Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/73462B74643C11EB9E7DF918C4F9AE02.roa
File: 73462B74643C11EB9E7DF918C4F9AE02.roa (raw, json)
Hash identifier: uaBZ8rrkBWuiO8vvVUgSMMRL47cpkYF6IyC6kK7kqtg=
Subject key identifier: E0:31:B1:D0:B1:29:11:AC:BB:4E:C4:52:40:56:EC:19:D8:1D:5D:16
Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
Certificate serial: 357F
Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/73462B74643C11EB9E7DF918C4F9AE02.roa
Signing time: Tue 30 Jun 2026 15:15:19 +0000
ROA not before: Tue 30 Jun 2026 15:15:19 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 45780
IP address blocks: 103.23.0.0/22 maxlen: 24
110.173.232.0/22 maxlen: 22
110.173.232.0/23 maxlen: 24
110.173.234.0/23 maxlen: 23
110.173.235.0/24 maxlen: 24
110.173.236.0/22 maxlen: 24
111.118.216.0/24 maxlen: 24
111.118.217.0/24 maxlen: 24
111.118.218.0/24 maxlen: 24
111.118.219.0/24 maxlen: 24
119.17.32.0/19 maxlen: 24
123.254.112.0/20 maxlen: 24
163.47.52.0/22 maxlen: 23
175.103.16.0/20 maxlen: 20
175.103.16.0/23 maxlen: 23
175.103.18.0/24 maxlen: 24
175.103.19.0/24 maxlen: 24
175.103.20.0/24 maxlen: 24
175.103.21.0/24 maxlen: 24
175.103.22.0/24 maxlen: 24
175.103.23.0/24 maxlen: 24
175.103.24.0/23 maxlen: 23
175.103.26.0/23 maxlen: 23
175.103.28.0/22 maxlen: 24
2404:fa00::/36 maxlen: 36
2404:fa00::/40 maxlen: 40
2404:fa00:1000::/36 maxlen: 36
2404:fa00:2000::/36 maxlen: 36
2404:fa00:5000::/36 maxlen: 36
2404:fa00:d000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl
rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13695 (0x357f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
Validity
Not Before: Jun 30 15:15:19 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a43dd87-67f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:73:92:f4:43:94:59:01:db:98:96:46:22:
17:07:1c:87:91:11:a7:be:1d:1b:6e:e0:1f:67:b2:
ce:52:6a:f6:f3:24:3c:1e:8f:90:dd:31:e3:1c:11:
74:f6:16:04:15:1d:f0:00:fa:fd:a1:78:59:46:38:
ee:24:55:be:ba:b3:c8:85:e0:d1:20:be:90:aa:5d:
9b:38:4d:01:35:1b:d7:4d:1d:5e:f7:c1:a7:d8:2b:
29:d3:22:39:a0:5c:c4:74:d6:54:9f:1e:8f:b1:ca:
71:05:b8:2d:82:c3:a6:1f:17:55:be:d2:29:e5:73:
aa:fd:5e:fe:6e:13:aa:81:1a:40:51:b8:74:a3:a0:
25:8b:22:28:e1:85:1b:b0:e3:46:77:ed:b3:f7:5e:
8f:0f:36:5d:dc:8c:59:b6:44:f0:ed:08:d3:d1:1c:
2e:86:96:7b:dd:bd:60:4a:91:ba:1a:d2:fc:67:ac:
d0:8c:de:62:65:07:c3:96:02:02:1a:1e:5b:52:60:
e6:2d:bb:42:ca:72:fe:5e:5a:81:99:ab:43:ee:e5:
ab:3e:cf:90:1d:1c:b2:a4:b4:67:95:ba:98:ed:b8:
f5:ef:50:b5:09:c4:90:90:31:92:43:01:b7:b4:b9:
5a:73:08:ee:b4:a8:97:a0:b0:cf:e4:ed:3e:cc:63:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:31:B1:D0:B1:29:11:AC:BB:4E:C4:52:40:56:EC:19:D8:1D:5D:16
X509v3 Authority Key Identifier:
keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/73462B74643C11EB9E7DF918C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.0.0/22
110.173.232.0/21
111.118.216.0/22
119.17.32.0/19
123.254.112.0/20
163.47.52.0/22
175.103.16.0/20
IPv6:
2404:fa00::-2404:fa00:2fff:ffff:ffff:ffff:ffff:ffff
2404:fa00:5000::/36
2404:fa00:d000::/36
Signature Algorithm: sha256WithRSAEncryption
4c:4c:8a:92:a1:65:9d:60:ba:80:4e:5e:e3:91:e2:44:b0:25:
a8:f2:b6:64:19:d9:2d:76:50:90:56:04:70:3a:ec:e2:43:52:
b2:64:ab:8b:e7:c0:85:31:e4:39:4f:38:c7:a9:d4:7c:4c:1d:
ea:45:fe:62:13:77:93:43:83:a1:71:a4:24:5d:3a:09:86:27:
16:3c:36:35:26:41:21:1f:d6:a6:95:1d:1d:1c:b9:86:2a:df:
ed:77:fb:17:5d:f1:1f:91:f8:83:bf:49:7a:ec:92:b6:4a:5c:
d7:ea:a1:6b:57:e8:f4:7a:86:12:a8:90:b7:30:09:8f:a8:02:
3b:aa:a1:92:f6:ea:60:f5:ba:56:a4:1f:27:fc:d1:49:42:98:
3c:bf:18:af:c5:86:13:83:81:41:d4:c7:2e:43:4e:14:9f:4d:
94:8e:be:d8:83:5a:aa:45:a7:a1:4a:23:86:95:14:c5:a2:79:
b1:53:29:b5:48:ba:34:0a:ef:0e:38:f3:3d:b8:78:e5:db:c8:
a8:93:12:00:69:b2:19:4e:74:f1:fb:83:53:05:c7:02:a0:26:
e5:9b:a7:8f:02:7e:6c:9a:84:9f:1b:c1:e1:b2:49:b1:db:09:
b6:ad:4d:b3:67:28:e6:d9:05:73:00:34:07:99:82:d9:c0:45:
ff:82:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:52 2026 by rpki-client