Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E07EDFEAA83511F197EEE3443611F970.roa
File: E07EDFEAA83511F197EEE3443611F970.roa (raw, json)
Hash identifier: PWekMcu4+B0Oj6I8LteCLe3snhBXN0BSRYbpQA+iqFY=
Subject key identifier: 85:AD:43:89:2C:90:19:E2:5F:61:71:AF:CD:97:0C:A2:FE:59:FA:A2
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 017D
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E07EDFEAA83511F197EEE3443611F970.roa
Signing time: Fri 04 Sep 2026 07:54:38 +0000
ROA not before: Fri 04 Sep 2026 07:54:38 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 19194
IP address blocks: 63.223.64.0/23 maxlen: 24
63.223.66.0/24 maxlen: 24
63.223.68.0/24 maxlen: 24
63.223.69.0/24 maxlen: 24
63.223.72.0/23 maxlen: 24
63.223.74.0/24 maxlen: 24
63.223.75.0/24 maxlen: 24
63.223.77.0/24 maxlen: 24
63.223.78.0/24 maxlen: 24
63.223.84.0/24 maxlen: 24
63.223.88.0/24 maxlen: 24
63.223.91.0/24 maxlen: 24
63.223.92.0/24 maxlen: 24
63.223.93.0/24 maxlen: 24
63.223.94.0/24 maxlen: 24
63.223.95.0/24 maxlen: 24
63.223.96.0/24 maxlen: 24
63.223.97.0/24 maxlen: 24
63.223.98.0/24 maxlen: 24
63.223.100.0/24 maxlen: 24
63.223.101.0/24 maxlen: 24
63.223.102.0/24 maxlen: 24
63.223.103.0/24 maxlen: 24
63.223.104.0/24 maxlen: 24
63.223.105.0/24 maxlen: 24
63.223.107.0/24 maxlen: 24
63.223.108.0/24 maxlen: 24
63.223.110.0/24 maxlen: 24
63.223.111.0/24 maxlen: 24
63.223.112.0/24 maxlen: 24
63.223.113.0/24 maxlen: 24
63.223.114.0/24 maxlen: 24
63.223.116.0/24 maxlen: 24
63.223.118.0/24 maxlen: 24
63.223.119.0/24 maxlen: 24
63.223.120.0/24 maxlen: 24
63.223.121.0/24 maxlen: 24
63.223.122.0/24 maxlen: 24
63.223.124.0/24 maxlen: 24
63.223.125.0/24 maxlen: 24
63.223.126.0/24 maxlen: 24
63.223.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Sep 4 07:54:38 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a9a793e-3f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:81:fa:e4:1a:c9:c1:3b:d7:15:54:c7:38:
fb:56:c9:e9:35:1a:67:be:02:ad:a7:14:50:38:7a:
97:4b:76:10:0c:6e:a7:47:35:aa:0a:69:22:b9:94:
40:e7:0e:84:32:00:59:ec:da:66:7c:7f:5d:8a:25:
eb:5e:02:b1:c3:48:7e:df:cd:ff:2a:ad:1e:7f:7e:
c0:c6:72:06:6f:bd:ca:17:a0:83:f9:f3:71:24:d3:
db:ba:6d:35:68:70:e6:26:68:34:26:2a:78:49:89:
c0:9d:ca:8f:cf:0f:07:30:31:57:53:2e:64:e1:c4:
7c:c3:2e:10:24:8e:63:c3:8e:07:4d:e4:bd:6a:4e:
48:28:9f:3b:95:41:4d:49:ec:59:ea:d8:3f:e1:d5:
0e:4a:9c:eb:0b:43:dd:5f:49:9a:48:e1:2b:1e:72:
8c:64:52:86:5a:be:ef:9a:12:d0:c4:fc:69:dd:62:
78:a1:de:16:75:05:3c:de:4d:c3:65:e3:c3:a4:7f:
78:7f:b6:30:72:67:19:2e:d7:71:34:6c:0f:5a:8c:
31:69:c0:69:47:57:1d:df:b7:39:ed:31:09:99:d8:
a4:ba:b8:53:c1:38:dc:ca:14:a8:e4:cd:2a:1a:df:
a0:c9:09:d5:65:93:4a:0e:25:8b:fd:05:76:60:9c:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:43:89:2C:90:19:E2:5F:61:71:AF:CD:97:0C:A2:FE:59:FA:A2
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E07EDFEAA83511F197EEE3443611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
63.223.64.0-63.223.66.255
63.223.68.0/23
63.223.72.0/22
63.223.77.0-63.223.78.255
63.223.84.0/24
63.223.88.0/24
63.223.91.0-63.223.98.255
63.223.100.0-63.223.105.255
63.223.107.0-63.223.108.255
63.223.110.0-63.223.114.255
63.223.116.0/24
63.223.118.0-63.223.122.255
63.223.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:3d:8e:be:04:ee:72:79:56:d7:7c:a1:fa:92:90:35:f2:fe:
fa:a3:a1:64:6b:d9:35:83:e8:28:76:93:96:03:bd:ab:bb:9d:
bd:52:5a:c6:ce:18:58:2d:aa:b8:45:3f:60:cd:44:3b:03:14:
e2:92:fc:93:44:b5:74:54:0a:b9:6e:83:70:80:2d:e4:d8:1b:
57:6c:40:cf:31:f3:93:e9:e7:e5:d6:c1:d9:06:46:14:fd:d1:
41:50:38:37:eb:e0:06:d8:14:82:0f:60:bb:d7:59:ac:d4:f8:
99:3a:f1:4e:91:e3:c4:81:d7:0c:96:6a:54:9b:bc:96:1c:73:
e7:3f:94:2c:f9:3c:20:e9:ba:82:ce:b5:04:8f:e7:b2:8c:62:
0f:19:b1:f6:50:a4:5b:29:fa:3f:99:22:5f:e7:c7:db:b2:db:
9c:47:1d:1a:c0:6d:4d:4a:cb:bd:3b:ec:b2:05:2b:49:b2:65:
fd:f4:a1:9f:8b:96:38:cf:30:5b:58:1a:35:13:dc:29:5a:e6:
85:1b:54:46:30:6f:6e:f8:1b:74:dd:ed:1e:18:57:c0:76:75:
b0:1e:63:67:ff:f0:78:0f:3e:16:1c:e9:0b:7c:04:c7:c1:b6:
f6:46:8b:07:a6:6c:3f:f5:ea:0f:0f:45:cb:97:5c:3b:e9:5d:
af:43:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:53:58 2026 by rpki-client