Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
File: 283A4D20174911EC896AD61BC4F9AE02.roa (raw, json)
Hash identifier: was++B3SwvJo/jYlrUZOE1nul8ZmbRH0XpfbBmWRHUM=
Subject key identifier: 07:83:C2:66:46:5D:1E:AD:92:65:1A:8F:D5:4B:2E:E8:06:CF:E0:76
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 071D
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
Signing time: Wed 02 Sep 2026 23:44:21 +0000
ROA not before: Wed 02 Sep 2026 23:44:21 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 7474
IP address blocks: 1.44.0.0/16 maxlen: 16
1.44.160.0/23 maxlen: 23
1.44.162.0/23 maxlen: 23
1.44.164.0/23 maxlen: 23
1.44.166.0/23 maxlen: 23
59.154.0.0/16 maxlen: 16
59.154.122.0/23 maxlen: 23
59.154.173.0/24 maxlen: 24
59.154.180.0/24 maxlen: 24
59.154.235.0/24 maxlen: 24
59.154.236.0/22 maxlen: 22
59.154.241.0/24 maxlen: 24
59.154.242.0/23 maxlen: 23
59.154.252.0/23 maxlen: 23
59.154.254.0/24 maxlen: 24
61.88.0.0/17 maxlen: 17
61.88.4.0/24 maxlen: 24
61.88.14.0/24 maxlen: 24
61.88.46.0/24 maxlen: 24
61.88.47.0/24 maxlen: 24
61.88.48.0/22 maxlen: 22
61.88.52.0/24 maxlen: 24
61.88.53.0/24 maxlen: 24
61.88.55.0/24 maxlen: 24
61.88.57.0/24 maxlen: 24
61.88.60.0/24 maxlen: 24
61.88.62.0/24 maxlen: 24
61.88.65.0/24 maxlen: 24
61.88.92.0/22 maxlen: 22
61.88.112.0/23 maxlen: 23
61.88.116.0/24 maxlen: 24
61.88.124.0/23 maxlen: 23
61.88.128.0/18 maxlen: 18
61.88.157.0/24 maxlen: 24
61.88.192.0/20 maxlen: 20
61.88.208.0/21 maxlen: 21
61.88.216.0/22 maxlen: 22
61.88.228.0/24 maxlen: 24
61.88.229.0/24 maxlen: 24
61.88.230.0/24 maxlen: 24
61.88.232.0/24 maxlen: 24
61.88.233.0/24 maxlen: 24
61.88.234.0/24 maxlen: 24
61.88.235.0/24 maxlen: 24
61.88.253.0/24 maxlen: 24
61.88.254.0/23 maxlen: 23
119.225.0.0/16 maxlen: 16
124.19.0.0/17 maxlen: 17
124.19.72.0/24 maxlen: 24
124.19.76.0/22 maxlen: 22
124.19.84.0/22 maxlen: 22
124.19.88.0/21 maxlen: 21
124.19.96.0/24 maxlen: 24
124.19.97.0/24 maxlen: 24
125.63.128.0/17 maxlen: 17
202.139.0.0/17 maxlen: 17
202.139.4.0/24 maxlen: 24
202.139.5.0/24 maxlen: 24
202.139.8.0/22 maxlen: 22
202.139.8.0/23 maxlen: 23
202.139.10.0/23 maxlen: 23
202.139.12.0/22 maxlen: 22
202.139.12.0/23 maxlen: 23
202.139.14.0/23 maxlen: 23
202.139.20.0/22 maxlen: 22
202.139.24.0/24 maxlen: 24
202.139.25.0/24 maxlen: 24
202.139.26.0/24 maxlen: 24
202.139.28.0/24 maxlen: 24
202.139.29.0/24 maxlen: 24
202.139.30.0/24 maxlen: 24
202.139.31.0/24 maxlen: 24
202.139.32.0/24 maxlen: 24
202.139.34.0/24 maxlen: 24
202.139.35.0/24 maxlen: 24
202.139.36.0/24 maxlen: 24
202.139.37.0/24 maxlen: 24
202.139.38.0/24 maxlen: 24
202.139.44.0/24 maxlen: 24
202.139.45.0/24 maxlen: 24
202.139.60.0/24 maxlen: 24
202.139.61.0/24 maxlen: 24
202.139.62.0/24 maxlen: 24
202.139.64.0/24 maxlen: 24
202.139.82.0/24 maxlen: 24
202.139.102.0/24 maxlen: 24
202.139.113.0/24 maxlen: 24
202.139.128.0/18 maxlen: 18
202.139.142.0/24 maxlen: 24
202.139.143.0/24 maxlen: 24
202.139.148.0/24 maxlen: 24
202.139.154.0/24 maxlen: 24
202.139.155.0/24 maxlen: 24
202.139.156.0/24 maxlen: 24
202.139.157.0/24 maxlen: 24
202.139.159.0/24 maxlen: 24
202.139.160.0/24 maxlen: 24
202.139.164.0/24 maxlen: 24
202.139.175.0/24 maxlen: 24
202.139.176.0/24 maxlen: 24
202.139.180.0/24 maxlen: 24
202.139.183.0/24 maxlen: 24
202.139.184.0/24 maxlen: 24
202.139.185.0/24 maxlen: 24
202.139.188.0/24 maxlen: 24
202.139.189.0/24 maxlen: 24
203.13.96.0/24 maxlen: 24
203.13.98.0/24 maxlen: 24
203.13.123.0/24 maxlen: 24
203.13.125.0/24 maxlen: 24
203.13.126.0/24 maxlen: 24
203.13.127.0/24 maxlen: 24
203.13.128.0/24 maxlen: 24
203.13.129.0/24 maxlen: 24
203.13.133.0/24 maxlen: 24
203.13.134.0/24 maxlen: 24
203.202.0.0/17 maxlen: 17
203.202.60.0/24 maxlen: 24
203.202.61.0/24 maxlen: 24
203.202.62.0/24 maxlen: 24
203.202.63.0/24 maxlen: 24
203.202.66.0/24 maxlen: 24
203.202.67.0/24 maxlen: 24
203.202.104.0/24 maxlen: 24
203.202.105.0/24 maxlen: 24
203.202.110.0/24 maxlen: 24
203.202.111.0/24 maxlen: 24
203.202.112.0/24 maxlen: 24
203.202.113.0/24 maxlen: 24
203.202.114.0/24 maxlen: 24
203.202.117.0/24 maxlen: 24
203.202.118.0/24 maxlen: 24
203.202.121.0/24 maxlen: 24
203.202.122.0/24 maxlen: 24
203.202.128.0/18 maxlen: 18
203.202.128.0/24 maxlen: 24
203.202.157.0/24 maxlen: 24
203.202.164.0/24 maxlen: 24
203.202.165.0/24 maxlen: 24
203.202.166.0/24 maxlen: 24
203.202.167.0/24 maxlen: 24
203.202.174.0/24 maxlen: 24
203.202.175.0/24 maxlen: 24
203.202.176.0/22 maxlen: 22
203.202.183.0/24 maxlen: 24
203.202.190.0/24 maxlen: 24
203.202.191.0/24 maxlen: 24
210.0.0.0/24 maxlen: 24
220.101.0.0/17 maxlen: 17
2405:9000::/32 maxlen: 32
2405:9000:a::/48 maxlen: 48
2405:9000:1fc::/48 maxlen: 48
2405:9000:203::/48 maxlen: 48
2405:9000:207::/48 maxlen: 48
2405:9000:3440::/48 maxlen: 48
2405:9000:4900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1821 (0x71d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Sep 2 23:44:21 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98b4d5-dc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:c6:e3:cb:1d:75:c0:61:1f:33:81:8b:d0:
b8:36:ef:81:44:2c:9e:3a:b9:87:d5:15:f5:02:67:
00:b4:e4:0e:4b:b9:b8:67:2f:81:6b:7c:c2:6c:25:
a8:aa:bd:9b:58:d5:3b:ca:6d:d4:c3:04:2d:8d:e7:
ac:a8:19:be:25:4c:33:70:23:78:2f:96:20:4a:34:
35:41:1c:05:05:43:c8:54:a4:20:a5:8c:dd:18:68:
f3:87:fa:3b:e1:05:07:4f:75:e0:af:f6:00:46:ef:
08:c5:da:81:ee:f1:84:a0:f6:63:9e:93:ac:cd:04:
e5:e9:23:cb:c8:15:0b:9b:df:3b:f8:db:ec:99:d5:
d3:a4:d5:df:09:3f:08:7e:19:b1:2b:6e:5d:3f:31:
46:f9:94:72:71:c4:6c:ec:66:d4:80:50:34:68:cb:
21:61:65:89:57:0d:39:34:b2:31:cb:58:f2:37:65:
c0:38:c1:ab:57:32:5f:b0:70:e0:72:34:5b:c9:b5:
7f:a1:f9:e5:3a:9b:09:f6:f4:fa:49:cd:d0:6f:9a:
d2:4a:90:09:14:73:a7:64:31:cc:36:29:94:2e:b1:
1c:8f:3d:84:a4:94:f3:ca:69:88:3b:48:be:34:77:
ca:b3:d5:67:00:97:06:66:d4:97:79:d3:6f:39:41:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:83:C2:66:46:5D:1E:AD:92:65:1A:8F:D5:4B:2E:E8:06:CF:E0:76
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.44.0.0/16
59.154.0.0/16
61.88.0.0-61.88.219.255
61.88.228.0-61.88.230.255
61.88.232.0/22
61.88.253.0-61.88.255.255
119.225.0.0/16
124.19.0.0/17
125.63.128.0/17
202.139.0.0-202.139.191.255
203.13.96.0/24
203.13.98.0/24
203.13.123.0/24
203.13.125.0-203.13.129.255
203.13.133.0-203.13.134.255
203.202.0.0-203.202.191.255
210.0.0.0/24
220.101.0.0/17
IPv6:
2405:9000::/32
Signature Algorithm: sha256WithRSAEncryption
57:bb:1d:b1:b7:f9:03:bd:c0:d3:ac:f7:0c:e2:0c:b5:2c:f7:
3b:21:36:93:4d:5b:76:26:6b:fe:d1:b1:c8:ab:33:93:e8:aa:
b8:10:8f:af:88:c5:02:96:ec:ac:83:89:c7:4d:2f:68:8b:e6:
62:ca:63:87:ab:6d:f9:0f:79:a7:76:b0:1b:e1:5e:c4:a7:a6:
de:a6:32:1c:b2:ed:5a:4c:da:f0:e0:fe:fe:10:4a:92:b0:67:
b2:23:9f:88:ef:32:bd:13:54:bd:a4:ed:91:f9:8f:f1:b7:92:
7e:ac:b0:6c:bb:4c:a6:01:a0:76:62:73:76:a6:ca:c2:cf:c1:
1f:f5:24:dd:54:c7:f6:f4:d0:c4:6b:42:09:75:d2:3b:a2:51:
a3:33:59:ec:c6:f1:bd:f6:e0:e8:dd:ac:0f:b3:25:46:36:8e:
00:bb:5d:6f:59:d4:3b:95:a4:49:49:b4:e7:44:9b:58:28:cb:
15:5c:11:9d:0a:25:20:6e:8b:b0:6a:5f:e1:56:0f:d5:05:4e:
60:b1:f6:d7:9c:b8:60:a8:f7:de:31:03:d8:b1:c8:97:5b:f3:
1c:75:05:03:35:5e:d6:0e:1b:ed:3b:a3:6e:7f:8a:80:4a:75:
14:38:23:e8:bc:ba:0c:5e:34:8f:a7:cb:d2:c8:56:c5:53:d0:
e0:5c:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 08:51:59 2026 by rpki-client