Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/CCA73AD084D111F195FCD5AD58A30FBC.roa
File: CCA73AD084D111F195FCD5AD58A30FBC.roa (raw, json)
Hash identifier: Zsxd7kKN0wCdkDigU6/ttzwC27LOJzyfJn/Dkigf1fg=
Subject key identifier: EA:9A:7C:BD:FC:83:DB:97:9B:E3:7C:95:D1:CE:06:3F:36:A5:EF:B4
Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Certificate serial: 0D8B
Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/CCA73AD084D111F195FCD5AD58A30FBC.roa
Signing time: Tue 21 Jul 2026 07:00:05 +0000
ROA not before: Tue 21 Jul 2026 07:00:05 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 24342
IP address blocks: 115.127.0.0/17 maxlen: 22
115.127.0.0/18 maxlen: 23
115.127.0.0/19 maxlen: 24
115.127.32.0/22 maxlen: 24
115.127.36.0/23 maxlen: 24
115.127.39.0/24 maxlen: 24
115.127.40.0/21 maxlen: 24
115.127.48.0/20 maxlen: 24
115.127.64.0/20 maxlen: 24
115.127.80.0/21 maxlen: 24
115.127.88.0/22 maxlen: 24
115.127.92.0/23 maxlen: 24
115.127.94.0/24 maxlen: 24
115.127.95.0/24 maxlen: 24
115.127.96.0/19 maxlen: 24
115.127.128.0/18 maxlen: 24
115.127.192.0/19 maxlen: 23
115.127.192.0/20 maxlen: 24
115.127.208.0/21 maxlen: 24
115.127.216.0/23 maxlen: 24
115.127.218.0/24 maxlen: 24
115.127.220.0/22 maxlen: 24
202.168.224.0/19 maxlen: 24
2406:1400::/32 maxlen: 32
2406:1400::/40 maxlen: 40
2406:1400::/48 maxlen: 48
2406:1400:100::/40 maxlen: 40
2406:1400:200::/40 maxlen: 40
2406:1400:300::/40 maxlen: 40
2406:1400:400::/40 maxlen: 40
2406:1400:c00::/48 maxlen: 48
2406:1400:c07::/48 maxlen: 48
2406:1400:c6b::/48 maxlen: 48
2406:1400:8386::/48 maxlen: 48
2406:1400:8387::/48 maxlen: 48
2406:1400:c100::/48 maxlen: 48
2406:1400:c109::/48 maxlen: 48
2406:1400:c174::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3467 (0xd8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37E3, serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Validity
Not Before: Jul 21 07:00:05 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a5f18f4-785d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:ff:e7:08:4d:32:5d:7c:fa:d6:5f:1c:9a:
d6:08:17:28:54:d2:0d:69:a8:2d:e2:5c:d4:b9:09:
13:fb:e4:98:59:5d:58:7b:fa:11:13:50:a0:a7:4a:
1a:5e:34:1c:a9:bb:a1:5b:42:83:f0:2b:bf:15:85:
c6:15:51:90:48:76:b8:7c:fe:ab:87:85:90:1a:52:
b3:59:34:4a:4e:36:39:ce:2b:58:f2:cb:69:c1:c3:
00:1a:6e:f6:1b:47:84:b9:91:0f:4a:09:99:b3:8a:
0a:b4:42:ec:82:44:d3:98:5d:7a:5b:80:b9:53:00:
4b:33:ff:4d:9a:cb:71:18:30:c1:de:b4:54:6c:1d:
a2:ec:7f:a1:99:95:ee:e0:20:29:61:46:50:e7:0f:
15:d4:27:50:06:f8:fa:a0:18:5f:40:83:5d:3a:e9:
a5:17:02:10:75:05:79:78:b3:c4:d0:4d:a2:2f:3f:
4c:88:62:25:b9:c1:75:7a:e9:e7:3c:af:59:46:cb:
7f:dc:eb:db:91:89:47:59:db:36:11:fd:e9:d2:04:
8f:65:de:c4:1a:f7:89:10:4d:9a:40:09:9d:2c:a6:
fd:83:5d:c6:aa:b8:12:3f:b3:87:89:28:ab:29:18:
72:dc:ae:e1:36:dd:9c:e4:f4:4d:76:45:1a:9d:de:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:7C:BD:FC:83:DB:97:9B:E3:7C:95:D1:CE:06:3F:36:A5:EF:B4
X509v3 Authority Key Identifier:
keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/CCA73AD084D111F195FCD5AD58A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
115.127.0.0-115.127.223.255
202.168.224.0/19
IPv6:
2406:1400::/32
Signature Algorithm: sha256WithRSAEncryption
a6:4f:0d:8f:b2:6f:d2:67:62:f2:fd:1f:df:69:08:78:1e:7d:
f1:64:a3:34:2d:30:28:e9:98:f8:d4:8c:75:2e:92:c3:5d:da:
8d:a9:cc:37:e3:a9:2c:ea:96:a1:9a:93:38:44:92:24:bb:d1:
18:ef:08:3f:a0:5a:f9:51:7a:e0:f4:66:62:89:a9:dc:f9:f7:
52:ca:d4:41:5a:bd:de:45:f5:c7:a4:6e:9d:ea:13:e2:33:55:
91:f4:6d:72:f9:f0:18:3c:7a:f1:41:47:99:1d:2c:61:4b:2a:
2f:f1:57:23:56:7c:85:24:4b:bb:42:60:63:99:a3:ce:92:a3:
0b:3f:4d:8e:ea:23:d9:76:4b:8f:d1:a6:0d:45:38:b5:ad:f9:
e3:ac:59:87:f4:83:bd:e5:40:79:4a:b0:ba:fe:72:6e:5d:92:
d0:fb:5b:82:0c:d2:05:d2:58:f0:98:2e:7c:c2:0d:32:d4:b2:
c2:84:ac:d7:5a:8c:00:9f:d6:e5:ff:03:5e:1f:51:3b:38:28:
49:0d:91:58:22:80:6c:64:82:86:72:fb:aa:47:d8:04:30:15:
5d:49:1e:85:e7:9a:02:53:0d:fe:73:f1:3d:91:5d:10:47:2d:
40:15:d8:2b:5b:5f:66:8a:d1:62:fa:87:5a:54:f9:a0:8d:f8:
96:fe:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:48 2026 by rpki-client