Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/70F51BEE4B0D11EF94975151C4F9AE02.roa
File: 70F51BEE4B0D11EF94975151C4F9AE02.roa (raw, json)
Hash identifier: SAYeJIBkz/kzzoo/WzZOB1S2IsHRqyLqdtZQYsw3u4I=
Subject key identifier: F6:C5:BC:69:0A:CE:EA:57:EF:79:59:23:86:D1:AD:D4:80:5B:2B:AC
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 098F
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/70F51BEE4B0D11EF94975151C4F9AE02.roa
Signing time: Wed 15 Jul 2026 10:03:21 +0000
ROA not before: Wed 15 Jul 2026 10:03:21 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 45609
IP address blocks: 27.56.0.0/13 maxlen: 24
103.235.8.0/22 maxlen: 24
106.192.0.0/11 maxlen: 24
110.224.0.0/14 maxlen: 24
117.96.0.0/17 maxlen: 22
117.96.0.0/18 maxlen: 24
117.96.64.0/19 maxlen: 24
117.96.96.0/20 maxlen: 24
117.96.112.0/21 maxlen: 24
117.96.120.0/22 maxlen: 24
117.96.124.0/23 maxlen: 23
117.96.128.0/20 maxlen: 24
117.96.144.0/21 maxlen: 24
117.96.153.0/24 maxlen: 24
117.96.154.0/24 maxlen: 24
117.96.160.0/20 maxlen: 24
117.96.176.0/20 maxlen: 24
117.97.0.0/17 maxlen: 19
117.97.0.0/18 maxlen: 24
117.97.64.0/19 maxlen: 20
117.97.64.0/20 maxlen: 24
117.97.80.0/21 maxlen: 21
117.97.80.0/22 maxlen: 24
117.97.91.0/24 maxlen: 24
117.97.92.0/24 maxlen: 24
117.97.93.0/24 maxlen: 24
117.97.94.0/24 maxlen: 24
117.97.128.0/17 maxlen: 24
117.98.0.0/17 maxlen: 24
150.129.212.0/22 maxlen: 24
223.176.0.0/12 maxlen: 24
223.224.32.0/19 maxlen: 24
223.224.64.0/18 maxlen: 24
223.224.128.0/17 maxlen: 24
223.225.0.0/16 maxlen: 24
223.226.0.0/15 maxlen: 24
223.228.0.0/14 maxlen: 24
223.232.0.0/13 maxlen: 24
2401:4900:800::/37 maxlen: 48
2401:4900:1000::/37 maxlen: 48
2401:4900:1800::/37 maxlen: 48
2401:4900:2000::/37 maxlen: 48
2401:4900:2800::/37 maxlen: 48
2401:4900:3000::/37 maxlen: 48
2401:4900:3800::/37 maxlen: 48
2401:4900:4000::/37 maxlen: 48
2401:4900:4800::/37 maxlen: 48
2401:4900:5000::/37 maxlen: 48
2401:4900:5800::/37 maxlen: 48
2401:4900:6000::/37 maxlen: 48
2401:4900:7000::/37 maxlen: 48
2401:4900:7800::/37 maxlen: 48
2401:4900:8000::/37 maxlen: 48
2401:4900:9000::/37 maxlen: 48
2401:4900:a000::/37 maxlen: 48
2401:4900:a800::/37 maxlen: 44
2401:4900:b000::/37 maxlen: 48
2401:4900:b800::/37 maxlen: 48
2401:4900:c000::/37 maxlen: 48
2401:4900:c800::/37 maxlen: 48
2401:4900:d000::/37 maxlen: 48
2401:4900:d800::/37 maxlen: 44
2401:4900:da40::/48 maxlen: 48
2401:4900:e000::/37 maxlen: 44
2401:4900:e800::/37 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2447 (0x98f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Jul 15 10:03:21 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a575ae8-7cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:d1:8a:1b:99:49:0d:98:10:fc:19:d3:15:
16:20:e9:18:2b:9a:b0:a4:7e:bd:86:30:24:26:ca:
1c:af:7d:44:9b:f2:0f:63:83:8b:94:5d:b3:db:99:
72:a4:0e:f2:ed:45:3a:02:d6:78:ba:4e:7e:1b:a8:
a2:a5:98:06:a5:e9:87:03:a4:d5:e6:e1:3c:83:bb:
ba:a2:29:a0:37:3f:96:8a:85:51:c2:90:ae:83:68:
da:ea:5b:fd:79:db:bc:99:97:65:d9:77:29:b1:52:
13:ed:a9:b1:05:84:90:05:7e:46:27:f9:57:52:f5:
17:77:cd:b3:de:c9:4b:24:b7:9c:ce:18:ab:86:fa:
f6:a0:55:f3:73:5e:ad:f0:70:28:e8:ec:67:90:7d:
61:d2:3a:3d:83:9f:97:c6:2b:6f:01:35:6b:de:07:
c2:1c:07:4b:7a:57:f8:20:12:1e:e3:99:46:08:69:
67:e2:2b:c6:5c:cc:a9:26:72:b3:e6:b7:be:44:d2:
d0:6b:f0:51:3e:c3:a5:b8:4f:3f:bf:5d:55:79:c0:
8e:8d:c2:4d:50:b4:17:9f:10:bc:02:f3:21:16:5e:
1a:88:b8:05:22:4b:92:57:2a:2a:44:70:9b:57:9b:
bf:bd:71:39:5b:ac:80:49:3c:17:76:bd:8c:54:28:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C5:BC:69:0A:CE:EA:57:EF:79:59:23:86:D1:AD:D4:80:5B:2B:AC
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/70F51BEE4B0D11EF94975151C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.56.0.0/13
103.235.8.0/22
106.192.0.0/11
110.224.0.0/14
117.96.0.0-117.96.151.255
117.96.153.0-117.96.154.255
117.96.160.0/19
117.97.0.0-117.98.127.255
150.129.212.0/22
223.176.0.0/12
223.224.32.0-223.239.255.255
IPv6:
2401:4900:800::-2401:4900:67ff:ffff:ffff:ffff:ffff:ffff
2401:4900:7000::-2401:4900:87ff:ffff:ffff:ffff:ffff:ffff
2401:4900:9000::/37
2401:4900:a000::-2401:4900:efff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d4:0e:05:c5:fd:38:70:34:5d:3f:7c:8d:16:e6:86:3f:dd:9a:
63:a3:85:d6:3a:f1:04:8e:15:78:72:d9:a0:e0:57:34:99:e3:
28:9e:3a:1f:1c:39:87:d0:79:df:9e:f3:14:4b:93:05:5b:68:
f4:b9:91:bf:23:9c:d3:22:59:b4:c7:03:ec:3a:9d:fa:9a:ac:
d0:9d:75:32:ce:17:d1:64:fd:45:df:34:e2:27:26:f2:3f:16:
a6:8a:fd:cd:2c:71:b1:aa:fe:9a:ad:71:7e:c3:1c:24:a1:a7:
cb:36:41:70:cc:a5:2b:29:cc:fd:d6:1e:a6:5b:3d:a6:02:95:
b8:cb:39:12:c2:b4:0b:e0:d5:39:e8:35:20:66:d5:44:17:07:
c1:a5:b2:56:98:41:82:3b:08:dc:7f:5c:99:a7:85:64:79:d0:
9c:a7:58:51:5d:15:00:ca:5b:85:7f:fe:bc:81:3c:1d:7e:2e:
a5:ab:dd:33:c5:1d:76:fb:c2:31:57:44:a9:03:97:2e:48:c4:
fb:bd:09:a3:2c:f6:d3:62:d8:47:d2:8a:da:dc:41:0b:00:b7:
44:2a:a1:5b:da:cb:c6:55:8b:dc:3f:6e:28:dd:4a:a7:7c:34:
10:d1:17:ae:52:08:31:b9:12:a2:86:ab:90:19:46:7e:a9:ee:
fc:88:08:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:55 2026 by rpki-client