Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/236D4FF0FD9D11EC868CDF5DC4F9AE02.roa
File: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (raw, json)
Hash identifier: P8bll9ajRrMsTsWzXR9IujfXZpjapqmg7wDaxKW00m4=
Subject key identifier: 36:5B:B0:68:AB:30:B1:AA:49:47:17:32:A1:01:FB:03:36:1A:2F:2A
Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622
Certificate serial: 042D
Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/236D4FF0FD9D11EC868CDF5DC4F9AE02.roa
Signing time: Wed 09 Sep 2026 00:50:48 +0000
ROA not before: Wed 09 Sep 2026 00:50:48 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 6262
IP address blocks: 150.229.0.0/16 maxlen: 24
202.6.3.0/24 maxlen: 24
202.6.4.0/24 maxlen: 24
202.6.82.0/23 maxlen: 24
202.8.32.0/21 maxlen: 24
202.9.0.0/20 maxlen: 24
202.12.120.0/23 maxlen: 24
202.14.0.0/22 maxlen: 24
203.0.88.0/24 maxlen: 24
203.0.100.0/24 maxlen: 24
203.6.255.0/24 maxlen: 24
203.7.128.0/24 maxlen: 24
203.7.170.0/24 maxlen: 24
203.12.40.0/23 maxlen: 24
203.18.60.0/23 maxlen: 24
203.25.92.0/22 maxlen: 24
203.143.160.0/20 maxlen: 24
221.199.208.0/20 maxlen: 24
2402:1800::/32 maxlen: 40
2405:b000::/32 maxlen: 40
2405:b000:410::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl
rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622
Validity
Not Before: Sep 9 00:50:48 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0ad68-09c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:13:22:d0:00:d3:2c:10:22:e1:da:ca:a3:
eb:04:82:42:d8:f6:13:3d:2b:a8:8b:c1:07:4e:db:
1e:54:90:24:9a:e4:8f:4d:49:22:65:84:77:81:22:
a9:1a:d7:47:55:9b:e8:88:aa:fa:16:c0:8b:bd:55:
16:44:be:ef:0f:80:12:9f:4b:2b:81:cb:80:7e:8d:
6e:d5:8f:c6:f9:18:57:94:4d:dc:e5:93:4f:f8:9d:
18:20:eb:49:e1:e1:14:e7:33:f0:97:ef:51:7f:98:
f8:85:0b:1e:55:87:3d:5a:03:9e:b8:31:22:a1:b6:
03:0e:fa:e9:cc:e1:cf:2d:92:35:a8:e0:75:d6:29:
1e:6a:89:d6:1d:ce:f7:7a:a5:66:d5:08:9d:d9:4e:
37:b7:f3:13:03:82:bc:ea:24:82:76:af:4e:f6:36:
33:15:71:d9:6f:4a:50:48:08:bd:26:e0:b8:34:68:
60:0b:4d:e6:9b:41:55:4e:eb:6a:f6:67:0c:a5:ac:
c0:dc:de:81:5f:99:c6:4b:a4:93:c0:19:c1:ea:69:
17:1d:11:de:d2:41:67:18:b6:ce:fa:48:72:b0:d7:
9c:a5:84:9d:24:19:eb:94:1d:e5:b0:3a:95:c7:38:
47:cb:34:e3:2f:38:ba:07:c8:2a:5c:f7:06:4d:2c:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5B:B0:68:AB:30:B1:AA:49:47:17:32:A1:01:FB:03:36:1A:2F:2A
X509v3 Authority Key Identifier:
keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/236D4FF0FD9D11EC868CDF5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
150.229.0.0/16
202.6.3.0-202.6.4.255
202.6.82.0/23
202.8.32.0/21
202.9.0.0/20
202.12.120.0/23
202.14.0.0/22
203.0.88.0/24
203.0.100.0/24
203.6.255.0/24
203.7.128.0/24
203.7.170.0/24
203.12.40.0/23
203.18.60.0/23
203.25.92.0/22
203.143.160.0/20
221.199.208.0/20
IPv6:
2402:1800::/32
2405:b000::/32
Signature Algorithm: sha256WithRSAEncryption
2f:10:69:c9:6e:32:55:7b:4e:02:c4:d4:94:91:e4:b1:66:81:
3e:bc:65:df:c3:7e:b5:9e:4c:18:21:87:f2:f5:0f:bf:5a:5f:
2c:34:6a:ba:f9:13:0a:30:80:40:b4:55:87:53:5f:00:bb:97:
7f:83:d2:c8:05:70:a6:8e:ad:08:37:f4:62:78:68:1e:a2:b7:
51:2c:21:cd:0d:d6:9b:e8:cb:20:38:4b:c3:41:06:3e:39:f1:
ca:fd:84:5a:06:e4:55:70:d5:e0:97:af:66:d9:1f:0a:b9:a3:
32:5a:92:7d:5a:5e:87:36:df:f5:b9:03:e8:b9:c6:93:8c:6c:
24:12:37:c7:86:c9:a3:c2:95:d9:4a:71:5c:df:b0:5a:da:38:
f0:f1:ec:59:f6:a8:fa:e6:53:f7:d2:0d:dc:4e:42:5c:95:55:
b0:c2:c8:b3:5d:fc:21:4b:e0:aa:b1:86:6f:25:ab:a7:cd:fd:
f1:34:88:7f:3f:e3:e2:b4:51:ba:89:35:db:c7:0d:6d:6f:0b:
78:f6:79:53:b6:89:fd:7b:96:fa:6c:18:bb:54:ec:b1:24:34:
70:10:92:e0:f5:f0:c2:8c:fd:76:94:dc:b2:a9:1c:f5:30:a8:
c9:03:8b:d3:a7:52:b2:1b:f3:57:75:0b:25:7f:1a:b1:14:0b:
8a:47:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:02:41 2026 by rpki-client