Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/C362F1FC6E8A11F0BCC1991BC4F9AE02.roa
File: C362F1FC6E8A11F0BCC1991BC4F9AE02.roa (raw, json)
Hash identifier: Ri2mrY2EW9nS3v5ErTpK7r0q7sU6evor76Y/L+cA+ww=
Subject key identifier: 23:5C:7E:FA:4D:8D:91:32:80:AB:DE:D2:A5:17:F9:3F:F4:68:35:85
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 209B
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/C362F1FC6E8A11F0BCC1991BC4F9AE02.roa
Signing time: Thu 14 May 2026 08:24:24 +0000
ROA not before: Thu 14 May 2026 08:24:24 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 4809
IP address blocks: 27.148.248.0/21 maxlen: 21
58.43.192.0/18 maxlen: 18
58.43.192.0/22 maxlen: 22
58.49.108.0/24 maxlen: 24
59.43.0.0/16 maxlen: 16
59.60.0.0/20 maxlen: 24
59.173.248.0/24 maxlen: 24
106.122.216.0/21 maxlen: 21
116.211.0.0/18 maxlen: 24
116.248.192.0/18 maxlen: 24
117.28.224.0/19 maxlen: 24
117.38.0.0/16 maxlen: 16
117.38.0.0/18 maxlen: 18
117.38.64.0/20 maxlen: 20
117.38.80.0/20 maxlen: 20
117.38.96.0/20 maxlen: 20
117.41.0.0/17 maxlen: 17
117.41.0.0/19 maxlen: 20
117.41.32.0/20 maxlen: 20
117.41.48.0/20 maxlen: 20
117.41.64.0/20 maxlen: 20
117.41.80.0/20 maxlen: 20
117.41.96.0/20 maxlen: 20
117.41.112.0/20 maxlen: 20
117.62.8.0/22 maxlen: 22
117.62.12.0/22 maxlen: 22
117.62.24.0/21 maxlen: 21
117.62.32.0/22 maxlen: 22
118.85.98.68/30 maxlen: 30
118.85.105.16/28 maxlen: 28
118.85.105.32/28 maxlen: 28
118.85.105.48/28 maxlen: 28
118.85.112.164/30 maxlen: 30
118.85.116.0/22 maxlen: 22
120.41.108.0/24 maxlen: 24
120.41.117.0/24 maxlen: 24
120.88.12.0/24 maxlen: 24
121.59.2.0/24 maxlen: 24
121.59.4.0/24 maxlen: 24
121.59.8.0/24 maxlen: 24
121.59.9.0/24 maxlen: 24
121.59.29.0/24 maxlen: 24
121.59.30.0/24 maxlen: 24
121.59.31.0/24 maxlen: 24
121.59.32.0/22 maxlen: 24
121.59.37.0/24 maxlen: 24
121.59.38.0/24 maxlen: 24
121.59.100.0/23 maxlen: 24
121.59.104.0/24 maxlen: 24
121.59.106.0/24 maxlen: 24
121.59.107.0/24 maxlen: 24
121.59.109.0/24 maxlen: 24
121.59.110.0/24 maxlen: 24
121.59.120.0/22 maxlen: 24
121.59.124.0/23 maxlen: 24
121.59.128.0/24 maxlen: 24
121.59.140.0/24 maxlen: 24
121.59.142.0/24 maxlen: 24
121.59.143.0/24 maxlen: 24
121.59.144.0/24 maxlen: 24
121.59.146.0/24 maxlen: 24
121.59.147.0/24 maxlen: 24
121.59.151.0/24 maxlen: 24
121.59.152.0/24 maxlen: 24
121.59.153.0/24 maxlen: 24
121.207.128.0/21 maxlen: 21
122.225.128.0/22 maxlen: 22
123.151.192.0/18 maxlen: 18
123.178.0.0/20 maxlen: 20
124.119.240.0/20 maxlen: 20
124.119.240.0/21 maxlen: 24
124.119.248.0/22 maxlen: 24
124.119.252.0/22 maxlen: 24
124.224.200.0/22 maxlen: 22
124.227.64.0/23 maxlen: 23
124.227.66.0/23 maxlen: 23
124.233.0.0/19 maxlen: 19
124.233.32.0/19 maxlen: 19
124.233.64.0/18 maxlen: 18
124.233.128.0/18 maxlen: 18
124.233.192.0/20 maxlen: 20
124.233.208.0/20 maxlen: 20
124.233.224.0/21 maxlen: 21
124.233.232.0/21 maxlen: 21
124.233.240.0/20 maxlen: 20
124.234.177.0/24 maxlen: 24
125.69.72.0/21 maxlen: 21
125.69.224.0/19 maxlen: 20
125.76.0.0/19 maxlen: 20
202.67.3.0/24 maxlen: 24
202.111.192.0/20 maxlen: 20
202.111.208.0/20 maxlen: 20
203.12.200.0/24 maxlen: 24
203.12.201.0/24 maxlen: 24
203.12.202.0/24 maxlen: 24
203.12.203.0/24 maxlen: 24
203.12.205.0/24 maxlen: 24
203.15.114.0/24 maxlen: 24
203.20.136.0/24 maxlen: 24
203.20.137.0/24 maxlen: 24
203.20.138.0/24 maxlen: 24
203.20.139.0/24 maxlen: 24
203.25.52.0/24 maxlen: 24
203.86.112.0/24 maxlen: 24
203.89.8.0/23 maxlen: 24
203.100.52.0/24 maxlen: 24
203.100.54.0/24 maxlen: 24
203.129.8.0/24 maxlen: 24
203.195.115.0/24 maxlen: 24
203.196.8.0/24 maxlen: 24
203.196.9.0/24 maxlen: 24
203.196.10.0/24 maxlen: 24
203.196.11.0/24 maxlen: 24
203.196.15.0/24 maxlen: 24
210.48.136.0/21 maxlen: 21
210.48.136.0/22 maxlen: 24
210.48.140.0/22 maxlen: 22
210.48.143.0/24 maxlen: 24
218.30.39.0/24 maxlen: 24
218.30.62.0/23 maxlen: 23
218.30.63.0/24 maxlen: 24
218.30.165.0/24 maxlen: 24
218.185.241.0/24 maxlen: 24
218.185.243.0/24 maxlen: 24
218.185.245.0/24 maxlen: 24
220.182.40.0/23 maxlen: 23
220.191.160.0/19 maxlen: 19
221.231.12.0/24 maxlen: 24
222.87.208.0/22 maxlen: 22
222.92.1.0/24 maxlen: 24
2402:8800::/32 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:14:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8347 (0x209b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: May 14 08:24:24 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a0586b8-a7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:97:f1:2d:96:6f:47:f2:44:f4:74:9e:f9:
7c:58:a6:1d:9c:2d:03:e6:90:17:e7:4e:f6:bf:b5:
84:8f:e8:ea:a9:22:b4:70:fc:16:60:c3:42:ed:71:
b9:aa:1f:72:24:0f:c2:ae:ca:8d:13:99:48:44:37:
56:34:da:4d:2b:1c:6b:e3:1e:f0:01:5c:04:35:1b:
60:a0:4e:c6:16:2b:eb:91:c0:0a:73:bb:98:81:93:
2b:9e:35:60:00:14:f8:14:5a:fb:48:a6:89:a8:e9:
27:09:80:6f:5c:f0:0d:4f:a4:67:3a:92:c8:8c:ce:
dd:01:b1:79:76:3e:c0:c1:12:92:e9:14:e3:a0:c8:
b6:17:1e:49:19:61:54:f4:ac:18:74:5c:53:21:dd:
b5:69:9b:0e:fb:e7:5c:e7:3c:31:b5:ae:9f:79:8a:
e4:73:60:86:0b:85:8c:fd:1e:4f:ba:0f:57:33:1d:
06:bd:ce:ea:44:d1:af:91:7f:05:f7:5c:18:f6:d1:
51:ae:13:4f:8b:d9:4c:ab:7a:e9:c1:c5:68:9c:06:
83:12:10:85:62:9c:36:ad:00:b0:55:1a:18:6c:fc:
e3:b2:ad:3e:ac:80:08:76:6a:b8:c0:09:f6:91:bc:
5e:03:b7:fe:26:f0:4c:3c:40:71:83:9e:4c:7a:d2:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5C:7E:FA:4D:8D:91:32:80:AB:DE:D2:A5:17:F9:3F:F4:68:35:85
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/C362F1FC6E8A11F0BCC1991BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.148.248.0/21
58.43.192.0/18
58.49.108.0/24
59.43.0.0/16
59.60.0.0/20
59.173.248.0/24
106.122.216.0/21
116.211.0.0/18
116.248.192.0/18
117.28.224.0/19
117.38.0.0/16
117.41.0.0/17
117.62.8.0/21
117.62.24.0-117.62.35.255
118.85.98.68/30
118.85.105.16-118.85.105.63
118.85.112.164/30
118.85.116.0/22
120.41.108.0/24
120.41.117.0/24
120.88.12.0/24
121.59.2.0/24
121.59.4.0/24
121.59.8.0/23
121.59.29.0-121.59.35.255
121.59.37.0-121.59.38.255
121.59.100.0/23
121.59.104.0/24
121.59.106.0/23
121.59.109.0-121.59.110.255
121.59.120.0-121.59.125.255
121.59.128.0/24
121.59.140.0/24
121.59.142.0-121.59.144.255
121.59.146.0/23
121.59.151.0-121.59.153.255
121.207.128.0/21
122.225.128.0/22
123.151.192.0/18
123.178.0.0/20
124.119.240.0/20
124.224.200.0/22
124.227.64.0/22
124.233.0.0/16
124.234.177.0/24
125.69.72.0/21
125.69.224.0/19
125.76.0.0/19
202.67.3.0/24
202.111.192.0/19
203.12.200.0/22
203.12.205.0/24
203.15.114.0/24
203.20.136.0/22
203.25.52.0/24
203.86.112.0/24
203.89.8.0/23
203.100.52.0/24
203.100.54.0/24
203.129.8.0/24
203.195.115.0/24
203.196.8.0/22
203.196.15.0/24
210.48.136.0/21
218.30.39.0/24
218.30.62.0/23
218.30.165.0/24
218.185.241.0/24
218.185.243.0/24
218.185.245.0/24
220.182.40.0/23
220.191.160.0/19
221.231.12.0/24
222.87.208.0/22
222.92.1.0/24
IPv6:
2402:8800::/32
Signature Algorithm: sha256WithRSAEncryption
6e:45:66:a2:05:62:16:27:bc:07:49:c9:e4:9e:b7:99:bb:8a:
c7:70:8c:99:34:16:c2:1f:e7:11:24:c0:45:5e:13:96:28:49:
d9:e6:52:1a:69:3b:51:ba:7d:30:d5:aa:0b:29:1f:69:fa:9b:
5c:a6:c1:46:8d:32:df:86:cd:34:55:0c:6b:43:f4:38:1b:65:
c6:41:e5:49:03:60:2c:3a:d6:eb:ce:6e:dd:f5:f3:3f:e5:2a:
80:b6:72:de:69:27:b4:3e:0f:d1:82:a3:42:6d:c2:bd:ac:ba:
f9:45:7b:5e:7a:ba:ff:45:d6:77:37:b7:34:7f:86:9b:a1:6a:
de:8d:b1:81:7f:2e:51:cc:53:ec:8f:5c:ab:72:c7:22:dd:d7:
5b:bd:be:a2:fa:67:ce:98:3e:8f:cd:f1:ad:53:ff:ef:6f:b6:
af:8c:45:fc:d9:7b:41:b7:e1:d9:aa:8b:bc:89:f8:94:e3:31:
fe:cc:ef:1e:81:0f:70:d3:43:32:ca:4c:54:2f:09:bd:70:d0:
32:6b:19:c2:62:03:45:c5:3a:8d:9b:b6:f2:89:8a:40:29:b6:
e5:e1:3e:d6:f4:5f:c7:5a:dc:3d:0f:a0:00:ae:b7:00:81:31:
ad:d5:ef:77:8a:ef:3a:75:89:36:81:4b:5a:ed:41:a0:3c:1e:
db:f4:d8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:38 2026 by rpki-client