Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D4002378F15211EAA1BAB944C4F9AE02.roa
File: D4002378F15211EAA1BAB944C4F9AE02.roa (raw, json)
Hash identifier: aLEfT4bz2lONE3Z6tiYFlCUQQ7W4a5Jjb6n/TTXscv8=
Subject key identifier: 09:95:C3:A0:96:10:96:9B:50:02:39:0A:AF:04:73:1D:10:E2:E7:16
Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial: 3311
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D4002378F15211EAA1BAB944C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:10:49 +0000
ROA not before: Wed 30 Apr 2025 15:52:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17908
IP address blocks: 59.163.172.0/23 maxlen: 23
59.165.64.0/20 maxlen: 20
59.165.80.0/20 maxlen: 20
59.165.104.0/21 maxlen: 21
61.11.0.0/24 maxlen: 24
61.11.20.0/24 maxlen: 24
61.11.24.0/22 maxlen: 22
61.11.28.0/24 maxlen: 24
61.11.30.0/23 maxlen: 23
61.17.0.0/21 maxlen: 21
61.17.12.0/22 maxlen: 22
61.17.16.0/21 maxlen: 21
61.17.17.0/24 maxlen: 24
61.17.18.0/24 maxlen: 24
61.17.21.0/24 maxlen: 24
61.17.22.0/24 maxlen: 24
61.17.34.0/24 maxlen: 24
61.17.36.0/22 maxlen: 22
61.17.44.0/22 maxlen: 22
61.17.48.0/21 maxlen: 21
61.17.57.0/24 maxlen: 24
61.17.72.0/22 maxlen: 22
61.17.83.0/24 maxlen: 24
61.17.108.0/24 maxlen: 24
61.17.112.0/20 maxlen: 20
61.17.112.0/21 maxlen: 21
61.17.124.0/22 maxlen: 22
61.17.128.0/19 maxlen: 19
61.17.180.0/22 maxlen: 22
61.17.197.0/24 maxlen: 24
61.17.208.0/21 maxlen: 21
61.17.216.0/21 maxlen: 21
61.17.216.0/22 maxlen: 22
61.17.218.0/24 maxlen: 24
61.17.219.0/24 maxlen: 24
61.17.221.0/24 maxlen: 24
61.17.222.0/24 maxlen: 24
61.17.224.0/22 maxlen: 22
61.17.226.0/24 maxlen: 24
61.17.227.0/24 maxlen: 24
61.17.228.0/23 maxlen: 23
61.17.236.0/23 maxlen: 23
61.17.238.0/24 maxlen: 24
61.17.240.0/20 maxlen: 20
115.109.0.0/17 maxlen: 17
115.109.6.0/23 maxlen: 23
115.109.128.0/21 maxlen: 21
115.109.136.0/23 maxlen: 23
115.109.138.0/24 maxlen: 24
115.109.139.0/24 maxlen: 24
115.109.140.0/24 maxlen: 24
115.109.141.0/24 maxlen: 24
115.109.144.0/22 maxlen: 22
115.109.148.0/23 maxlen: 23
115.109.150.0/24 maxlen: 24
115.109.151.0/24 maxlen: 24
115.109.152.0/22 maxlen: 22
115.109.156.0/22 maxlen: 22
115.109.166.0/23 maxlen: 23
115.109.176.0/20 maxlen: 20
115.109.192.0/21 maxlen: 21
115.109.200.0/21 maxlen: 21
115.109.208.0/20 maxlen: 20
115.109.212.0/23 maxlen: 23
115.109.224.0/21 maxlen: 21
115.109.232.0/21 maxlen: 21
115.109.248.0/21 maxlen: 21
202.54.48.0/23 maxlen: 23
202.54.131.0/24 maxlen: 24
203.199.227.0/24 maxlen: 24
203.199.228.0/24 maxlen: 24
219.64.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13073 (0x3311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Validity
Not Before: Apr 30 15:52:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48f39-b3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:a9:f5:d9:cd:3f:d1:57:bd:22:06:37:fc:
e8:d2:63:48:a4:15:de:ea:51:fa:39:e8:8b:fd:e0:
53:b5:60:54:a1:a8:65:60:9f:62:5b:33:89:38:16:
f4:06:ac:f0:40:cb:87:7a:2d:8c:50:03:e1:6e:09:
55:5f:ac:8b:41:45:7b:e6:5b:58:16:82:c4:27:66:
72:1a:55:f1:65:1b:7b:41:d0:69:e7:20:bb:63:f4:
40:31:6f:c6:82:fb:be:54:f7:17:b1:48:95:74:92:
fd:b9:58:aa:2c:2b:91:a7:01:c1:29:18:9b:27:c4:
68:7f:5b:f7:e3:71:0c:97:1e:0d:22:4b:ce:0c:66:
a9:61:e8:1e:4f:1d:b4:fe:6e:2f:7c:c2:7d:a3:18:
95:55:52:4f:7d:64:8f:c2:8e:9c:7a:b1:f8:9c:c9:
f2:a4:53:f5:68:cd:46:52:8c:99:86:53:bd:48:22:
4b:a8:90:8b:5b:9f:c5:9d:cf:25:26:48:03:97:19:
aa:c5:73:c8:e5:6c:e2:29:8f:a4:a0:40:bb:40:ce:
d6:ef:47:8c:2b:15:58:2f:43:b9:d3:41:3b:47:bf:
e2:ce:6f:d4:14:ef:69:e1:57:65:6c:a5:f1:ff:5c:
2c:bf:79:38:9a:37:4d:45:16:1f:7f:87:11:43:9d:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:95:C3:A0:96:10:96:9B:50:02:39:0A:AF:04:73:1D:10:E2:E7:16
X509v3 Authority Key Identifier:
keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D4002378F15211EAA1BAB944C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.163.172.0/23
59.165.64.0/19
59.165.104.0/21
61.11.0.0/24
61.11.20.0/24
61.11.24.0-61.11.28.255
61.11.30.0/23
61.17.0.0/21
61.17.12.0-61.17.23.255
61.17.34.0/24
61.17.36.0/22
61.17.44.0-61.17.55.255
61.17.57.0/24
61.17.72.0/22
61.17.83.0/24
61.17.108.0/24
61.17.112.0-61.17.159.255
61.17.180.0/22
61.17.197.0/24
61.17.208.0-61.17.229.255
61.17.236.0-61.17.238.255
61.17.240.0/20
115.109.0.0-115.109.141.255
115.109.144.0/20
115.109.166.0/23
115.109.176.0-115.109.239.255
115.109.248.0/21
202.54.48.0/23
202.54.131.0/24
203.199.227.0-203.199.228.255
219.64.5.0/24
Signature Algorithm: sha256WithRSAEncryption
65:57:f6:9b:40:20:d2:41:96:29:a8:1f:cf:bd:12:2a:1d:84:
47:9a:9d:44:f9:36:d7:7b:b8:96:11:19:4e:8a:13:1f:93:a7:
15:67:ea:6c:82:8f:97:4a:d6:6e:19:d7:07:44:4e:6d:a4:21:
23:eb:f0:b3:1e:a9:16:39:6f:49:35:21:1c:c6:26:f8:dd:36:
96:c6:b7:be:c8:76:59:35:30:75:e3:91:8b:ed:d3:b1:00:58:
a4:f4:1c:42:bc:ce:58:63:f3:72:f7:90:a6:3a:db:f0:d6:80:
49:cf:42:a6:5a:67:9a:58:8a:f8:67:64:31:c8:6f:49:37:fe:
e9:2a:2d:a3:b9:9d:53:85:a5:d1:e4:98:07:16:52:34:ff:93:
23:a6:15:8b:2b:2b:8a:13:b8:cb:55:00:2d:dd:d7:9d:ef:ed:
7a:ea:33:1d:61:08:35:96:fe:b0:4d:c4:b4:b5:d0:b7:a1:62:
41:de:fe:22:93:33:6a:49:1e:bd:ad:66:9b:b8:68:99:24:cd:
0d:49:c6:d6:97:2b:7f:96:42:98:79:43:de:b9:cd:45:1b:8f:
54:70:46:8e:ca:84:c9:7a:4f:78:81:56:62:64:cf:36:6a:a2:
a3:d8:29:e3:ba:18:8c:30:52:f2:cd:92:b5:39:a8:70:3e:59:
21:a1:f2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:04 2026 by rpki-client