:dd:6c:4c:4b:55:cf:c3:f3:e1:d1:46:81:e8:93:08:b8:
8c:dc:75:f4:6e:b5:7b:70:17:8e:10:e3:fa:4f:df:43:1f:78:
94:76:5e:12:60:79:d4:80:ff:9f:15:60:96:df:ca:e9:6f:b9:
8b:30:25:d2:8a:20:7c:f5:a6:e1:72:ad:aa:f8:6d:fe:ef:71:
ef:cf:95:d2:da:a7:15:9a:ea:2b:40:5c:01:ba:58:00:e4:07:
b0:fd:47:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:31:45 2026 by rpki-client