Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/1B97493E7FFF11EF85F9E340C4F9AE02.roa
File: 1B97493E7FFF11EF85F9E340C4F9AE02.roa (raw, json)
Hash identifier: pAcx/VV7rlQiL/jXOdLokpZEvyHSOFVRtz8ZvFzdHjE=
Subject key identifier: DD:AF:01:05:18:A0:BB:A0:DC:B2:94:44:0E:38:5F:AB:EA:39:46:FF
Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial: 1AB9
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/1B97493E7FFF11EF85F9E340C4F9AE02.roa
Signing time: Fri 26 Jun 2026 09:43:10 +0000
ROA not before: Fri 26 Jun 2026 09:43:10 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 32787
IP address blocks: 114.141.73.0/24 maxlen: 24
114.141.74.0/24 maxlen: 24
114.141.75.0/24 maxlen: 24
114.141.76.0/24 maxlen: 24
114.141.77.0/24 maxlen: 24
114.141.78.0/23 maxlen: 23
114.141.78.0/24 maxlen: 24
114.141.79.0/24 maxlen: 24
2404:4e00:1::/48 maxlen: 48
2404:4e00:2::/48 maxlen: 48
2404:4e00:3::/48 maxlen: 48
2404:4e00:4::/48 maxlen: 48
2404:4e00:5::/48 maxlen: 48
2404:4e00:6::/48 maxlen: 48
2404:4e00:7::/48 maxlen: 48
2404:4e00:101::/48 maxlen: 48
2404:4e00:102::/48 maxlen: 48
2404:4e00:103::/48 maxlen: 48
2404:4e00:104::/48 maxlen: 48
2404:4e00:105::/48 maxlen: 48
2404:4e00:107::/48 maxlen: 48
2404:4e00:200::/48 maxlen: 48
2404:4e00:201::/48 maxlen: 48
2404:4e00:202::/48 maxlen: 48
2404:4e00:203::/48 maxlen: 48
2404:4e00:204::/48 maxlen: 48
2404:4e00:205::/48 maxlen: 48
2404:4e00:206::/48 maxlen: 48
2404:4e00:207::/48 maxlen: 48
2404:4e00:208::/48 maxlen: 48
2404:4e00:209::/48 maxlen: 48
2404:4e00:20a::/48 maxlen: 48
2404:4e00:20b::/48 maxlen: 48
2404:4e00:20c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6841 (0x1ab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Validity
Not Before: Jun 26 09:43:10 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a3e49ae-b395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8c:c8:7e:84:e3:a6:3d:dc:32:e6:32:96:11:
e5:9e:c6:86:b8:86:54:ec:80:c9:8a:ed:4a:ff:3c:
cb:98:ba:f0:25:f5:8b:d5:12:08:58:50:46:3d:86:
0f:05:8c:30:30:78:61:5b:c9:9f:bc:d0:9a:59:11:
9a:77:92:32:b1:79:7b:d3:36:19:12:17:de:ab:dd:
ac:c0:b8:e1:6b:5f:35:29:11:04:cd:21:2c:ac:15:
d4:46:ac:bb:6b:b7:df:05:a4:2c:e4:8c:9a:96:02:
62:8e:c1:72:b9:d2:6d:9b:e1:a8:2a:59:96:d5:5d:
11:3f:92:08:d9:75:e1:a6:0f:8b:89:3a:8c:5f:89:
09:a5:cd:c0:5b:31:51:a6:11:64:8e:d7:66:2e:06:
dc:ba:a6:66:77:56:0b:38:61:80:39:27:34:50:d5:
8a:09:34:52:ab:01:23:e9:7f:2c:62:d6:d6:e6:0d:
1d:26:92:e5:5c:72:38:f1:61:54:1d:c6:07:6a:3c:
a7:fa:fc:91:33:dd:5a:52:9e:3e:bc:bd:e1:87:57:
12:7c:12:9f:79:4f:41:f3:31:3f:4b:a7:55:41:84:
64:00:26:f0:6a:5d:f4:ff:c4:c0:47:9f:4c:63:b8:
f3:bf:4a:d4:30:0d:19:77:2f:1e:ff:44:40:94:8a:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AF:01:05:18:A0:BB:A0:DC:B2:94:44:0E:38:5F:AB:EA:39:46:FF
X509v3 Authority Key Identifier:
keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/1B97493E7FFF11EF85F9E340C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
114.141.73.0-114.141.79.255
IPv6:
2404:4e00:1::-2404:4e00:7:ffff:ffff:ffff:ffff:ffff
2404:4e00:101::-2404:4e00:105:ffff:ffff:ffff:ffff:ffff
2404:4e00:107::/48
2404:4e00:200::-2404:4e00:20c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
15:1b:87:1a:7c:ba:28:3b:30:ee:1d:59:0f:5e:11:88:5b:94:
18:09:25:44:92:eb:ac:3d:81:0d:ee:59:1d:62:fe:9c:bb:25:
aa:1c:a7:b2:4e:62:42:b6:f9:49:d1:3e:54:97:09:41:94:55:
61:1d:61:c6:77:65:ef:11:dc:67:02:ae:d8:7f:0c:98:5d:ce:
c3:11:16:a0:df:0b:96:f9:63:8b:7f:3d:b1:80:6a:12:14:0d:
53:59:5c:48:dd:fb:1a:5c:67:16:d7:3f:7d:7f:07:c5:5c:57:
18:70:d9:2a:bc:f0:67:1b:35:fd:df:28:35:de:ce:62:ed:e5:
29:42:9c:6e:9b:28:64:e7:59:68:82:66:f6:4a:5f:43:f1:5e:
8b:e9:c7:20:37:c0:48:ac:e2:5d:05:2d:6d:9c:4b:f4:ba:9b:
d2:34:10:06:95:27:08:79:96:8b:99:9e:76:ba:bc:31:ad:bd:
0a:1e:6b:d8:dd:a0:16:2d:db:4b:8f:8e:96:4d:29:1c:d1:59:
45:3b:90:cc:4f:95:37:ae:99:36:cb:12:17:e3:a3:64:31:3c:
8c:2e:3a:63:79:1e:8a:b6:85:9a:a5:a3:f2:26:5f:c0:14:dc:
f3:da:3f:04:55:7c:4c:f7:f3:bb:9d:2f:13:8c:be:2d:78:ca:
6e:2c:81:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:51:08 2026 by rpki-client