Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/F84860820DB811F192A7BEDC343D8C67.roa
File: F84860820DB811F192A7BEDC343D8C67.roa (raw, json)
Hash identifier: RSGUDjHx8YXdYYTxIyWUY+w5+r0nBNepOB1hNJv32U4=
Subject key identifier: 7C:B0:70:AF:7A:59:8D:25:07:72:CF:11:EA:DC:C2:35:0F:DD:C8:94
Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial: 1C93
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/F84860820DB811F192A7BEDC343D8C67.roa
Signing time: Sun 01 Mar 2026 17:33:35 +0000
ROA not before: Fri 20 Feb 2026 16:13:49 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 0
IP address blocks: 203.144.49.0/24 maxlen: 24
203.144.51.0/24 maxlen: 24
203.144.52.0/22 maxlen: 22
203.144.56.0/23 maxlen: 23
203.144.60.0/24 maxlen: 24
203.144.62.0/23 maxlen: 23
2402:79c0::/47 maxlen: 47
2402:79c0:4::/46 maxlen: 46
2402:79c0:8::/45 maxlen: 45
2402:79c0:10::/44 maxlen: 44
2402:79c0:20::/43 maxlen: 43
2402:79c0:40::/42 maxlen: 42
2402:79c0:80::/41 maxlen: 41
2402:79c0:10b::/48 maxlen: 48
2402:79c0:10c::/46 maxlen: 46
2402:79c0:110::/44 maxlen: 44
2402:79c0:120::/43 maxlen: 43
2402:79c0:140::/42 maxlen: 42
2402:79c0:180::/41 maxlen: 41
2402:79c0:200::/39 maxlen: 39
2402:79c0:400::/38 maxlen: 38
2402:79c0:800::/37 maxlen: 37
2402:79c0:1000::/40 maxlen: 40
2402:79c0:1100::/43 maxlen: 43
2402:79c0:1120::/46 maxlen: 46
2402:79c0:1124::/47 maxlen: 47
2402:79c0:1127::/48 maxlen: 48
2402:79c0:1128::/45 maxlen: 45
2402:79c0:1130::/44 maxlen: 44
2402:79c0:1140::/42 maxlen: 42
2402:79c0:1180::/41 maxlen: 41
2402:79c0:1200::/39 maxlen: 39
2402:79c0:1400::/38 maxlen: 38
2402:79c0:1800::/37 maxlen: 37
2402:79c0:2000::/35 maxlen: 35
2402:79c0:4000::/34 maxlen: 34
2402:79c0:8000::/34 maxlen: 34
2402:79c0:c000::/35 maxlen: 35
2402:79c0:e000::/36 maxlen: 36
2402:79c0:f000::/45 maxlen: 45
2402:79c0:f009::/48 maxlen: 48
2402:79c0:f00c::/46 maxlen: 46
2402:79c0:f010::/44 maxlen: 44
2402:79c0:f020::/43 maxlen: 43
2402:79c0:f040::/42 maxlen: 42
2402:79c0:f080::/42 maxlen: 42
2402:79c0:f0c0::/43 maxlen: 43
2402:79c0:f0e0::/44 maxlen: 44
2402:79c0:f0f0::/45 maxlen: 45
2402:79c0:f0f8::/48 maxlen: 48
2402:79c0:f0fa::/47 maxlen: 47
2402:79c0:f0fc::/46 maxlen: 46
2402:79c0:f100::/40 maxlen: 40
2402:79c0:f200::/39 maxlen: 39
2402:79c0:f400::/38 maxlen: 38
2402:79c0:f800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7315 (0x1c93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Validity
Not Before: Feb 20 16:13:49 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a4786f-333d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:24:46:a9:13:88:e2:5e:8d:ad:13:b0:42:ef:
a7:d3:9c:5a:2e:d8:cb:9a:06:44:54:39:bb:c7:5f:
74:9a:f5:56:93:44:0e:5b:f7:84:6f:3d:a0:f7:e3:
bd:c6:20:c4:6a:52:2f:1b:e2:2c:24:b9:c6:cf:e1:
b2:b7:f1:e6:c4:ac:3d:42:89:4c:73:b9:13:10:18:
07:64:6c:8d:07:38:dc:b3:73:59:ee:27:6a:e5:92:
62:8d:a7:af:c4:90:31:81:20:b3:c6:5e:8c:85:8f:
1a:73:79:ba:40:3e:8f:fe:07:d4:75:b9:7f:ea:05:
16:5c:1d:ed:d5:89:e0:ca:4a:b1:63:be:dc:a8:7f:
59:fb:07:12:0d:fc:e4:f2:a6:a1:0e:13:0c:38:9d:
db:65:01:eb:3f:f9:16:01:9d:d7:8e:df:7e:65:65:
56:49:f3:7f:77:47:82:9d:d4:e9:46:d8:99:58:01:
9a:75:42:8c:46:22:b1:36:21:81:53:dc:6e:53:ab:
99:49:73:f0:c2:02:39:62:df:00:22:f7:88:de:40:
e2:96:53:00:cb:60:e6:b7:06:13:58:2b:2f:21:f0:
70:75:cd:e9:b9:69:ec:cf:11:fb:13:15:20:2a:e8:
7c:b8:78:ed:d7:fb:92:2a:c7:ec:7c:92:7d:94:bd:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B0:70:AF:7A:59:8D:25:07:72:CF:11:EA:DC:C2:35:0F:DD:C8:94
X509v3 Authority Key Identifier:
keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/F84860820DB811F192A7BEDC343D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
203.144.49.0/24
203.144.51.0-203.144.57.255
203.144.60.0/24
203.144.62.0/23
IPv6:
2402:79c0::/47
2402:79c0:4::-2402:79c0:ff:ffff:ffff:ffff:ffff:ffff
2402:79c0:10b::-2402:79c0:1125:ffff:ffff:ffff:ffff:ffff
2402:79c0:1127::-2402:79c0:f007:ffff:ffff:ffff:ffff:ffff
2402:79c0:f009::/48
2402:79c0:f00c::-2402:79c0:f0f8:ffff:ffff:ffff:ffff:ffff
2402:79c0:f0fa::-2402:79c0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
da:83:01:8b:ac:6e:f8:64:fe:2e:50:33:a0:d5:72:14:2d:88:
73:db:21:72:7a:cf:af:60:51:bf:2f:61:be:29:46:49:e9:5a:
51:c6:d4:88:3e:2f:aa:4a:63:df:a4:ca:76:79:20:66:7c:17:
4c:cd:ba:c0:00:69:56:45:fe:00:b0:16:c6:ca:2c:3d:8d:48:
70:0c:4f:c5:b2:18:ec:47:63:35:8c:1b:00:16:11:bc:47:1f:
dc:22:a6:e0:b5:ad:0c:82:4d:52:4d:10:ca:b4:29:9a:e1:62:
cd:15:eb:b3:5d:9a:fd:27:24:40:0c:60:81:9e:d9:28:9f:d0:
f3:44:2c:5f:ec:5b:dc:a6:85:8b:d9:44:2f:59:c3:b4:d7:be:
a2:44:79:e1:2d:5d:dc:99:13:30:13:65:25:62:d4:77:16:f9:
03:93:7c:d0:e9:7b:e8:17:de:28:f3:6d:12:eb:41:ae:a8:c8:
cf:73:2d:81:39:5d:d5:c1:df:e0:37:6b:83:79:68:e7:23:07:
8e:ca:c5:07:d2:64:96:59:e5:94:49:26:62:ab:08:43:bf:46:
f0:6c:10:0b:d0:70:71:bb:24:c9:8d:27:0b:1f:09:45:52:d8:
ac:ca:58:6c:83:6a:fd:f5:36:d5:a7:2e:df:2d:ec:7b:b8:33:
e7:af:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:10 2026 by rpki-client