Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/152BB7F4ADC211F198D614673711F970.roa
File: 152BB7F4ADC211F198D614673711F970.roa (raw, json)
Hash identifier: GGIUeDGn3HzDFIRDM3tu/8bPISYpRr+TfUQkdvjdq7A=
Subject key identifier: B9:6A:CE:C4:73:32:0B:BD:AD:91:48:83:DC:07:87:DE:88:12:08:EF
Certificate issuer: /CN=A914699C/serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
Certificate serial: 32
Authority key identifier: 57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/152BB7F4ADC211F198D614673711F970.roa
Signing time: Sun 20 Sep 2026 07:06:25 +0000
ROA not before: Sun 20 Sep 2026 07:06:25 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 400619
IP address blocks: 191.124.0.0/24 maxlen: 24
191.124.1.0/24 maxlen: 24
191.124.2.0/24 maxlen: 24
191.124.3.0/24 maxlen: 24
191.124.4.0/24 maxlen: 24
191.124.5.0/24 maxlen: 24
191.124.6.0/24 maxlen: 24
191.124.7.0/24 maxlen: 24
191.124.8.0/24 maxlen: 24
191.124.9.0/24 maxlen: 24
191.124.10.0/24 maxlen: 24
191.124.11.0/24 maxlen: 24
191.124.12.0/22 maxlen: 22
191.124.16.0/21 maxlen: 21
191.124.24.0/21 maxlen: 21
191.124.32.0/21 maxlen: 21
191.124.40.0/21 maxlen: 21
191.124.48.0/22 maxlen: 22
191.124.52.0/22 maxlen: 22
191.124.56.0/22 maxlen: 22
191.124.60.0/24 maxlen: 24
191.124.61.0/24 maxlen: 24
191.124.62.0/24 maxlen: 24
191.124.63.0/24 maxlen: 24
191.124.64.0/21 maxlen: 21
191.124.72.0/21 maxlen: 21
191.124.80.0/21 maxlen: 21
191.124.88.0/21 maxlen: 21
191.124.96.0/21 maxlen: 21
191.124.104.0/21 maxlen: 21
191.124.112.0/22 maxlen: 22
191.124.116.0/22 maxlen: 22
191.124.120.0/24 maxlen: 24
191.124.121.0/24 maxlen: 24
191.124.122.0/24 maxlen: 24
191.124.123.0/24 maxlen: 24
191.124.124.0/24 maxlen: 24
191.124.125.0/24 maxlen: 24
191.124.126.0/24 maxlen: 24
191.124.127.0/24 maxlen: 24
191.124.128.0/21 maxlen: 21
191.124.136.0/22 maxlen: 22
191.124.140.0/24 maxlen: 24
191.124.141.0/24 maxlen: 24
191.124.142.0/24 maxlen: 24
191.124.143.0/24 maxlen: 24
191.124.144.0/24 maxlen: 24
191.124.145.0/24 maxlen: 24
191.124.146.0/24 maxlen: 24
191.124.147.0/24 maxlen: 24
191.124.148.0/24 maxlen: 24
191.124.149.0/24 maxlen: 24
191.124.150.0/24 maxlen: 24
191.124.151.0/24 maxlen: 24
191.124.152.0/24 maxlen: 24
191.124.153.0/24 maxlen: 24
191.124.154.0/24 maxlen: 24
191.124.155.0/24 maxlen: 24
191.124.156.0/24 maxlen: 24
191.124.157.0/24 maxlen: 24
191.124.158.0/24 maxlen: 24
191.124.159.0/24 maxlen: 24
191.124.160.0/24 maxlen: 24
191.124.161.0/24 maxlen: 24
191.124.162.0/24 maxlen: 24
191.124.163.0/24 maxlen: 24
191.124.164.0/24 maxlen: 24
191.124.165.0/24 maxlen: 24
191.124.166.0/24 maxlen: 24
191.124.167.0/24 maxlen: 24
191.124.168.0/24 maxlen: 24
191.124.169.0/24 maxlen: 24
191.124.170.0/24 maxlen: 24
191.124.171.0/24 maxlen: 24
191.124.172.0/24 maxlen: 24
191.124.173.0/24 maxlen: 24
191.124.174.0/24 maxlen: 24
191.124.175.0/24 maxlen: 24
191.124.176.0/21 maxlen: 21
191.124.184.0/22 maxlen: 22
191.124.188.0/22 maxlen: 22
191.124.192.0/24 maxlen: 24
191.124.193.0/24 maxlen: 24
191.124.194.0/24 maxlen: 24
191.124.195.0/24 maxlen: 24
191.124.196.0/24 maxlen: 24
191.124.197.0/24 maxlen: 24
191.124.198.0/24 maxlen: 24
191.124.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl
rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914699C, serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
Validity
Not Before: Sep 20 07:06:25 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aaf85f1-8040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:eb:6a:1f:0a:77:36:ef:90:41:3a:2c:52:35:
9a:fb:80:60:37:61:da:16:bf:77:91:38:88:21:36:
d5:84:44:72:d0:02:b6:6a:8f:25:45:3b:8a:cf:f1:
f5:86:03:25:1d:69:60:a5:d7:67:d6:50:10:d1:2b:
db:9c:83:16:2a:d1:2e:d2:73:d4:8c:22:95:4b:fa:
12:e5:de:59:e8:3d:32:1e:40:73:c7:e9:f6:8b:67:
45:09:e1:62:eb:3f:26:54:14:be:4a:d7:e4:87:4d:
db:4a:ab:44:23:2c:5e:ec:e5:84:d2:c9:de:c0:90:
43:0a:c0:bb:a6:99:b5:6f:61:a6:8e:3f:0d:c9:5e:
e1:d6:8d:de:94:58:2d:79:42:7e:55:af:2a:98:48:
5b:c9:bc:6b:11:db:98:a5:22:72:98:28:03:d5:22:
9e:dd:4a:aa:11:e7:63:6b:46:ac:70:1f:02:87:8c:
f0:85:02:ba:b0:b0:75:b7:03:15:ab:7f:b2:ed:28:
72:bc:f1:4c:59:35:43:2b:59:33:d3:39:04:ed:42:
c8:1b:49:70:df:f0:6c:93:56:42:13:f1:b0:dc:7d:
4d:50:84:cf:75:0e:c2:21:ba:77:ab:0e:04:7e:7a:
64:4c:64:1d:31:bf:fc:b4:d7:2e:af:fd:d6:6b:25:
bb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:CE:C4:73:32:0B:BD:AD:91:48:83:DC:07:87:DE:88:12:08:EF
X509v3 Authority Key Identifier:
keyid:57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/152BB7F4ADC211F198D614673711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
191.124.0.0-191.124.199.255
Signature Algorithm: sha256WithRSAEncryption
38:de:2f:e8:85:a1:30:b4:68:8a:1c:b1:d1:16:ea:c0:04:fc:
0b:2e:bd:62:8f:41:3a:ce:72:9d:20:26:ab:3f:bc:87:14:d1:
28:65:b4:9a:35:3c:d2:d2:d6:fc:b7:d9:97:7d:94:6b:e3:3b:
f8:8b:d5:f1:7d:e1:39:ec:87:c4:ba:b8:fe:5d:36:2f:17:e8:
2d:7d:ba:ef:6d:c5:d2:16:10:51:ce:69:10:6c:ac:af:3f:34:
aa:ac:36:44:89:aa:02:2c:da:3b:e6:a6:17:b2:fd:d2:c6:b9:
c4:7c:82:f7:5d:95:1f:2b:df:91:d6:72:48:d7:7a:d9:3e:5a:
07:3b:d6:fe:96:5a:63:bf:7f:42:47:6c:c2:57:77:95:a7:ab:
e3:94:fa:ea:b9:5b:b8:26:d5:ae:40:03:af:ee:40:1e:f4:ba:
ed:58:b4:1f:15:81:c5:80:8c:ff:dc:eb:c0:38:94:ce:ed:52:
bd:23:4c:99:6d:22:18:8a:e8:60:1e:3d:d7:a6:a0:dc:64:58:
f0:a6:f9:a0:ef:7c:a1:a3:d8:51:e0:5d:19:5f:cc:5a:3c:15:
35:9a:4b:0d:2b:bc:a2:88:70:9e:ac:46:e3:91:83:2c:ff:08:
55:d6:ae:a4:eb:97:b7:af:8c:78:ae:58:82:00:0a:04:81:94:
ca:b7:7d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:37:02 2026 by rpki-client