Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/3AA3E4AE018111ECB7DFB21CC4F9AE02.roa
File: 3AA3E4AE018111ECB7DFB21CC4F9AE02.roa (raw, json)
Hash identifier: dfxKjTENZwjtB6IRjSuSepS9kgT88MiAuvNy/DGYgM4=
Subject key identifier: 80:3F:3F:34:DF:8F:17:84:72:78:8F:18:5C:64:AF:68:F7:00:BE:E0
Certificate issuer: /CN=A9144633/serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
Certificate serial: 08C5
Authority key identifier: 11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/3AA3E4AE018111ECB7DFB21CC4F9AE02.roa
Signing time: Sat 30 May 2026 21:25:41 +0000
ROA not before: Sat 30 May 2026 21:25:40 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 9534
IP address blocks: 14.192.192.0/18 maxlen: 18
14.192.192.0/23 maxlen: 23
14.192.208.0/24 maxlen: 24
14.192.209.0/24 maxlen: 24
14.192.210.0/24 maxlen: 24
14.192.211.0/24 maxlen: 24
14.192.212.0/24 maxlen: 24
14.192.213.0/24 maxlen: 24
14.192.214.0/24 maxlen: 24
14.192.215.0/24 maxlen: 24
14.192.216.0/21 maxlen: 21
14.192.216.0/24 maxlen: 24
14.192.217.0/24 maxlen: 24
14.192.218.0/24 maxlen: 24
14.192.219.0/24 maxlen: 24
14.192.220.0/24 maxlen: 24
14.192.221.0/24 maxlen: 24
14.192.222.0/24 maxlen: 24
14.192.223.0/24 maxlen: 24
14.192.236.0/22 maxlen: 22
14.192.240.0/22 maxlen: 22
14.192.244.0/23 maxlen: 23
14.192.246.0/24 maxlen: 24
14.192.247.0/24 maxlen: 24
43.255.172.0/22 maxlen: 22
43.255.172.0/24 maxlen: 24
43.255.173.0/24 maxlen: 24
43.255.174.0/24 maxlen: 24
43.255.175.0/24 maxlen: 24
58.71.128.0/17 maxlen: 18
58.71.144.0/22 maxlen: 22
58.71.152.0/21 maxlen: 21
103.4.44.0/22 maxlen: 22
113.210.0.0/15 maxlen: 16
113.210.48.0/20 maxlen: 20
113.210.48.0/21 maxlen: 21
113.210.56.0/21 maxlen: 21
113.210.64.0/20 maxlen: 20
113.210.80.0/20 maxlen: 20
113.210.80.0/23 maxlen: 23
113.210.90.0/24 maxlen: 24
113.210.91.0/24 maxlen: 24
113.210.96.0/20 maxlen: 20
113.210.96.0/21 maxlen: 21
113.210.104.0/21 maxlen: 21
113.210.105.0/24 maxlen: 24
113.210.106.0/24 maxlen: 24
113.210.112.0/20 maxlen: 20
113.210.112.0/21 maxlen: 21
113.210.120.0/21 maxlen: 21
113.210.176.0/20 maxlen: 20
113.210.192.0/20 maxlen: 20
113.211.96.0/20 maxlen: 20
113.211.96.0/21 maxlen: 21
113.211.104.0/21 maxlen: 21
113.211.112.0/20 maxlen: 20
113.211.112.0/21 maxlen: 21
113.211.120.0/21 maxlen: 21
113.211.128.0/20 maxlen: 20
113.211.128.0/21 maxlen: 21
113.211.136.0/21 maxlen: 21
113.211.144.0/20 maxlen: 20
113.211.160.0/20 maxlen: 20
113.211.176.0/20 maxlen: 20
121.120.0.0/15 maxlen: 16
121.122.0.0/15 maxlen: 17
202.122.144.0/20 maxlen: 21
202.146.64.0/19 maxlen: 19
202.146.64.0/20 maxlen: 21
202.146.80.0/20 maxlen: 21
202.179.96.0/19 maxlen: 20
202.179.111.0/24 maxlen: 24
202.179.112.0/21 maxlen: 21
2001:d08::/32 maxlen: 32
2001:d08:a0::/44 maxlen: 44
2001:d08:d0::/44 maxlen: 44
2001:d08:d0::/47 maxlen: 47
2001:d08:d2::/47 maxlen: 47
2001:d08:d4::/47 maxlen: 47
2001:d08:d6::/47 maxlen: 47
2001:d08:d8::/47 maxlen: 47
2001:d08:da::/47 maxlen: 47
2001:d08:dc::/47 maxlen: 47
2001:d08:de::/47 maxlen: 47
2001:d08:e0::/44 maxlen: 44
2001:d08:1000::/37 maxlen: 37
2001:d08:1800::/37 maxlen: 37
2001:d08:2000::/37 maxlen: 37
2001:d08:2800::/41 maxlen: 41
2001:d08:2900::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl
rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 21:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144633, serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
Validity
Not Before: May 30 21:25:40 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1b55d4-d80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:71:dc:df:96:71:40:96:20:ed:03:4a:18:
3b:09:d3:83:e7:bf:49:bd:4d:34:4d:cb:81:84:72:
a8:0f:c8:ca:48:68:9d:96:80:8c:60:5c:fb:44:95:
c5:7f:b7:fc:33:42:5c:02:d2:4c:04:89:a9:fe:bc:
69:42:7e:47:59:45:cd:49:e9:0d:ed:46:26:a4:82:
98:f7:2e:69:78:58:f6:6f:f8:c2:e2:7d:a2:be:25:
bd:de:a4:bf:14:0c:e9:91:3e:96:ae:4e:e7:c3:86:
e8:a2:1b:6b:b0:46:93:a8:c1:7a:cd:9f:7a:1b:d1:
92:88:75:2f:3f:f9:75:f6:4e:55:41:6b:2f:d4:61:
2e:1f:68:76:ab:71:a5:4e:39:53:63:67:82:bd:17:
89:ec:6f:3b:c0:3a:ee:f8:51:4f:93:84:fd:bb:71:
85:29:31:44:4f:b3:4b:96:de:db:85:12:b1:fc:93:
52:81:73:a0:82:d5:d5:02:52:e9:9b:db:d3:4e:97:
d8:60:42:18:8f:ab:22:95:7f:54:69:2d:04:29:82:
cc:41:0a:8c:75:08:a2:92:9b:42:74:9e:07:87:8e:
d2:f0:59:e8:48:06:de:e0:40:e3:78:76:e9:ab:83:
8b:b4:55:f7:7e:7a:02:34:04:c3:19:cb:e0:53:ea:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3F:3F:34:DF:8F:17:84:72:78:8F:18:5C:64:AF:68:F7:00:BE:E0
X509v3 Authority Key Identifier:
keyid:11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/3AA3E4AE018111ECB7DFB21CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.192.0/18
43.255.172.0/22
58.71.128.0/17
103.4.44.0/22
113.210.0.0/15
121.120.0.0/14
202.122.144.0/20
202.146.64.0/19
202.179.96.0/19
IPv6:
2001:d08::/32
Signature Algorithm: sha256WithRSAEncryption
31:e1:8d:0c:1c:5e:ca:53:b5:25:65:f7:e2:06:7b:dc:4f:f8:
fc:82:68:df:fd:34:05:e8:6b:1b:ec:d2:55:4f:ef:01:f1:77:
65:5b:03:99:d1:db:c8:bd:30:8c:39:33:b6:6b:65:cb:e5:4d:
64:2a:7c:34:16:00:cb:1e:d5:1b:ef:9b:c4:c7:cc:84:02:0a:
0d:33:b3:b1:31:ce:ef:a8:e8:18:02:9c:12:3b:ba:5d:b0:f3:
60:6a:37:94:c0:6a:df:35:0a:ba:db:7a:94:ee:98:b3:08:bd:
6b:14:07:7c:31:d6:40:b9:ce:71:76:86:de:09:0e:ba:bb:60:
d9:17:4c:82:27:ab:0a:d6:e2:5f:1a:16:09:ec:86:9a:7f:0e:
b6:b0:75:3c:3c:f9:8b:24:5f:b1:2c:bc:eb:e5:d0:69:1c:57:
8b:50:de:5d:02:2f:0f:da:db:07:3e:61:bc:97:2c:53:c9:ec:
f2:c8:5d:af:0f:40:99:13:9e:f5:e8:5e:d3:e9:f5:1a:d6:bc:
39:99:27:53:62:fe:35:a0:ca:d3:23:e2:60:6c:0f:a0:b4:8f:
7d:aa:65:7b:fa:ee:0a:92:0e:5a:b3:85:b7:47:96:c0:60:35:
e6:fc:4a:48:1a:82:70:d4:99:55:f2:f7:92:f9:2d:c8:e2:2a:
84:77:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:01:35 2026 by rpki-client