Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/1B31B0E4270E11EC97471F53C4F9AE02.roa
File: 1B31B0E4270E11EC97471F53C4F9AE02.roa (raw, json)
Hash identifier: CQrq+NiLvVYKAgaoEAHrvb21lZZoBmbhEQ+h41OOoGc=
Subject key identifier: CA:64:C0:F4:66:14:D7:82:81:4D:E7:FE:7E:8B:46:D8:A1:36:D2:4A
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 0715
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/1B31B0E4270E11EC97471F53C4F9AE02.roa
Signing time: Wed 02 Sep 2026 23:44:05 +0000
ROA not before: Wed 02 Sep 2026 23:44:05 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 198949
IP address blocks: 61.88.1.0/24 maxlen: 24
61.88.29.0/24 maxlen: 24
61.88.116.0/24 maxlen: 24
61.88.182.0/24 maxlen: 24
61.88.183.0/24 maxlen: 24
61.88.223.0/24 maxlen: 24
119.225.2.0/24 maxlen: 24
119.225.44.0/24 maxlen: 24
119.225.45.0/24 maxlen: 24
119.225.128.0/24 maxlen: 24
119.225.210.0/24 maxlen: 24
119.225.222.0/24 maxlen: 24
124.19.48.0/24 maxlen: 24
124.19.56.0/24 maxlen: 24
124.19.72.0/24 maxlen: 24
124.19.98.0/24 maxlen: 24
124.19.103.0/24 maxlen: 24
124.19.111.0/24 maxlen: 24
202.139.138.0/24 maxlen: 24
202.139.144.0/24 maxlen: 24
203.13.96.0/24 maxlen: 24
203.13.98.0/24 maxlen: 24
203.13.123.0/24 maxlen: 24
203.13.125.0/24 maxlen: 24
203.13.126.0/24 maxlen: 24
203.13.127.0/24 maxlen: 24
203.13.128.0/24 maxlen: 24
203.13.129.0/24 maxlen: 24
220.101.13.0/24 maxlen: 24
220.101.27.0/24 maxlen: 24
220.101.72.0/24 maxlen: 24
220.101.83.0/24 maxlen: 24
220.101.99.0/24 maxlen: 24
220.101.101.0/24 maxlen: 24
220.101.111.0/24 maxlen: 24
220.101.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1813 (0x715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Sep 2 23:44:05 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98b4c5-8bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:c9:fa:2b:f2:d6:be:80:5a:06:54:1f:17:
26:ff:d5:40:84:65:4d:d5:46:05:0e:4c:96:e6:56:
12:db:65:d3:ac:0e:56:79:83:fa:87:e0:84:e4:5b:
3f:f3:b1:84:9f:6f:2e:11:ac:b1:ae:ea:8a:13:1d:
b1:eb:a9:16:9a:24:7b:5d:3c:e1:e0:06:f4:c7:92:
1f:2d:c1:26:d9:a0:a2:6c:9e:5a:23:0c:1f:40:c6:
ea:5b:57:40:46:3b:fc:c6:2f:89:98:f5:eb:4a:eb:
ea:7e:b5:a4:45:e2:2e:56:0c:ce:ea:4d:10:13:11:
83:86:15:95:d1:74:a8:96:aa:d9:2b:23:fe:52:23:
25:d7:84:c0:91:22:5b:f9:b1:8a:ab:be:1e:2b:56:
b3:de:cc:b9:83:51:44:ff:77:38:04:40:b8:56:2c:
3d:fd:e8:2d:03:49:57:19:6b:60:76:b8:bf:23:39:
e0:a1:fb:5e:b6:22:bb:70:51:54:cd:73:e4:07:62:
a8:14:bf:70:58:8d:b2:29:fd:99:a8:a3:96:b2:0c:
7e:49:50:58:1d:76:66:c7:cc:7d:c8:52:e2:e9:95:
22:0e:c6:ff:1b:aa:40:bf:7c:d4:b2:f2:95:75:83:
97:30:e4:4a:30:49:02:95:2f:59:ef:19:df:1c:ed:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:64:C0:F4:66:14:D7:82:81:4D:E7:FE:7E:8B:46:D8:A1:36:D2:4A
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/1B31B0E4270E11EC97471F53C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.88.1.0/24
61.88.29.0/24
61.88.116.0/24
61.88.182.0/23
61.88.223.0/24
119.225.2.0/24
119.225.44.0/23
119.225.128.0/24
119.225.210.0/24
119.225.222.0/24
124.19.48.0/24
124.19.56.0/24
124.19.72.0/24
124.19.98.0/24
124.19.103.0/24
124.19.111.0/24
202.139.138.0/24
202.139.144.0/24
203.13.96.0/24
203.13.98.0/24
203.13.123.0/24
203.13.125.0-203.13.129.255
220.101.13.0/24
220.101.27.0/24
220.101.72.0/24
220.101.83.0/24
220.101.99.0/24
220.101.101.0/24
220.101.111.0/24
220.101.121.0/24
Signature Algorithm: sha256WithRSAEncryption
08:19:46:06:51:73:39:b9:b9:c3:99:69:e2:83:fb:af:92:ba:
f8:53:0c:14:53:67:87:68:b7:82:8e:3e:03:47:e5:03:c1:ee:
76:13:c8:cf:b6:14:80:2f:a7:1e:db:e5:95:4b:3e:18:f9:d4:
60:16:94:b3:30:37:a3:d5:be:22:92:49:36:ea:4f:16:70:68:
b0:41:b8:fd:8b:b4:b2:a7:5a:5f:f9:1b:97:29:86:06:fe:56:
b1:e8:80:9c:3c:2f:61:66:6d:e4:7c:b5:de:55:a4:b5:f7:3d:
18:ce:f8:c9:a9:da:6b:cc:ea:a9:33:36:fb:74:61:e9:02:7a:
c2:d8:78:04:fb:b4:9b:f7:64:cc:9c:bd:29:5b:af:a1:37:cc:
8e:fd:11:07:93:16:88:c8:fd:0c:63:32:c7:31:ca:94:1b:4f:
5f:85:46:12:15:07:ca:14:5e:5e:39:2b:b6:9c:80:6b:72:7e:
14:8b:44:b5:06:37:05:22:7b:d8:69:43:48:af:5e:4d:38:2b:
85:d9:3c:f1:bb:34:ea:b8:7f:eb:92:67:5d:d8:59:14:c4:96:
45:33:7e:bf:d8:e5:cb:bc:1e:52:fd:4e:85:62:89:f4:a0:f8:
31:39:15:c0:9d:5e:f0:58:50:ad:13:2a:07:97:8c:6f:00:68:
e6:52:20:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 08:52:48 2026 by rpki-client