Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa
File: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (raw, json)
Hash identifier: GKBnrOK5UbpE6Y1zn126/+tVLBVe3fXMAkHrduoxCcI=
Subject key identifier: E6:BE:B2:B3:6E:2D:94:3E:D4:F8:52:6A:B5:1C:59:61:02:F3:C1:68
Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial: 0BB3
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa
Signing time: Fri 26 Jun 2026 20:24:13 +0000
ROA not before: Fri 26 Jun 2026 20:24:13 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 9381
IP address blocks: 14.136.0.0/16 maxlen: 24
14.198.0.0/17 maxlen: 24
14.198.128.0/18 maxlen: 24
14.198.192.0/19 maxlen: 24
14.198.224.0/20 maxlen: 24
14.199.0.0/16 maxlen: 24
43.224.232.0/22 maxlen: 24
58.176.0.0/15 maxlen: 15
58.176.0.0/16 maxlen: 24
58.177.0.0/16 maxlen: 24
59.148.0.0/15 maxlen: 15
59.148.0.0/16 maxlen: 24
59.149.0.0/16 maxlen: 24
61.92.0.0/15 maxlen: 15
61.92.0.0/16 maxlen: 24
61.93.0.0/16 maxlen: 24
61.238.0.0/15 maxlen: 15
61.238.0.0/16 maxlen: 24
61.239.0.0/16 maxlen: 24
61.244.0.0/16 maxlen: 24
103.243.0.0/22 maxlen: 24
110.235.0.0/17 maxlen: 24
119.246.0.0/15 maxlen: 15
119.246.0.0/16 maxlen: 24
119.247.0.0/16 maxlen: 24
123.202.0.0/15 maxlen: 15
123.202.0.0/16 maxlen: 24
123.203.0.0/16 maxlen: 24
124.244.0.0/16 maxlen: 24
183.178.0.0/15 maxlen: 15
183.178.0.0/16 maxlen: 24
183.179.0.0/16 maxlen: 24
202.77.4.0/22 maxlen: 24
202.77.24.0/21 maxlen: 24
202.77.32.0/19 maxlen: 24
203.80.64.0/18 maxlen: 24
203.80.192.0/18 maxlen: 24
203.185.0.0/18 maxlen: 24
203.186.0.0/16 maxlen: 24
210.6.0.0/16 maxlen: 24
2401:f400::/32 maxlen: 32
2403:f500::/32 maxlen: 32
2403:f500::/35 maxlen: 35
2403:f500:2000::/35 maxlen: 35
2403:f500:6000::/35 maxlen: 35
2403:f500:8000::/35 maxlen: 35
2403:f500:a000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 19:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2995 (0xbb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Validity
Not Before: Jun 26 20:24:13 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3edfed-7e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:54:9c:60:e2:2b:0d:b7:77:df:d8:61:e7:88:
ce:b1:46:ca:9e:93:4a:13:37:f8:02:9e:c1:7a:2b:
69:3c:6b:d0:f0:83:4b:b0:3c:fa:ba:ef:99:6f:3d:
e0:77:87:92:ee:f2:89:bc:14:58:f6:5e:9b:66:7c:
2c:79:e0:d0:53:89:a3:3c:b3:36:1f:67:7b:68:92:
31:b7:84:d8:a6:99:d4:12:1b:ed:e8:a0:42:dd:94:
3e:bd:a1:77:c2:26:f3:1f:7e:01:6d:4c:d8:f5:66:
22:88:af:51:9c:35:74:be:38:bc:1b:73:8a:e5:09:
c7:4a:f5:ed:54:1a:6e:34:26:e8:59:71:61:b7:14:
72:56:a6:b9:75:bb:58:7e:bf:1a:fd:3f:62:89:9c:
a2:84:d0:20:2e:0a:38:c4:65:86:8c:4c:c0:d7:f6:
cc:09:ef:ba:c4:89:de:f3:4b:ea:9d:91:bb:f3:d3:
b8:11:47:f6:19:18:55:7b:c8:25:10:16:d1:59:c8:
9b:66:4c:a5:b0:ba:e2:78:7a:5c:8c:e7:47:f2:c7:
78:e3:95:bf:61:dc:10:76:b2:78:b9:52:70:9c:0d:
d7:0e:c2:d0:db:d0:e8:c8:09:f4:5a:a6:b1:7f:42:
be:9a:39:a7:1b:d3:8e:ad:a3:68:35:6c:db:23:82:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BE:B2:B3:6E:2D:94:3E:D4:F8:52:6A:B5:1C:59:61:02:F3:C1:68
X509v3 Authority Key Identifier:
keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.136.0.0/16
14.198.0.0-14.198.239.255
14.199.0.0/16
43.224.232.0/22
58.176.0.0/15
59.148.0.0/15
61.92.0.0/15
61.238.0.0/15
61.244.0.0/16
103.243.0.0/22
110.235.0.0/17
119.246.0.0/15
123.202.0.0/15
124.244.0.0/16
183.178.0.0/15
202.77.4.0/22
202.77.24.0-202.77.63.255
203.80.64.0/18
203.80.192.0/18
203.185.0.0/18
203.186.0.0/16
210.6.0.0/16
IPv6:
2401:f400::/32
2403:f500::/32
Signature Algorithm: sha256WithRSAEncryption
07:ec:2e:d7:c5:24:dd:b6:97:e7:7d:8f:bf:9d:42:4e:e4:c8:
94:00:2c:88:59:e6:41:bf:33:75:e0:af:9a:58:bb:da:58:ac:
6b:15:b7:48:83:55:15:c3:d2:1b:b9:de:5a:3d:73:b1:a0:ba:
07:56:68:f1:6b:05:14:09:4e:fd:ec:25:75:c5:a5:a4:05:ce:
2d:04:bf:ba:c6:86:1d:a6:cb:cb:1e:e7:f2:76:79:3c:aa:44:
24:3c:15:de:48:f1:36:1d:5d:05:e1:99:bf:42:fe:0c:9e:01:
d0:7b:e1:dd:4e:73:8b:7e:c0:89:d9:9d:be:60:e6:8a:5a:ce:
ad:fa:d0:e0:80:00:a6:f4:75:c6:7c:f5:8b:83:8f:6b:38:ea:
4f:77:ca:19:9f:0e:02:13:78:2c:90:0d:29:3c:f6:49:7b:10:
18:75:ec:92:2b:ef:99:39:b3:a7:94:8e:62:d0:5d:1b:e0:e6:
21:3d:4e:3f:82:b1:d5:28:52:d4:ec:78:e3:ca:37:8f:7a:9e:
85:01:35:3c:58:46:c6:29:19:9d:10:33:92:0b:1d:d6:c0:e1:
93:3e:e4:c1:60:71:f2:a9:d3:70:9f:9a:bd:6b:1b:da:11:3f:
5c:40:33:c8:9e:af:7d:e8:42:df:d8:2b:8d:90:08:54:b4:01:
c8:3c:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:23:17 2026 by rpki-client