Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/2E96A63A690A11EF9525E980C4F9AE02.roa
File: 2E96A63A690A11EF9525E980C4F9AE02.roa (raw, json)
Hash identifier: fu29/u9VpVu7rmcHbFU0N0wrb7076t3GVXEP5c8rVMA=
Subject key identifier: 21:B2:C5:22:16:C2:B1:EB:7D:F7:5C:1C:5B:09:6D:3E:79:FC:92:ED
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 08DA
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/2E96A63A690A11EF9525E980C4F9AE02.roa
Signing time: Wed 12 Aug 2026 08:27:12 +0000
ROA not before: Wed 12 Aug 2026 08:27:12 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 45820
IP address blocks: 14.194.0.0/18 maxlen: 24
14.194.64.0/18 maxlen: 24
14.194.128.0/18 maxlen: 24
14.194.208.0/20 maxlen: 24
14.194.240.0/20 maxlen: 24
14.195.0.0/18 maxlen: 24
14.195.64.0/19 maxlen: 24
14.195.96.0/19 maxlen: 24
14.195.128.0/18 maxlen: 24
14.195.192.0/20 maxlen: 24
14.195.208.0/20 maxlen: 24
14.195.240.0/20 maxlen: 24
49.200.0.0/14 maxlen: 14
49.200.0.0/19 maxlen: 24
49.200.40.0/21 maxlen: 24
49.200.48.0/21 maxlen: 24
49.200.56.0/22 maxlen: 24
49.200.60.0/22 maxlen: 24
49.200.96.0/21 maxlen: 24
49.200.104.0/21 maxlen: 24
49.200.112.0/21 maxlen: 24
49.200.120.0/21 maxlen: 24
49.200.128.0/21 maxlen: 24
49.200.136.0/21 maxlen: 24
49.200.144.0/21 maxlen: 24
49.200.152.0/21 maxlen: 24
49.200.160.0/21 maxlen: 24
49.200.168.0/21 maxlen: 24
49.200.176.0/21 maxlen: 24
49.200.184.0/21 maxlen: 24
49.200.192.0/21 maxlen: 24
49.200.224.0/21 maxlen: 24
49.200.232.0/21 maxlen: 24
49.200.240.0/21 maxlen: 24
49.200.248.0/21 maxlen: 24
49.201.32.0/21 maxlen: 24
49.202.208.0/24 maxlen: 24
49.249.0.0/17 maxlen: 24
49.249.128.0/18 maxlen: 24
115.160.217.0/24 maxlen: 24
182.156.0.0/18 maxlen: 22
182.156.0.0/22 maxlen: 24
182.156.4.0/23 maxlen: 24
182.156.8.0/21 maxlen: 24
182.156.16.0/22 maxlen: 24
182.156.22.0/23 maxlen: 24
182.156.24.0/21 maxlen: 23
182.156.24.0/23 maxlen: 24
182.156.28.0/22 maxlen: 24
182.156.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266 (0x8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Aug 12 08:27:12 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a7c2e60-7bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:31:25:83:4c:e0:ff:5f:98:55:a7:df:00:
5b:f7:5b:b5:4a:9c:2b:63:1d:43:e0:07:2c:0e:53:
d2:80:a7:23:91:14:fc:2a:56:16:78:df:90:72:c9:
ae:37:d6:81:22:64:ae:0e:d7:14:40:79:ee:3c:d3:
9b:96:24:d3:48:f8:31:6a:14:2a:57:10:9a:29:55:
67:f4:e9:94:15:2f:5b:b4:39:93:95:4c:f1:eb:17:
91:e5:91:5b:8d:de:c1:d1:88:95:1e:18:79:de:0c:
b1:06:65:c9:d6:c7:4b:ba:e5:1e:a4:2b:ea:14:0d:
8e:b3:d6:cf:8b:5f:25:b6:a9:bf:ad:c0:71:47:af:
b7:76:f0:61:41:de:77:c0:6b:9a:5e:63:c5:ab:38:
73:c4:21:4e:8b:78:a9:f3:95:39:e6:62:4e:7d:3c:
5e:1a:33:bd:60:0a:11:7a:24:f7:7b:cc:ac:fa:0d:
ad:c2:1e:0c:03:24:d0:ba:aa:93:b3:c5:c8:49:14:
36:3b:04:2b:be:9a:b9:5b:53:c1:e9:d9:c3:c7:31:
df:81:83:6f:fb:4e:b8:d8:f9:41:39:85:75:90:f7:
df:b9:9c:34:2d:4c:fa:46:9c:97:96:b5:a8:52:1a:
21:2f:91:7e:1a:2f:c0:31:9e:08:e4:d0:41:5d:53:
c3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B2:C5:22:16:C2:B1:EB:7D:F7:5C:1C:5B:09:6D:3E:79:FC:92:ED
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/2E96A63A690A11EF9525E980C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.194.0.0-14.194.191.255
14.194.208.0/20
14.194.240.0-14.195.223.255
14.195.240.0/20
49.200.0.0/14
49.249.0.0-49.249.191.255
115.160.217.0/24
182.156.0.0/18
Signature Algorithm: sha256WithRSAEncryption
c7:49:d5:d9:62:07:d9:0c:5b:89:fa:c4:ea:0e:02:68:a7:63:
bc:81:e3:42:23:47:34:b2:4f:75:b8:5a:0e:34:7d:31:d1:79:
c1:0c:ab:34:6d:9b:63:04:27:76:60:d3:93:6f:38:e9:d8:5b:
32:7d:aa:66:4b:34:eb:26:87:97:d3:30:ab:b1:14:cf:e3:72:
b6:67:46:c3:84:b9:24:43:a1:9a:64:88:af:98:a5:23:3b:1a:
80:fe:c2:b6:18:84:30:ad:4e:7b:73:3c:4c:cb:55:ad:a7:fd:
6f:65:c7:8a:96:f6:19:45:f0:ac:8f:6f:48:63:19:45:40:f8:
37:95:3a:1d:c2:2c:77:cf:f8:89:92:0f:ee:82:6a:c9:c6:f4:
93:5a:83:c5:15:f3:e5:1f:98:75:e7:bf:a3:c7:64:6e:0b:8c:
6c:a9:3f:1a:75:b7:e2:c9:0d:3d:7f:4d:c5:c0:a1:b2:50:cc:
2a:20:f6:80:77:94:49:84:22:88:69:73:af:0d:f8:f2:2d:6b:
dd:c2:ca:44:67:dc:18:48:79:8f:f0:1e:71:38:06:84:4a:8d:
82:fc:fc:1e:ae:a7:e6:44:84:03:61:81:0f:3e:d4:35:14:e8:
91:13:bc:48:87:44:9b:56:3b:53:a0:2f:5a:68:98:e7:0a:dd:
0c:9c:7c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:34:46 2026 by rpki-client