Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/553170245AC511EBA052F663C4F9AE02.roa
File: 553170245AC511EBA052F663C4F9AE02.roa (raw, json)
Hash identifier: NBDkJIuqHlF4I8cMlSivAAbBMzPvILaMaBqKjeLV/KQ=
Subject key identifier: 54:1C:B4:A0:BD:10:C7:DC:0C:99:33:A9:22:0E:83:9F:2F:19:CC:A6
Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial: 0BB2
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/553170245AC511EBA052F663C4F9AE02.roa
Signing time: Fri 26 Jun 2026 20:24:11 +0000
ROA not before: Fri 26 Jun 2026 20:24:11 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 9269
IP address blocks: 14.136.0.0/16 maxlen: 24
14.198.0.0/17 maxlen: 24
14.198.128.0/18 maxlen: 24
14.198.192.0/19 maxlen: 24
14.198.224.0/20 maxlen: 24
14.199.0.0/16 maxlen: 24
43.224.232.0/22 maxlen: 24
58.176.0.0/15 maxlen: 15
58.176.0.0/16 maxlen: 24
58.177.0.0/16 maxlen: 24
59.148.0.0/15 maxlen: 15
59.148.0.0/16 maxlen: 24
59.149.0.0/16 maxlen: 24
61.92.0.0/15 maxlen: 15
61.92.0.0/16 maxlen: 24
61.93.0.0/16 maxlen: 24
61.238.0.0/15 maxlen: 15
61.238.0.0/16 maxlen: 24
61.239.0.0/16 maxlen: 24
61.244.0.0/16 maxlen: 24
103.243.0.0/22 maxlen: 24
110.235.0.0/17 maxlen: 24
119.246.0.0/15 maxlen: 15
119.246.0.0/16 maxlen: 24
119.247.0.0/16 maxlen: 24
123.202.0.0/15 maxlen: 15
123.202.0.0/16 maxlen: 24
123.203.0.0/16 maxlen: 24
124.244.0.0/16 maxlen: 24
183.178.0.0/15 maxlen: 15
183.178.0.0/16 maxlen: 24
183.179.0.0/16 maxlen: 24
202.77.4.0/22 maxlen: 24
202.77.24.0/21 maxlen: 24
202.77.32.0/19 maxlen: 24
203.80.64.0/18 maxlen: 24
203.80.192.0/18 maxlen: 24
203.185.0.0/18 maxlen: 24
203.186.0.0/16 maxlen: 24
210.6.0.0/16 maxlen: 24
2401:f400::/32 maxlen: 32
2403:f500::/32 maxlen: 32
2403:f500::/35 maxlen: 35
2403:f500:2000::/35 maxlen: 35
2403:f500:6000::/35 maxlen: 35
2403:f500:8000::/35 maxlen: 35
2403:f500:a000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2994 (0xbb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Validity
Not Before: Jun 26 20:24:11 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3edfeb-c304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c7:f1:34:bc:cd:fc:4d:59:b1:0f:13:a6:a4:
d7:cc:16:9a:6c:5d:45:2a:72:99:1c:1c:80:b5:eb:
92:e8:e7:90:96:36:18:20:ea:73:10:62:06:9e:48:
22:1b:d2:0d:e4:c0:17:16:de:44:4f:da:f1:d6:7a:
37:80:18:74:d1:ba:ac:19:6c:9b:69:08:27:58:85:
8f:1c:83:e5:f1:73:a2:79:2d:4e:49:90:61:d3:19:
91:ec:68:7b:f9:f8:9a:fc:c8:01:ae:b8:65:f6:b4:
e5:24:3d:f2:c8:91:2b:70:df:97:2f:1f:40:d4:49:
58:8c:0e:6a:f4:4c:20:b2:77:1c:3e:d8:e5:39:be:
c2:c6:31:b8:2d:4a:95:c9:ca:bf:bd:da:49:88:2d:
3e:ee:8e:e2:0d:8e:c4:4f:df:bc:b3:45:07:83:6d:
05:49:6b:df:b2:d4:67:8b:00:41:a4:4a:71:48:5a:
75:7a:63:1d:b6:aa:67:b1:4b:3d:4a:41:d9:c0:20:
b1:d0:d2:d8:8d:42:d0:52:bf:f5:82:8c:99:bd:52:
f9:33:fd:a0:a3:e5:8f:77:e9:19:05:9c:1f:d9:40:
b0:8c:c2:da:80:51:2e:36:1a:1f:9b:d8:87:ab:42:
3a:cc:7b:d8:0a:bf:28:9a:95:e3:8c:52:ef:a7:d4:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1C:B4:A0:BD:10:C7:DC:0C:99:33:A9:22:0E:83:9F:2F:19:CC:A6
X509v3 Authority Key Identifier:
keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/553170245AC511EBA052F663C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.136.0.0/16
14.198.0.0-14.198.239.255
14.199.0.0/16
43.224.232.0/22
58.176.0.0/15
59.148.0.0/15
61.92.0.0/15
61.238.0.0/15
61.244.0.0/16
103.243.0.0/22
110.235.0.0/17
119.246.0.0/15
123.202.0.0/15
124.244.0.0/16
183.178.0.0/15
202.77.4.0/22
202.77.24.0-202.77.63.255
203.80.64.0/18
203.80.192.0/18
203.185.0.0/18
203.186.0.0/16
210.6.0.0/16
IPv6:
2401:f400::/32
2403:f500::/32
Signature Algorithm: sha256WithRSAEncryption
54:19:65:42:f0:33:ab:41:4f:dd:c1:c2:ad:0c:07:ac:8b:86:
6d:fb:8a:8b:a2:eb:cb:a7:3d:2f:ef:6f:3b:3f:f9:fe:a5:e7:
e5:45:e3:af:06:06:ac:bf:b8:16:a4:d4:6f:52:cd:cb:78:66:
a8:a7:3f:2e:60:b7:fe:bb:c6:85:06:90:fc:c1:80:b5:3c:6c:
ab:ab:90:5d:62:94:e2:c6:35:be:df:0b:0a:ce:de:f2:be:3a:
17:b1:5b:e4:7b:81:ab:20:69:d0:31:f1:0d:db:bc:b3:ef:ea:
6d:79:3b:29:23:de:d8:39:dd:f6:55:46:2e:3b:53:cc:fa:62:
17:68:11:55:c0:16:a1:f7:c9:e0:40:b9:dc:cc:74:4d:8f:66:
98:eb:8b:65:38:79:ec:9b:31:38:c8:15:87:4c:c8:09:e9:ea:
d5:cc:6f:49:9b:fc:ec:23:2d:6f:23:f2:82:d1:7e:ef:b7:9e:
81:49:dd:8f:bd:1b:a3:22:db:05:7a:26:5b:f5:16:65:04:be:
9c:e5:29:a9:8d:4c:4c:39:e7:40:c0:c9:e0:04:a5:e7:fe:91:
ab:52:d5:95:d4:81:32:5c:c2:cc:83:70:b6:1a:f8:63:1b:fc:
b6:1d:56:21:98:52:6b:c4:ac:c4:2c:74:ab:76:bf:ed:26:4c:
14:bf:f3:e5
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE
NTQ0QTYyQTYwHhcNMjYwNjI2MjAyNDExWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNlZGZlYi1jMzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3MfxNLzN/E1ZsQ8TpqTXzBaabF1FKnKZHByAteuS6OeQljYYIOpzEGIGnkgi
G9IN5MAXFt5ET9rx1no3gBh00bqsGWybaQgnWIWPHIPl8XOieS1OSZBh0xmR7Gh7
+fia/MgBrrhl9rTlJD3yyJErcN+XLx9A1ElYjA5q9EwgsnccPtjlOb7CxjG4LUqV
ycq/vdpJiC0+7o7iDY7ET9+8s0UHg20FSWvfstRniwBBpEpxSFp1emMdtqpnsUs9
SkHZwCCx0NLYjULQUr/1goyZvVL5M/2go+WPd+kZBZwf2UCwjMLagFEuNhofm9iH
q0I6zHvYCr8ompXjjFLvp9Q0RQIDAQABo4IC+zCCAvcwHQYDVR0OBBYEFFQctKC9
EMfcDJkzqSIOg58vGcymMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1
MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY0N0MvNDM3Q0M0MDY4NTEzMTFFQUFBMEIwQTdGQzRGOUFFMDIvNTUzMTcwMjQ1
QUM1MTFFQkEwNTJGNjYzQzRGOUFFMDIucm9hMIG5BggrBgEFBQcBBwEB/wSBqTCB
pjCBjQQCAAEwgYYDAwAOiDALAwMBDsYDBAQOxuADAwAOxwMEAivg6AMDATqwAwMB
O5QDAwE9XAMDAT3uAwMAPfQDBAJn8wADBAdu6wADAwF39gMDAXvKAwMAfPQDAwG3
sgMEAspNBDAMAwQDyk0YAwQGyk0AAwQGy1BAAwQGy1DAAwQGy7kAAwMAy7oDAwDS
BjAUBAIAAjAOAwUAJAH0AAMFACQD9QAwDQYJKoZIhvcNAQELBQADggEBAFQZZULw
M6tBT93Bwq0MB6yLhm37ioui68unPS/vbzs/+f6l5+VF468GBqy/uBak1G9Szct4
ZqinPy5gt/67xoUGkPzBgLU8bKurkF1ilOLGNb7fCwrO3vK+OhexW+R7gasgadAx
8Q3bvLPv6m15Oykj3tg53fZVRi47U8z6YhdoEVXAFqH3yeBAudzMdE2PZpjri2U4
eeybMTjIFYdMyAnp6tXMb0mb/OwjLW8j8oLRfu+3noFJ3Y+9G6Mi2wV6Jlv1FmUE
vpzlKamNTEw550DAyeAEpef+katS1ZXUgTJcwsyDcLYa+GMb/LYdViGYUmvErMQs
dKt2v+0mTBS/8+U=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:00:25 2026 by rpki-client