Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/8626FFC65AE511EBA452D33EC4F9AE02.roa
File: 8626FFC65AE511EBA452D33EC4F9AE02.roa (raw, json)
Hash identifier: sw6eH1M5hEn6a0pc3B0uLVLZCRXvmEkQN01rQxgEvj0=
Subject key identifier: E0:C2:D7:D3:28:8B:93:17:69:8C:EE:81:12:B3:CD:EE:BB:80:5E:B2
Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial: 0BAC
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/8626FFC65AE511EBA452D33EC4F9AE02.roa
Signing time: Fri 26 Jun 2026 20:23:59 +0000
ROA not before: Fri 26 Jun 2026 20:23:59 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 10103
IP address blocks: 14.136.0.0/16 maxlen: 24
14.198.0.0/17 maxlen: 24
14.198.128.0/18 maxlen: 24
14.198.192.0/19 maxlen: 24
14.198.224.0/20 maxlen: 24
14.199.0.0/16 maxlen: 24
43.224.232.0/22 maxlen: 24
58.176.0.0/15 maxlen: 15
58.176.0.0/16 maxlen: 24
58.177.0.0/16 maxlen: 24
59.148.0.0/15 maxlen: 15
59.148.0.0/16 maxlen: 24
59.149.0.0/16 maxlen: 24
61.92.0.0/15 maxlen: 15
61.92.0.0/16 maxlen: 24
61.93.0.0/16 maxlen: 24
61.238.0.0/15 maxlen: 15
61.238.0.0/16 maxlen: 24
61.239.0.0/16 maxlen: 24
61.244.0.0/16 maxlen: 24
103.243.0.0/22 maxlen: 24
110.235.0.0/17 maxlen: 24
119.246.0.0/15 maxlen: 15
119.246.0.0/16 maxlen: 24
119.247.0.0/16 maxlen: 24
123.202.0.0/15 maxlen: 15
123.202.0.0/16 maxlen: 24
123.203.0.0/16 maxlen: 24
124.244.0.0/16 maxlen: 24
183.178.0.0/15 maxlen: 15
183.178.0.0/16 maxlen: 24
183.179.0.0/16 maxlen: 24
202.77.4.0/22 maxlen: 24
202.77.24.0/21 maxlen: 24
202.77.32.0/19 maxlen: 24
203.80.64.0/18 maxlen: 24
203.80.192.0/18 maxlen: 24
203.185.0.0/18 maxlen: 24
203.186.0.0/16 maxlen: 24
210.6.0.0/16 maxlen: 24
2401:f400::/32 maxlen: 32
2403:f500::/32 maxlen: 32
2403:f500::/35 maxlen: 35
2403:f500:2000::/35 maxlen: 35
2403:f500:6000::/35 maxlen: 35
2403:f500:8000::/35 maxlen: 35
2403:f500:a000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:58:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2988 (0xbac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Validity
Not Before: Jun 26 20:23:59 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3edfdf-3e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:0d:f0:8a:9c:86:d3:2f:67:47:0d:c0:bc:
5c:ac:be:5f:6c:d9:fd:2a:f7:79:1e:52:c3:f6:ea:
7f:37:e4:8e:9c:32:68:46:9e:ab:78:5d:2b:7f:89:
86:ab:45:a3:8d:14:29:73:41:17:32:73:bc:47:98:
aa:6f:00:f5:24:14:df:a6:1b:62:c9:87:f2:39:7a:
8b:75:c0:bf:bd:8c:46:f5:52:8a:c8:55:2c:8d:c8:
f5:07:44:7a:e4:ea:f3:98:36:36:2d:b5:99:c4:bb:
da:c3:b0:c0:09:d5:9c:f7:36:48:a7:85:d1:ee:ab:
c9:dc:b6:5b:9a:06:a4:ce:45:0b:a5:3c:02:c1:a6:
ef:b2:6b:40:b1:44:82:41:38:c4:da:f8:cd:94:9c:
b5:da:43:f6:85:bd:f4:33:5d:e6:83:3e:c2:15:3b:
6f:ae:16:05:02:45:6d:81:70:45:98:1e:46:fe:27:
f5:78:f8:43:71:78:84:e0:ad:f3:20:fa:7b:e6:aa:
04:e0:b4:55:0e:d9:37:ad:2f:c5:fd:78:de:6c:e9:
e9:45:28:4e:7a:3e:bf:83:c0:48:9b:d3:c7:13:50:
e8:60:93:31:46:5d:a4:1a:a4:73:91:11:6e:6b:71:
cd:97:58:92:84:80:73:ae:aa:2e:36:f8:ca:f1:ab:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C2:D7:D3:28:8B:93:17:69:8C:EE:81:12:B3:CD:EE:BB:80:5E:B2
X509v3 Authority Key Identifier:
keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/8626FFC65AE511EBA452D33EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.136.0.0/16
14.198.0.0-14.198.239.255
14.199.0.0/16
43.224.232.0/22
58.176.0.0/15
59.148.0.0/15
61.92.0.0/15
61.238.0.0/15
61.244.0.0/16
103.243.0.0/22
110.235.0.0/17
119.246.0.0/15
123.202.0.0/15
124.244.0.0/16
183.178.0.0/15
202.77.4.0/22
202.77.24.0-202.77.63.255
203.80.64.0/18
203.80.192.0/18
203.185.0.0/18
203.186.0.0/16
210.6.0.0/16
IPv6:
2401:f400::/32
2403:f500::/32
Signature Algorithm: sha256WithRSAEncryption
67:24:e2:d5:1f:ae:e5:7b:00:b8:38:e3:51:b2:98:b1:b8:07:
0f:b1:62:9f:da:6f:47:13:f9:4e:29:b7:61:92:13:05:40:9f:
7b:6a:b0:c5:1a:40:c1:af:55:88:a7:9e:60:48:db:77:c1:26:
3c:02:52:c9:2f:bf:3d:37:eb:2b:09:f1:33:12:df:c8:e2:4d:
9d:57:99:d6:63:58:12:46:81:57:3b:22:06:03:fe:0d:00:79:
db:19:6a:c6:48:91:76:59:e0:bb:43:65:0a:88:27:ef:ca:31:
35:3a:21:30:3c:32:d5:c1:e7:7f:ff:e8:c6:d5:66:57:09:f9:
f5:75:de:f9:26:a2:a5:e5:fe:b0:b5:59:a2:3b:6b:06:07:f1:
65:f4:84:e2:b9:eb:a6:d7:68:9d:0e:4d:6e:fe:5d:b5:bb:c0:
09:e9:76:73:20:76:5f:e6:ea:4d:59:31:67:dd:1c:a5:a2:4e:
df:3f:93:69:30:ed:4b:32:58:b7:a5:91:b8:89:33:e1:dc:8e:
16:15:0d:4a:34:d4:ba:0e:a4:f7:78:00:94:6d:82:6c:90:92:
73:ac:82:2f:e1:92:74:ae:0f:5e:ba:cb:36:2c:c1:00:c0:b1:
fd:4b:a6:11:90:b4:d6:ef:68:4c:9d:04:7c:48:8c:c7:83:c6:
6d:cb:86:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:44 2026 by rpki-client