Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A365FCD0FC7C11EF9988DB39C4F9AE02.roa
File: A365FCD0FC7C11EF9988DB39C4F9AE02.roa (raw, json)
Hash identifier: r/tWm3svqSizLi93KrtuPnN7f5s/hbXKYISlAxjtEkk=
Subject key identifier: 86:E9:CF:0A:5F:5B:8E:A3:CC:C6:C0:A3:9E:67:38:06:21:33:6A:62
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 614A
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A365FCD0FC7C11EF9988DB39C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:39:27 +0000
ROA not before: Sat 17 May 2025 20:37:19 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 10032
IP address blocks: 118.143.24.0/24 maxlen: 24
118.143.197.0/24 maxlen: 24
203.184.128.0/24 maxlen: 24
203.184.129.0/24 maxlen: 24
203.184.204.0/22 maxlen: 22
203.184.204.0/23 maxlen: 23
203.184.204.0/24 maxlen: 24
203.184.205.0/24 maxlen: 24
203.184.206.0/23 maxlen: 23
203.184.206.0/24 maxlen: 24
203.184.207.0/24 maxlen: 24
203.184.208.0/22 maxlen: 22
203.184.208.0/23 maxlen: 23
203.184.208.0/24 maxlen: 24
203.184.209.0/24 maxlen: 24
203.184.210.0/23 maxlen: 23
203.184.210.0/24 maxlen: 24
203.184.211.0/24 maxlen: 24
210.0.234.0/24 maxlen: 24
210.0.235.0/24 maxlen: 24
210.3.22.0/24 maxlen: 24
210.3.27.0/24 maxlen: 24
210.3.47.0/24 maxlen: 24
218.189.64.0/24 maxlen: 24
218.189.65.0/24 maxlen: 24
218.189.66.0/24 maxlen: 24
218.189.67.0/24 maxlen: 24
218.189.68.0/24 maxlen: 24
218.189.69.0/24 maxlen: 24
218.189.70.0/24 maxlen: 24
218.189.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 19:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24906 (0x614a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: May 17 20:37:19 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a487df-dfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:77:95:e9:16:11:93:f3:7c:01:f8:a4:c6:
9a:8d:3f:58:5b:1b:4b:43:e0:90:27:d7:2d:af:9d:
08:7a:f4:45:85:e1:79:c0:0d:47:05:71:20:f2:9f:
e2:8c:a4:14:eb:4b:25:48:25:0b:64:0e:0c:4d:be:
d2:0c:c1:1f:30:e7:e8:78:49:fe:c3:2b:71:05:71:
6d:48:6f:62:22:4e:6d:76:d8:8f:8f:92:fd:f7:65:
93:50:09:a2:5c:64:00:6d:d1:f8:29:84:ea:e2:05:
7e:b5:7b:12:6d:46:57:cf:ea:54:47:4b:bf:46:29:
9f:71:06:98:d9:76:67:73:d2:5f:96:2f:71:c3:3b:
a2:1e:bb:21:76:51:0a:a2:aa:fa:e5:de:a2:0c:25:
4b:c8:58:68:f6:e7:32:64:b9:5e:25:4d:b4:1e:3f:
44:f0:08:90:56:8c:7e:18:3b:dc:c4:24:98:ce:78:
60:31:77:1e:5f:62:bd:74:74:de:a8:6c:e3:3a:0f:
2e:d7:46:a2:e4:c8:f5:a4:37:2f:eb:07:0d:2a:6d:
03:68:3d:96:f2:1b:e6:86:2e:80:f0:48:e4:99:1c:
01:2d:b1:10:05:d4:05:ac:2b:85:f2:cf:3c:a7:f6:
6a:72:32:48:f6:ca:56:96:ed:6a:b5:0c:b7:49:5f:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E9:CF:0A:5F:5B:8E:A3:CC:C6:C0:A3:9E:67:38:06:21:33:6A:62
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A365FCD0FC7C11EF9988DB39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
118.143.24.0/24
118.143.197.0/24
203.184.128.0/23
203.184.204.0-203.184.211.255
210.0.234.0/23
210.3.22.0/24
210.3.27.0/24
210.3.47.0/24
218.189.64.0/21
Signature Algorithm: sha256WithRSAEncryption
18:e0:a8:fb:11:fe:4a:5d:b8:48:9d:30:d9:38:1f:16:6c:67:
6b:a1:59:7b:c0:09:56:60:2a:31:f1:eb:4c:fe:b1:4d:cf:d3:
93:93:aa:74:66:f4:0c:05:83:5c:94:23:4f:5b:a9:a3:2a:1d:
ba:27:fa:af:a0:06:76:9b:52:eb:96:88:9c:fc:d5:69:e4:75:
97:79:0e:02:15:5d:f1:1d:36:1a:52:ec:18:ab:75:90:de:2c:
14:a4:3e:d1:11:11:9d:1a:40:0f:71:79:e7:b6:a9:59:76:63:
8b:d8:44:99:b3:7a:90:1d:bb:14:d0:1a:11:97:5c:15:be:a8:
7d:7c:e8:7f:53:77:f8:e0:b6:84:9c:e7:66:5f:29:bb:dc:1c:
bb:e2:42:a5:2e:b8:1c:72:43:8a:bf:95:3f:09:aa:54:9a:08:
28:de:cc:92:2d:c6:a4:96:9a:85:eb:9f:4b:c5:18:c7:61:98:
f5:aa:dd:4c:a8:a2:9c:e5:f7:19:14:32:33:bc:e3:10:33:e1:
6e:b5:aa:93:ab:e7:4f:03:55:bc:fb:a8:44:5a:11:e0:7e:ee:
7c:fe:68:e7:19:70:66:ab:8d:12:e1:e9:6f:eb:95:1d:ad:63:
d3:1e:f6:5f:78:0f:8d:20:64:5b:c8:d2:b4:10:bc:61:cd:06:
b9:ef:52:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:51:26 2026 by rpki-client