Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/C47CF15486EF11F19E006003A7EE528E.roa
File: C47CF15486EF11F19E006003A7EE528E.roa (raw, json)
Hash identifier: RzDPG9QsjUOtGowh+MQ0k1kpFF4PUc3OuFrwrmQUeJ0=
Subject key identifier: C3:0F:73:B9:4D:C6:D1:0E:CF:DF:84:2B:3C:D2:D8:A6:20:D4:A1:93
Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Certificate serial: 1E97
Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/C47CF15486EF11F19E006003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:39:38 +0000
ROA not before: Thu 23 Jul 2026 23:39:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38880
IP address blocks: 27.131.64.0/18 maxlen: 24
43.245.68.0/24 maxlen: 24
43.245.69.0/24 maxlen: 24
43.245.70.0/24 maxlen: 24
43.245.71.0/24 maxlen: 24
103.13.56.0/22 maxlen: 24
103.31.28.0/22 maxlen: 24
103.204.106.0/23 maxlen: 24
103.213.100.0/22 maxlen: 24
111.223.224.0/20 maxlen: 22
111.223.224.0/24 maxlen: 24
111.223.225.0/24 maxlen: 24
111.223.226.0/24 maxlen: 24
111.223.227.0/24 maxlen: 24
111.223.228.0/24 maxlen: 24
111.223.229.0/24 maxlen: 24
111.223.231.0/24 maxlen: 24
111.223.232.0/24 maxlen: 24
111.223.233.0/24 maxlen: 24
111.223.234.0/24 maxlen: 24
111.223.235.0/24 maxlen: 24
111.223.236.0/24 maxlen: 24
111.223.237.0/24 maxlen: 24
111.223.238.0/24 maxlen: 24
111.223.239.0/24 maxlen: 24
119.31.224.0/21 maxlen: 24
192.140.140.0/22 maxlen: 24
2400:9c00::/32 maxlen: 32
2400:9c00::/44 maxlen: 48
2407:ca80::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 23:39:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7831 (0x1e97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Validity
Not Before: Jul 23 23:39:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a62a63a-a218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:b2:ef:2d:50:90:87:28:a0:3b:15:89:fb:
32:8c:91:6e:33:b0:65:0d:f5:bb:ea:7e:b2:18:fc:
9a:f2:72:40:98:e7:98:45:78:f1:8e:32:67:6c:e8:
fa:25:22:f6:96:d5:23:ae:4c:fe:1f:ec:2f:d2:73:
b7:52:fc:2a:92:38:66:70:20:31:9f:e8:21:c4:aa:
fc:6c:cb:e4:33:fa:b4:92:d7:a7:ec:f7:85:6c:92:
ec:29:a3:d1:67:5a:fd:ae:97:18:1c:57:c2:e0:b1:
01:98:d9:19:b1:29:18:68:a6:c5:7b:56:6d:e0:20:
2d:9d:58:17:82:15:92:7a:f5:40:7b:f8:ef:19:fd:
a2:53:b8:f0:00:85:23:f5:9c:45:bf:a3:b2:f5:f8:
cc:e2:89:8f:31:bd:03:5c:29:e6:a4:05:7a:a2:7b:
f1:a6:df:dc:f9:53:0c:c9:97:f4:c9:63:da:d4:8f:
30:c9:6b:71:75:50:0b:f9:55:be:d5:4a:43:b2:1f:
0f:75:d4:f8:3f:15:29:21:d8:05:8a:67:a2:9b:d5:
b6:97:af:31:56:88:34:97:22:34:24:ed:bd:83:b4:
d7:5c:5e:ca:14:8c:26:62:6d:d0:f8:18:1d:b3:98:
ee:f9:7b:1b:3b:9e:42:7c:eb:72:f8:a9:fc:b3:79:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0F:73:B9:4D:C6:D1:0E:CF:DF:84:2B:3C:D2:D8:A6:20:D4:A1:93
X509v3 Authority Key Identifier:
keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/C47CF15486EF11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.64.0/18
43.245.68.0/22
103.13.56.0/22
103.31.28.0/22
103.204.106.0/23
103.213.100.0/22
111.223.224.0/20
119.31.224.0/21
192.140.140.0/22
IPv6:
2400:9c00::/32
2407:ca80::/32
Signature Algorithm: sha256WithRSAEncryption
72:2e:e4:eb:78:01:05:04:cc:cc:20:81:5f:cd:9e:0f:00:0e:
b4:61:41:c4:f1:94:97:d2:79:2e:02:b7:de:f0:68:25:f8:a0:
bf:ef:ea:f7:40:80:2a:45:33:32:50:a7:8a:37:9a:7e:e5:cf:
b1:e8:73:03:f4:8d:bc:dd:56:65:2f:38:5b:91:66:b4:47:79:
4d:fe:d3:32:3c:00:29:67:2d:4f:b2:c7:de:51:8b:b4:36:76:
e7:d7:ff:47:6b:dd:1a:22:e1:25:9d:a7:7e:53:5c:7d:13:27:
b9:48:45:d6:f7:a4:02:e2:0d:07:35:34:c3:b4:4c:f3:c0:51:
46:12:e1:52:7e:18:82:13:e1:3a:af:2d:43:c1:b8:21:1c:ce:
9e:ef:15:18:7f:c9:23:9d:b4:7a:39:43:4b:16:db:6d:d0:17:
b6:c5:48:e0:b0:61:f9:d1:92:44:45:08:b9:fd:8f:19:c0:b5:
02:2b:6c:e5:94:ab:d4:90:36:48:81:4a:ed:d9:3c:97:9f:52:
2b:7b:5a:58:ca:ba:a5:97:b4:94:d3:7a:47:8e:fb:9a:a2:45:
cd:74:60:74:4d:1a:24:4b:f5:fe:ee:5d:44:0a:31:ea:3d:20:
6a:94:55:19:0f:03:75:69:a0:23:43:6a:a5:c8:5b:13:09:b8:
52:5d:36:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:09 2026 by rpki-client