Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/32332AD83C8B11F1B51BFC899C833773.roa
File: 32332AD83C8B11F1B51BFC899C833773.roa (raw, json)
Hash identifier: SqSvzXIRIVpELXR4zfaIkWV4fICk8+OR6AsXIXWCiYc=
Subject key identifier: A7:59:42:6A:A7:69:CF:10:41:BE:5E:FB:41:89:5B:88:D8:E1:DB:81
Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial: 012D
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/32332AD83C8B11F1B51BFC899C833773.roa
Signing time: Tue 28 Apr 2026 05:30:25 +0000
ROA not before: Tue 28 Apr 2026 05:30:25 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.96.0/24 maxlen: 24
117.18.98.0/24 maxlen: 24
117.18.105.0/24 maxlen: 24
117.18.106.0/23 maxlen: 23
117.18.106.0/24 maxlen: 24
117.18.107.0/24 maxlen: 24
117.18.108.0/23 maxlen: 23
117.18.108.0/24 maxlen: 24
117.18.109.0/24 maxlen: 24
117.18.112.0/22 maxlen: 22
117.18.112.0/24 maxlen: 24
117.18.113.0/24 maxlen: 24
117.18.114.0/24 maxlen: 24
117.18.115.0/24 maxlen: 24
117.18.119.0/24 maxlen: 24
117.18.120.0/23 maxlen: 23
117.18.120.0/24 maxlen: 24
117.18.121.0/24 maxlen: 24
117.18.122.0/24 maxlen: 24
202.181.136.0/24 maxlen: 24
202.181.140.0/24 maxlen: 24
202.181.141.0/24 maxlen: 24
202.181.146.0/24 maxlen: 24
202.181.147.0/24 maxlen: 24
202.181.150.0/24 maxlen: 24
202.181.152.0/24 maxlen: 24
202.181.154.0/24 maxlen: 24
202.181.160.0/24 maxlen: 24
202.181.161.0/24 maxlen: 24
202.181.162.0/24 maxlen: 24
202.181.163.0/24 maxlen: 24
202.181.164.0/24 maxlen: 24
202.181.165.0/24 maxlen: 24
202.181.166.0/24 maxlen: 24
202.181.167.0/24 maxlen: 24
202.181.168.0/24 maxlen: 24
202.181.169.0/24 maxlen: 24
202.181.170.0/24 maxlen: 24
202.181.172.0/24 maxlen: 24
202.181.173.0/24 maxlen: 24
202.181.178.0/24 maxlen: 24
202.181.184.0/22 maxlen: 22
202.181.184.0/24 maxlen: 24
202.181.186.0/24 maxlen: 24
202.181.187.0/24 maxlen: 24
202.181.216.0/24 maxlen: 24
202.181.217.0/24 maxlen: 24
202.181.218.0/24 maxlen: 24
202.181.220.0/24 maxlen: 24
202.181.223.0/24 maxlen: 24
202.181.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Validity
Not Before: Apr 28 05:30:25 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69f045f1-dbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0b:90:0f:57:cc:6e:e0:6a:56:ac:38:ed:ad:
48:fe:65:51:34:e4:56:92:e2:d1:e0:1f:2d:3b:dc:
0a:64:b7:4d:6b:79:f8:c7:4d:d1:af:c9:7c:62:05:
d5:3a:ef:28:78:cd:56:d9:98:42:eb:ab:a3:74:ac:
a4:4c:e8:15:89:7e:27:34:3a:98:e5:0d:51:6d:b1:
ef:cb:fe:ec:ce:73:07:7d:49:fb:d4:8e:5c:e3:46:
28:b2:f5:28:d5:f7:e1:b3:c7:ff:06:fd:42:d3:d3:
b9:0b:52:60:6a:63:0f:56:cd:2b:4a:28:3a:4a:e0:
a5:2c:cb:f0:55:7a:24:cb:e6:d6:42:63:4b:39:e0:
40:05:e0:ac:56:23:f1:4f:d2:ea:3d:10:43:34:2f:
3f:5d:d4:3a:42:48:52:fb:31:46:e0:66:d8:52:e7:
b4:ef:4f:d9:d6:2f:62:6e:a8:68:7f:93:76:38:fb:
fb:2a:df:9b:ae:d2:50:4b:4e:01:cb:22:2f:6e:a9:
e2:36:02:ba:b5:29:a1:a6:6b:1a:8e:3f:c5:a5:dc:
de:71:13:e8:5d:ec:e1:47:ad:18:cb:67:76:02:a2:
6a:2b:fd:b4:1b:05:83:a1:62:ea:e7:00:27:7a:0a:
cd:05:ac:6a:47:bd:a0:4b:56:00:a3:a0:30:89:f4:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:42:6A:A7:69:CF:10:41:BE:5E:FB:41:89:5B:88:D8:E1:DB:81
X509v3 Authority Key Identifier:
keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/32332AD83C8B11F1B51BFC899C833773.roa
sbgp-ipAddrBlock: critical
IPv4:
117.18.96.0/24
117.18.98.0/24
117.18.105.0-117.18.109.255
117.18.112.0/22
117.18.119.0-117.18.122.255
202.181.136.0/24
202.181.140.0/23
202.181.146.0/23
202.181.150.0/24
202.181.152.0/24
202.181.154.0/24
202.181.160.0-202.181.170.255
202.181.172.0/23
202.181.178.0/24
202.181.184.0/22
202.181.216.0-202.181.218.255
202.181.220.0/24
202.181.223.0-202.181.224.255
Signature Algorithm: sha256WithRSAEncryption
a7:d0:5a:ff:d7:21:14:b9:b8:c8:04:77:f9:69:bc:1d:2f:cf:
1a:f7:07:bd:aa:5e:18:96:59:e8:12:d2:39:4f:45:a2:60:fa:
db:f0:39:fc:44:70:14:8c:07:7d:31:a4:aa:9f:f5:97:73:d3:
d7:66:6d:cd:2d:a2:37:b8:7b:23:03:7f:10:44:24:1b:88:0c:
de:1c:d4:61:56:f9:e4:9d:48:39:8e:a5:be:46:71:88:8d:96:
32:f1:c9:25:01:4b:ba:81:ea:1c:87:66:c3:b1:91:73:b5:4e:
c6:1d:79:d6:56:b8:82:93:5e:2a:26:bb:81:77:ad:d9:f8:1f:
d8:57:6f:98:2d:e1:f9:b1:f6:24:e2:11:21:f7:d6:f9:e3:00:
8f:e5:15:5b:23:5f:72:bc:63:83:03:c2:89:7d:af:4a:58:fb:
10:7a:69:8c:cf:ac:97:28:48:69:2d:df:87:e8:d3:f1:a2:b9:
f2:97:9f:30:7c:ca:2a:91:cf:bc:d4:76:40:39:01:d6:5e:ba:
33:a2:2a:10:46:90:cd:34:05:f5:39:5c:42:f9:21:5a:70:be:
fb:d7:e3:5b:ab:87:d3:a5:0f:f8:2e:29:6e:85:1d:7a:2f:cf:
78:33:71:63:2c:78:8f:ae:9c:de:a8:a9:39:22:cb:6c:3a:d8:
54:0d:51:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:22 2026 by rpki-client