Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/80564398B1B211F1B4449AB83511F970.roa
File: 80564398B1B211F1B4449AB83511F970.roa (raw, json)
Hash identifier: x/24CC0yQGbvq8aHndmNJthTWBGKcSvL3FZJJTDE4fo=
Subject key identifier: 5A:8F:C3:5A:33:D7:FE:3A:BE:71:B1:E2:99:70:1E:E5:5F:AC:23:63
Certificate issuer: /CN=A911678C/serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Certificate serial: 019D
Authority key identifier: EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/80564398B1B211F1B4449AB83511F970.roa
Signing time: Wed 16 Sep 2026 18:08:16 +0000
ROA not before: Wed 16 Sep 2026 18:08:16 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140227
IP address blocks: 177.2.16.0/20 maxlen: 24
177.2.176.0/21 maxlen: 24
177.2.184.0/21 maxlen: 24
177.3.32.0/20 maxlen: 24
177.3.80.0/21 maxlen: 24
177.3.88.0/21 maxlen: 24
177.4.0.0/20 maxlen: 24
177.4.32.0/20 maxlen: 24
177.4.80.0/20 maxlen: 24
177.5.48.0/20 maxlen: 24
177.5.64.0/20 maxlen: 24
177.5.112.0/20 maxlen: 24
177.5.176.0/20 maxlen: 24
177.6.176.0/20 maxlen: 24
177.7.128.0/20 maxlen: 24
177.201.224.0/20 maxlen: 24
179.236.96.0/21 maxlen: 24
179.236.104.0/21 maxlen: 24
187.53.192.0/20 maxlen: 20
187.126.64.0/20 maxlen: 24
191.223.32.0/20 maxlen: 24
200.97.32.0/20 maxlen: 24
200.217.96.0/20 maxlen: 24
200.222.224.0/20 maxlen: 24
201.15.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=EC368D582E1177E09915E33F44EDB9DE4EF32C52
Validity
Not Before: Sep 16 18:08:16 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6aaadb10-5918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:02:d0:a5:92:bd:27:d3:1a:a6:cf:54:97:
04:87:43:bb:23:98:47:f1:6f:23:71:e7:70:3f:4d:
73:a1:75:f1:0f:0a:28:3c:17:a2:8b:97:65:7f:06:
46:22:c0:34:25:98:92:16:b5:5b:51:7f:f5:f3:37:
e4:2c:97:d7:f3:c0:c1:ae:b6:e1:c2:4d:0f:1f:4b:
3d:fc:8f:74:6c:a9:57:bf:53:3b:75:c2:a5:99:1a:
6f:74:98:78:d3:90:60:9f:f1:fa:4c:7f:07:b0:0e:
10:20:58:52:e5:19:cb:be:f0:4c:2f:31:d0:0c:44:
50:e1:8a:18:fe:1e:39:0c:c4:5a:9e:a4:1b:ba:5e:
43:b8:12:1a:dd:b2:e5:8b:ce:fb:1f:5e:0a:fc:7b:
e0:c1:26:2d:91:0f:5d:dd:65:47:76:db:4e:90:ee:
36:3f:37:3f:a0:73:a8:45:15:19:23:57:a1:f9:39:
fa:08:4f:fd:fb:20:7e:56:f8:dc:09:6f:1e:5a:82:
06:17:0f:48:8c:b5:98:e7:0e:8f:10:03:2b:9e:ec:
48:47:7f:8f:68:ff:66:0c:7d:22:2d:b6:09:f1:d9:
59:5b:53:a1:20:57:73:17:dc:fb:c1:30:84:e6:e7:
56:ae:64:59:30:46:0c:d9:a5:15:cd:ec:3d:98:5b:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8F:C3:5A:33:D7:FE:3A:BE:71:B1:E2:99:70:1E:E5:5F:AC:23:63
X509v3 Authority Key Identifier:
keyid:EC:36:8D:58:2E:11:77:E0:99:15:E3:3F:44:ED:B9:DE:4E:F3:2C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/7DaNWC4Rd-CZFeM_RO253k7zLFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/7DaNWC4Rd-CZFeM_RO253k7zLFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/3BDE1D6E4F2C11F1BBE2F6EA9BEE528E/80564398B1B211F1B4449AB83511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
177.2.16.0/20
177.2.176.0/20
177.3.32.0/20
177.3.80.0/20
177.4.0.0/20
177.4.32.0/20
177.4.80.0/20
177.5.48.0-177.5.79.255
177.5.112.0/20
177.5.176.0/20
177.6.176.0/20
177.7.128.0/20
177.201.224.0/20
179.236.96.0/20
187.53.192.0/20
187.126.64.0/20
191.223.32.0/20
200.97.32.0/20
200.217.96.0/20
200.222.224.0/20
201.15.160.0/20
Signature Algorithm: sha256WithRSAEncryption
53:65:07:c7:23:97:0b:2c:69:27:93:d1:ee:3f:d8:0f:58:3d:
4c:16:d6:ed:3a:ab:4d:2c:f7:8f:73:50:2e:e1:d4:a5:20:67:
e4:ad:0e:c9:fc:7d:60:92:63:47:48:f0:98:57:03:3c:b4:38:
0f:b6:d4:2e:bd:2c:e3:e3:5e:7b:cc:c0:2f:06:d4:27:8e:aa:
12:de:5b:86:18:a6:ce:e3:ea:f9:33:92:3d:fc:a7:a5:14:15:
d1:6a:0e:e7:0d:65:5f:0f:1a:5f:2b:37:87:d7:87:9a:cd:d1:
08:99:02:60:7f:71:e7:a4:aa:72:ce:bf:8a:84:f9:30:db:22:
03:a3:ef:14:fe:8d:e7:f2:81:12:97:c8:64:41:4d:6f:44:ba:
a7:4d:10:cb:d0:1b:de:ac:80:46:f5:7e:fd:f5:03:0d:1d:86:
06:66:74:5b:2b:ce:ff:e4:43:5a:29:a5:41:65:0d:88:75:bf:
fc:3f:54:e3:5e:e7:13:21:cd:31:b7:ad:b4:1f:7c:83:e8:89:
7e:29:b9:06:cb:7c:62:6b:c6:d9:88:28:44:97:fb:d8:3f:2d:
0a:24:7f:8f:26:36:88:ba:9a:73:a6:1a:7c:6f:7d:50:ed:d3:
ad:59:43:3a:fa:f4:0b:d3:c4:f1:d3:ca:ca:2a:62:11:9a:88:
18:cf:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:01:39 2026 by rpki-client