Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/83C2F8EE2F1F11F0AC29D057C4F9AE02.roa
File: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (raw, json)
Hash identifier: MnQKwxbbpwYvCT9UEDUb9YHnOUTSQHiCV3o0jnph1XA=
Subject key identifier: 4F:24:95:4F:65:FD:D6:81:37:5E:A5:AA:F5:B7:1E:3D:99:2B:63:30
Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial: 03F3
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/83C2F8EE2F1F11F0AC29D057C4F9AE02.roa
Signing time: Tue 28 Apr 2026 17:21:01 +0000
ROA not before: Tue 28 Apr 2026 17:21:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17882
IP address blocks: 64.119.16.0/24 maxlen: 24
64.119.17.0/24 maxlen: 24
64.119.18.0/24 maxlen: 24
64.119.19.0/24 maxlen: 24
64.119.20.0/24 maxlen: 24
64.119.21.0/24 maxlen: 24
64.119.22.0/24 maxlen: 24
64.119.23.0/24 maxlen: 24
64.119.24.0/24 maxlen: 24
64.119.25.0/24 maxlen: 24
64.119.26.0/24 maxlen: 24
64.119.27.0/24 maxlen: 24
64.119.28.0/24 maxlen: 24
64.119.29.0/24 maxlen: 24
64.119.30.0/24 maxlen: 24
64.119.31.0/24 maxlen: 24
66.181.160.0/24 maxlen: 24
66.181.161.0/24 maxlen: 24
66.181.162.0/24 maxlen: 24
66.181.163.0/24 maxlen: 24
66.181.164.0/24 maxlen: 24
66.181.165.0/24 maxlen: 24
66.181.166.0/24 maxlen: 24
66.181.167.0/24 maxlen: 24
66.181.168.0/24 maxlen: 24
66.181.169.0/24 maxlen: 24
66.181.170.0/24 maxlen: 24
66.181.171.0/24 maxlen: 24
66.181.172.0/24 maxlen: 24
66.181.173.0/24 maxlen: 24
66.181.174.0/24 maxlen: 24
66.181.175.0/24 maxlen: 24
66.181.176.0/24 maxlen: 24
66.181.177.0/24 maxlen: 24
66.181.178.0/24 maxlen: 24
66.181.179.0/24 maxlen: 24
66.181.180.0/24 maxlen: 24
66.181.181.0/24 maxlen: 24
66.181.182.0/24 maxlen: 24
66.181.183.0/24 maxlen: 24
66.181.184.0/24 maxlen: 24
66.181.185.0/24 maxlen: 24
66.181.186.0/24 maxlen: 24
66.181.187.0/24 maxlen: 24
66.181.188.0/24 maxlen: 24
66.181.189.0/24 maxlen: 24
66.181.190.0/24 maxlen: 24
66.181.191.0/24 maxlen: 24
192.82.64.0/24 maxlen: 24
192.82.65.0/24 maxlen: 24
192.82.66.0/24 maxlen: 24
192.82.67.0/24 maxlen: 24
192.82.68.0/24 maxlen: 24
192.82.69.0/24 maxlen: 24
192.82.70.0/24 maxlen: 24
192.82.71.0/24 maxlen: 24
192.82.72.0/24 maxlen: 24
192.82.73.0/24 maxlen: 24
192.82.74.0/24 maxlen: 24
192.82.75.0/24 maxlen: 24
192.82.76.0/24 maxlen: 24
192.82.77.0/24 maxlen: 24
192.82.79.0/24 maxlen: 24
192.82.92.0/24 maxlen: 24
192.82.93.0/24 maxlen: 24
192.82.94.0/24 maxlen: 24
192.82.95.0/24 maxlen: 24
192.82.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1011 (0x3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Validity
Not Before: Apr 28 17:21:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f0ec7d-1fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f4:a3:a1:8d:33:39:18:23:57:f3:0e:84:12:
76:17:99:0b:08:3b:b4:51:7a:6b:92:af:a8:56:e6:
3b:0c:77:e1:22:cf:16:20:22:94:01:e8:db:88:02:
4c:56:47:03:d8:2a:07:3d:19:c3:80:8c:e4:ea:86:
aa:7d:15:34:74:9a:33:60:55:1d:74:14:8a:50:10:
66:60:76:b9:3e:f4:4f:67:9a:b3:78:70:6d:58:01:
a5:a4:e2:cd:52:db:01:8c:9e:c6:53:e7:85:65:fa:
d9:da:0f:c0:e4:f7:68:f4:eb:a4:97:ca:7e:cf:ad:
2d:ac:94:8c:c6:bb:6a:f7:4a:79:c9:c7:20:e3:ad:
b0:89:be:49:c2:09:ec:47:fc:1d:af:80:46:1a:01:
93:30:95:6d:54:2d:d4:13:28:a5:46:92:25:98:ff:
1b:64:44:93:df:c2:5d:3a:d6:81:4f:ca:16:bb:f0:
e9:76:9a:b0:d0:67:f2:ac:a3:00:ce:4e:4e:cf:38:
b9:45:96:99:1a:3e:9a:0d:7d:e1:28:4d:e9:72:24:
d3:28:c8:37:50:1d:44:a8:29:93:4d:0a:c5:75:08:
ec:26:9c:ac:30:73:06:ca:99:68:1f:c2:99:29:0e:
63:2d:11:94:27:6c:65:28:60:6f:22:f1:71:61:e4:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:24:95:4F:65:FD:D6:81:37:5E:A5:AA:F5:B7:1E:3D:99:2B:63:30
X509v3 Authority Key Identifier:
keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/83C2F8EE2F1F11F0AC29D057C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
64.119.16.0/20
66.181.160.0/19
192.82.64.0-192.82.77.255
192.82.79.0/24
192.82.92.0/22
192.82.100.0/24
Signature Algorithm: sha256WithRSAEncryption
20:24:58:32:30:6b:ff:fe:19:4b:8e:19:2d:9d:2f:1d:f7:b1:
8b:9f:70:72:57:89:1b:7c:d1:10:61:02:a3:c5:d5:8f:81:f2:
c1:30:c7:a3:4e:dd:14:e8:e4:6b:62:a3:64:01:cf:e8:3e:78:
45:b6:ab:b1:c2:8f:4c:cf:85:d3:4e:42:ae:c8:97:a8:12:70:
7e:66:17:dd:97:50:59:7d:63:ae:c4:9c:3d:65:7e:f4:1a:f6:
3e:e1:d8:b3:ba:d0:ef:2d:20:65:28:d2:5e:74:91:a5:50:7a:
d2:53:f9:83:73:7a:ed:a8:8a:09:8e:27:e0:11:04:88:d6:0e:
99:d7:6c:65:31:17:d8:cf:18:29:d5:dc:e8:92:f0:66:45:ca:
14:be:0d:a8:3d:24:46:42:0e:6e:c6:21:20:4a:38:88:d3:ba:
92:de:d3:f7:86:10:ac:40:aa:1a:ba:db:b6:1b:97:4d:ed:d9:
be:f3:e3:51:6d:70:e3:c4:4d:c7:6a:43:db:e7:a7:25:98:1c:
8c:8a:66:a5:42:40:4b:64:15:48:65:87:64:bb:33:c0:11:98:
e2:47:5b:49:33:b7:a5:02:c8:5f:26:ee:8a:2d:7f:07:3a:92:
ec:d9:70:5f:64:1a:67:e0:58:7d:95:5c:a3:58:6c:75:84:ae:
d6:6f:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:36 2026 by rpki-client