Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/21C1E9C834ED11F1B3F8D4F794833773.roa
File: 21C1E9C834ED11F1B3F8D4F794833773.roa (raw, json)
Hash identifier: sjftU1qz6NY0erTi4KjSA69Bm+0JDONmb/4UjPbZCaI=
Subject key identifier: 80:B2:18:DF:C8:ED:40:1F:AC:D4:CF:A6:EF:95:47:C8:3A:18:1C:B0
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 103D
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/21C1E9C834ED11F1B3F8D4F794833773.roa
Signing time: Sat 18 Apr 2026 14:09:46 +0000
ROA not before: Sat 18 Apr 2026 14:09:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 45814
IP address blocks: 14.192.130.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.148.0/24 maxlen: 24
14.192.149.0/24 maxlen: 24
14.192.150.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.153.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/24 maxlen: 24
111.92.133.0/24 maxlen: 24
111.92.141.0/24 maxlen: 24
111.92.149.0/24 maxlen: 24
111.92.150.0/24 maxlen: 24
111.92.157.0/24 maxlen: 24
111.92.158.0/24 maxlen: 24
111.92.159.0/24 maxlen: 24
2403:7980::/32 maxlen: 32
2403:7980::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4157 (0x103d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Apr 18 14:09:46 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69e390aa-02ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a1:23:ce:04:80:c2:91:c2:d5:07:ae:64:60:
cc:29:2b:f5:6c:ea:e7:42:cb:53:73:b4:d2:6d:57:
be:ec:42:54:86:87:cc:f7:37:29:b3:fc:3c:fa:e6:
45:ab:3c:93:7a:ce:25:7f:0f:ca:c5:fb:3b:c7:19:
cf:84:62:ad:a8:9b:a9:33:7c:8b:77:80:13:7e:d8:
c9:8c:6b:93:9d:d8:36:7b:6d:b4:4b:cd:06:1c:01:
74:a0:18:d0:3a:59:72:7a:f3:f5:db:5d:ba:ce:14:
77:59:6a:8c:27:92:61:21:5d:b5:8e:25:ad:f9:67:
28:4f:06:1d:32:3c:50:3f:40:b5:01:90:5e:57:18:
99:80:ee:f3:e9:ae:cd:93:33:b7:9d:15:70:01:28:
9d:ec:1f:2c:1b:16:be:f1:aa:9e:e7:37:5e:77:f6:
4b:be:6c:57:ec:9d:a8:d7:39:47:0a:67:4b:16:8b:
9e:f5:52:3d:97:ad:f2:0c:d1:e8:83:03:22:0a:b9:
7f:bb:6d:16:f4:a4:95:b8:60:d6:59:97:92:25:e0:
58:86:e1:2b:12:a7:41:57:14:e9:fa:20:b3:00:0d:
aa:bb:c3:d9:87:af:c2:40:00:7f:37:c9:cb:58:b2:
ea:09:57:c9:6f:5c:d4:53:ee:8a:e1:ea:95:36:c2:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B2:18:DF:C8:ED:40:1F:AC:D4:CF:A6:EF:95:47:C8:3A:18:1C:B0
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/21C1E9C834ED11F1B3F8D4F794833773.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.130.0/24
14.192.132.0/24
14.192.134.0-14.192.136.255
14.192.139.0-14.192.142.255
14.192.146.0-14.192.155.255
14.192.157.0/24
14.192.159.0/24
43.247.120.0/22
103.20.132.0/24
103.20.134.0/23
111.92.128.0/24
111.92.133.0/24
111.92.141.0/24
111.92.149.0-111.92.150.255
111.92.157.0-111.92.159.255
IPv6:
2403:7980::/32
Signature Algorithm: sha256WithRSAEncryption
89:af:68:3e:25:ff:3a:c9:04:ca:a9:51:e3:00:7d:7a:48:5b:
57:0b:32:d5:0e:c8:bb:95:c5:01:64:e1:3f:79:ad:28:f2:0e:
d2:c6:3b:dd:99:92:f4:72:9d:96:8f:5a:18:de:25:53:e9:d1:
4f:ee:fb:01:0f:f8:c4:e9:83:d2:fe:7f:59:5a:06:3d:be:91:
94:9b:1b:13:c1:d0:ea:02:ab:c7:2c:37:b0:4a:84:21:18:16:
7a:92:72:4c:9f:92:91:45:91:be:71:74:03:df:7a:1e:df:5c:
70:40:66:ad:3c:c9:7d:b3:d2:a5:33:6f:62:51:81:18:f2:3b:
db:31:0c:10:49:aa:51:f1:1b:eb:d4:39:47:97:20:35:8b:c7:
06:5d:60:53:d7:65:80:f3:c1:bc:e0:25:46:ee:39:6a:a2:ed:
ab:51:c5:2f:56:81:e8:99:5d:9e:ec:30:c6:3b:2d:c9:e2:bc:
f4:6b:ee:a2:3a:dd:7d:bf:41:9d:18:36:a8:88:47:e5:c0:1c:
b7:4d:8b:96:91:db:c3:3a:f0:a5:fb:ef:b8:de:b2:34:89:2d:
dd:7f:41:56:d2:cc:8b:5a:34:a4:ef:5c:5c:51:68:99:49:20:
7c:81:c0:8f:a2:a6:ad:cc:21:d3:9a:d8:00:42:61:7b:b8:d2:
5d:5b:8c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:15 2026 by rpki-client