Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1E66F094B5CA11F1A1E2B0F14311F970.roa
File: 1E66F094B5CA11F1A1E2B0F14311F970.roa (raw, json)
Hash identifier: yWjDQdYNQhUx5r9jrComjavaquGimA0SlIdJ0UPL5Po=
Subject key identifier: 72:20:F5:03:5D:4A:71:5C:5F:6B:BA:B5:4D:40:E2:72:38:29:AE:A1
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 1159
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1E66F094B5CA11F1A1E2B0F14311F970.roa
Signing time: Mon 21 Sep 2026 14:38:32 +0000
ROA not before: Mon 21 Sep 2026 14:38:32 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.130.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.157.0/24 maxlen: 24
111.92.158.0/24 maxlen: 24
111.92.159.0/24 maxlen: 24
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4441 (0x1159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Sep 21 14:38:32 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ab14168-28e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:fe:92:9d:c9:f5:5c:d1:9c:a2:a5:bf:12:
e9:35:e7:c5:ae:9c:e2:c1:62:d4:2a:5b:00:96:b9:
8b:26:7d:44:54:88:e2:38:eb:b7:79:d4:0c:dd:64:
0b:49:68:5b:15:63:9a:60:10:b0:0d:df:4a:8b:59:
55:a5:75:1b:3b:ca:20:dc:4e:b6:1f:16:24:33:96:
70:5c:01:6b:74:b7:48:53:b1:84:9e:7c:96:82:e0:
53:85:b9:a6:5c:ad:11:dc:61:ce:99:f1:c1:f9:13:
e6:6d:e9:ce:a0:3f:71:ad:e8:84:f4:b9:89:0d:37:
13:e1:ed:c6:d4:06:35:b5:b4:ea:cc:de:59:61:e8:
f7:77:9b:d3:35:91:6b:a8:49:bf:1d:a4:cc:bb:cc:
5d:fc:2e:17:87:50:2a:15:5b:3b:23:70:20:9d:31:
19:9c:d8:5c:1a:a3:cf:de:b5:dc:65:c6:71:05:6e:
14:1f:5b:b9:05:cb:5f:ab:6d:68:76:52:08:07:9b:
01:5e:af:a0:f0:16:88:1a:fd:08:e9:80:83:b6:94:
65:77:6e:dc:be:06:6c:59:e4:3f:0a:38:b1:8c:d9:
a2:be:bb:69:1e:12:9b:17:7c:a4:87:02:ed:50:15:
75:ea:d7:19:15:09:24:d6:60:2f:2c:c3:b7:18:a7:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:20:F5:03:5D:4A:71:5C:5F:6B:BA:B5:4D:40:E2:72:38:29:AE:A1
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1E66F094B5CA11F1A1E2B0F14311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0-14.192.136.255
14.192.138.0/24
14.192.140.0/23
14.192.146.0-14.192.152.255
14.192.154.0/23
14.192.157.0/24
14.192.159.0/24
43.247.120.0/22
103.20.132.0/23
103.20.135.0/24
111.92.157.0-111.92.159.255
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
15:d0:29:7e:97:eb:e3:54:54:16:40:9f:81:de:55:28:1d:94:
12:a0:98:27:a4:7a:e2:73:9c:40:46:e1:12:d2:d3:0c:83:f8:
13:e7:35:1f:e3:b6:35:ab:8e:a0:5e:20:c3:73:15:c9:b9:56:
85:e4:3e:b9:40:d6:43:f0:95:eb:4a:8c:6b:1a:21:bb:65:6e:
4b:10:5b:9e:a4:a9:ba:55:64:fe:10:c4:e2:ac:85:e2:4e:a5:
8e:70:85:6a:11:9a:e6:7c:6b:79:a6:cc:3b:90:ee:ae:ad:bc:
4c:8f:33:4c:31:e5:0b:7a:7a:0c:1f:d8:4e:0b:8a:89:8a:22:
bb:79:d4:c5:6b:b7:9f:8d:9f:46:ee:97:90:12:b3:6c:94:3f:
f4:64:48:c1:b6:f5:6e:37:5b:37:45:b4:43:29:7b:0b:9e:5b:
79:fe:e5:22:33:31:f1:72:1d:a2:f3:6d:b9:29:af:29:dc:97:
be:aa:72:42:9a:a8:61:c5:d1:76:4b:ce:c3:7d:eb:d9:fa:52:
48:d4:5c:e2:21:c7:18:28:64:0e:99:4e:01:e5:99:4e:3f:a0:
1d:49:ab:b4:08:0b:a2:d4:37:ed:03:8c:c5:07:e2:a1:91:2a:
98:72:a3:ac:56:13:20:9b:3d:96:ce:1c:98:6c:f7:f4:a9:23:
cc:b1:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:44 2026 by rpki-client