Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/764D8698EA9111EAA035205FC4F9AE02.roa
File: 764D8698EA9111EAA035205FC4F9AE02.roa (raw, json)
Hash identifier: GBIlmOLvNre3ocsgRTH5PrIHGYoCiO99a68cNbAelbQ=
Subject key identifier: B7:90:A1:BF:7D:58:16:D8:17:27:F8:0D:32:C8:C7:06:EC:CA:D8:BB
Certificate issuer: /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
Certificate serial: 1FC5
Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/764D8698EA9111EAA035205FC4F9AE02.roa
Signing time: Mon 06 Apr 2026 07:53:35 +0000
ROA not before: Mon 06 Apr 2026 07:53:34 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 17625
IP address blocks: 27.109.0.0/24 maxlen: 24
27.109.1.0/24 maxlen: 24
27.109.2.0/24 maxlen: 24
27.109.3.0/24 maxlen: 24
27.109.4.0/24 maxlen: 24
27.109.5.0/24 maxlen: 24
27.109.6.0/24 maxlen: 24
27.109.7.0/24 maxlen: 24
27.109.8.0/24 maxlen: 24
27.109.9.0/24 maxlen: 24
27.109.10.0/24 maxlen: 24
27.109.11.0/24 maxlen: 24
27.109.12.0/24 maxlen: 24
27.109.13.0/24 maxlen: 24
27.109.14.0/24 maxlen: 24
27.109.15.0/24 maxlen: 24
27.109.16.0/24 maxlen: 24
27.109.17.0/24 maxlen: 24
27.109.18.0/24 maxlen: 24
27.109.19.0/24 maxlen: 24
27.109.20.0/24 maxlen: 24
27.109.21.0/24 maxlen: 24
27.109.22.0/24 maxlen: 24
27.109.23.0/24 maxlen: 24
27.109.24.0/24 maxlen: 24
27.109.25.0/24 maxlen: 24
27.109.26.0/24 maxlen: 24
27.109.27.0/24 maxlen: 24
27.109.28.0/24 maxlen: 24
27.109.29.0/24 maxlen: 24
27.109.30.0/24 maxlen: 24
27.109.31.0/24 maxlen: 24
45.64.192.0/24 maxlen: 24
45.64.193.0/24 maxlen: 24
45.64.194.0/24 maxlen: 24
45.64.195.0/24 maxlen: 24
103.19.132.0/24 maxlen: 24
103.19.133.0/24 maxlen: 24
103.19.134.0/24 maxlen: 24
103.19.135.0/24 maxlen: 24
120.72.88.0/24 maxlen: 24
120.72.89.0/24 maxlen: 24
120.72.90.0/24 maxlen: 24
120.72.91.0/24 maxlen: 24
120.72.92.0/24 maxlen: 24
120.72.93.0/24 maxlen: 24
120.72.94.0/24 maxlen: 24
120.72.95.0/24 maxlen: 24
180.211.96.0/24 maxlen: 24
180.211.97.0/24 maxlen: 24
180.211.98.0/24 maxlen: 24
180.211.99.0/24 maxlen: 24
180.211.100.0/24 maxlen: 24
180.211.101.0/24 maxlen: 24
180.211.102.0/24 maxlen: 24
180.211.103.0/24 maxlen: 24
180.211.104.0/24 maxlen: 24
180.211.105.0/24 maxlen: 24
180.211.106.0/24 maxlen: 24
180.211.107.0/24 maxlen: 24
180.211.108.0/24 maxlen: 24
180.211.109.0/24 maxlen: 24
180.211.110.0/24 maxlen: 24
180.211.111.0/24 maxlen: 24
180.211.112.0/24 maxlen: 24
180.211.113.0/24 maxlen: 24
180.211.114.0/24 maxlen: 24
180.211.115.0/24 maxlen: 24
180.211.116.0/24 maxlen: 24
180.211.117.0/24 maxlen: 24
180.211.118.0/24 maxlen: 24
180.211.119.0/24 maxlen: 24
180.211.120.0/24 maxlen: 24
180.211.121.0/24 maxlen: 24
180.211.122.0/24 maxlen: 24
180.211.123.0/24 maxlen: 24
180.211.124.0/24 maxlen: 24
180.211.125.0/24 maxlen: 24
180.211.126.0/24 maxlen: 24
180.211.127.0/24 maxlen: 24
202.131.96.0/24 maxlen: 24
202.131.97.0/24 maxlen: 24
202.131.98.0/24 maxlen: 24
202.131.99.0/24 maxlen: 24
202.131.100.0/24 maxlen: 24
202.131.101.0/24 maxlen: 24
202.131.102.0/24 maxlen: 24
202.131.103.0/24 maxlen: 24
202.131.104.0/24 maxlen: 24
202.131.105.0/24 maxlen: 24
202.131.106.0/24 maxlen: 24
202.131.107.0/24 maxlen: 24
202.131.108.0/24 maxlen: 24
202.131.109.0/24 maxlen: 24
202.131.110.0/24 maxlen: 24
202.131.111.0/24 maxlen: 24
202.131.112.0/24 maxlen: 24
202.131.113.0/24 maxlen: 24
202.131.114.0/24 maxlen: 24
202.131.115.0/24 maxlen: 24
202.131.116.0/24 maxlen: 24
202.131.117.0/24 maxlen: 24
202.131.118.0/24 maxlen: 24
202.131.119.0/24 maxlen: 24
202.131.120.0/24 maxlen: 24
202.131.121.0/24 maxlen: 24
202.131.122.0/24 maxlen: 24
202.131.123.0/24 maxlen: 24
202.131.124.0/24 maxlen: 24
202.131.125.0/24 maxlen: 24
202.131.126.0/24 maxlen: 24
2401:2d00::/32 maxlen: 32
2401:2d00::/48 maxlen: 48
2401:2d00:1::/48 maxlen: 48
2401:2d00:2::/48 maxlen: 48
2401:2d00:3::/48 maxlen: 48
2401:2d00:4::/48 maxlen: 48
2401:2d00:10::/48 maxlen: 48
2401:2d00:12::/48 maxlen: 48
2401:2d00:1a::/48 maxlen: 48
2401:2d00:22::/48 maxlen: 48
2401:2d00:31::/48 maxlen: 48
2401:2d00:40::/48 maxlen: 48
2401:2d00:4000::/48 maxlen: 48
2401:2d00:8000::/48 maxlen: 48
2401:2d00:8001::/48 maxlen: 48
2401:2d00:8002::/48 maxlen: 48
2401:2d00:83e6::/48 maxlen: 48
2401:2d00:83e7::/48 maxlen: 48
2401:2d00:83e8::/48 maxlen: 48
2401:2d00:c000::/48 maxlen: 48
2401:2d00:c001::/48 maxlen: 48
2401:2d00:c002::/48 maxlen: 48
2401:2d00:c3e6::/48 maxlen: 48
2401:2d00:c3e7::/48 maxlen: 48
2401:2d00:c3e8::/48 maxlen: 48
2401:2d00:c3e9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl
rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 07:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8133 (0x1fc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A0CB, serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
Validity
Not Before: Apr 6 07:53:34 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69d3667e-dc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:c3:30:d6:d0:44:d5:ab:98:c1:b9:93:3c:
bc:4e:8c:9e:ae:49:30:cd:32:7c:8c:bf:ab:89:55:
5e:3b:c5:ec:2b:06:ad:58:5f:1d:d2:f5:c0:68:19:
dc:5f:7f:54:e5:fa:9e:2f:60:ce:5c:77:b2:ca:bf:
35:11:80:0f:72:f3:18:ce:9f:ca:d4:9e:c3:38:b1:
59:9f:f3:1e:9e:cd:6e:2d:3f:de:f2:ab:53:ed:96:
15:ad:7d:92:1a:65:b7:95:74:1c:aa:21:21:18:12:
64:ce:d3:df:7a:74:0a:a5:3d:b7:54:0f:e7:df:35:
f1:e0:62:66:2b:71:c5:42:5d:0d:24:fe:b1:29:50:
e1:40:5e:cc:30:1c:65:d3:d2:3f:bc:72:b4:a1:8b:
fe:60:f3:f7:3b:d0:71:17:da:ad:fe:6a:2d:a7:93:
7e:44:84:f5:bc:78:65:28:5e:58:4d:e6:99:92:68:
f7:f0:2b:f3:71:97:a0:5e:5a:84:d1:a4:b2:54:22:
43:bf:93:1a:43:22:d0:7d:e0:0a:f2:1d:36:c2:ac:
1e:b7:60:26:f3:f3:ed:11:4a:c2:97:8b:1b:6b:02:
5d:d4:a8:c5:5e:e4:49:0e:3e:bc:af:01:94:50:b6:
6e:de:a6:de:12:b7:57:42:dc:f9:6f:a4:e4:53:45:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:90:A1:BF:7D:58:16:D8:17:27:F8:0D:32:C8:C7:06:EC:CA:D8:BB
X509v3 Authority Key Identifier:
keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/764D8698EA9111EAA035205FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.109.0.0/19
45.64.192.0/22
103.19.132.0/22
120.72.88.0/21
180.211.96.0/19
202.131.96.0-202.131.126.255
IPv6:
2401:2d00::/32
Signature Algorithm: sha256WithRSAEncryption
26:ad:18:8c:eb:0b:66:bc:5b:d5:3f:c6:bf:e3:75:3d:87:09:
c6:0c:c0:33:63:c2:40:21:d0:50:97:c2:ae:56:ac:01:1f:52:
73:86:87:3f:31:1e:8c:9e:ab:1b:d5:e2:2b:fd:11:62:91:df:
67:29:9a:40:e1:8d:06:a7:0f:2a:35:f3:43:01:ee:8e:75:cc:
90:85:04:ca:27:e9:21:25:ce:17:f7:65:42:ea:aa:3a:d7:82:
d2:2d:8f:0c:79:0e:e2:af:94:9c:e8:49:a1:d4:32:a4:1e:a5:
14:39:9d:cb:b6:ed:ce:ca:d2:a2:4e:75:86:47:ec:72:37:95:
88:52:7d:70:31:d7:97:e8:4d:42:81:81:32:2d:51:f0:89:d5:
25:44:72:96:f5:72:0a:35:9c:65:af:87:1b:e3:e1:64:f6:7c:
22:c6:13:ec:15:7b:2e:bc:3c:d3:ff:2e:a1:4d:e0:09:ce:9d:
b9:23:a1:b9:36:a9:53:7f:e4:4c:d9:de:26:78:ca:f1:d5:33:
76:b9:ed:aa:ce:e4:42:08:39:07:6c:34:16:b7:6a:19:65:36:
06:e9:1f:d5:a2:30:b5:ec:ca:28:83:c8:0e:0b:76:bf:40:55:
ee:72:2e:ab:cd:52:2c:e8:bf:9b:fe:89:0b:87:61:b2:b8:21:
67:0f:61:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:57:41 2026 by rpki-client