Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/97DC58040B5B11EAB69DC64FC4F9AE02.roa
File: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (raw, json)
Hash identifier: 2fjs3YMIAVa6BF/a2VEcOFGf36xSPqP+aDoUX8wEwvE=
Subject key identifier: A5:8F:6B:24:39:DA:18:0D:0D:CA:32:A9:C2:75:80:12:43:6A:85:B1
Certificate issuer: /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Certificate serial: 0CD7
Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/97DC58040B5B11EAB69DC64FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 18:23:06 +0000
ROA not before: Mon 02 Mar 2026 18:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133385
IP address blocks: 37.111.0.0/21 maxlen: 22
37.111.0.0/24 maxlen: 24
37.111.1.0/24 maxlen: 24
37.111.2.0/24 maxlen: 24
37.111.3.0/24 maxlen: 24
37.111.4.0/24 maxlen: 24
37.111.5.0/24 maxlen: 24
37.111.6.0/24 maxlen: 24
37.111.7.0/24 maxlen: 24
37.111.8.0/21 maxlen: 22
37.111.8.0/24 maxlen: 24
37.111.9.0/24 maxlen: 24
37.111.10.0/24 maxlen: 24
37.111.11.0/24 maxlen: 24
37.111.12.0/24 maxlen: 24
37.111.13.0/24 maxlen: 24
37.111.14.0/24 maxlen: 24
37.111.15.0/24 maxlen: 24
37.111.16.0/21 maxlen: 22
37.111.16.0/24 maxlen: 24
37.111.17.0/24 maxlen: 24
37.111.18.0/24 maxlen: 24
37.111.19.0/24 maxlen: 24
37.111.20.0/24 maxlen: 24
37.111.21.0/24 maxlen: 24
37.111.22.0/24 maxlen: 24
37.111.23.0/24 maxlen: 24
37.111.32.0/21 maxlen: 24
37.111.40.0/22 maxlen: 24
37.111.44.0/22 maxlen: 22
37.111.44.0/23 maxlen: 23
37.111.44.0/24 maxlen: 24
37.111.45.0/24 maxlen: 24
37.111.46.0/23 maxlen: 23
37.111.46.0/24 maxlen: 24
37.111.47.0/24 maxlen: 24
37.111.48.0/22 maxlen: 22
37.111.48.0/23 maxlen: 23
37.111.48.0/24 maxlen: 24
37.111.49.0/24 maxlen: 24
37.111.50.0/23 maxlen: 23
37.111.50.0/24 maxlen: 24
37.111.51.0/24 maxlen: 24
37.111.52.0/23 maxlen: 23
37.111.52.0/24 maxlen: 24
37.111.53.0/24 maxlen: 24
37.111.56.0/24 maxlen: 24
37.111.60.0/22 maxlen: 22
37.111.60.0/23 maxlen: 23
37.111.60.0/24 maxlen: 24
37.111.61.0/24 maxlen: 24
37.111.62.0/23 maxlen: 23
37.111.62.0/24 maxlen: 24
37.111.63.0/24 maxlen: 24
37.111.64.0/20 maxlen: 22
37.111.64.0/24 maxlen: 24
37.111.65.0/24 maxlen: 24
37.111.66.0/24 maxlen: 24
37.111.67.0/24 maxlen: 24
37.111.68.0/24 maxlen: 24
37.111.69.0/24 maxlen: 24
37.111.70.0/24 maxlen: 24
37.111.71.0/24 maxlen: 24
37.111.72.0/24 maxlen: 24
37.111.73.0/24 maxlen: 24
37.111.74.0/24 maxlen: 24
37.111.75.0/24 maxlen: 24
37.111.76.0/24 maxlen: 24
37.111.77.0/24 maxlen: 24
37.111.78.0/24 maxlen: 24
37.111.79.0/24 maxlen: 24
37.111.80.0/20 maxlen: 22
37.111.80.0/24 maxlen: 24
37.111.81.0/24 maxlen: 24
37.111.82.0/24 maxlen: 24
37.111.83.0/24 maxlen: 24
37.111.84.0/24 maxlen: 24
37.111.85.0/24 maxlen: 24
37.111.86.0/24 maxlen: 24
37.111.87.0/24 maxlen: 24
37.111.88.0/24 maxlen: 24
37.111.89.0/24 maxlen: 24
37.111.90.0/24 maxlen: 24
37.111.91.0/24 maxlen: 24
37.111.92.0/24 maxlen: 24
37.111.93.0/24 maxlen: 24
37.111.94.0/24 maxlen: 24
37.111.95.0/24 maxlen: 24
37.111.124.0/22 maxlen: 22
37.111.124.0/23 maxlen: 23
37.111.124.0/24 maxlen: 24
37.111.125.0/24 maxlen: 24
37.111.126.0/23 maxlen: 23
37.111.126.0/24 maxlen: 24
37.111.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3287 (0xcd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Validity
Not Before: Mar 2 18:23:06 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5d58a-dde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:93:d4:2c:63:1d:1f:fe:ce:07:08:dc:57:b0:
99:d0:61:c4:f5:79:7e:59:e8:9f:f4:6c:9e:dc:db:
6d:15:a4:15:c6:40:10:30:54:14:9a:4e:4b:2d:bb:
39:f0:76:7b:b5:91:78:c0:2b:6c:cb:8a:18:30:d8:
b0:e7:61:f1:57:dd:29:93:c6:63:00:e1:b8:8d:c4:
b8:53:59:bd:82:4f:55:b3:a8:67:c8:51:1f:2d:46:
90:4e:51:0e:16:d6:ef:56:99:14:07:76:cc:df:25:
06:48:4f:d1:5b:05:2b:89:f4:a9:e9:68:cf:29:dd:
e8:86:1a:1b:b1:ac:27:89:b5:67:98:8a:6f:ed:c6:
28:7d:54:69:64:a1:59:89:59:e3:d8:5a:70:05:63:
ce:a5:e9:c1:31:8e:1f:5e:65:75:a8:a0:15:7a:37:
d9:89:91:69:e2:b7:71:64:56:a5:33:71:26:bb:5c:
a7:8a:be:35:b2:be:06:d5:3a:49:04:91:24:e7:33:
76:5e:3b:eb:e9:42:eb:dd:83:65:ba:93:4a:0b:c1:
5e:1f:4a:b1:64:bc:65:f3:b2:75:1a:9a:b0:6a:dc:
93:f8:dd:24:a3:79:3f:19:ef:45:15:e9:9f:89:e1:
34:62:91:d4:27:96:72:c9:8a:11:d6:55:cb:39:fc:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8F:6B:24:39:DA:18:0D:0D:CA:32:A9:C2:75:80:12:43:6A:85:B1
X509v3 Authority Key Identifier:
keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/97DC58040B5B11EAB69DC64FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
37.111.0.0-37.111.23.255
37.111.32.0-37.111.53.255
37.111.56.0/24
37.111.60.0-37.111.95.255
37.111.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:bf:e6:ee:b8:cf:45:53:bd:c3:cc:6c:04:ec:23:86:33:54:
82:8e:54:7b:ac:5b:34:fc:d8:96:1a:af:05:24:98:32:f7:8c:
75:fa:de:47:ab:18:6b:8e:72:52:e8:f7:b0:a3:7b:70:47:44:
1d:13:25:c8:4f:a3:5a:da:44:88:28:1d:d9:77:c6:1d:1e:ba:
17:af:8e:e5:78:36:40:d2:71:f8:d7:d3:7f:7a:e0:26:ab:d5:
d9:e2:78:a3:42:36:8a:6b:46:57:2f:d1:de:f9:fb:8e:33:b4:
fb:d1:2a:7b:65:1d:02:c2:85:74:ec:42:a0:ce:48:ec:a2:7b:
fa:e0:b9:7f:78:7d:b1:28:5b:6e:80:54:6b:e4:e4:72:89:91:
0b:3d:68:3d:bf:1f:61:21:70:06:b9:f3:ac:7c:44:a1:19:7f:
0f:a6:60:dd:92:f7:e3:67:b3:8a:17:63:2f:a8:cb:f3:c1:b5:
30:3e:94:db:1b:4e:0b:8b:a5:86:d5:16:a0:fb:8c:59:51:c1:
48:48:a2:b7:4f:a8:3e:d4:21:c6:b8:ca:d7:02:4a:88:50:9e:
d6:82:47:47:84:9c:cd:89:bd:4b:cb:cc:8f:d1:54:16:ca:33:
14:e9:09:21:3a:cb:f3:36:93:b7:ce:19:ce:e8:cb:7f:a7:71:
61:87:77:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:02:25 2026 by rpki-client