Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/CC46464A32F511F194E8E564A8833773.roa
File: CC46464A32F511F194E8E564A8833773.roa (raw, json)
Hash identifier: wa4S129mLqKqFxRXf/3Xa9iNQ59gliUa2ykpDU878CU=
Subject key identifier: 8B:19:A7:34:71:6B:DE:04:8F:6D:25:D3:B9:9B:B2:E4:14:21:B7:3E
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 08F4
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/CC46464A32F511F194E8E564A8833773.roa
Signing time: Wed 08 Apr 2026 02:51:10 +0000
ROA not before: Wed 08 Apr 2026 02:51:10 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55720
IP address blocks: 14.192.67.0/24 maxlen: 24
14.192.68.0/24 maxlen: 24
14.192.69.0/24 maxlen: 24
43.231.7.0/24 maxlen: 24
45.116.160.0/24 maxlen: 24
45.116.161.0/24 maxlen: 24
45.116.162.0/24 maxlen: 24
45.116.163.0/24 maxlen: 24
45.120.52.0/24 maxlen: 24
45.120.53.0/24 maxlen: 24
45.120.54.0/24 maxlen: 24
45.120.55.0/24 maxlen: 24
61.4.97.0/24 maxlen: 24
61.4.98.0/24 maxlen: 24
61.4.99.0/24 maxlen: 24
61.4.100.0/22 maxlen: 24
61.4.104.0/22 maxlen: 24
61.4.109.0/24 maxlen: 24
61.4.110.0/24 maxlen: 24
103.4.28.0/24 maxlen: 24
103.4.29.0/24 maxlen: 24
103.4.30.0/24 maxlen: 24
103.4.31.0/24 maxlen: 24
103.15.104.0/24 maxlen: 24
103.15.105.0/24 maxlen: 24
103.15.106.0/24 maxlen: 24
103.15.107.0/24 maxlen: 24
103.21.88.0/24 maxlen: 24
103.21.89.0/24 maxlen: 24
103.21.90.0/24 maxlen: 24
103.21.91.0/24 maxlen: 24
103.23.46.0/24 maxlen: 24
103.23.47.0/24 maxlen: 24
103.71.176.0/24 maxlen: 24
103.71.177.0/24 maxlen: 24
103.71.178.0/24 maxlen: 24
103.71.179.0/24 maxlen: 24
103.243.212.0/24 maxlen: 24
103.243.213.0/24 maxlen: 24
103.243.214.0/24 maxlen: 24
103.243.215.0/24 maxlen: 24
103.246.112.0/24 maxlen: 24
103.246.113.0/24 maxlen: 24
103.246.114.0/24 maxlen: 24
118.107.216.0/24 maxlen: 24
118.107.217.0/24 maxlen: 24
118.107.218.0/24 maxlen: 24
118.107.219.0/24 maxlen: 24
118.107.220.0/24 maxlen: 24
118.107.221.0/24 maxlen: 24
118.107.222.0/24 maxlen: 24
118.107.223.0/24 maxlen: 24
150.107.76.0/24 maxlen: 24
150.107.77.0/24 maxlen: 24
150.107.78.0/24 maxlen: 24
150.107.79.0/24 maxlen: 24
202.9.36.0/24 maxlen: 24
202.9.39.0/24 maxlen: 24
202.73.12.0/24 maxlen: 24
202.73.13.0/24 maxlen: 24
202.73.14.0/24 maxlen: 24
202.73.15.0/24 maxlen: 24
202.87.220.0/24 maxlen: 24
202.87.221.0/24 maxlen: 24
202.87.222.0/24 maxlen: 24
202.87.223.0/24 maxlen: 24
223.25.240.0/24 maxlen: 24
223.25.241.0/24 maxlen: 24
223.25.242.0/24 maxlen: 24
223.25.243.0/24 maxlen: 24
223.25.244.0/24 maxlen: 24
223.25.245.0/24 maxlen: 24
223.25.246.0/24 maxlen: 24
223.25.247.0/24 maxlen: 24
2402:9500::/32 maxlen: 32
2402:9500::/48 maxlen: 48
2402:9500:a00::/48 maxlen: 48
2402:9500:b00::/48 maxlen: 48
2402:9500:c00::/48 maxlen: 48
2402:9500:d00::/48 maxlen: 48
2402:9500:1000::/48 maxlen: 48
2402:9500:2000::/48 maxlen: 48
2402:9500:3000::/48 maxlen: 48
2402:9500:4000::/48 maxlen: 48
2402:9500:5000::/48 maxlen: 48
2402:9500:6000::/48 maxlen: 48
2402:9500:7000::/48 maxlen: 48
2402:9500:8000::/48 maxlen: 48
2402:9500:9000::/48 maxlen: 48
2402:9500:e000::/48 maxlen: 48
2402:9500:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:46:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292 (0x8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Apr 8 02:51:10 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69d5c29e-8d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:9d:de:54:0f:3b:f7:cc:29:b2:d6:3f:2b:
5d:c2:65:73:c5:ef:2c:a8:e9:97:53:90:57:e2:6c:
d9:b1:ff:e7:c3:0e:f4:72:14:40:f3:12:91:5b:43:
19:e8:9e:07:42:12:5d:50:79:55:a5:e7:ab:5b:15:
0c:b0:6e:25:8c:e3:e3:c8:fe:5d:e2:0d:86:1c:1f:
77:ec:45:d4:05:21:72:2f:7c:b5:3b:36:80:c2:58:
f6:e4:a0:e1:ec:9d:d4:90:8d:48:11:3a:37:1b:11:
5c:59:0e:83:28:af:9b:ab:0a:a8:54:82:d5:29:2f:
70:28:6c:5c:c7:c4:59:a7:d5:85:a8:58:25:aa:05:
a0:cd:b4:b6:b3:9d:33:3a:3f:74:6c:66:2d:63:4a:
de:9e:62:7e:88:d5:8f:6a:8f:70:33:a7:93:e3:a2:
12:64:c6:75:a3:33:63:18:43:95:8f:22:6d:b5:fd:
e5:1c:51:56:5c:30:b8:c6:59:ce:be:de:e7:8e:d2:
4c:e0:0d:33:a9:38:8a:71:b8:59:f0:5e:39:1a:59:
f3:18:db:a0:0f:d2:93:41:38:d9:6e:fc:b8:ec:d7:
ca:ba:34:a4:f8:1e:0d:c5:83:1a:b6:a1:92:0d:9e:
b4:ca:62:63:03:ba:28:98:b0:d0:e6:e2:d5:53:d5:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:19:A7:34:71:6B:DE:04:8F:6D:25:D3:B9:9B:B2:E4:14:21:B7:3E
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/CC46464A32F511F194E8E564A8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.67.0-14.192.69.255
43.231.7.0/24
45.116.160.0/22
45.120.52.0/22
61.4.97.0-61.4.107.255
61.4.109.0-61.4.110.255
103.4.28.0/22
103.15.104.0/22
103.21.88.0/22
103.23.46.0/23
103.71.176.0/22
103.243.212.0/22
103.246.112.0-103.246.114.255
118.107.216.0/21
150.107.76.0/22
202.9.36.0/24
202.9.39.0/24
202.73.12.0/22
202.87.220.0/22
223.25.240.0/21
IPv6:
2402:9500::/32
Signature Algorithm: sha256WithRSAEncryption
92:d0:71:d2:9d:e1:a9:9a:4c:0f:43:84:cd:0b:a5:c4:13:82:
9a:2f:98:a6:8d:b4:0c:16:99:f7:b3:11:0c:32:47:82:29:90:
97:9b:c8:ae:72:ca:ef:2a:86:c3:a6:a4:dc:9e:cd:50:5f:ee:
68:90:76:73:a8:07:c4:d1:52:e7:80:0c:10:c4:cf:93:01:85:
ec:b4:46:6c:de:de:91:23:f6:b7:fe:ce:3b:66:68:d0:70:4d:
44:a7:80:d3:11:c1:1c:3e:ea:dd:6e:89:a6:2b:b4:4d:50:02:
df:3c:a3:cc:99:c6:b2:a4:b1:34:d8:7e:a9:29:02:62:d6:e9:
46:fa:41:f4:c7:9b:15:94:8d:e7:19:85:2c:3a:6d:09:db:4c:
24:59:ba:d6:50:e8:2e:30:81:54:a1:4d:7e:2a:b7:ad:76:a4:
e4:5e:74:45:bb:17:f6:2a:7b:86:d0:71:85:75:5c:d3:53:ee:
7a:03:a5:7c:43:4c:51:98:40:22:ca:07:8c:2a:42:72:9e:a0:
23:40:e5:73:1e:c3:0b:fc:dc:59:11:2a:61:dd:4f:6c:d8:7a:
fc:b3:c2:45:26:7d:7f:ee:f6:e6:fa:4c:a4:b3:b5:57:9f:44:
f5:52:db:dc:6a:50:08:c6:87:38:95:41:c4:8e:33:30:9a:4a:
01:d6:44:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:37 2026 by rpki-client