Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/EEFB07CCB8A311ED8F694046C4F9AE02.roa
File: EEFB07CCB8A311ED8F694046C4F9AE02.roa (raw, json)
Hash identifier: V2GgiDiVdp7icGNp8uei2QdYQy4qfASwmRrufFn1mxg=
Subject key identifier: 19:D5:4B:A8:DF:FB:94:3F:06:03:02:67:7F:AA:50:24:AA:BD:C7:13
Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Certificate serial: 225A
Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/EEFB07CCB8A311ED8F694046C4F9AE02.roa
Signing time: Wed 04 Mar 2026 16:19:39 +0000
ROA not before: Wed 04 Mar 2026 16:19:39 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 17551
IP address blocks: 14.192.56.0/22 maxlen: 22
14.192.56.0/23 maxlen: 23
14.192.58.0/23 maxlen: 23
103.15.148.0/22 maxlen: 22
103.29.172.0/24 maxlen: 24
103.29.173.0/24 maxlen: 24
103.53.117.0/24 maxlen: 24
103.53.118.0/24 maxlen: 24
103.53.119.0/24 maxlen: 24
103.227.64.0/23 maxlen: 23
103.232.252.0/22 maxlen: 22
110.232.240.0/21 maxlen: 21
117.53.128.0/20 maxlen: 20
125.214.80.0/21 maxlen: 21
202.47.120.0/22 maxlen: 22
203.22.132.0/24 maxlen: 24
203.27.231.0/24 maxlen: 24
203.30.68.0/24 maxlen: 24
203.83.4.0/22 maxlen: 22
203.147.96.0/21 maxlen: 21
2400:b880::/32 maxlen: 32
2407:5400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl
rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8794 (0x225a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Validity
Not Before: Mar 4 16:19:39 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a85b9b-fbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:d5:9c:ec:e7:f8:7b:39:7c:a6:24:0c:07:
b6:2a:3c:d6:dd:46:c3:1a:d3:5e:a1:fa:b7:39:2f:
de:f6:ab:12:85:5b:01:ff:3a:03:f5:24:6b:8b:22:
af:57:91:16:b1:5a:b9:2a:c8:d5:ab:eb:22:b6:2d:
61:a8:28:1d:95:d6:4a:25:94:01:86:e3:33:42:ca:
b4:17:3a:87:9a:11:be:a2:6d:12:4a:77:72:95:1b:
1c:44:16:62:8c:2d:2d:9c:8b:8d:f3:9b:33:54:62:
c4:fa:0f:9a:b1:fa:aa:bf:7e:60:48:0d:d3:88:91:
89:a9:2c:5a:b1:dc:0f:cc:4b:79:2d:71:57:cb:76:
ed:3b:71:d2:a1:31:b2:88:f2:e5:ee:f2:21:8a:a1:
d4:a1:a6:d2:a3:44:0b:15:77:df:97:00:27:48:49:
e6:a5:59:95:ab:a0:dd:f7:71:05:b1:52:45:73:39:
36:05:34:a7:ad:35:72:49:8f:23:97:53:98:1e:04:
f3:be:d2:b0:2c:ab:96:e0:ad:5d:0f:cc:7b:3c:2e:
74:62:99:ec:d3:81:97:a0:d0:9c:e8:69:ea:9c:51:
92:58:04:39:87:43:1f:16:7b:47:30:3a:89:ce:92:
4b:ba:53:1e:c8:12:90:3e:86:29:d5:e7:e4:e5:7c:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D5:4B:A8:DF:FB:94:3F:06:03:02:67:7F:AA:50:24:AA:BD:C7:13
X509v3 Authority Key Identifier:
keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/EEFB07CCB8A311ED8F694046C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.56.0/22
103.15.148.0/22
103.29.172.0/23
103.53.117.0-103.53.119.255
103.227.64.0/23
103.232.252.0/22
110.232.240.0/21
117.53.128.0/20
125.214.80.0/21
202.47.120.0/22
203.22.132.0/24
203.27.231.0/24
203.30.68.0/24
203.83.4.0/22
203.147.96.0/21
IPv6:
2400:b880::/32
2407:5400::/32
Signature Algorithm: sha256WithRSAEncryption
72:22:62:9b:0e:59:f9:8d:fb:ce:9a:cb:04:80:b7:ed:bd:f9:
f7:90:ce:f9:25:00:8c:a5:60:2e:e4:93:dd:d1:76:69:ff:35:
7c:a2:ba:53:55:b0:22:ec:7c:09:6c:28:25:3a:b4:c0:57:7e:
f7:ec:c9:f1:2d:a1:ec:0b:27:1f:41:4d:c6:1e:df:60:c0:2a:
4a:7b:4a:dc:dd:3e:2c:86:9d:22:33:7c:44:f1:25:86:e1:0a:
5e:87:2b:87:10:6c:07:ad:cd:a1:db:9f:2a:71:c3:96:a2:91:
d1:d3:85:93:f6:be:75:0c:c4:b2:11:dc:c4:d1:fa:3e:df:2f:
6d:0b:ff:85:0c:7f:ff:54:a0:12:eb:1f:a2:f8:ab:1a:af:67:
80:49:ab:07:06:e3:e7:89:7c:64:86:93:ee:17:7a:3e:f5:3e:
ff:ad:40:06:95:89:0b:26:c8:cb:73:21:16:14:e9:da:88:20:
db:00:23:dc:05:aa:24:15:b7:ac:06:3f:6a:72:43:8e:e1:ba:
96:08:4c:8a:ed:a6:75:05:df:4c:5a:34:ed:96:f5:5f:03:46:
6f:9d:ca:7a:52:a2:d0:c7:6f:8d:9a:26:3c:69:88:8a:86:d2:
be:cc:6e:a3:11:a7:80:55:5a:af:97:43:8b:0d:99:1b:67:7e:
4e:28:cb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:29 2026 by rpki-client