Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/3118E43E966B11EAAA23047CC4F9AE02.roa
File: 3118E43E966B11EAAA23047CC4F9AE02.roa (raw, json)
Hash identifier: tDcO3gAeV3vTmIvIAIx8rJ91i0PU7YIxp3dKxE3Ka/Q=
Subject key identifier: 8C:89:A6:92:9E:18:4C:0A:F1:B9:E0:D4:27:51:B3:5E:B3:33:9E:03
Certificate issuer: /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Certificate serial: 2B22
Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/3118E43E966B11EAAA23047CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:52:56 +0000
ROA not before: Tue 30 Sep 2025 15:42:31 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 7642
IP address blocks: 27.114.128.0/18 maxlen: 18
27.114.128.0/23 maxlen: 24
27.114.130.0/23 maxlen: 24
27.114.132.0/23 maxlen: 24
27.114.134.0/23 maxlen: 24
27.114.136.0/23 maxlen: 24
27.114.138.0/23 maxlen: 24
27.114.140.0/23 maxlen: 24
27.114.142.0/23 maxlen: 24
27.114.144.0/23 maxlen: 24
27.114.146.0/23 maxlen: 24
27.114.148.0/23 maxlen: 24
27.114.150.0/23 maxlen: 24
27.114.152.0/23 maxlen: 24
27.114.154.0/23 maxlen: 24
27.114.156.0/23 maxlen: 24
27.114.158.0/23 maxlen: 24
27.114.160.0/23 maxlen: 24
27.114.162.0/23 maxlen: 24
27.114.164.0/23 maxlen: 24
27.114.166.0/23 maxlen: 24
27.114.168.0/23 maxlen: 24
27.114.170.0/23 maxlen: 24
27.114.172.0/23 maxlen: 24
27.114.174.0/23 maxlen: 24
27.114.176.0/23 maxlen: 24
27.114.178.0/23 maxlen: 24
27.114.180.0/23 maxlen: 24
27.114.182.0/23 maxlen: 24
27.114.184.0/23 maxlen: 24
27.114.186.0/23 maxlen: 24
27.114.188.0/23 maxlen: 24
27.114.190.0/23 maxlen: 24
43.226.220.0/22 maxlen: 24
103.31.84.0/22 maxlen: 24
123.176.0.0/19 maxlen: 24
124.195.192.0/19 maxlen: 19
124.195.192.0/23 maxlen: 24
124.195.194.0/23 maxlen: 24
124.195.196.0/23 maxlen: 24
124.195.198.0/23 maxlen: 24
124.195.200.0/23 maxlen: 24
124.195.202.0/23 maxlen: 24
124.195.204.0/23 maxlen: 24
124.195.206.0/23 maxlen: 24
124.195.208.0/23 maxlen: 24
124.195.210.0/23 maxlen: 24
124.195.212.0/23 maxlen: 24
124.195.214.0/23 maxlen: 24
124.195.216.0/23 maxlen: 24
124.195.218.0/23 maxlen: 24
124.195.220.0/23 maxlen: 24
124.195.222.0/23 maxlen: 24
202.1.192.0/20 maxlen: 24
203.104.24.0/21 maxlen: 21
203.104.24.0/23 maxlen: 24
203.104.26.0/23 maxlen: 24
203.104.28.0/23 maxlen: 24
203.104.30.0/23 maxlen: 24
2406:e400::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11042 (0x2b22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Validity
Not Before: Sep 30 15:42:31 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a460d8-8822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:17:9a:8f:39:0a:d2:9f:ce:b1:1c:c9:6e:c7:
33:ab:e6:c0:4c:b6:76:c2:b7:aa:78:b7:9b:5c:37:
b5:ec:a7:1e:ff:29:96:c2:58:f9:8b:31:4e:86:43:
cd:ee:f9:1d:24:b5:a6:48:50:06:12:c2:25:59:d9:
df:69:26:77:b8:6a:64:c3:dd:1f:c8:2e:c6:ad:f4:
39:50:49:61:b0:dc:58:0f:db:1a:2c:6c:df:69:14:
45:40:05:9c:cf:31:96:77:cb:94:d4:3e:94:2b:86:
90:b2:b7:44:a9:e5:f4:3e:f3:84:99:f8:64:2c:44:
e9:f2:05:99:25:38:6e:b4:7f:c1:af:9c:b1:51:b9:
b5:ca:7b:28:61:f0:64:5b:bb:44:a8:dd:52:59:04:
30:94:94:d0:14:32:b8:78:14:3b:8d:5a:2c:3f:58:
65:bb:b4:b9:c7:0e:1d:7f:02:0f:c0:48:3c:1c:72:
41:d2:7d:12:72:1a:e7:b0:ec:a4:a2:e9:27:96:45:
68:44:18:a0:ef:6a:73:d0:80:bc:4b:f0:b3:81:ae:
85:56:eb:fe:18:1d:1e:13:60:63:ce:55:a8:99:e7:
9a:55:cd:b5:9e:3a:fd:c6:6e:75:4a:49:64:28:19:
88:7c:11:f9:7c:5d:4b:71:ec:be:58:60:40:3b:69:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:89:A6:92:9E:18:4C:0A:F1:B9:E0:D4:27:51:B3:5E:B3:33:9E:03
X509v3 Authority Key Identifier:
keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/3118E43E966B11EAAA23047CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.114.128.0/18
43.226.220.0/22
103.31.84.0/22
123.176.0.0/19
124.195.192.0/19
202.1.192.0/20
203.104.24.0/21
IPv6:
2406:e400::/32
Signature Algorithm: sha256WithRSAEncryption
31:cf:92:e5:3a:7c:ed:78:31:ee:59:c9:e9:18:0f:63:c6:3d:
9f:f7:93:13:1d:3d:a3:4f:26:ca:45:e0:87:6f:12:4e:ba:e6:
0f:15:27:f2:50:ec:5e:92:42:ac:de:ad:16:07:79:65:4a:c9:
21:94:e3:51:00:c9:d4:b5:58:3d:25:7d:d6:26:fd:ed:4a:6a:
53:e7:1a:c4:a1:4c:b6:d2:61:7a:2a:af:36:51:26:17:35:93:
95:5f:da:51:37:71:74:46:2f:36:3b:b8:9b:d3:69:da:a3:cc:
d5:89:c3:1c:67:25:46:4b:49:6d:55:51:c2:72:d9:64:ff:93:
ee:7b:25:da:b0:25:18:a4:75:d5:71:88:69:f4:8e:13:54:14:
be:8d:ce:49:a2:91:6b:4c:91:c4:6d:df:11:77:0d:b8:4c:0e:
ba:e9:4f:c5:6e:d6:4a:23:6d:22:4f:1f:c1:92:74:82:7b:2f:
a0:31:44:ff:b2:82:6a:35:f6:13:ad:9f:57:61:60:81:a6:d0:
40:f8:9c:94:f2:6e:e4:93:26:61:a0:97:8d:68:0d:50:46:a5:
4f:71:ba:9e:b3:89:1c:37:bc:a0:66:8b:4e:21:35:5a:c2:bb:
86:cc:75:ed:65:8f:77:a3:6c:b0:e7:9d:9e:57:20:82:ee:31:
f3:88:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:34 2026 by rpki-client