Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/971866124AEC11EF91EC775FC4F9AE02.roa
File: 971866124AEC11EF91EC775FC4F9AE02.roa (raw, json)
Hash identifier: miyLWYgYPiIrjadnA/ajcwQwWySLZgNpGX1hIK6+8R8=
Subject key identifier: 6B:BC:C1:0E:C2:5D:8C:86:7D:07:EE:B9:60:38:50:8D:6C:A2:50:40
Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial: 361C
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/971866124AEC11EF91EC775FC4F9AE02.roa
Signing time: Tue 30 Jun 2026 15:11:00 +0000
ROA not before: Tue 30 Jun 2026 15:11:00 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 9506
IP address blocks: 128.106.64.0/18 maxlen: 24
128.106.128.0/17 maxlen: 24
160.213.32.0/21 maxlen: 21
160.213.56.0/21 maxlen: 21
160.213.128.0/20 maxlen: 20
160.213.224.0/19 maxlen: 19
165.21.24.0/21 maxlen: 21
165.21.24.0/22 maxlen: 22
165.21.28.0/23 maxlen: 23
165.21.64.0/22 maxlen: 22
165.21.68.0/23 maxlen: 23
165.21.75.0/24 maxlen: 24
165.21.76.0/23 maxlen: 23
165.21.78.0/24 maxlen: 24
165.21.112.0/21 maxlen: 21
165.21.124.0/22 maxlen: 22
165.21.128.0/22 maxlen: 22
165.21.132.0/24 maxlen: 24
165.21.134.0/24 maxlen: 24
165.21.135.0/24 maxlen: 24
165.21.154.0/24 maxlen: 24
165.21.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13852 (0x361c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Validity
Not Before: Jun 30 15:11:00 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a43dc84-66c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:e1:ce:06:dd:fc:65:56:8a:3c:ff:64:77:
17:6c:0d:26:db:6e:5d:65:36:d9:fc:a1:89:ea:60:
dd:f9:20:88:25:e1:1d:c9:59:c4:d0:c6:d2:c2:08:
4a:c3:d9:71:6f:18:75:82:79:85:22:f1:b4:14:35:
e4:2c:e9:f7:41:4e:fd:9d:c4:1e:87:c4:fe:2a:1b:
38:11:db:18:d4:56:88:64:8f:74:3b:95:d4:e8:30:
ab:0d:31:e0:83:59:cb:b6:18:2e:9b:d6:61:6a:85:
8c:d8:8d:6a:01:bb:b0:f2:9b:f9:c0:41:68:1b:5b:
35:11:b2:33:36:f5:76:c9:d6:10:ba:09:ec:bc:23:
a0:0b:26:1f:83:3b:f0:1c:02:3e:68:52:86:c9:a3:
b8:1c:eb:cd:47:06:72:dc:35:a2:ee:d5:72:7d:77:
2e:24:9f:76:89:68:0c:bd:58:5a:a3:d6:20:83:b3:
d9:2f:bb:e6:fd:27:38:94:e4:d2:ac:07:d4:fc:26:
a7:5f:22:89:59:f9:ec:cf:45:4f:0d:16:1e:13:26:
24:d1:54:24:dc:e1:5c:41:e7:24:2c:8a:c8:80:e0:
c0:c2:44:19:b8:80:db:6c:1c:27:42:85:a4:d8:b0:
1c:bc:9d:3d:14:ef:99:da:d6:e5:ef:24:18:59:48:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BC:C1:0E:C2:5D:8C:86:7D:07:EE:B9:60:38:50:8D:6C:A2:50:40
X509v3 Authority Key Identifier:
keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/971866124AEC11EF91EC775FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
128.106.64.0-128.106.255.255
160.213.32.0/21
160.213.56.0/21
160.213.128.0/20
160.213.224.0/19
165.21.24.0/21
165.21.64.0-165.21.69.255
165.21.75.0-165.21.78.255
165.21.112.0/21
165.21.124.0-165.21.132.255
165.21.134.0/23
165.21.154.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:b4:e3:bc:66:df:67:bc:96:14:6c:f8:9f:9b:9d:9d:fb:44:
7d:01:59:04:46:32:0f:9b:19:e7:00:9d:cb:1d:48:44:4e:cd:
a2:80:72:c9:0a:ae:65:ae:6a:fb:35:2f:5a:68:04:09:ef:90:
72:7d:2a:3f:17:b1:58:44:29:15:5c:4a:86:73:7f:57:5f:28:
3f:aa:3f:13:ad:f0:71:44:d7:f9:e8:67:e5:59:0a:a0:da:a6:
6b:5b:39:8f:1d:18:15:70:9c:f6:92:d7:57:38:73:e8:7e:a0:
6f:7e:53:93:2b:3a:46:2c:af:2f:c7:84:43:a2:86:78:67:54:
2c:d5:4b:75:00:b6:99:f4:d1:a8:c9:a9:61:b3:9d:f6:cb:15:
e1:b6:ee:db:9f:41:73:df:69:cb:03:32:5a:46:55:42:ae:ba:
32:9f:4a:e8:b6:4f:71:45:dd:a8:9b:52:68:b3:60:e5:a8:db:
d1:b6:10:3d:9d:4c:73:2f:0b:fc:e6:c9:bd:d0:0d:a3:f4:46:
a9:b2:7d:5d:8e:53:87:3b:38:c5:d3:46:46:b7:19:91:df:e7:
62:4a:6f:20:3d:52:c3:13:54:60:69:03:56:e6:30:0b:db:43:
41:02:8e:64:f8:3d:62:6b:5f:9d:f5:80:4e:b2:97:a1:70:85:
46:0c:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:20 2026 by rpki-client