Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/A79907ECA80211F1A53A8FFC6611F970.roa
File: A79907ECA80211F1A53A8FFC6611F970.roa (raw, json)
Hash identifier: q4GJ3n3nrluUWyP5K1p4wLbW632gAl3ii1+eWXdy8qo=
Subject key identifier: 18:12:18:51:93:4A:9F:93:24:01:48:78:11:40:8E:4B:ED:53:1E:65
Certificate issuer: /CN=A914699C/serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
Certificate serial: 05
Authority key identifier: 57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/A79907ECA80211F1A53A8FFC6611F970.roa
Signing time: Fri 04 Sep 2026 02:39:02 +0000
ROA not before: Fri 04 Sep 2026 02:39:02 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 400619
IP address blocks: 191.124.0.0/24 maxlen: 24
191.124.1.0/24 maxlen: 24
191.124.2.0/24 maxlen: 24
191.124.3.0/24 maxlen: 24
191.124.4.0/24 maxlen: 24
191.124.5.0/24 maxlen: 24
191.124.6.0/24 maxlen: 24
191.124.7.0/24 maxlen: 24
191.124.8.0/24 maxlen: 24
191.124.9.0/24 maxlen: 24
191.124.10.0/24 maxlen: 24
191.124.11.0/24 maxlen: 24
191.124.12.0/22 maxlen: 22
191.124.16.0/21 maxlen: 21
191.124.24.0/21 maxlen: 21
191.124.32.0/21 maxlen: 21
191.124.40.0/21 maxlen: 21
191.124.48.0/22 maxlen: 22
191.124.52.0/22 maxlen: 22
191.124.56.0/22 maxlen: 22
191.124.60.0/24 maxlen: 24
191.124.61.0/24 maxlen: 24
191.124.62.0/24 maxlen: 24
191.124.63.0/24 maxlen: 24
191.124.64.0/21 maxlen: 21
191.124.72.0/21 maxlen: 21
191.124.80.0/21 maxlen: 21
191.124.88.0/21 maxlen: 21
191.124.96.0/21 maxlen: 21
191.124.104.0/21 maxlen: 21
191.124.112.0/22 maxlen: 22
191.124.116.0/22 maxlen: 22
191.124.120.0/24 maxlen: 24
191.124.121.0/24 maxlen: 24
191.124.122.0/24 maxlen: 24
191.124.123.0/24 maxlen: 24
191.124.124.0/24 maxlen: 24
191.124.125.0/24 maxlen: 24
191.124.126.0/24 maxlen: 24
191.124.127.0/24 maxlen: 24
191.124.128.0/21 maxlen: 21
191.124.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl
rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 02:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914699C, serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
Validity
Not Before: Sep 4 02:39:02 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a9a2f46-e9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:0b:e6:ec:5e:5f:31:9b:27:ed:de:36:73:
1d:cf:12:c0:96:a5:36:83:3e:59:09:51:32:6a:ba:
62:9c:56:fb:1d:ec:fc:cf:c0:98:77:27:0a:c3:94:
29:b3:5e:94:20:c8:18:a0:fd:c4:c5:f8:f6:33:59:
72:8c:43:dc:a3:da:7f:fb:87:ee:08:a4:88:63:a6:
17:96:53:47:2e:65:6f:30:71:94:78:e0:ae:d9:a2:
80:4d:13:bb:9f:4d:b4:b9:bf:b0:71:6b:a2:27:71:
d2:85:5a:d8:13:19:84:66:ac:aa:81:a9:ca:37:6b:
e4:6b:67:36:ac:34:d5:3d:9f:76:c8:1c:72:8a:cb:
9a:b1:a2:5d:e6:0a:29:f0:87:36:c8:8c:25:52:7c:
da:c4:fb:5b:5d:e9:80:7e:fb:22:2d:09:52:bf:6c:
79:cc:4d:b1:c8:5e:46:c1:97:05:1a:41:aa:85:ee:
5d:38:84:99:87:83:a6:b9:4c:63:51:ab:b0:12:28:
03:bb:de:04:9a:2c:82:be:c0:e7:59:b6:b4:3d:db:
0f:d7:43:ba:f0:66:37:8d:ef:3a:27:92:08:d0:8d:
99:0f:7a:12:ee:c3:33:89:43:88:d4:2f:d9:08:12:
1b:5a:b7:04:84:db:64:b0:f3:2f:c0:92:ab:a2:d7:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:12:18:51:93:4A:9F:93:24:01:48:78:11:40:8E:4B:ED:53:1E:65
X509v3 Authority Key Identifier:
keyid:57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/A79907ECA80211F1A53A8FFC6611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
191.124.0.0-191.124.139.255
Signature Algorithm: sha256WithRSAEncryption
7a:07:3e:76:d0:c6:34:fb:26:d3:d4:2f:82:6e:ae:cd:09:8a:
3b:b6:c5:80:eb:d5:67:0a:cf:be:37:4a:22:45:63:7d:b9:5a:
f0:d5:af:a9:64:12:b3:d3:cc:40:71:86:46:56:a6:20:45:e8:
a3:3f:7c:c4:7e:71:70:75:92:95:22:ab:50:93:3a:09:9e:58:
f4:d6:86:d4:c9:7f:5c:95:dd:73:43:96:2b:ec:b5:c9:ec:28:
58:7c:6e:23:f3:92:be:0e:b9:97:ff:5b:ce:b0:b4:26:40:d6:
71:43:6f:18:41:ec:5e:f8:5b:fb:d9:7f:6b:7b:df:85:fa:27:
f8:4e:b2:f4:ad:27:89:cf:b8:f7:f6:00:d6:cd:bb:df:3b:f6:
c5:e9:85:f8:a5:b5:a8:96:65:74:8b:f0:91:40:9f:ca:18:53:
a0:70:1e:e3:fd:cf:e5:75:8c:a8:61:a2:78:59:9e:f4:47:72:
f2:a9:f3:86:95:c9:79:37:29:76:78:3e:5b:76:55:b0:da:b8:
38:39:45:8e:8b:42:13:9c:46:b1:8e:7c:1c:d7:7d:96:c5:af:
74:69:45:ac:56:f1:c6:e7:a5:35:67:91:7d:d3:fe:49:08:17:
85:7f:91:50:1c:ef:47:4c:33:1b:3c:22:9c:fb:b9:27:4a:88:
92:c2:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:09:29 2026 by rpki-client