Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
File: 14C388C2114311F0B3944E67C4F9AE02.roa (raw, json)
Hash identifier: sWtpHi+KcoLaI/4doCj7r6NxoDBWWhUZmIdc3W8LnsQ=
Subject key identifier: EE:48:80:22:32:2F:4B:25:8B:29:35:81:F0:10:04:D8:98:CA:62:07
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 098B
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
Signing time: Tue 14 Jul 2026 21:21:34 +0000
ROA not before: Tue 14 Jul 2026 21:21:34 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24560
IP address blocks: 27.56.128.0/20 maxlen: 24
27.56.144.0/20 maxlen: 24
27.56.160.0/19 maxlen: 24
27.57.0.0/16 maxlen: 24
27.58.0.0/16 maxlen: 24
27.62.116.0/24 maxlen: 24
27.62.117.0/24 maxlen: 24
27.63.176.0/20 maxlen: 24
106.200.0.0/18 maxlen: 24
106.200.192.0/18 maxlen: 24
106.201.0.0/16 maxlen: 24
106.202.128.0/17 maxlen: 24
106.203.192.0/18 maxlen: 24
106.205.0.0/18 maxlen: 24
106.205.64.0/18 maxlen: 24
106.212.0.0/17 maxlen: 24
106.212.128.0/17 maxlen: 24
106.213.0.0/17 maxlen: 24
106.214.0.0/16 maxlen: 24
106.215.0.0/17 maxlen: 24
106.215.128.0/19 maxlen: 24
106.215.160.0/20 maxlen: 24
106.215.176.0/21 maxlen: 24
106.215.184.0/21 maxlen: 24
106.215.192.0/21 maxlen: 24
106.215.200.0/24 maxlen: 24
106.219.64.0/19 maxlen: 24
106.219.96.0/20 maxlen: 24
106.219.120.0/22 maxlen: 24
106.219.124.0/22 maxlen: 24
106.219.128.0/21 maxlen: 24
106.219.136.0/22 maxlen: 24
106.219.144.0/20 maxlen: 24
106.219.160.0/20 maxlen: 24
106.219.176.0/21 maxlen: 24
106.222.192.0/18 maxlen: 24
110.224.128.0/17 maxlen: 24
110.225.0.0/16 maxlen: 24
110.226.0.0/16 maxlen: 24
110.227.0.0/16 maxlen: 24
117.96.0.0/16 maxlen: 24
117.97.128.0/18 maxlen: 24
117.98.192.0/20 maxlen: 24
117.98.208.0/21 maxlen: 21
117.98.216.0/21 maxlen: 24
117.99.96.0/20 maxlen: 24
117.99.160.0/19 maxlen: 24
223.177.0.0/16 maxlen: 24
223.178.0.0/17 maxlen: 24
223.178.192.0/18 maxlen: 24
223.179.128.0/19 maxlen: 24
223.181.0.0/17 maxlen: 24
223.181.128.0/18 maxlen: 24
223.182.64.0/18 maxlen: 24
223.182.164.0/22 maxlen: 24
223.182.172.0/22 maxlen: 24
223.182.180.0/22 maxlen: 24
223.182.248.0/21 maxlen: 24
223.184.0.0/17 maxlen: 24
223.185.12.0/22 maxlen: 24
223.185.16.0/20 maxlen: 24
223.185.32.0/19 maxlen: 24
223.185.128.0/21 maxlen: 24
223.185.136.0/21 maxlen: 24
223.185.144.0/20 maxlen: 24
223.185.160.0/20 maxlen: 24
223.185.176.0/20 maxlen: 24
223.190.0.0/17 maxlen: 24
223.190.192.0/18 maxlen: 24
223.224.172.0/23 maxlen: 24
223.226.0.0/16 maxlen: 24
223.229.128.0/17 maxlen: 24
223.230.0.0/16 maxlen: 24
223.233.64.0/18 maxlen: 24
223.235.0.0/16 maxlen: 24
223.236.0.0/16 maxlen: 24
223.239.0.0/16 maxlen: 24
2401:4900:1c00::/41 maxlen: 48
2401:4900:1c80::/41 maxlen: 48
2401:4900:1f20::/44 maxlen: 48
2401:4900:1f30::/44 maxlen: 48
2401:4900:8800::/37 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2443 (0x98b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Jul 14 21:21:34 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a56a85e-89ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:80:46:9a:ce:34:af:57:2a:28:3d:c0:c1:
8d:53:45:7b:e3:dd:39:3c:0f:6c:68:4f:4b:71:45:
ad:1d:10:c8:60:9d:bb:be:2f:17:fc:61:51:ad:77:
79:df:fd:af:f6:02:c7:41:a2:e2:a6:56:a1:7c:9d:
6c:b6:d3:e7:14:70:ce:09:20:2d:ac:40:b8:f5:12:
3e:a4:58:d1:86:f2:9b:17:e4:03:c0:35:f2:8b:13:
3e:f6:ab:08:e6:8e:8b:85:10:4f:ca:53:ef:b6:17:
59:2d:cd:95:91:fb:fa:ed:9e:08:3a:2f:50:0f:07:
fa:dd:98:14:f7:6a:11:75:af:46:9d:91:b1:6f:15:
18:ec:55:29:c7:f9:27:4c:03:55:a4:6a:05:9e:32:
11:10:fc:26:f2:af:b3:ba:a2:21:ab:10:fb:20:9f:
5d:38:24:a6:c7:9e:3b:28:f7:be:21:56:50:c9:0d:
b9:a0:1f:51:9e:ab:44:79:cf:a6:e0:74:27:00:25:
51:e7:dc:d5:03:a5:45:40:1a:9e:30:25:f0:66:11:
c8:16:76:cd:90:d9:a8:e8:f9:df:1b:9d:97:24:a5:
5c:51:fb:08:42:3a:a3:19:bc:fb:3e:fe:d3:a4:94:
32:f2:3d:f9:a2:b0:ee:2d:bc:06:96:f2:2c:03:5c:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:48:80:22:32:2F:4B:25:8B:29:35:81:F0:10:04:D8:98:CA:62:07
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.56.128.0/18
27.57.0.0-27.58.255.255
27.62.116.0/23
27.63.176.0/20
106.200.0.0/18
106.200.192.0-106.201.255.255
106.202.128.0/17
106.203.192.0/18
106.205.0.0/17
106.212.0.0-106.213.127.255
106.214.0.0-106.215.200.255
106.219.64.0-106.219.111.255
106.219.120.0-106.219.139.255
106.219.144.0-106.219.183.255
106.222.192.0/18
110.224.128.0-110.227.255.255
117.96.0.0/16
117.97.128.0/18
117.98.192.0/19
117.99.96.0/20
117.99.160.0/19
223.177.0.0-223.178.127.255
223.178.192.0/18
223.179.128.0/19
223.181.0.0-223.181.191.255
223.182.64.0/18
223.182.164.0/22
223.182.172.0/22
223.182.180.0/22
223.182.248.0/21
223.184.0.0/17
223.185.12.0-223.185.63.255
223.185.128.0/18
223.190.0.0/17
223.190.192.0/18
223.224.172.0/23
223.226.0.0/16
223.229.128.0-223.230.255.255
223.233.64.0/18
223.235.0.0-223.236.255.255
223.239.0.0/16
IPv6:
2401:4900:1c00::/40
2401:4900:1f20::/43
2401:4900:8800::/37
Signature Algorithm: sha256WithRSAEncryption
b4:78:4f:09:eb:2d:85:40:ce:f6:5e:ee:9f:ff:74:64:2f:d5:
98:9f:59:eb:a0:03:90:df:d2:17:d2:85:8b:64:82:99:16:fe:
9a:53:71:ef:e9:d2:18:86:04:82:d7:1b:ff:48:b9:4b:d6:b4:
80:fc:da:21:82:ca:46:98:16:68:4d:03:71:53:f5:ca:2e:f1:
39:0e:17:bc:12:c9:d6:0a:6a:d8:37:b4:ce:c5:1f:f5:93:e9:
2a:84:52:4c:f5:50:31:47:e0:00:d2:18:69:b0:49:1b:b7:5b:
38:fb:2b:f6:87:81:c9:01:cc:70:d2:93:0d:3a:6a:66:26:45:
7e:52:f4:ce:a2:99:76:f1:ae:e5:d5:dd:5c:08:73:50:2a:ba:
db:39:ab:e9:44:3c:f3:53:a6:7a:17:b9:b4:76:e0:02:7e:df:
2c:36:4a:d9:95:12:cd:d4:ce:97:40:f7:b6:fb:87:24:b9:5f:
26:b7:76:28:32:2a:a1:40:f8:d0:a2:26:71:bd:ac:40:02:9b:
cd:77:54:d2:55:d2:57:6a:cb:fc:a7:88:e4:47:0c:72:34:13:
9e:1a:fd:b4:bd:1d:ea:7b:4d:2d:0a:9f:28:3d:4d:ba:15:d2:
71:8b:18:36:98:ed:9d:ff:ba:d2:db:a0:c2:98:1d:2c:4f:89:
f1:0b:d4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:36:25 2026 by rpki-client