Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
File: 283A4D20174911EC896AD61BC4F9AE02.roa (raw, json)
Hash identifier: DjM7q7I1ucrVqfadsEwZCZGq+Rdib//rFO93Zb885F8=
Subject key identifier: 5E:ED:B3:58:D6:4D:A1:F2:14:B9:53:0F:40:69:88:95:80:5A:82:89
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 06C0
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
Signing time: Thu 16 Apr 2026 21:03:27 +0000
ROA not before: Thu 16 Apr 2026 21:03:27 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 7474
IP address blocks: 1.44.0.0/16 maxlen: 16
1.44.160.0/23 maxlen: 23
1.44.162.0/23 maxlen: 23
1.44.164.0/23 maxlen: 23
1.44.166.0/23 maxlen: 23
59.154.0.0/16 maxlen: 16
59.154.122.0/23 maxlen: 23
59.154.173.0/24 maxlen: 24
59.154.180.0/24 maxlen: 24
59.154.235.0/24 maxlen: 24
59.154.236.0/22 maxlen: 22
59.154.241.0/24 maxlen: 24
59.154.242.0/23 maxlen: 23
59.154.252.0/23 maxlen: 23
59.154.254.0/24 maxlen: 24
61.88.0.0/17 maxlen: 17
61.88.4.0/24 maxlen: 24
61.88.14.0/24 maxlen: 24
61.88.46.0/24 maxlen: 24
61.88.47.0/24 maxlen: 24
61.88.48.0/22 maxlen: 22
61.88.52.0/24 maxlen: 24
61.88.53.0/24 maxlen: 24
61.88.55.0/24 maxlen: 24
61.88.57.0/24 maxlen: 24
61.88.60.0/24 maxlen: 24
61.88.62.0/24 maxlen: 24
61.88.65.0/24 maxlen: 24
61.88.92.0/22 maxlen: 22
61.88.112.0/23 maxlen: 23
61.88.116.0/24 maxlen: 24
61.88.124.0/23 maxlen: 23
61.88.128.0/18 maxlen: 18
61.88.157.0/24 maxlen: 24
61.88.192.0/20 maxlen: 20
61.88.208.0/21 maxlen: 21
61.88.216.0/22 maxlen: 22
61.88.228.0/24 maxlen: 24
61.88.229.0/24 maxlen: 24
61.88.230.0/24 maxlen: 24
61.88.232.0/24 maxlen: 24
61.88.233.0/24 maxlen: 24
61.88.234.0/24 maxlen: 24
61.88.235.0/24 maxlen: 24
61.88.253.0/24 maxlen: 24
61.88.254.0/23 maxlen: 23
119.225.0.0/16 maxlen: 16
124.19.0.0/17 maxlen: 17
124.19.72.0/24 maxlen: 24
124.19.76.0/22 maxlen: 22
124.19.84.0/22 maxlen: 22
124.19.88.0/21 maxlen: 21
124.19.96.0/24 maxlen: 24
124.19.97.0/24 maxlen: 24
125.63.128.0/17 maxlen: 17
202.139.0.0/17 maxlen: 17
202.139.4.0/24 maxlen: 24
202.139.5.0/24 maxlen: 24
202.139.8.0/22 maxlen: 22
202.139.8.0/23 maxlen: 23
202.139.10.0/23 maxlen: 23
202.139.12.0/22 maxlen: 22
202.139.12.0/23 maxlen: 23
202.139.14.0/23 maxlen: 23
202.139.20.0/22 maxlen: 22
202.139.24.0/24 maxlen: 24
202.139.25.0/24 maxlen: 24
202.139.26.0/24 maxlen: 24
202.139.28.0/24 maxlen: 24
202.139.29.0/24 maxlen: 24
202.139.30.0/24 maxlen: 24
202.139.31.0/24 maxlen: 24
202.139.32.0/24 maxlen: 24
202.139.34.0/24 maxlen: 24
202.139.35.0/24 maxlen: 24
202.139.36.0/24 maxlen: 24
202.139.37.0/24 maxlen: 24
202.139.38.0/24 maxlen: 24
202.139.44.0/24 maxlen: 24
202.139.45.0/24 maxlen: 24
202.139.60.0/24 maxlen: 24
202.139.61.0/24 maxlen: 24
202.139.62.0/24 maxlen: 24
202.139.64.0/24 maxlen: 24
202.139.82.0/24 maxlen: 24
202.139.102.0/24 maxlen: 24
202.139.113.0/24 maxlen: 24
202.139.128.0/18 maxlen: 18
202.139.142.0/24 maxlen: 24
202.139.143.0/24 maxlen: 24
202.139.148.0/24 maxlen: 24
202.139.154.0/24 maxlen: 24
202.139.155.0/24 maxlen: 24
202.139.156.0/24 maxlen: 24
202.139.157.0/24 maxlen: 24
202.139.159.0/24 maxlen: 24
202.139.160.0/24 maxlen: 24
202.139.164.0/24 maxlen: 24
202.139.175.0/24 maxlen: 24
202.139.176.0/24 maxlen: 24
202.139.180.0/24 maxlen: 24
202.139.183.0/24 maxlen: 24
202.139.184.0/24 maxlen: 24
202.139.185.0/24 maxlen: 24
202.139.188.0/24 maxlen: 24
202.139.189.0/24 maxlen: 24
203.13.96.0/24 maxlen: 24
203.13.98.0/24 maxlen: 24
203.13.123.0/24 maxlen: 24
203.13.125.0/24 maxlen: 24
203.13.126.0/24 maxlen: 24
203.13.127.0/24 maxlen: 24
203.13.128.0/24 maxlen: 24
203.13.129.0/24 maxlen: 24
203.13.133.0/24 maxlen: 24
203.13.134.0/24 maxlen: 24
203.202.0.0/17 maxlen: 17
203.202.60.0/24 maxlen: 24
203.202.61.0/24 maxlen: 24
203.202.62.0/24 maxlen: 24
203.202.63.0/24 maxlen: 24
203.202.66.0/24 maxlen: 24
203.202.67.0/24 maxlen: 24
203.202.104.0/24 maxlen: 24
203.202.105.0/24 maxlen: 24
203.202.110.0/24 maxlen: 24
203.202.111.0/24 maxlen: 24
203.202.112.0/24 maxlen: 24
203.202.113.0/24 maxlen: 24
203.202.114.0/24 maxlen: 24
203.202.117.0/24 maxlen: 24
203.202.118.0/24 maxlen: 24
203.202.121.0/24 maxlen: 24
203.202.122.0/24 maxlen: 24
203.202.128.0/18 maxlen: 18
203.202.128.0/24 maxlen: 24
203.202.157.0/24 maxlen: 24
203.202.164.0/24 maxlen: 24
203.202.165.0/24 maxlen: 24
203.202.166.0/24 maxlen: 24
203.202.167.0/24 maxlen: 24
203.202.174.0/24 maxlen: 24
203.202.175.0/24 maxlen: 24
203.202.176.0/22 maxlen: 22
203.202.183.0/24 maxlen: 24
203.202.190.0/24 maxlen: 24
203.202.191.0/24 maxlen: 24
210.0.0.0/24 maxlen: 24
220.101.0.0/17 maxlen: 17
2405:9000::/32 maxlen: 32
2405:9000:a::/48 maxlen: 48
2405:9000:1fc::/48 maxlen: 48
2405:9000:203::/48 maxlen: 48
2405:9000:207::/48 maxlen: 48
2405:9000:3440::/48 maxlen: 48
2405:9000:4900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728 (0x6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Apr 16 21:03:27 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69e14e9f-0ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a5:07:0a:dc:68:b5:6f:9c:04:2d:e0:00:f7:
39:0d:89:cf:10:27:1d:fe:b8:82:2f:81:35:7e:05:
fc:4d:45:f4:75:69:85:a6:55:1b:a6:b2:08:b9:b7:
3f:f3:01:21:2d:08:e9:7c:b9:b4:59:6e:37:7a:c7:
59:c7:6c:46:dd:40:39:24:c2:e0:7b:f6:10:75:85:
ca:5c:05:8b:54:77:6a:8b:ec:17:17:77:a4:ae:0d:
03:05:14:7e:90:2d:e9:0b:f0:a9:0e:41:eb:6d:e9:
04:47:b4:39:eb:14:49:88:56:fa:a4:63:6e:15:53:
ab:2b:27:36:aa:24:d7:d0:49:af:e6:f5:b0:60:d6:
a7:ec:e5:21:c0:85:fc:12:34:ca:72:fe:5d:56:f4:
18:e3:35:c7:a5:86:fd:49:c6:31:ac:dc:42:75:7c:
ff:17:57:a3:d0:87:60:a9:22:1b:68:6e:a1:db:69:
d7:b2:31:e5:d0:5f:43:b6:07:e8:15:13:6c:29:22:
1d:7d:45:65:38:c1:75:11:4c:78:88:b9:c3:21:0f:
1d:9c:56:05:50:b5:2e:15:b6:d7:56:46:e7:83:45:
4b:1b:3c:ab:43:28:5a:31:a0:1e:fb:f2:ef:15:bc:
b3:29:8d:6a:2a:33:d5:b8:b1:a6:52:f5:f3:f2:d0:
68:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:ED:B3:58:D6:4D:A1:F2:14:B9:53:0F:40:69:88:95:80:5A:82:89
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.44.0.0/16
59.154.0.0/16
61.88.0.0-61.88.219.255
61.88.228.0-61.88.230.255
61.88.232.0/22
61.88.253.0-61.88.255.255
119.225.0.0/16
124.19.0.0/17
125.63.128.0/17
202.139.0.0-202.139.191.255
203.13.96.0/24
203.13.98.0/24
203.13.123.0/24
203.13.125.0-203.13.129.255
203.13.133.0-203.13.134.255
203.202.0.0-203.202.191.255
210.0.0.0/24
220.101.0.0/17
IPv6:
2405:9000::/32
Signature Algorithm: sha256WithRSAEncryption
70:aa:86:5b:17:9b:43:1a:65:16:ed:d8:55:75:b0:47:74:19:
32:29:f8:8c:89:3b:b8:5b:b1:5e:a8:9a:7f:60:64:b9:37:d7:
81:9c:11:59:07:e4:9b:f2:bd:77:36:66:a4:1d:bf:43:41:af:
6f:68:b5:25:72:6d:b5:5a:8c:9f:5e:37:ab:a4:73:09:73:3e:
10:30:57:bd:e2:6c:3e:1a:59:16:cf:7d:82:fd:dc:f5:dc:2d:
a5:9e:18:16:2d:44:69:6a:0b:e6:e0:71:80:c6:22:43:89:69:
20:b1:b0:cb:c9:99:63:fb:7a:3d:a5:d3:c1:fd:9d:d0:97:da:
6c:c1:5c:6e:27:54:a5:a6:4c:a9:7a:d9:54:1e:fa:c8:7d:6b:
79:69:bc:fd:a6:0c:8c:d8:57:ec:84:be:ac:b0:30:c5:2e:9f:
5e:61:6f:43:7e:74:ce:8c:de:78:1a:d2:97:2b:9f:95:31:ca:
95:19:53:e6:63:52:1d:47:3d:5e:f9:63:d9:8c:53:da:66:63:
96:72:1f:dc:24:53:54:06:7c:e9:54:e0:46:e3:56:12:bc:4e:
8c:6f:b7:f1:ec:3e:04:a6:67:bd:29:82:bc:13:6c:49:2d:45:
83:39:33:41:8a:33:3b:26:a3:7b:a0:82:5d:4f:61:34:eb:ca:
2e:29:82:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:16 2026 by rpki-client