Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C722F0A4528111F1AECE6F98C7833773.roa
File: C722F0A4528111F1AECE6F98C7833773.roa (raw, json)
Hash identifier: EoKigR6NAnH/6yqDIzDrkMrP6Xia+RwjZo8w8klV7vI=
Subject key identifier: B4:F6:9F:C9:F1:D2:61:B8:B2:E0:C7:D4:84:B9:66:54:10:2A:21:BA
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 394E
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C722F0A4528111F1AECE6F98C7833773.roa
Signing time: Mon 18 May 2026 07:34:09 +0000
ROA not before: Mon 18 May 2026 07:34:09 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 19905
IP address blocks: 14.100.0.0/17 maxlen: 24
42.60.0.0/16 maxlen: 24
42.61.0.0/16 maxlen: 24
58.185.0.0/16 maxlen: 24
115.42.128.0/20 maxlen: 24
115.42.144.0/20 maxlen: 24
115.42.160.0/20 maxlen: 24
115.42.176.0/20 maxlen: 24
115.42.192.0/20 maxlen: 24
115.42.208.0/20 maxlen: 24
115.42.224.0/20 maxlen: 24
115.42.240.0/20 maxlen: 24
115.66.0.0/16 maxlen: 24
116.12.128.0/17 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 24
116.15.0.0/16 maxlen: 24
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.128.0/18 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.199.0/24 maxlen: 24
118.201.204.0/24 maxlen: 24
118.201.205.0/24 maxlen: 24
118.201.206.0/24 maxlen: 24
118.201.209.0/24 maxlen: 24
118.201.214.0/24 maxlen: 24
118.201.215.0/24 maxlen: 24
118.201.218.0/24 maxlen: 24
118.201.219.0/24 maxlen: 24
119.73.128.0/17 maxlen: 24
119.74.0.0/16 maxlen: 24
119.75.0.0/18 maxlen: 24
121.6.0.0/16 maxlen: 24
124.66.128.0/19 maxlen: 24
180.255.0.0/17 maxlen: 17
180.255.0.0/18 maxlen: 24
180.255.64.0/18 maxlen: 24
203.124.0.0/22 maxlen: 24
203.125.0.0/16 maxlen: 24
203.126.0.0/16 maxlen: 24
203.127.0.0/16 maxlen: 24
203.169.64.0/18 maxlen: 24
219.74.0.0/16 maxlen: 24
219.75.0.0/17 maxlen: 24
220.255.0.0/17 maxlen: 24
220.255.128.0/17 maxlen: 24
2001:c20::/48 maxlen: 48
2001:c20:18::/48 maxlen: 48
2001:c20:30::/48 maxlen: 48
2001:c20:38::/48 maxlen: 48
2001:c20:100::/48 maxlen: 48
2001:c20:101::/48 maxlen: 48
2001:c20:103::/48 maxlen: 48
2001:c20:108::/48 maxlen: 48
2001:c20:110::/48 maxlen: 48
2001:c20:111::/48 maxlen: 48
2001:c20:121::/48 maxlen: 48
2001:c20:400::/48 maxlen: 48
2001:c20:405::/48 maxlen: 48
2001:c20:1800::/48 maxlen: 48
2001:c20:2010::/48 maxlen: 48
2001:c20:2011::/48 maxlen: 48
2001:c20:2800::/48 maxlen: 48
2001:c20:3800::/48 maxlen: 48
2001:c20:4800::/48 maxlen: 48
2001:c20:4882::/48 maxlen: 48
2001:c20:4c00::/48 maxlen: 48
2001:c20:7000::/48 maxlen: 48
2001:c20:7004::/48 maxlen: 48
2001:c20:7006::/48 maxlen: 48
2001:c20:7800::/48 maxlen: 48
2001:c20:7807::/48 maxlen: 48
2001:c20:8400::/48 maxlen: 48
2001:c20:8c00::/48 maxlen: 48
2001:c20:a800::/48 maxlen: 48
2001:c20:b000::/48 maxlen: 48
2001:c20:b404::/48 maxlen: 48
2001:c20:c801::/48 maxlen: 48
2001:c20:c818::/48 maxlen: 48
2001:c20:c830::/48 maxlen: 48
2001:c20:c836::/48 maxlen: 48
2001:c20:c837::/48 maxlen: 48
2001:c20:c847::/48 maxlen: 48
2001:c20:c849::/48 maxlen: 48
2001:c20:d800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 14:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14670 (0x394e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: May 18 07:34:09 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a0ac0f1-9764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:88:6f:cd:f3:2d:d5:06:40:c0:8d:ab:4f:
0d:65:b1:b3:27:d2:ef:fa:e0:ab:75:f1:02:e0:57:
32:73:ea:a2:18:18:3c:05:50:88:79:33:92:b0:70:
10:d1:c8:3f:44:34:83:64:ad:00:1d:ad:c2:40:bc:
bd:61:c1:32:dd:fb:a5:28:8d:02:e8:0b:09:fa:3d:
a4:f4:73:6c:79:05:f0:eb:07:6f:52:50:fd:8d:ec:
1d:d4:cd:33:40:35:39:9e:a3:84:30:78:88:5b:d6:
07:79:34:59:f0:f6:2e:c7:9b:c7:fa:1b:1e:8b:9c:
43:99:bd:3d:1e:03:30:31:a0:ec:4d:03:f5:d0:b8:
78:25:25:99:40:6f:78:e7:07:08:91:a6:1a:3e:46:
1d:66:03:c2:e2:9b:89:40:b5:b0:e5:58:80:f4:69:
0f:bd:2b:d4:e8:86:bc:57:e2:08:74:59:6c:51:7f:
9b:e3:18:11:3e:21:ee:39:91:7d:c0:4d:ed:37:d3:
2d:c0:a8:c3:c4:f8:63:9f:b1:56:8f:59:ca:cc:6d:
ba:2d:25:c3:42:23:99:7d:e7:74:8e:bf:0f:59:8c:
a7:f1:b4:b8:d4:01:c1:18:72:cf:7c:db:a5:38:f1:
c6:8e:85:da:9c:30:39:a1:90:7a:ea:b5:a3:66:02:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F6:9F:C9:F1:D2:61:B8:B2:E0:C7:D4:84:B9:66:54:10:2A:21:BA
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C722F0A4528111F1AECE6F98C7833773.roa
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/15
58.185.0.0/16
115.42.128.0/17
115.66.0.0/16
116.12.128.0/17
116.14.0.0/15
118.200.0.0/15
119.73.128.0-119.75.63.255
121.6.0.0/16
124.66.128.0/19
180.255.0.0/17
203.124.0.0/22
203.125.0.0-203.127.255.255
203.169.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/16
IPv6:
2001:c20::/48
2001:c20:18::/48
2001:c20:30::/48
2001:c20:38::/48
2001:c20:100::/47
2001:c20:103::/48
2001:c20:108::/48
2001:c20:110::/47
2001:c20:121::/48
2001:c20:400::/48
2001:c20:405::/48
2001:c20:1800::/48
2001:c20:2010::/47
2001:c20:2800::/48
2001:c20:3800::/48
2001:c20:4800::/48
2001:c20:4882::/48
2001:c20:4c00::/48
2001:c20:7000::/48
2001:c20:7004::/48
2001:c20:7006::/48
2001:c20:7800::/48
2001:c20:7807::/48
2001:c20:8400::/48
2001:c20:8c00::/48
2001:c20:a800::/48
2001:c20:b000::/48
2001:c20:b404::/48
2001:c20:c801::/48
2001:c20:c818::/48
2001:c20:c830::/48
2001:c20:c836::/47
2001:c20:c847::/48
2001:c20:c849::/48
2001:c20:d800::/48
Signature Algorithm: sha256WithRSAEncryption
39:80:ce:57:43:90:a0:a6:1e:8b:32:c3:ab:70:d9:c1:c7:24:
f8:ab:7b:9d:65:47:84:3e:3f:16:5d:2e:26:e6:d4:d2:f2:88:
df:81:77:0d:12:e4:f4:d7:00:9d:fe:15:2d:20:7e:dd:e3:10:
35:56:53:56:8f:ad:3d:04:50:70:14:5f:0c:13:b7:86:69:89:
0d:1d:c1:ff:c1:c0:9b:dc:91:d4:3e:9d:f3:7d:65:f6:1b:e4:
dc:f6:80:2e:be:69:20:7e:db:bb:d9:34:de:c6:b1:ee:d2:02:
89:78:60:3c:58:ea:10:0f:94:ac:71:ed:85:f0:76:ec:5d:d9:
06:42:79:24:f2:fd:ef:a6:e8:dc:c7:43:96:05:6b:3a:f6:b8:
52:48:55:d2:08:1e:a7:cb:0d:72:be:8c:5b:20:7c:08:d6:d4:
88:94:06:3d:97:ae:71:95:04:35:da:70:fa:0c:bb:fc:70:9f:
fe:cc:8f:ef:d6:c4:c7:f8:16:3d:15:6a:3e:34:8e:38:09:b0:
39:a8:71:70:4c:2f:3c:4b:8a:65:5c:ee:b3:3e:6e:41:da:c0:
19:b1:60:16:f9:17:aa:7e:88:cb:a5:5e:26:bd:09:e4:55:91:
3c:0a:b9:c8:cd:22:5c:58:39:f2:45:4c:6c:83:ba:ef:96:cb:
84:ab:82:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:22:22 2026 by rpki-client