Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/5E26899A1B2211F093230420C4F9AE02.roa
File: 5E26899A1B2211F093230420C4F9AE02.roa (raw, json)
Hash identifier: jxjWvIUdQtnre0sqE/p2npmnE5b2txY5C5YSTif6IFM=
Subject key identifier: A2:39:D8:93:47:93:42:8E:DC:4A:27:75:F6:B2:BB:CB:48:0E:C3:AF
Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Certificate serial: 3557
Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/5E26899A1B2211F093230420C4F9AE02.roa
Signing time: Wed 18 Mar 2026 15:13:01 +0000
ROA not before: Wed 18 Mar 2026 15:13:01 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 198949
IP address blocks: 147.41.0.0/17 maxlen: 17
147.41.0.0/20 maxlen: 20
147.41.16.0/20 maxlen: 20
147.41.32.0/19 maxlen: 19
147.41.64.0/18 maxlen: 18
147.41.128.0/17 maxlen: 17
147.41.128.0/18 maxlen: 18
147.41.192.0/19 maxlen: 19
147.41.224.0/20 maxlen: 20
147.41.240.0/20 maxlen: 20
147.109.0.0/16 maxlen: 16
147.109.0.0/22 maxlen: 22
147.109.4.0/22 maxlen: 22
147.109.8.0/21 maxlen: 21
147.109.16.0/20 maxlen: 20
147.109.32.0/20 maxlen: 20
147.109.48.0/20 maxlen: 20
147.109.64.0/20 maxlen: 20
147.109.80.0/20 maxlen: 20
147.109.96.0/20 maxlen: 20
147.109.112.0/21 maxlen: 21
147.109.120.0/22 maxlen: 22
147.109.124.0/23 maxlen: 23
147.109.124.0/24 maxlen: 24
147.109.126.0/23 maxlen: 23
147.109.128.0/20 maxlen: 20
147.109.144.0/20 maxlen: 20
147.109.160.0/19 maxlen: 19
147.109.192.0/20 maxlen: 20
147.109.192.0/21 maxlen: 21
147.109.208.0/20 maxlen: 21
147.109.224.0/20 maxlen: 20
147.109.240.0/21 maxlen: 21
147.109.248.0/21 maxlen: 21
192.26.232.0/24 maxlen: 24
192.107.101.0/24 maxlen: 24
192.190.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13655 (0x3557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Validity
Not Before: Mar 18 15:13:01 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69bac0fc-4b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:64:29:57:89:1c:ef:38:3e:bb:ce:21:f8:
1d:ea:f4:ee:62:bc:32:38:ca:b1:67:0d:01:80:8e:
bd:5b:cc:18:3c:8d:ac:b7:cc:a1:bd:2f:72:a2:ed:
f6:e7:58:e6:69:b9:e2:84:e1:e2:19:8d:22:02:d6:
9e:27:c1:84:ef:f6:40:fe:87:bb:28:cc:0d:a8:80:
fc:a6:46:5f:fc:0b:06:68:4e:81:09:c2:bc:29:44:
34:56:3c:f6:bb:77:8a:83:48:07:be:c2:97:0b:9d:
d8:b2:9e:25:90:35:3b:a6:b4:ff:1e:2a:9c:fe:1e:
6e:24:4b:64:c8:16:04:86:08:a1:76:ec:90:a1:74:
e8:ea:7a:33:9e:be:53:62:27:e2:8f:75:3a:92:9d:
0e:32:7c:0f:94:e4:42:41:98:ec:9d:74:69:38:bb:
94:55:9c:f4:7d:7c:a6:cc:e5:30:cb:93:3e:57:17:
35:57:09:76:32:26:e8:cc:6d:45:83:20:e3:e0:97:
24:c2:bf:68:72:73:69:df:77:d3:fd:74:fc:cb:88:
f7:8e:63:98:63:72:1b:c8:78:f9:b2:5a:94:f2:e3:
11:45:45:a8:35:22:79:39:63:6e:77:4b:99:78:6c:
70:d8:59:6e:88:d3:3b:af:7f:5d:f9:a9:77:3b:78:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:39:D8:93:47:93:42:8E:DC:4A:27:75:F6:B2:BB:CB:48:0E:C3:AF
X509v3 Authority Key Identifier:
keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/5E26899A1B2211F093230420C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
147.41.0.0/16
147.109.0.0/16
192.26.232.0/24
192.107.101.0/24
192.190.61.0/24
Signature Algorithm: sha256WithRSAEncryption
85:60:da:3f:04:cb:d9:7d:3d:14:be:82:0f:b3:b8:76:38:a9:
19:40:42:7e:bb:13:81:19:71:f2:0c:3c:13:34:00:2f:dd:34:
1c:39:e6:fc:f6:44:1e:56:55:43:6b:13:84:7a:92:ad:0c:41:
c3:5b:57:3d:1d:ea:ee:90:9c:f3:9d:21:82:a7:a5:72:14:95:
19:a0:b1:71:6a:f7:b6:97:09:33:75:45:a7:58:05:4b:f4:8d:
c1:d8:98:75:b1:44:23:3d:e5:2d:4d:6e:64:ca:40:4a:c2:26:
95:61:2f:56:08:e7:37:fb:74:90:0f:61:93:5f:70:e2:de:f4:
99:84:e8:7e:43:13:5e:c6:0f:f8:7f:e1:c0:62:67:06:08:d3:
df:dd:c4:0c:f6:cf:db:64:e5:19:9f:f0:79:9d:af:60:5b:cc:
35:85:ae:e6:7b:55:48:95:ed:28:98:0a:1f:55:9f:98:c4:c7:
c3:ac:55:3f:43:a2:00:ee:35:46:7c:d4:64:d2:86:30:ef:08:
aa:d6:6f:86:d7:5e:25:d1:99:9c:2a:d0:b0:cf:d3:27:61:63:
0b:fd:c6:1a:76:a8:76:69:79:78:20:bb:cf:d4:91:5a:3f:d7:
a5:f5:5a:3f:5f:65:b0:24:cb:64:5d:e8:41:a0:ee:f2:f8:57:
45:ed:dc:54
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgICNVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD
MkFGMkM2RjAwHhcNMjYwMzE4MTUxMzAxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJhYzBmYy00YjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ItkKVeJHO84PrvOIfgd6vTuYrwyOMqxZw0BgI69W8wYPI2st8yhvS9you32
51jmabnihOHiGY0iAtaeJ8GE7/ZA/oe7KMwNqID8pkZf/AsGaE6BCcK8KUQ0Vjz2
u3eKg0gHvsKXC53Ysp4lkDU7prT/Hiqc/h5uJEtkyBYEhgihduyQoXTo6noznr5T
Yifij3U6kp0OMnwPlORCQZjsnXRpOLuUVZz0fXymzOUwy5M+Vxc1Vwl2MibozG1F
gyDj4Jckwr9ocnNp33fT/XT8y4j3jmOYY3IbyHj5slqU8uMRRUWoNSJ5OWNud0uZ
eGxw2FluiNM7r39d+al3O3hFuQIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFKI52JNH
k0KO3Eondfayu8tIDsOvMB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE
OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzAzMDQvOUVGNDExMzAxRDhFMTFFMkIxODIyNkVEMDhCMDJDRDIvNUUyNjg5OUEx
QjIyMTFGMDkzMjMwNDIwQzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi
BAIAATAcAwMAkykDAwCTbQMEAMAa6AMEAMBrZQMEAMC+PTANBgkqhkiG9w0BAQsF
AAOCAQEAhWDaPwTL2X09FL6CD7O4djipGUBCfrsTgRlx8gw8EzQAL900HDnm/PZE
HlZVQ2sThHqSrQxBw1tXPR3q7pCc850hgqelchSVGaCxcWr3tpcJM3VFp1gFS/SN
wdiYdbFEIz3lLU1uZMpASsImlWEvVgjnN/t0kA9hk19w4t70mYTofkMTXsYP+H/h
wGJnBgjT393EDPbP22TlGZ/weZ2vYFvMNYWu5ntVSJXtKJgKH1WfmMTHw6xVP0Oi
AO41RnzUZNKGMO8IqtZvhtdeJdGZnCrQsM/TJ2FjC/3GGnaodml5eCC7z9SRWj/X
pfVaP19lsCTLZF3oQaDu8vhXRe3cVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:43 2026 by rpki-client