Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa
File: 5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa (raw, json)
Hash identifier: vrlI1pszTNOMrzyBgG79jCCwevKnYILu7ZDEahfp4WY=
Subject key identifier: F9:E9:FB:5E:B3:71:BC:F8:BF:FF:11:73:6D:6F:E5:9F:DB:02:9C:CE
Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98
Certificate serial: D8
Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa
Signing time: Thu 03 Sep 2026 01:57:48 +0000
ROA not before: Thu 03 Sep 2026 01:57:48 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 133736
IP address blocks: 43.245.132.0/22 maxlen: 22
43.245.132.0/24 maxlen: 24
43.245.133.0/24 maxlen: 24
43.245.134.0/24 maxlen: 24
43.245.135.0/24 maxlen: 24
103.31.88.0/22 maxlen: 22
103.31.88.0/24 maxlen: 24
103.31.89.0/24 maxlen: 24
103.31.90.0/24 maxlen: 24
103.31.91.0/24 maxlen: 24
103.47.0.0/24 maxlen: 24
103.55.134.0/23 maxlen: 24
103.61.128.0/24 maxlen: 24
103.61.130.0/24 maxlen: 24
103.79.172.0/22 maxlen: 22
144.48.232.0/22 maxlen: 22
144.48.232.0/24 maxlen: 24
144.48.233.0/24 maxlen: 24
144.48.234.0/24 maxlen: 24
144.48.235.0/24 maxlen: 24
202.179.144.0/22 maxlen: 22
202.179.144.0/24 maxlen: 24
202.179.145.0/24 maxlen: 24
202.179.146.0/24 maxlen: 24
202.179.147.0/24 maxlen: 24
203.166.216.0/24 maxlen: 24
203.189.124.0/22 maxlen: 22
203.189.124.0/24 maxlen: 24
203.189.125.0/24 maxlen: 24
203.189.126.0/24 maxlen: 24
203.189.127.0/24 maxlen: 24
2401:8140::/32 maxlen: 32
2401:8140::/35 maxlen: 35
2401:8140:2000::/35 maxlen: 35
2401:8140:4000::/35 maxlen: 35
2401:8140:6000::/35 maxlen: 35
2401:8140:8000::/35 maxlen: 35
2401:8140:a000::/35 maxlen: 35
2401:8140:c000::/35 maxlen: 35
2401:8140:e000::/35 maxlen: 35
2402:4c80::/32 maxlen: 32
2402:4c80::/35 maxlen: 35
2402:4c80:2000::/35 maxlen: 35
2402:4c80:4000::/35 maxlen: 35
2402:4c80:6000::/35 maxlen: 35
2402:4c80:8000::/35 maxlen: 35
2402:4c80:a000::/35 maxlen: 35
2402:4c80:c000::/35 maxlen: 35
2402:4c80:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl
rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:47:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98
Validity
Not Before: Sep 3 01:57:48 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98d41c-9efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:5d:4f:79:ff:27:4f:03:1e:63:9e:6a:70:
82:7a:5c:60:7e:a6:e9:17:63:a3:60:7b:19:be:0d:
82:97:24:db:f2:d2:9d:e4:f1:f0:05:97:d2:c4:f8:
a8:e0:8b:b8:8a:79:8c:a1:23:1d:2c:fb:30:65:0b:
dc:aa:88:15:f1:4a:70:22:af:58:ea:88:f8:7a:ba:
84:4f:6a:30:fe:e3:e5:48:e7:44:e1:e0:91:30:1f:
85:97:d2:dd:28:55:b4:cc:51:d6:de:2e:c7:2f:7f:
23:2a:09:00:31:02:c8:b9:f8:3b:cf:a7:50:b5:8e:
b6:ae:50:48:f8:73:a1:71:3a:e7:3b:ef:9f:9a:a3:
05:8a:3d:39:b8:33:08:d0:11:12:38:86:f1:78:e6:
b6:f8:3d:fc:5a:41:2c:f9:d7:96:f3:89:fd:e3:92:
d0:48:f1:03:3b:46:dd:c3:28:fb:a2:59:f2:e0:9a:
16:b7:ef:c2:90:8e:a5:7c:96:67:60:e9:d6:11:f2:
45:e3:32:19:00:33:7e:06:ff:45:04:2f:0e:55:0b:
8b:f6:74:45:55:0d:b0:6e:6f:7a:5b:1f:a6:5e:56:
8e:3d:e6:cf:69:96:53:14:c2:85:4c:7a:d4:78:ed:
a4:a7:e6:07:28:a7:0c:c2:49:28:2d:5a:f2:76:fa:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:FB:5E:B3:71:BC:F8:BF:FF:11:73:6D:6F:E5:9F:DB:02:9C:CE
X509v3 Authority Key Identifier:
keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/5C7DE69E7EFD11F0827C5F1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.132.0/22
103.31.88.0/22
103.47.0.0/24
103.55.134.0/23
103.61.128.0/24
103.61.130.0/24
103.79.172.0/22
144.48.232.0/22
202.179.144.0/22
203.166.216.0/24
203.189.124.0/22
IPv6:
2401:8140::/32
2402:4c80::/32
Signature Algorithm: sha256WithRSAEncryption
0b:53:f3:1a:6c:d9:dd:c8:d4:c8:07:55:c6:42:57:5a:9c:34:
3e:49:97:c4:36:51:5e:9f:00:82:55:1b:d6:3f:58:66:b0:10:
56:16:95:6d:56:83:91:74:8e:5e:15:65:d2:1e:e3:51:07:7a:
f3:ec:48:f4:8c:df:51:54:4a:9b:b7:17:2c:c6:72:8c:a0:59:
43:2e:7d:5f:53:97:5f:93:f1:81:23:92:1e:cd:6a:12:d0:5b:
01:ac:58:1f:b0:8b:ed:46:48:25:18:dc:ae:91:04:18:4f:68:
46:7b:f5:fd:44:a5:ae:95:39:ea:71:6b:3a:2c:f8:72:1c:f4:
cd:e3:7b:b3:5e:b8:fd:88:97:4f:cd:3b:71:61:88:42:e6:2c:
5b:2f:20:1c:aa:28:ed:2f:24:25:0d:09:f2:e7:86:fb:85:b3:
6a:8b:b4:3a:a8:75:56:79:f4:be:7a:ee:4a:0d:ff:9b:43:46:
23:2a:27:51:fd:32:91:e0:03:3b:1c:30:b5:17:13:73:e8:60:
5b:db:71:b3:65:14:cb:04:26:5d:0e:ba:3c:3d:28:11:b9:60:
bf:de:b3:15:cf:9d:80:ac:18:3c:1c:0e:b3:6e:7c:b8:dd:e2:
14:aa:6f:51:fa:36:ab:a2:a1:3f:95:20:78:bd:c2:dc:e5:b8:
7b:93:0d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:58:52 2026 by rpki-client