Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/5E4588844CBF11F1BB1B5F069D833773.roa
File: 5E4588844CBF11F1BB1B5F069D833773.roa (raw, json)
Hash identifier: cSMsiEM4QuCqeeVQ/u0djlIowO/kOe0JR0vNCGwfOSo=
Subject key identifier: 4A:A8:52:FD:6F:7C:96:15:5C:A3:D7:BC:6E:7E:58:E1:D9:B4:4F:0B
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 095F
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/5E4588844CBF11F1BB1B5F069D833773.roa
Signing time: Mon 14 Sep 2026 20:41:36 +0000
ROA not before: Mon 14 Sep 2026 20:41:36 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 55720
IP address blocks: 14.192.67.0/24 maxlen: 24
14.192.68.0/24 maxlen: 24
14.192.69.0/24 maxlen: 24
45.116.160.0/24 maxlen: 24
45.116.161.0/24 maxlen: 24
45.116.162.0/24 maxlen: 24
45.116.163.0/24 maxlen: 24
45.120.52.0/24 maxlen: 24
45.120.53.0/24 maxlen: 24
45.120.54.0/24 maxlen: 24
45.120.55.0/24 maxlen: 24
61.4.97.0/24 maxlen: 24
61.4.98.0/24 maxlen: 24
61.4.99.0/24 maxlen: 24
61.4.100.0/22 maxlen: 24
61.4.104.0/22 maxlen: 24
61.4.109.0/24 maxlen: 24
61.4.110.0/24 maxlen: 24
103.4.28.0/24 maxlen: 24
103.4.29.0/24 maxlen: 24
103.4.30.0/24 maxlen: 24
103.4.31.0/24 maxlen: 24
103.15.104.0/24 maxlen: 24
103.15.105.0/24 maxlen: 24
103.15.107.0/24 maxlen: 24
103.21.88.0/24 maxlen: 24
103.21.89.0/24 maxlen: 24
103.21.90.0/24 maxlen: 24
103.21.91.0/24 maxlen: 24
103.23.46.0/24 maxlen: 24
103.23.47.0/24 maxlen: 24
103.71.176.0/24 maxlen: 24
103.71.177.0/24 maxlen: 24
103.71.178.0/24 maxlen: 24
103.71.179.0/24 maxlen: 24
103.243.212.0/24 maxlen: 24
103.243.213.0/24 maxlen: 24
103.243.214.0/24 maxlen: 24
103.243.215.0/24 maxlen: 24
103.246.112.0/24 maxlen: 24
103.246.113.0/24 maxlen: 24
103.246.114.0/24 maxlen: 24
118.107.216.0/24 maxlen: 24
118.107.217.0/24 maxlen: 24
118.107.218.0/24 maxlen: 24
118.107.219.0/24 maxlen: 24
118.107.220.0/24 maxlen: 24
118.107.221.0/24 maxlen: 24
118.107.222.0/24 maxlen: 24
118.107.223.0/24 maxlen: 24
150.107.76.0/24 maxlen: 24
150.107.77.0/24 maxlen: 24
150.107.78.0/24 maxlen: 24
150.107.79.0/24 maxlen: 24
202.9.36.0/24 maxlen: 24
202.9.39.0/24 maxlen: 24
202.73.12.0/24 maxlen: 24
202.73.13.0/24 maxlen: 24
202.73.14.0/24 maxlen: 24
202.73.15.0/24 maxlen: 24
202.87.220.0/24 maxlen: 24
202.87.221.0/24 maxlen: 24
202.87.222.0/24 maxlen: 24
202.87.223.0/24 maxlen: 24
223.25.240.0/24 maxlen: 24
223.25.241.0/24 maxlen: 24
223.25.242.0/24 maxlen: 24
223.25.243.0/24 maxlen: 24
223.25.244.0/24 maxlen: 24
223.25.245.0/24 maxlen: 24
223.25.246.0/24 maxlen: 24
223.25.247.0/24 maxlen: 24
2402:9500::/32 maxlen: 32
2402:9500::/48 maxlen: 48
2402:9500:a00::/48 maxlen: 48
2402:9500:b00::/48 maxlen: 48
2402:9500:c00::/48 maxlen: 48
2402:9500:d00::/48 maxlen: 48
2402:9500:1000::/48 maxlen: 48
2402:9500:2000::/48 maxlen: 48
2402:9500:3000::/48 maxlen: 48
2402:9500:4000::/48 maxlen: 48
2402:9500:5000::/48 maxlen: 48
2402:9500:6000::/48 maxlen: 48
2402:9500:7000::/48 maxlen: 48
2402:9500:8000::/48 maxlen: 48
2402:9500:9000::/48 maxlen: 48
2402:9500:e000::/48 maxlen: 48
2402:9500:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2399 (0x95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Sep 14 20:41:36 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa85c00-5df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:7c:7d:44:b0:5e:a1:7d:05:4e:ff:ff:c2:
d7:05:bf:fa:8b:1e:3d:17:09:8e:16:ce:1c:1a:91:
df:9a:cc:70:35:71:a1:c8:ec:12:24:9b:18:c3:d1:
77:36:ac:04:eb:7f:0e:ad:ec:3c:67:37:bb:b4:e9:
cb:8e:bc:a0:3b:db:80:c3:5c:15:25:d1:c4:e5:b3:
37:ae:ae:d2:50:ac:24:fb:b1:c3:15:76:f1:f7:2b:
47:7f:bb:7f:0b:59:5e:ab:07:e7:f5:d9:b2:36:1d:
38:63:dc:4b:4d:e7:16:57:35:ae:fe:71:8b:99:63:
47:dd:0d:28:7f:6d:c5:71:04:d2:e1:2c:08:67:2f:
b2:fc:3c:16:0b:16:18:ac:77:38:95:c0:4f:5b:35:
c0:5a:19:3e:4a:3f:6e:2b:be:a9:0f:7a:2c:8b:28:
06:4d:17:72:e6:ac:1a:47:96:37:f9:34:f3:1e:42:
e3:a1:58:8d:c3:cf:d7:38:61:d8:34:9d:5d:52:e7:
ec:4e:0b:82:da:2f:e2:d4:58:b6:30:4a:a9:bb:a9:
d4:12:a0:ea:b8:83:e4:b1:58:2b:e3:db:bd:73:a3:
82:0e:d6:25:c6:c5:08:a6:e3:f6:f3:5d:5f:91:1f:
65:d4:53:c2:65:8b:f1:90:71:18:0a:8c:d4:b8:71:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A8:52:FD:6F:7C:96:15:5C:A3:D7:BC:6E:7E:58:E1:D9:B4:4F:0B
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/5E4588844CBF11F1BB1B5F069D833773.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.67.0-14.192.69.255
45.116.160.0/22
45.120.52.0/22
61.4.97.0-61.4.107.255
61.4.109.0-61.4.110.255
103.4.28.0/22
103.15.104.0/23
103.15.107.0/24
103.21.88.0/22
103.23.46.0/23
103.71.176.0/22
103.243.212.0/22
103.246.112.0-103.246.114.255
118.107.216.0/21
150.107.76.0/22
202.9.36.0/24
202.9.39.0/24
202.73.12.0/22
202.87.220.0/22
223.25.240.0/21
IPv6:
2402:9500::/32
Signature Algorithm: sha256WithRSAEncryption
13:76:04:31:c6:56:cd:07:9d:d4:4f:94:4f:84:d2:8d:25:16:
be:ac:05:72:5d:e4:ff:83:f6:ac:23:0b:f3:84:c0:6d:8c:fa:
f1:e9:2c:d6:7e:c5:02:8d:bf:e0:6b:f7:99:7b:08:2b:9d:60:
82:0d:e4:1f:1c:13:ad:a2:09:de:97:b3:ce:34:aa:e3:d3:21:
f2:26:8e:1f:ce:14:a1:d8:74:61:2c:18:7b:b4:7f:f6:05:7c:
86:e4:78:d1:c0:81:90:ff:ce:85:78:f7:a0:56:9a:31:ff:e7:
80:30:cc:aa:5b:52:dc:dc:c3:95:05:2b:ab:71:8a:32:ac:42:
c5:1a:4d:18:df:41:c1:9c:80:fc:45:4f:64:43:a7:c7:c4:1d:
76:82:34:88:16:ee:7c:50:87:d6:cb:e8:ab:b6:2a:ec:b8:9d:
ed:e5:58:e5:a1:1e:a0:62:1a:6d:2a:93:c4:aa:f3:0e:50:42:
d6:89:24:18:e8:6b:b6:58:5e:39:b3:19:f4:59:64:1b:f7:1a:
86:e7:e2:7b:6f:46:fa:c8:51:5b:33:9b:1c:18:7d:2f:4a:fb:
39:b0:0e:d9:a1:8c:9b:9a:35:67:eb:71:58:90:9b:ad:73:f4:
99:6f:bd:27:0e:2e:a4:b7:44:92:cb:19:83:ae:1e:4a:06:29:
0e:fd:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:56:03 2026 by rpki-client