Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/5E4588844CBF11F1BB1B5F069D833773.roa
File: 5E4588844CBF11F1BB1B5F069D833773.roa (raw, json)
Hash identifier: pOwkCk4kz+8KQ8cc9HWK+U2sp6wulhNBDizHGaXBpFM=
Subject key identifier: 68:EB:71:06:3A:30:DB:B9:F6:76:F3:D3:94:A1:33:FE:09:0E:25:3D
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 0912
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/5E4588844CBF11F1BB1B5F069D833773.roa
Signing time: Sun 10 May 2026 22:27:03 +0000
ROA not before: Sun 10 May 2026 22:27:03 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55720
IP address blocks: 14.192.67.0/24 maxlen: 24
14.192.68.0/24 maxlen: 24
14.192.69.0/24 maxlen: 24
45.116.160.0/24 maxlen: 24
45.116.161.0/24 maxlen: 24
45.116.162.0/24 maxlen: 24
45.116.163.0/24 maxlen: 24
45.120.52.0/24 maxlen: 24
45.120.53.0/24 maxlen: 24
45.120.54.0/24 maxlen: 24
45.120.55.0/24 maxlen: 24
61.4.97.0/24 maxlen: 24
61.4.98.0/24 maxlen: 24
61.4.99.0/24 maxlen: 24
61.4.100.0/22 maxlen: 24
61.4.104.0/22 maxlen: 24
61.4.109.0/24 maxlen: 24
61.4.110.0/24 maxlen: 24
103.4.28.0/24 maxlen: 24
103.4.29.0/24 maxlen: 24
103.4.30.0/24 maxlen: 24
103.4.31.0/24 maxlen: 24
103.15.104.0/24 maxlen: 24
103.15.105.0/24 maxlen: 24
103.15.107.0/24 maxlen: 24
103.21.88.0/24 maxlen: 24
103.21.89.0/24 maxlen: 24
103.21.90.0/24 maxlen: 24
103.21.91.0/24 maxlen: 24
103.23.46.0/24 maxlen: 24
103.23.47.0/24 maxlen: 24
103.71.176.0/24 maxlen: 24
103.71.177.0/24 maxlen: 24
103.71.178.0/24 maxlen: 24
103.71.179.0/24 maxlen: 24
103.243.212.0/24 maxlen: 24
103.243.213.0/24 maxlen: 24
103.243.214.0/24 maxlen: 24
103.243.215.0/24 maxlen: 24
103.246.112.0/24 maxlen: 24
103.246.113.0/24 maxlen: 24
103.246.114.0/24 maxlen: 24
118.107.216.0/24 maxlen: 24
118.107.217.0/24 maxlen: 24
118.107.218.0/24 maxlen: 24
118.107.219.0/24 maxlen: 24
118.107.220.0/24 maxlen: 24
118.107.221.0/24 maxlen: 24
118.107.222.0/24 maxlen: 24
118.107.223.0/24 maxlen: 24
150.107.76.0/24 maxlen: 24
150.107.77.0/24 maxlen: 24
150.107.78.0/24 maxlen: 24
150.107.79.0/24 maxlen: 24
202.9.36.0/24 maxlen: 24
202.9.39.0/24 maxlen: 24
202.73.12.0/24 maxlen: 24
202.73.13.0/24 maxlen: 24
202.73.14.0/24 maxlen: 24
202.73.15.0/24 maxlen: 24
202.87.220.0/24 maxlen: 24
202.87.221.0/24 maxlen: 24
202.87.222.0/24 maxlen: 24
202.87.223.0/24 maxlen: 24
223.25.240.0/24 maxlen: 24
223.25.241.0/24 maxlen: 24
223.25.242.0/24 maxlen: 24
223.25.243.0/24 maxlen: 24
223.25.244.0/24 maxlen: 24
223.25.245.0/24 maxlen: 24
223.25.246.0/24 maxlen: 24
223.25.247.0/24 maxlen: 24
2402:9500::/32 maxlen: 32
2402:9500::/48 maxlen: 48
2402:9500:a00::/48 maxlen: 48
2402:9500:b00::/48 maxlen: 48
2402:9500:c00::/48 maxlen: 48
2402:9500:d00::/48 maxlen: 48
2402:9500:1000::/48 maxlen: 48
2402:9500:2000::/48 maxlen: 48
2402:9500:3000::/48 maxlen: 48
2402:9500:4000::/48 maxlen: 48
2402:9500:5000::/48 maxlen: 48
2402:9500:6000::/48 maxlen: 48
2402:9500:7000::/48 maxlen: 48
2402:9500:8000::/48 maxlen: 48
2402:9500:9000::/48 maxlen: 48
2402:9500:e000::/48 maxlen: 48
2402:9500:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2322 (0x912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: May 10 22:27:03 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a010637-13a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:8d:dd:42:15:b5:d0:59:2f:b7:1a:a4:80:
99:6c:ac:e1:20:86:ff:da:5e:59:29:70:b4:15:ef:
23:21:2c:fb:02:98:29:df:05:f3:a9:54:d8:82:ef:
a5:08:93:06:60:6d:fb:de:ea:9d:8c:22:a6:79:91:
f0:39:52:b8:b1:f2:c3:12:d3:91:35:4e:39:1b:1e:
ae:b2:6d:b3:98:78:15:16:2a:78:c9:2e:e1:1d:7b:
cf:fd:14:c9:f3:2a:bf:e1:09:a7:62:ea:7c:91:81:
62:59:2f:bc:ca:50:6a:1c:39:c3:bf:37:c7:d6:64:
8f:60:1f:56:d3:27:40:c2:66:5f:11:6a:54:2f:8b:
d9:0f:3c:0c:c6:34:20:cb:25:a5:46:e1:16:2c:ca:
5e:e2:10:21:8d:2b:d9:3c:79:5d:28:06:1e:83:0a:
e4:9f:07:4b:c4:91:ab:92:ea:ca:a0:d2:d6:1d:ed:
28:13:ff:cb:e0:df:8a:0d:de:fe:cb:7f:a3:0c:3c:
21:73:14:e5:03:b7:6b:22:08:6a:1f:e2:1e:6f:63:
4f:c7:9c:69:d5:12:fd:70:7d:49:56:60:f1:86:15:
bc:00:0e:a3:39:88:9d:99:6d:e6:ee:a9:9f:d1:06:
bf:0b:b8:f7:1a:7e:cd:d4:30:b3:93:12:49:21:9d:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EB:71:06:3A:30:DB:B9:F6:76:F3:D3:94:A1:33:FE:09:0E:25:3D
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/5E4588844CBF11F1BB1B5F069D833773.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.67.0-14.192.69.255
45.116.160.0/22
45.120.52.0/22
61.4.97.0-61.4.107.255
61.4.109.0-61.4.110.255
103.4.28.0/22
103.15.104.0/23
103.15.107.0/24
103.21.88.0/22
103.23.46.0/23
103.71.176.0/22
103.243.212.0/22
103.246.112.0-103.246.114.255
118.107.216.0/21
150.107.76.0/22
202.9.36.0/24
202.9.39.0/24
202.73.12.0/22
202.87.220.0/22
223.25.240.0/21
IPv6:
2402:9500::/32
Signature Algorithm: sha256WithRSAEncryption
1d:8b:45:b8:3f:4b:29:b5:da:33:48:dc:f5:28:d8:e6:02:bb:
35:b0:2f:92:61:1b:6e:7d:1d:6a:63:b4:5b:6e:61:09:3b:96:
e4:82:9b:3e:8f:96:6a:3c:30:1b:7b:02:f2:3e:62:79:6c:3c:
cc:79:d3:d3:48:56:50:8d:b2:bb:7d:9e:f4:3a:6d:d3:10:ed:
8c:dc:3a:34:2b:24:45:b9:39:fb:24:b8:a8:9b:da:27:4f:b9:
c2:6d:2f:4d:75:bc:02:cb:58:bf:fc:dc:f4:6c:3c:33:ad:e4:
3a:2c:9d:39:11:96:6f:3b:e1:17:26:85:2a:2a:c2:4d:89:28:
17:fc:25:08:ec:3e:c0:3e:2f:5e:8f:25:0d:b8:cd:d2:61:37:
81:54:71:00:f0:e5:f6:1f:51:4e:c7:6a:03:09:b8:2f:a7:0c:
37:1d:99:bc:c3:99:8a:c1:f2:85:7f:bf:b3:b1:19:b6:b3:41:
46:95:cb:dc:76:6d:55:05:78:a0:c1:c7:66:42:75:30:b8:a7:
93:03:51:b0:71:37:a3:06:31:1a:33:d1:df:a3:31:df:79:2e:
8f:a0:87:69:f3:4a:d1:5f:24:1a:52:ac:68:04:12:f0:aa:92:
93:32:d4:0b:3f:1c:99:d9:2c:e9:17:a1:96:b6:70:22:fb:65:
9c:29:38:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:15 2026 by rpki-client