Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
File: 283A4D20174911EC896AD61BC4F9AE02.roa (raw, json)
Hash identifier: A8TFtA5rACeGqCDNmb9TtCXa4fYNuagT0rkCSS1kUpo=
Subject key identifier: 01:A3:22:E9:BE:2F:15:A6:40:A4:44:82:C1:2C:76:20:13:51:B8:58
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 069B
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:37:21 +0000
ROA not before: Thu 04 Dec 2025 06:24:34 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 7474
IP address blocks: 1.44.0.0/16 maxlen: 16
59.154.0.0/16 maxlen: 16
59.154.122.0/23 maxlen: 23
59.154.173.0/24 maxlen: 24
59.154.180.0/24 maxlen: 24
59.154.235.0/24 maxlen: 24
59.154.236.0/22 maxlen: 22
59.154.241.0/24 maxlen: 24
59.154.242.0/23 maxlen: 23
59.154.252.0/23 maxlen: 23
59.154.254.0/24 maxlen: 24
61.88.0.0/17 maxlen: 17
61.88.4.0/24 maxlen: 24
61.88.14.0/24 maxlen: 24
61.88.46.0/24 maxlen: 24
61.88.47.0/24 maxlen: 24
61.88.52.0/24 maxlen: 24
61.88.53.0/24 maxlen: 24
61.88.55.0/24 maxlen: 24
61.88.57.0/24 maxlen: 24
61.88.60.0/24 maxlen: 24
61.88.62.0/24 maxlen: 24
61.88.65.0/24 maxlen: 24
61.88.116.0/24 maxlen: 24
61.88.128.0/18 maxlen: 18
61.88.157.0/24 maxlen: 24
61.88.192.0/20 maxlen: 20
61.88.208.0/21 maxlen: 21
61.88.216.0/22 maxlen: 22
61.88.228.0/24 maxlen: 24
61.88.229.0/24 maxlen: 24
61.88.230.0/24 maxlen: 24
61.88.232.0/24 maxlen: 24
61.88.233.0/24 maxlen: 24
61.88.234.0/24 maxlen: 24
61.88.235.0/24 maxlen: 24
61.88.253.0/24 maxlen: 24
61.88.254.0/23 maxlen: 23
119.225.0.0/16 maxlen: 16
124.19.0.0/17 maxlen: 17
124.19.72.0/24 maxlen: 24
124.19.76.0/22 maxlen: 22
124.19.84.0/22 maxlen: 22
124.19.88.0/21 maxlen: 21
124.19.96.0/24 maxlen: 24
124.19.97.0/24 maxlen: 24
125.63.128.0/17 maxlen: 17
202.139.0.0/17 maxlen: 17
202.139.4.0/24 maxlen: 24
202.139.5.0/24 maxlen: 24
202.139.8.0/22 maxlen: 22
202.139.12.0/22 maxlen: 22
202.139.24.0/24 maxlen: 24
202.139.25.0/24 maxlen: 24
202.139.28.0/24 maxlen: 24
202.139.29.0/24 maxlen: 24
202.139.30.0/24 maxlen: 24
202.139.31.0/24 maxlen: 24
202.139.34.0/24 maxlen: 24
202.139.35.0/24 maxlen: 24
202.139.36.0/24 maxlen: 24
202.139.37.0/24 maxlen: 24
202.139.38.0/24 maxlen: 24
202.139.44.0/24 maxlen: 24
202.139.45.0/24 maxlen: 24
202.139.60.0/24 maxlen: 24
202.139.61.0/24 maxlen: 24
202.139.62.0/24 maxlen: 24
202.139.64.0/24 maxlen: 24
202.139.82.0/24 maxlen: 24
202.139.102.0/24 maxlen: 24
202.139.113.0/24 maxlen: 24
202.139.128.0/18 maxlen: 18
202.139.142.0/24 maxlen: 24
202.139.143.0/24 maxlen: 24
202.139.148.0/24 maxlen: 24
202.139.154.0/24 maxlen: 24
202.139.155.0/24 maxlen: 24
202.139.156.0/24 maxlen: 24
202.139.157.0/24 maxlen: 24
202.139.159.0/24 maxlen: 24
202.139.160.0/24 maxlen: 24
202.139.164.0/24 maxlen: 24
202.139.175.0/24 maxlen: 24
202.139.176.0/24 maxlen: 24
202.139.180.0/24 maxlen: 24
202.139.183.0/24 maxlen: 24
202.139.184.0/24 maxlen: 24
202.139.185.0/24 maxlen: 24
202.139.188.0/24 maxlen: 24
202.139.189.0/24 maxlen: 24
203.13.96.0/24 maxlen: 24
203.13.98.0/24 maxlen: 24
203.13.123.0/24 maxlen: 24
203.13.125.0/24 maxlen: 24
203.13.126.0/24 maxlen: 24
203.13.127.0/24 maxlen: 24
203.13.128.0/24 maxlen: 24
203.13.129.0/24 maxlen: 24
203.13.133.0/24 maxlen: 24
203.13.134.0/24 maxlen: 24
203.202.0.0/17 maxlen: 17
203.202.60.0/24 maxlen: 24
203.202.61.0/24 maxlen: 24
203.202.62.0/24 maxlen: 24
203.202.63.0/24 maxlen: 24
203.202.66.0/24 maxlen: 24
203.202.67.0/24 maxlen: 24
203.202.104.0/24 maxlen: 24
203.202.105.0/24 maxlen: 24
203.202.110.0/24 maxlen: 24
203.202.111.0/24 maxlen: 24
203.202.112.0/24 maxlen: 24
203.202.113.0/24 maxlen: 24
203.202.114.0/24 maxlen: 24
203.202.117.0/24 maxlen: 24
203.202.118.0/24 maxlen: 24
203.202.121.0/24 maxlen: 24
203.202.122.0/24 maxlen: 24
203.202.128.0/18 maxlen: 18
203.202.128.0/24 maxlen: 24
203.202.157.0/24 maxlen: 24
203.202.164.0/24 maxlen: 24
203.202.165.0/24 maxlen: 24
203.202.166.0/24 maxlen: 24
203.202.167.0/24 maxlen: 24
203.202.174.0/24 maxlen: 24
203.202.175.0/24 maxlen: 24
203.202.176.0/22 maxlen: 22
203.202.183.0/24 maxlen: 24
203.202.190.0/24 maxlen: 24
203.202.191.0/24 maxlen: 24
210.0.0.0/24 maxlen: 24
220.101.0.0/17 maxlen: 17
2405:9000::/32 maxlen: 32
2405:9000:a::/48 maxlen: 48
2405:9000:1fc::/48 maxlen: 48
2405:9000:203::/48 maxlen: 48
2405:9000:207::/48 maxlen: 48
2405:9000:3440::/48 maxlen: 48
2405:9000:4900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1691 (0x69b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Dec 4 06:24:34 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48760-91f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:d1:b1:27:d0:20:a8:38:e4:c1:67:46:67:
b0:91:be:e9:77:d9:25:cb:a8:b8:61:88:a5:aa:ba:
9d:46:f0:9e:6e:8c:06:bf:c5:a6:65:7d:1d:4e:a2:
15:9c:b6:c3:e7:76:a8:15:9f:39:b5:84:c8:bd:2e:
0a:f9:41:e0:d1:af:71:4d:1b:6e:fe:1b:5a:85:3f:
e3:38:60:89:3f:35:de:93:7e:10:0a:7e:4d:f8:ff:
6e:a1:5a:b6:cb:0d:50:1a:c8:75:3a:1e:e0:dd:57:
49:fd:34:cc:04:22:19:79:b1:7d:2e:6c:0f:eb:68:
3b:c4:5d:68:84:df:27:3c:85:20:b2:50:0a:52:78:
3c:16:ca:a0:6a:dc:4f:e8:a7:d2:e8:77:b7:aa:41:
a4:cb:5d:e1:87:78:06:94:dd:c6:dd:d5:3f:66:9a:
e4:f8:f1:87:37:62:39:fd:73:74:2a:8f:91:b8:e6:
8f:02:b7:bb:d5:42:af:31:c7:8a:2b:29:f2:08:ac:
88:8e:70:4c:54:ab:f9:87:45:c8:17:91:e8:08:10:
4b:91:d8:9d:a2:a3:e9:8c:5d:70:18:28:09:46:0a:
9a:d8:72:98:fc:d2:f5:98:9a:7f:13:09:c5:d5:e5:
b4:a5:1f:e5:3b:4a:d0:da:52:c7:49:c0:69:22:dc:
c0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A3:22:E9:BE:2F:15:A6:40:A4:44:82:C1:2C:76:20:13:51:B8:58
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.44.0.0/16
59.154.0.0/16
61.88.0.0-61.88.219.255
61.88.228.0-61.88.230.255
61.88.232.0/22
61.88.253.0-61.88.255.255
119.225.0.0/16
124.19.0.0/17
125.63.128.0/17
202.139.0.0-202.139.191.255
203.13.96.0/24
203.13.98.0/24
203.13.123.0/24
203.13.125.0-203.13.129.255
203.13.133.0-203.13.134.255
203.202.0.0-203.202.191.255
210.0.0.0/24
220.101.0.0/17
IPv6:
2405:9000::/32
Signature Algorithm: sha256WithRSAEncryption
22:00:9e:b4:c1:70:74:ba:b5:d5:fe:39:e1:b4:54:af:51:ad:
4d:b4:12:91:64:31:42:0a:37:7f:56:3b:24:37:ff:06:35:3a:
e8:fe:65:1b:95:28:07:d4:30:b6:cd:e8:69:cb:e6:88:5f:c9:
04:db:2c:6a:44:b6:2f:4d:e1:49:f4:46:78:71:e7:28:22:e5:
0c:5d:c1:cf:91:dc:41:00:95:fa:48:16:d1:1e:a8:9a:bd:09:
32:25:cb:ab:fc:56:73:aa:9b:66:8c:c8:0a:ec:fb:05:91:0d:
3c:25:6d:a7:03:72:55:0a:dc:96:13:44:6a:9c:29:91:f4:3d:
63:5f:e0:09:eb:b6:91:2e:c3:f4:db:a9:c9:a8:c1:a9:83:3e:
b9:91:17:3b:a2:e1:d8:7e:a4:47:b9:a9:04:1a:e5:c7:de:72:
83:7a:8c:bd:fc:27:ab:39:d8:e3:ef:b1:b6:b8:51:fd:58:ca:
32:e5:f1:7f:64:50:74:a4:95:06:c1:87:70:fd:65:19:6d:f5:
bd:07:90:b5:cf:74:e9:35:72:8e:cc:b2:40:82:a3:99:18:25:
04:cd:82:00:62:07:d7:9a:8d:23:63:ae:cd:64:18:93:99:63:
f7:a2:79:61:71:ee:d8:99:74:96:24:53:85:de:93:2b:76:d0:
c6:bd:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:31 2026 by rpki-client