Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B3E738FAB0F811EA895AE231C4F9AE02.roa
File: B3E738FAB0F811EA895AE231C4F9AE02.roa (raw, json)
Hash identifier: CofpMSTxelj5ncNROljQp0Hn2WRWVglhFObgIZB8lxE=
Subject key identifier: F5:CB:20:1D:2D:27:4C:AA:5F:D0:D0:4B:A1:00:F5:41:F8:62:1B:48
Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial: 0B85
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B3E738FAB0F811EA895AE231C4F9AE02.roa
Signing time: Fri 18 Sep 2026 08:34:43 +0000
ROA not before: Fri 18 Sep 2026 08:34:43 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 23764
IP address blocks: 61.29.244.0/22 maxlen: 24
61.29.254.0/23 maxlen: 24
146.196.78.0/23 maxlen: 24
183.91.48.0/21 maxlen: 21
183.91.48.0/24 maxlen: 24
183.91.49.0/24 maxlen: 24
183.91.50.0/24 maxlen: 24
183.91.51.0/24 maxlen: 24
183.91.52.0/24 maxlen: 24
183.91.53.0/24 maxlen: 24
183.91.54.0/24 maxlen: 24
183.91.55.0/24 maxlen: 24
183.91.58.0/24 maxlen: 24
183.91.60.0/24 maxlen: 24
183.91.61.0/24 maxlen: 24
183.91.62.0/24 maxlen: 24
183.91.63.0/24 maxlen: 24
202.55.0.0/19 maxlen: 19
202.55.0.0/24 maxlen: 24
202.55.1.0/24 maxlen: 24
202.55.2.0/24 maxlen: 24
202.55.3.0/24 maxlen: 24
202.55.4.0/24 maxlen: 24
202.55.5.0/24 maxlen: 24
202.55.6.0/24 maxlen: 24
202.55.7.0/24 maxlen: 24
202.55.8.0/21 maxlen: 21
202.55.8.0/24 maxlen: 24
202.55.9.0/24 maxlen: 24
202.55.10.0/24 maxlen: 24
202.55.11.0/24 maxlen: 24
202.55.12.0/24 maxlen: 24
202.55.13.0/24 maxlen: 24
202.55.14.0/24 maxlen: 24
202.55.15.0/24 maxlen: 24
202.55.16.0/24 maxlen: 24
202.55.17.0/24 maxlen: 24
202.55.18.0/24 maxlen: 24
202.55.19.0/24 maxlen: 24
202.55.20.0/24 maxlen: 24
202.55.21.0/24 maxlen: 24
202.55.22.0/24 maxlen: 24
202.55.23.0/24 maxlen: 24
202.55.24.0/24 maxlen: 24
202.55.25.0/24 maxlen: 24
202.55.26.0/24 maxlen: 24
202.55.27.0/24 maxlen: 24
202.55.28.0/24 maxlen: 24
202.55.29.0/24 maxlen: 24
202.55.30.0/24 maxlen: 24
202.55.31.0/24 maxlen: 24
203.20.51.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
2400:9380:9000::/40 maxlen: 48
2400:9380:9100::/40 maxlen: 48
2400:9380:9200::/40 maxlen: 48
2400:9380:9300::/40 maxlen: 48
2400:9380:a000::/40 maxlen: 48
2400:9380:a100::/40 maxlen: 48
2400:9380:a200::/40 maxlen: 48
2400:9380:a300::/40 maxlen: 48
2400:9380:aa00::/40 maxlen: 48
2400:9380:f000::/40 maxlen: 48
2400:9380:f100::/40 maxlen: 48
2400:9380:f200::/40 maxlen: 48
2400:9380:f300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Validity
Not Before: Sep 18 08:34:43 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6aacf7a3-01eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:54:bd:42:15:91:e2:d3:60:70:0e:75:de:
f8:08:1d:d8:e9:69:19:70:4e:7a:0e:6a:33:4f:96:
d8:cc:dc:5e:5c:ee:93:ad:c3:2c:41:c9:60:e2:5c:
cf:73:69:b1:51:35:1a:68:a6:cf:d8:44:92:6a:e3:
e5:b8:51:bd:8c:39:34:13:f1:96:21:ae:85:9d:02:
14:b4:62:e0:0b:b0:76:d5:1a:ed:b5:a7:d2:00:d3:
34:31:15:95:e7:33:3a:4a:69:a7:b6:cc:c6:79:6c:
ad:f2:67:1a:71:11:78:5f:8f:bc:f3:37:bd:f7:15:
42:62:34:ff:28:2d:3d:25:bb:c6:f7:3d:47:2b:db:
8e:ce:c2:57:b2:8c:ab:cd:62:98:f2:29:b0:69:38:
d4:0a:b8:6d:1e:c2:c4:22:aa:db:b6:48:75:71:68:
a6:2c:6d:80:ba:2c:b9:c9:29:f2:0f:30:4c:d2:03:
22:0c:92:8c:03:ca:15:6e:21:64:5b:94:f4:81:27:
88:11:c5:80:8b:c6:76:52:ae:d7:78:d9:e7:9e:1c:
7d:ba:a4:22:96:b2:58:3d:e7:43:68:88:44:44:08:
a1:43:37:c8:54:c1:18:9f:fd:8b:37:c2:95:90:eb:
3d:84:10:30:cb:72:f4:4d:e0:83:13:41:4c:e1:81:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CB:20:1D:2D:27:4C:AA:5F:D0:D0:4B:A1:00:F5:41:F8:62:1B:48
X509v3 Authority Key Identifier:
keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/B3E738FAB0F811EA895AE231C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.29.244.0/22
61.29.254.0/23
146.196.78.0/23
183.91.48.0/21
183.91.58.0/24
183.91.60.0/22
202.55.0.0/19
203.20.51.0/24
223.29.228.0/24
IPv6:
2400:9380:9000::/38
2400:9380:a000::/38
2400:9380:aa00::/40
2400:9380:f000::/38
Signature Algorithm: sha256WithRSAEncryption
68:7d:f3:5e:d1:0c:ec:0a:8e:c0:f5:99:95:cc:38:fb:8c:ec:
cf:98:d0:fa:2e:81:79:25:57:62:12:8a:6a:7b:16:e3:c3:99:
aa:4f:ad:95:8f:1a:ba:b0:45:5d:b1:60:2e:cb:82:12:4e:a2:
21:fa:4f:e7:34:00:62:01:0e:48:1b:bd:ef:25:88:4d:5c:f7:
ae:ad:ad:5f:81:54:08:bd:fc:27:ab:84:33:4c:c3:b4:0f:d3:
d6:ab:d5:27:b0:b1:4e:9e:33:f3:13:1e:57:40:b6:1c:61:46:
be:61:e2:95:e8:49:4c:69:be:95:f8:5c:8d:46:06:b7:63:1e:
77:5a:98:9b:30:5c:9f:3f:f2:bf:8a:1c:7b:f9:fd:e1:46:e2:
cc:02:6c:42:cf:66:f1:90:7c:29:27:71:e1:19:65:e4:51:de:
df:e6:e9:4e:bb:28:bd:28:68:c9:7a:38:29:e3:e3:40:50:2e:
6d:8d:5b:47:ac:6a:04:6e:1b:10:8d:81:7b:76:ae:6a:69:a9:
3e:8d:5b:9e:74:3b:46:37:5e:bb:31:b8:23:34:05:8c:6b:23:
bc:d8:f7:9e:d5:ac:03:23:4b:33:84:cb:d9:89:65:79:c8:96:
4e:1d:bf:aa:fc:1b:42:85:8b:96:f8:c3:74:b7:64:19:e0:9e:
99:02:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:42:42 2026 by rpki-client