Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/3118E43E966B11EAAA23047CC4F9AE02.roa
File: 3118E43E966B11EAAA23047CC4F9AE02.roa (raw, json)
Hash identifier: r8/hriZe05aOZeNCEkDG9vL+NTH3s+8n3pNnGnmqOns=
Subject key identifier: FB:EC:B4:7F:62:ED:44:91:31:5D:B5:9C:D2:80:BE:71:02:23:54:B1
Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Certificate serial: 2B99
Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/3118E43E966B11EAAA23047CC4F9AE02.roa
Signing time: Sat 10 Oct 2026 16:22:18 +0000
ROA not before: Sat 10 Oct 2026 16:22:18 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 7642
IP address blocks: 27.114.128.0/18 maxlen: 18
27.114.128.0/23 maxlen: 24
27.114.130.0/23 maxlen: 24
27.114.132.0/23 maxlen: 24
27.114.134.0/23 maxlen: 24
27.114.136.0/23 maxlen: 24
27.114.138.0/23 maxlen: 24
27.114.140.0/23 maxlen: 24
27.114.142.0/23 maxlen: 24
27.114.144.0/23 maxlen: 24
27.114.146.0/23 maxlen: 24
27.114.148.0/23 maxlen: 24
27.114.150.0/23 maxlen: 24
27.114.152.0/23 maxlen: 24
27.114.154.0/23 maxlen: 24
27.114.156.0/23 maxlen: 24
27.114.158.0/23 maxlen: 24
27.114.160.0/23 maxlen: 24
27.114.162.0/23 maxlen: 24
27.114.164.0/23 maxlen: 24
27.114.166.0/23 maxlen: 24
27.114.168.0/23 maxlen: 24
27.114.170.0/23 maxlen: 24
27.114.172.0/23 maxlen: 24
27.114.174.0/23 maxlen: 24
27.114.176.0/23 maxlen: 24
27.114.178.0/23 maxlen: 24
27.114.180.0/23 maxlen: 24
27.114.182.0/23 maxlen: 24
27.114.184.0/23 maxlen: 24
27.114.186.0/23 maxlen: 24
27.114.188.0/23 maxlen: 24
27.114.190.0/23 maxlen: 24
43.226.220.0/22 maxlen: 24
103.31.84.0/22 maxlen: 24
123.176.0.0/19 maxlen: 24
124.195.192.0/19 maxlen: 19
124.195.192.0/23 maxlen: 24
124.195.194.0/23 maxlen: 24
124.195.196.0/23 maxlen: 24
124.195.198.0/23 maxlen: 24
124.195.200.0/23 maxlen: 24
124.195.202.0/23 maxlen: 24
124.195.204.0/23 maxlen: 24
124.195.206.0/23 maxlen: 24
124.195.208.0/23 maxlen: 24
124.195.210.0/23 maxlen: 24
124.195.212.0/23 maxlen: 24
124.195.214.0/23 maxlen: 24
124.195.216.0/23 maxlen: 24
124.195.218.0/23 maxlen: 24
124.195.220.0/23 maxlen: 24
124.195.222.0/23 maxlen: 24
202.1.192.0/20 maxlen: 24
203.104.24.0/21 maxlen: 21
203.104.24.0/23 maxlen: 24
203.104.26.0/23 maxlen: 24
203.104.28.0/23 maxlen: 24
203.104.30.0/23 maxlen: 24
2406:e400::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 15:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11161 (0x2b99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Validity
Not Before: Oct 10 16:22:18 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aca663a-2a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:c3:1b:6c:c4:8a:3d:af:62:a7:80:b8:63:
4c:1c:c7:d7:1a:66:fb:38:ff:5d:01:05:4f:f5:92:
ed:85:14:74:2c:2d:fa:95:8d:6d:81:4f:db:dc:e3:
ed:1e:c0:13:5d:2b:f9:06:03:69:c6:c0:17:9b:7a:
29:8d:04:c3:e4:39:40:50:be:b8:f6:40:71:d8:3d:
f9:c7:43:43:ea:95:ba:84:4c:63:08:c8:14:7f:07:
a7:6a:50:98:21:25:c4:15:b5:b1:a7:28:c9:d8:b7:
3a:dd:de:3c:d9:50:0c:d7:0a:16:db:a6:3f:7d:b5:
dc:37:95:f8:c8:69:c4:06:5a:e1:6f:7a:7e:00:aa:
2f:94:20:52:19:95:05:4e:b5:17:04:15:9e:8b:eb:
e8:36:03:96:f0:ab:b3:da:5d:04:64:8a:fa:dc:26:
55:9f:b4:e4:ee:0e:0a:b6:65:76:fe:9a:6c:0f:e3:
b0:c6:4d:a5:e6:19:3a:8b:80:e6:4b:41:01:ef:e4:
33:4c:ee:6e:b2:62:57:9b:16:fe:50:a6:97:27:c5:
04:91:99:8d:32:f8:53:c3:5e:b6:3f:71:d2:92:3f:
01:42:da:96:31:8c:c2:b4:5e:aa:fb:be:8a:7c:07:
fc:29:97:85:d6:9f:5a:97:69:51:93:c6:ff:13:7f:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EC:B4:7F:62:ED:44:91:31:5D:B5:9C:D2:80:BE:71:02:23:54:B1
X509v3 Authority Key Identifier:
keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/3118E43E966B11EAAA23047CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.114.128.0/18
43.226.220.0/22
103.31.84.0/22
123.176.0.0/19
124.195.192.0/19
202.1.192.0/20
203.104.24.0/21
IPv6:
2406:e400::/32
Signature Algorithm: sha256WithRSAEncryption
20:75:3e:26:c2:3b:05:5d:d9:86:bc:2a:ce:b3:66:8e:33:1a:
d5:cc:e7:9c:e8:fc:c3:a5:2d:5a:18:19:8d:69:6c:ac:99:54:
a6:3e:ec:c6:bf:2f:b6:ff:fa:4a:a7:5f:ca:91:79:88:bf:f7:
9d:c3:0f:20:be:9b:4f:7b:37:88:26:a8:77:e5:85:67:aa:60:
62:95:43:98:77:5e:ba:90:11:c7:35:80:a5:ed:e4:d8:a9:d9:
03:2d:96:fc:26:26:6a:4a:a7:ed:a2:ed:0f:02:4a:f4:a7:77:
05:b4:cc:32:2b:09:e2:2b:ab:21:69:1a:2a:d7:cc:6e:ee:7f:
41:fd:d9:b2:62:65:98:21:d0:0c:21:bd:b6:e8:7e:96:c8:f4:
d2:c0:45:ef:4f:b8:4d:b8:60:12:3e:86:c2:c8:24:c1:dc:1d:
59:e8:c3:8d:f7:3c:a6:d3:61:da:ad:47:e9:24:4b:09:8b:c3:
ae:0e:2a:0d:8d:ef:df:61:bc:b6:76:86:35:57:7c:b5:98:30:
90:1e:ed:2b:fc:7a:a0:f7:e9:5f:41:e2:6c:a5:57:0f:4d:95:
e7:48:f9:41:9d:85:2a:33:bf:2e:a8:89:eb:04:4e:88:27:fe:
38:b3:99:19:52:26:f0:30:ea:3f:f0:5d:7f:fd:a5:42:fe:0b:
87:d5:06:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 20:22:20 2026 by rpki-client