Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/EB413AD41C2311F1BB63DB7C323D8C67.roa
File: EB413AD41C2311F1BB63DB7C323D8C67.roa (raw, json)
Hash identifier: BBLS5duYzSpsu9QB78R+aPm721JzM8zfWzR2hg39AjY=
Subject key identifier: 88:1C:57:2E:62:57:4A:86:28:D6:C9:59:3F:02:9E:FE:3E:E4:3D:31
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 38E2
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/EB413AD41C2311F1BB63DB7C323D8C67.roa
Signing time: Tue 31 Mar 2026 03:23:20 +0000
ROA not before: Tue 31 Mar 2026 03:23:20 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 3758
IP address blocks: 14.100.0.0/17 maxlen: 24
42.60.0.0/16 maxlen: 24
42.61.0.0/16 maxlen: 24
58.185.0.0/16 maxlen: 24
101.78.64.0/18 maxlen: 24
115.42.128.0/17 maxlen: 17
115.42.160.0/24 maxlen: 24
115.42.161.0/24 maxlen: 24
115.42.162.0/24 maxlen: 24
115.42.163.0/24 maxlen: 24
115.42.164.0/22 maxlen: 22
115.42.181.0/24 maxlen: 24
115.42.185.0/24 maxlen: 24
115.42.195.0/24 maxlen: 24
115.42.196.0/24 maxlen: 24
115.42.204.0/24 maxlen: 24
115.42.206.0/24 maxlen: 24
115.42.215.0/24 maxlen: 24
115.42.216.0/24 maxlen: 24
115.42.217.0/24 maxlen: 24
115.42.219.0/24 maxlen: 24
115.42.222.0/24 maxlen: 24
115.42.251.0/24 maxlen: 24
115.42.255.0/24 maxlen: 24
115.66.0.0/16 maxlen: 24
116.12.128.0/17 maxlen: 17
116.12.137.0/24 maxlen: 24
116.12.138.0/24 maxlen: 24
116.12.147.0/24 maxlen: 24
116.12.154.0/24 maxlen: 24
116.12.156.0/24 maxlen: 24
116.12.205.0/24 maxlen: 24
116.12.206.0/24 maxlen: 24
116.12.213.0/24 maxlen: 24
116.12.214.0/24 maxlen: 24
116.12.226.0/24 maxlen: 24
116.12.229.0/24 maxlen: 24
116.12.234.0/24 maxlen: 24
116.12.235.0/24 maxlen: 24
116.12.238.0/24 maxlen: 24
116.12.243.0/24 maxlen: 24
116.12.250.0/24 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 24
116.15.0.0/16 maxlen: 24
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.128.0/18 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.192.0/19 maxlen: 24
118.201.224.0/19 maxlen: 24
119.73.128.0/17 maxlen: 17
119.73.130.0/24 maxlen: 24
119.73.145.0/24 maxlen: 24
119.73.148.0/24 maxlen: 24
119.73.162.0/24 maxlen: 24
119.73.191.0/24 maxlen: 24
119.73.197.0/24 maxlen: 24
119.73.201.0/24 maxlen: 24
119.73.226.0/24 maxlen: 24
119.73.242.0/24 maxlen: 24
119.73.246.0/24 maxlen: 24
119.73.251.0/24 maxlen: 24
119.73.253.0/24 maxlen: 24
119.74.0.0/16 maxlen: 24
119.75.0.0/18 maxlen: 18
119.75.19.0/24 maxlen: 24
119.75.33.0/24 maxlen: 24
119.75.36.0/24 maxlen: 24
119.75.41.0/24 maxlen: 24
119.75.48.0/24 maxlen: 24
119.75.53.0/24 maxlen: 24
119.75.57.0/24 maxlen: 24
119.234.128.0/18 maxlen: 24
119.234.192.0/19 maxlen: 19
121.6.0.0/16 maxlen: 24
121.7.0.0/16 maxlen: 24
124.66.128.0/19 maxlen: 19
124.66.133.0/24 maxlen: 24
124.66.150.0/24 maxlen: 24
124.66.156.0/24 maxlen: 24
124.66.157.0/24 maxlen: 24
124.66.158.0/24 maxlen: 24
124.66.159.0/24 maxlen: 24
180.255.0.0/18 maxlen: 24
180.255.64.0/18 maxlen: 24
203.124.0.0/22 maxlen: 22
203.125.0.0/16 maxlen: 24
203.126.0.0/16 maxlen: 24
203.127.0.0/16 maxlen: 24
203.169.64.0/18 maxlen: 18
219.74.0.0/16 maxlen: 24
219.75.0.0/17 maxlen: 24
220.255.0.0/22 maxlen: 22
220.255.0.0/24 maxlen: 24
220.255.1.0/24 maxlen: 24
220.255.2.0/24 maxlen: 24
220.255.3.0/24 maxlen: 24
220.255.4.0/22 maxlen: 22
220.255.4.0/24 maxlen: 24
220.255.5.0/24 maxlen: 24
220.255.6.0/24 maxlen: 24
220.255.7.0/24 maxlen: 24
220.255.8.0/21 maxlen: 21
220.255.11.0/24 maxlen: 24
220.255.12.0/24 maxlen: 24
220.255.13.0/24 maxlen: 24
220.255.14.0/24 maxlen: 24
220.255.15.0/24 maxlen: 24
220.255.16.0/20 maxlen: 20
220.255.32.0/19 maxlen: 19
220.255.64.0/18 maxlen: 18
220.255.128.0/17 maxlen: 24
2001:c20::/32 maxlen: 32
2001:c20::/38 maxlen: 38
2001:c20:10::/48 maxlen: 48
2001:c20:18::/48 maxlen: 48
2001:c20:400::/38 maxlen: 38
2001:c20:401::/48 maxlen: 48
2001:c20:403::/48 maxlen: 48
2001:c20:801::/48 maxlen: 48
2001:c20:2006::/48 maxlen: 48
2001:c20:2007::/48 maxlen: 48
2001:c20:2010::/48 maxlen: 48
2001:c20:3001::/48 maxlen: 48
2001:c20:3c00::/38 maxlen: 38
2001:c20:4800::/38 maxlen: 38
2001:c20:4805::/48 maxlen: 48
2001:c20:48ba::/48 maxlen: 48
2001:c20:48da::/48 maxlen: 48
2001:c20:48fe::/48 maxlen: 48
2001:c20:4c00::/38 maxlen: 38
2001:c20:5000::/38 maxlen: 38
2001:c20:5008::/48 maxlen: 48
2001:c20:6c00::/38 maxlen: 38
2001:c20:7009::/48 maxlen: 48
2001:c20:7800::/38 maxlen: 38
2001:c20:7804::/48 maxlen: 48
2001:c20:7806::/48 maxlen: 48
2001:c20:7807::/48 maxlen: 48
2001:c20:8400::/38 maxlen: 38
2001:c20:8405::/48 maxlen: 48
2001:c20:8406::/48 maxlen: 48
2001:c20:8407::/48 maxlen: 48
2001:c20:8408::/48 maxlen: 48
2001:c20:8409::/48 maxlen: 48
2001:c20:a005::/48 maxlen: 48
2001:c20:b005::/48 maxlen: 48
2001:c20:c814::/48 maxlen: 48
2001:c20:c818::/48 maxlen: 48
2001:c20:d004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14562 (0x38e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Mar 31 03:23:20 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69cb3e28-6f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:5b:20:d9:b3:c2:4e:69:8a:8f:87:c7:5e:
01:2e:17:c3:61:71:8f:c2:5a:86:09:cb:1e:35:5c:
18:cf:ee:d3:2f:ce:8c:59:bd:7a:27:59:e4:ca:c7:
2c:37:f6:8f:b6:82:7c:bc:e9:e7:02:70:d7:1f:9a:
72:a8:6d:19:fa:3c:53:8b:ba:e2:4a:5d:eb:d1:34:
19:99:8a:89:e5:a2:6d:28:e8:3b:ee:d0:45:82:85:
f8:b5:66:4c:ef:0b:20:06:b7:f0:0d:e2:ad:0d:0d:
53:1a:18:8d:61:c6:e3:08:a4:c1:fe:bf:0f:8a:0c:
02:f0:9b:3b:e9:66:d6:4e:9d:36:89:11:8b:ab:17:
0b:64:4b:2b:1f:67:3b:ab:12:ba:d3:09:ab:27:85:
e8:51:fb:c5:d5:6e:e5:06:90:b1:12:0c:18:b2:17:
e6:76:1c:39:12:9d:42:5c:4d:36:a8:7a:2d:f3:de:
69:7c:72:ea:ef:a6:be:f7:f9:d9:98:ce:27:8b:ed:
fc:70:af:13:b6:9d:05:a4:3f:f7:14:69:09:3a:84:
1f:82:da:36:10:c4:f8:c7:94:d7:4a:24:c1:ee:a7:
81:70:c6:a0:02:be:33:e1:3d:06:e5:5e:52:55:21:
5c:9d:0d:22:55:ba:a4:ff:6e:4f:41:61:05:57:e5:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1C:57:2E:62:57:4A:86:28:D6:C9:59:3F:02:9E:FE:3E:E4:3D:31
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/EB413AD41C2311F1BB63DB7C323D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/15
58.185.0.0/16
101.78.64.0/18
115.42.128.0/17
115.66.0.0/16
116.12.128.0/17
116.14.0.0/15
118.200.0.0/15
119.73.128.0-119.75.63.255
119.234.128.0-119.234.223.255
121.6.0.0/15
124.66.128.0/19
180.255.0.0/17
203.124.0.0/22
203.125.0.0-203.127.255.255
203.169.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/16
IPv6:
2001:c20::/32
Signature Algorithm: sha256WithRSAEncryption
99:46:c2:fe:29:9e:fa:21:39:1b:41:71:49:d9:32:1a:84:c5:
c5:14:66:f0:60:2e:86:56:04:cf:12:65:40:cc:9e:67:ad:b8:
7e:54:91:3f:c3:bb:00:d4:a7:9b:74:25:e4:be:fc:dc:02:eb:
04:88:14:87:00:17:03:b1:4c:c9:c9:1c:cc:be:d4:39:50:03:
7a:6f:5b:3c:92:1d:3e:65:1e:46:ae:5d:08:e1:62:0f:ab:c7:
ba:72:e7:39:59:12:0b:e1:38:f5:68:4d:47:b6:c2:13:b1:54:
f1:f2:37:d2:f7:e2:3d:d3:13:56:23:da:ce:6e:03:b7:c2:d2:
06:6f:63:e0:b5:b1:d4:29:08:27:cd:fb:f5:23:f5:6b:6f:15:
6c:c5:b2:ce:d6:26:64:cb:77:8b:a0:3e:c1:1a:6c:57:8e:0c:
7e:4e:57:d9:c2:ce:0b:72:80:6a:e7:b1:68:08:55:3e:31:86:
5f:38:0e:89:66:71:7b:84:0f:02:29:36:1a:b9:ce:fb:e9:cc:
17:fa:19:23:d8:e2:75:3f:32:49:ee:ec:6d:ee:db:cd:4c:88:
43:16:84:92:6d:03:30:67:ae:ca:11:16:9f:57:11:bd:fe:27:
3f:1e:13:2a:02:80:f3:61:b3:cd:1a:e4:45:26:c0:ed:b7:f9:
33:62:7e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:39 2026 by rpki-client