Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4D705F4E419711F1B231ABB69F833773.roa
File: 4D705F4E419711F1B231ABB69F833773.roa (raw, json)
Hash identifier: ppP1P2I7en6iPMzRQNviBQcyfvHxjsYQ4YnddAdumLg=
Subject key identifier: F8:C9:9D:79:CC:F1:4F:23:37:8A:D5:C9:CB:61:9C:7E:27:61:9E:0C
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 1055
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4D705F4E419711F1B231ABB69F833773.roa
Signing time: Sun 26 Apr 2026 19:01:24 +0000
ROA not before: Sun 26 Apr 2026 19:01:24 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.130.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.153.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.157.0/24 maxlen: 24
111.92.158.0/24 maxlen: 24
111.92.159.0/24 maxlen: 24
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 19:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4181 (0x1055)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Apr 26 19:01:24 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69ee6103-8384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:3a:fe:9b:25:28:70:20:f4:c7:bb:17:18:
90:bb:42:99:11:64:de:62:fa:47:33:c9:c3:ea:6c:
a5:bf:30:24:c2:88:06:d5:f2:9f:ef:e0:53:c9:ba:
2a:f5:58:91:69:19:e2:1a:b2:a0:7f:c8:46:e9:dd:
03:94:21:9a:68:4b:85:3d:56:44:e3:eb:88:45:6d:
cb:65:3c:83:85:4e:5a:b2:ab:8f:dd:9e:67:1b:1f:
35:60:c9:72:8a:34:4c:0a:15:44:b3:c8:9b:9b:62:
15:76:35:fa:6d:69:90:27:85:2f:5a:0e:67:aa:e1:
95:7e:1c:5c:a7:83:37:5b:b5:55:c2:83:f7:65:e1:
7c:8f:4c:c6:b6:a2:dc:1b:a1:4e:42:d5:72:74:a0:
65:2f:77:f3:d4:15:5e:57:4d:34:cc:89:96:c8:16:
1e:55:03:bd:ef:ad:3f:e3:86:9e:e0:82:08:b1:7d:
09:bc:79:1a:5a:e5:d9:0c:11:a4:9c:ba:9f:d3:c6:
68:6a:82:c2:ba:47:7d:ef:4f:83:c2:99:92:cb:a6:
f0:11:13:25:dd:1b:ad:25:75:db:13:53:1b:e4:15:
16:b9:f6:79:b3:60:13:7d:48:f2:9e:9b:c6:8e:05:
74:e4:0e:2c:91:35:d9:99:c4:75:65:3e:fc:3e:03:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C9:9D:79:CC:F1:4F:23:37:8A:D5:C9:CB:61:9C:7E:27:61:9E:0C
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4D705F4E419711F1B231ABB69F833773.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.130.0/24
14.192.132.0-14.192.136.255
14.192.139.0-14.192.143.255
14.192.146.0-14.192.155.255
14.192.157.0/24
14.192.159.0/24
43.247.120.0/22
103.20.132.0/22
111.92.157.0-111.92.159.255
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
94:8f:09:4d:c1:7c:08:82:6c:88:c2:ed:7d:01:b1:ea:b3:49:
7d:03:51:48:a5:be:37:5e:96:b3:ea:75:83:8c:67:fa:e9:10:
d4:15:93:94:07:7e:6f:47:3b:92:bb:4b:99:d8:cc:96:1f:ad:
e1:8a:b3:b7:64:5f:38:ca:9e:1a:50:23:e2:40:96:63:b2:b4:
77:c1:a0:01:ad:f0:1e:da:68:8d:e7:cb:20:5b:5d:3a:57:00:
db:da:d4:93:08:ab:3d:db:8a:72:b5:47:1a:b7:c2:3e:6a:71:
5c:aa:11:89:5a:c2:4d:ab:0f:c0:0f:7a:fe:0a:8a:68:d2:79:
90:0f:2a:fd:4b:7f:6b:08:6f:64:5e:f1:db:65:2b:6a:a1:6f:
8c:85:1e:b6:07:2d:ba:75:77:10:3d:81:1c:1a:cc:95:fb:e1:
51:d5:67:f9:53:fc:e8:70:aa:e9:f1:27:b4:1d:23:f1:5b:5e:
1a:99:a3:c4:c2:89:54:55:3c:df:f9:81:35:e7:00:74:ab:ed:
30:a7:af:5d:03:05:aa:0c:11:90:0b:7b:a1:68:56:c9:84:96:
fd:8c:40:6d:c1:12:59:d8:64:a3:ff:2b:fd:fd:44:62:02:b6:
80:2b:4d:15:f2:23:9d:91:a9:ae:08:b1:cb:87:e9:38:08:ad:
19:3a:a3:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 28 05:24:17 2026 by rpki-client