Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CB67A9DC8D1311EF9895E61CC4F9AE02.roa
File: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (raw, json)
Hash identifier: +gaavVRD8B7wEFk6T+tpdPtOFmRhdaX1JhEF5NzSaRM=
Subject key identifier: C5:AC:AB:8D:85:1E:65:05:81:22:C4:55:26:3D:D5:B7:DF:BD:45:E0
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0D1B
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CB67A9DC8D1311EF9895E61CC4F9AE02.roa
Signing time: Fri 14 Aug 2026 19:38:32 +0000
ROA not before: Fri 14 Aug 2026 19:38:32 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 15830
IP address blocks: 27.111.128.0/22 maxlen: 22
36.255.39.0/24 maxlen: 24
103.8.176.0/22 maxlen: 22
103.8.180.0/22 maxlen: 22
103.8.180.0/24 maxlen: 24
103.8.182.0/23 maxlen: 23
119.27.0.0/19 maxlen: 19
119.27.32.0/20 maxlen: 20
119.27.50.0/23 maxlen: 23
119.27.52.0/22 maxlen: 22
119.27.56.0/22 maxlen: 22
119.27.60.0/23 maxlen: 23
122.50.64.0/19 maxlen: 19
122.50.104.0/21 maxlen: 21
122.50.112.0/22 maxlen: 22
122.50.120.0/21 maxlen: 21
180.189.0.0/20 maxlen: 20
180.189.0.0/21 maxlen: 21
180.189.8.0/21 maxlen: 21
180.189.8.0/22 maxlen: 22
180.189.13.0/24 maxlen: 24
180.189.14.0/23 maxlen: 23
180.189.32.0/20 maxlen: 20
180.189.48.0/22 maxlen: 22
180.189.56.0/21 maxlen: 21
183.177.0.0/20 maxlen: 20
183.177.16.0/20 maxlen: 20
183.177.32.0/20 maxlen: 20
202.167.224.0/23 maxlen: 23
202.167.227.0/24 maxlen: 24
202.167.230.0/23 maxlen: 23
202.167.232.0/24 maxlen: 24
202.167.234.0/23 maxlen: 23
202.167.236.0/22 maxlen: 22
202.167.240.0/22 maxlen: 22
202.167.244.0/22 maxlen: 22
202.167.248.0/23 maxlen: 23
202.167.252.0/23 maxlen: 23
202.167.254.0/24 maxlen: 24
202.167.255.0/24 maxlen: 24
202.177.192.0/24 maxlen: 24
202.177.193.0/24 maxlen: 24
202.177.195.0/24 maxlen: 24
202.177.196.0/23 maxlen: 23
202.177.198.0/24 maxlen: 24
202.177.199.0/24 maxlen: 24
202.177.200.0/23 maxlen: 23
202.177.202.0/23 maxlen: 23
202.177.204.0/23 maxlen: 23
202.177.206.0/24 maxlen: 24
202.177.207.0/24 maxlen: 24
203.190.224.0/23 maxlen: 23
203.190.226.0/24 maxlen: 24
203.190.228.0/23 maxlen: 23
203.190.232.0/22 maxlen: 22
203.190.232.0/24 maxlen: 24
203.190.236.0/22 maxlen: 22
2407:b000::/32 maxlen: 32
2407:b001::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Aug 14 19:38:32 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7f6eb8-ec51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:53:76:e6:89:96:2c:55:7d:51:5a:d3:48:
16:19:e7:cf:9f:91:0c:3d:e0:a3:25:3f:fa:76:7b:
be:b1:20:9c:29:d1:a4:14:c6:7c:f9:94:55:4b:a3:
9d:3a:94:37:1b:d9:ad:37:f9:31:a5:65:2c:25:db:
94:c7:32:b7:06:b5:89:30:a1:62:fb:48:cb:cb:ef:
6f:d7:bc:24:77:d0:cf:34:8f:4b:4d:af:87:96:69:
a7:fc:97:4d:83:bc:84:38:fb:0b:7b:2b:3a:41:25:
e9:46:9c:34:1f:ad:cf:71:c5:f1:42:b7:84:8c:71:
60:e1:6f:9c:04:b0:9b:ec:09:b1:ad:36:07:22:a2:
7a:b3:21:75:8e:fb:23:ca:f4:81:b7:70:d9:8a:e7:
e9:c4:90:2f:66:62:08:8b:e5:e5:df:54:c9:7f:fd:
e3:65:fd:35:2f:c5:b4:9c:ca:04:b2:d8:18:a2:f5:
73:a1:8f:0b:c6:b8:71:0d:33:fe:1f:0e:15:d4:af:
55:76:74:a1:65:71:92:b1:22:02:0d:44:7a:4d:17:
5b:a8:77:32:a3:62:13:10:8d:ff:2f:17:ca:54:a2:
e4:33:ee:a2:00:44:c4:b8:0a:27:e0:fb:bc:f3:d4:
ae:e5:81:7c:f5:46:89:46:2f:e6:19:fe:b0:b9:c6:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AC:AB:8D:85:1E:65:05:81:22:C4:55:26:3D:D5:B7:DF:BD:45:E0
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CB67A9DC8D1311EF9895E61CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.111.128.0/22
36.255.39.0/24
103.8.176.0/21
119.27.0.0-119.27.47.255
119.27.50.0-119.27.61.255
122.50.64.0/19
122.50.104.0-122.50.115.255
122.50.120.0/21
180.189.0.0/20
180.189.32.0-180.189.51.255
180.189.56.0/21
183.177.0.0-183.177.47.255
202.167.224.0/23
202.167.227.0/24
202.167.230.0-202.167.232.255
202.167.234.0-202.167.249.255
202.167.252.0/22
202.177.192.0/23
202.177.195.0-202.177.207.255
203.190.224.0-203.190.226.255
203.190.228.0/23
203.190.232.0/21
IPv6:
2407:b000::/31
Signature Algorithm: sha256WithRSAEncryption
96:a4:cf:95:cd:d7:6f:9d:9b:1d:54:40:bc:0f:aa:53:8d:1d:
c4:a3:67:9d:df:06:36:57:c3:a0:c7:62:bd:e3:4e:21:44:b3:
ed:9e:ea:8b:d1:9d:1a:d0:f0:c4:6e:82:e6:11:dd:a6:a0:f8:
85:cf:79:fc:8d:18:30:c6:b2:cb:53:1e:6b:b4:e7:b6:50:f8:
b3:8f:b7:1c:1e:58:da:83:02:ce:a9:43:b2:28:95:11:92:59:
0a:50:df:68:02:c0:d6:1e:a8:cf:10:72:65:b2:b3:e3:6c:07:
d4:d0:7a:53:01:69:0b:24:f1:8d:7a:0a:66:54:ba:0a:29:69:
80:d9:d1:56:36:16:c3:3f:8a:d2:4b:64:26:04:39:42:71:b2:
75:10:91:60:82:ef:26:99:50:ab:aa:86:8a:98:38:22:44:55:
a5:64:c0:61:3b:77:5f:38:e3:13:62:ea:7e:b8:2b:11:ff:1c:
46:0f:6c:ac:30:00:3b:23:be:24:a1:af:f8:47:d1:8e:5a:78:
04:01:a8:e3:29:3f:05:6d:76:fb:29:a3:1c:5a:d0:9b:c4:a7:
4f:b2:1f:10:b4:98:78:03:71:18:5a:d3:e9:43:f0:87:a8:cf:
a9:3f:f3:4b:56:9a:fa:94:20:56:87:63:62:74:bf:2f:26:38:
58:71:28:1c
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgICDRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4
ODFBRTQ5MTgwHhcNMjYwODE0MTkzODMyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdmNmViOC1lYzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQ5TduaJlixVfVFa00gWGefPn5EMPeCjJT/6dnu+sSCcKdGkFMZ8+ZRVS6Od
OpQ3G9mtN/kxpWUsJduUxzK3BrWJMKFi+0jLy+9v17wkd9DPNI9LTa+Hlmmn/JdN
g7yEOPsLeys6QSXpRpw0H63PccXxQreEjHFg4W+cBLCb7AmxrTYHIqJ6syF1jvsj
yvSBt3DZiufpxJAvZmIIi+Xl31TJf/3jZf01L8W0nMoEstgYovVzoY8LxrhxDTP+
Hw4V1K9VdnShZXGSsSICDUR6TRdbqHcyo2ITEI3/LxfKVKLkM+6iAETEuAon4Pu8
89Su5YF89UaJRi/mGf6wucYx9wIDAQABo4IDODCCAzQwHQYDVR0OBBYEFMWsq42F
HmUFgSLEVSY91bffvUXgMB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0
NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvQ0I2N0E5REM4
RDEzMTFFRjk4OTVFNjFDQzRGOUFFMDIucm9hMIH2BggrBgEFBQcBBwEB/wSB5jCB
4zCB0QQCAAEwgcoDBAIbb4ADBAAk/ycDBANnCLAwCwMDAHcbAwQEdxsgMAwDBAF3
GzIDBAF3GzwDBAV6MkAwDAMEA3oyaAMEAnoycAMEA3oyeAMEBLS9ADAMAwQFtL0g
AwQCtL0wAwQDtL04MAsDAwC3sQMEBLexIAMEAcqn4AMEAMqn4zAMAwQByqfmAwQA
yqfoMAwDBAHKp+oDBAHKp/gDBALKp/wDBAHKscAwDAMEAMqxwwMEBMqxwDAMAwQF
y77gAwQAy77iAwQBy77kAwQDy77oMA0EAgACMAcDBQEkB7AAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWpM+VzddvnZsdVEC8D6pTjR3Eo2ed3wY2V8Ogx2K9404hRLPtnuqL
0Z0a0PDEboLmEd2moPiFz3n8jRgwxrLLUx5rtOe2UPizj7ccHljagwLOqUOyKJUR
klkKUN9oAsDWHqjPEHJlsrPjbAfU0HpTAWkLJPGNegpmVLoKKWmA2dFWNhbDP4rS
S2QmBDlCcbJ1EJFggu8mmVCrqoaKmDgiRFWlZMBhO3dfOOMTYup+uCsR/xxGD2ys
MAA7I74koa/4R9GOWngEAajjKT8FbXb7KaMcWtCbxKdPsh8QtJh4A3EYWtPpQ/CH
qM+pP/NLVpr6lCBWh2NidL8vJjhYcSgc
-----END CERTIFICATE-----
Generated at Sat Aug 22 00:53:21 2026 by rpki-client