Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/8F199E5086EE11F19E006003A7EE528E.roa
File: 8F199E5086EE11F19E006003A7EE528E.roa (raw, json)
Hash identifier: ZuAnAgHg5vFTNcsKh5KM85ZI9A4NW/8yy8AIKsgNOsk=
Subject key identifier: FE:21:C7:E7:CC:AC:DB:96:85:F2:25:E4:AD:60:B6:10:5C:CB:DD:A6
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 2D1B
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/8F199E5086EE11F19E006003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:30:59 +0000
ROA not before: Thu 23 Jul 2026 23:30:59 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 45177
IP address blocks: 14.1.32.0/19 maxlen: 24
45.65.13.0/24 maxlen: 24
45.65.14.0/23 maxlen: 24
103.9.236.0/23 maxlen: 24
103.9.238.0/23 maxlen: 24
103.13.116.0/22 maxlen: 24
103.15.178.0/24 maxlen: 24
103.230.76.0/22 maxlen: 22
103.241.120.0/22 maxlen: 24
103.255.248.0/24 maxlen: 24
113.197.96.0/22 maxlen: 23
116.93.128.0/20 maxlen: 24
119.30.0.0/22 maxlen: 24
119.30.4.0/22 maxlen: 24
120.136.0.0/21 maxlen: 24
150.107.32.0/22 maxlen: 24
163.47.204.0/22 maxlen: 24
202.74.192.0/19 maxlen: 24
203.84.224.0/20 maxlen: 24
203.211.64.0/18 maxlen: 24
2400:ee80::/32 maxlen: 48
2401:7000::/32 maxlen: 64
2402:3500::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11547 (0x2d1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128, serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: Jul 23 23:30:59 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a62a432-503b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:68:21:b6:f3:ed:89:77:8e:a0:83:d1:30:
1d:01:9a:b6:24:4f:a5:41:39:10:b2:a5:48:75:fa:
4c:28:ff:99:a0:a9:5d:a9:0b:2f:71:ec:7b:02:0a:
72:78:2f:37:61:e0:c8:b5:9e:b8:6f:a3:32:bf:ff:
93:4b:7b:ac:dc:74:01:69:85:b5:c5:26:ec:b2:03:
09:ab:9b:42:18:bc:4c:4b:64:6e:e9:0a:eb:63:e7:
d0:88:5a:ce:a7:3b:17:79:8b:54:7f:a6:e7:20:b0:
36:cc:ec:9c:b6:a5:b2:d7:2c:a9:34:0d:f1:1f:7a:
9d:c3:e3:05:3f:e1:58:ef:91:20:e9:66:77:70:12:
c2:1b:a2:bf:9a:62:e7:85:24:2d:99:50:04:b5:05:
be:39:48:93:83:45:ac:69:91:87:7e:81:7b:a6:88:
65:28:bb:b8:f9:d9:e7:aa:7e:a2:94:7a:48:65:2e:
79:8c:eb:b7:3a:d1:be:54:11:a0:8d:7f:0d:50:51:
7a:67:a6:2c:a6:26:71:22:2a:70:00:de:ff:e7:c0:
97:32:a5:fe:a5:df:8b:ee:ec:46:60:06:cd:b2:30:
0f:2d:48:62:29:77:e3:40:49:d5:df:e5:32:5e:05:
9e:2d:25:5a:71:9d:73:b5:97:06:79:75:b6:6e:0a:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:21:C7:E7:CC:AC:DB:96:85:F2:25:E4:AD:60:B6:10:5C:CB:DD:A6
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/8F199E5086EE11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
14.1.32.0/19
45.65.13.0-45.65.15.255
103.9.236.0/22
103.13.116.0/22
103.15.178.0/24
103.230.76.0/22
103.241.120.0/22
103.255.248.0/24
113.197.96.0/22
116.93.128.0/20
119.30.0.0/21
120.136.0.0/21
150.107.32.0/22
163.47.204.0/22
202.74.192.0/19
203.84.224.0/20
203.211.64.0/18
IPv6:
2400:ee80::/32
2401:7000::/32
2402:3500::/32
Signature Algorithm: sha256WithRSAEncryption
82:d1:ae:23:bf:fc:3b:7f:0c:60:99:f6:c4:55:f3:ce:91:e4:
5d:b2:dc:b4:59:d4:9c:e2:0e:72:1d:30:cc:60:d7:9f:60:83:
64:02:c7:88:e8:53:ff:ae:0c:43:29:b1:34:c8:b8:cb:78:26:
c1:bb:6c:9c:a0:c0:71:63:ab:45:a5:f8:44:dd:68:37:35:71:
21:f5:8d:2b:f5:00:8b:bd:ea:52:21:ef:22:01:da:1b:61:d2:
64:83:d7:3f:24:96:a1:7e:6b:dc:d1:57:69:71:fc:68:d7:d7:
6c:33:b5:78:5a:9e:96:91:21:4e:69:5f:81:af:6f:f2:56:4c:
22:67:e3:c2:8d:90:41:df:9c:82:51:af:25:05:01:25:95:5a:
a1:8d:f6:d4:50:5f:69:d6:7a:9d:fc:d8:97:a1:0f:cb:45:08:
c5:6d:d8:17:ac:81:16:cf:9b:a2:eb:93:ba:4d:99:ad:bb:82:
fe:2e:59:f9:b1:77:9a:6f:ff:9d:19:54:a0:8f:ec:6a:17:55:
70:31:55:d7:23:62:63:98:f9:9f:8a:07:8d:32:a0:98:fc:5a:
b3:94:c1:ea:f8:b3:a1:c4:cd:63:95:b5:ea:e0:30:61:df:32:
64:1b:87:03:9d:10:c3:3c:b1:77:d9:80:8a:2f:0a:e7:16:3a:
6c:4b:d5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:51:31 2026 by rpki-client