Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/73462B74643C11EB9E7DF918C4F9AE02.roa
File: 73462B74643C11EB9E7DF918C4F9AE02.roa (raw, json)
Hash identifier: dP7HegAV/LhvECEqPV+CQ2+cXKrDHT/4AjooyHNCYaQ=
Subject key identifier: C1:DD:67:BD:8B:A7:09:F7:A0:91:7B:77:3C:4C:44:DD:90:CA:7E:CE
Certificate issuer: /CN=A919819A/serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
Certificate serial: 353D
Authority key identifier: 35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/73462B74643C11EB9E7DF918C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:24:13 +0000
ROA not before: Wed 02 Jul 2025 15:20:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 45780
IP address blocks: 103.23.0.0/22 maxlen: 24
110.173.232.0/22 maxlen: 22
110.173.232.0/23 maxlen: 24
110.173.234.0/23 maxlen: 23
110.173.235.0/24 maxlen: 24
110.173.236.0/22 maxlen: 24
111.118.216.0/24 maxlen: 24
111.118.217.0/24 maxlen: 24
111.118.218.0/24 maxlen: 24
111.118.219.0/24 maxlen: 24
119.17.32.0/19 maxlen: 24
123.254.112.0/20 maxlen: 24
163.47.52.0/22 maxlen: 23
175.103.16.0/20 maxlen: 20
175.103.16.0/23 maxlen: 23
175.103.18.0/24 maxlen: 24
175.103.19.0/24 maxlen: 24
175.103.20.0/24 maxlen: 24
175.103.21.0/24 maxlen: 24
175.103.22.0/24 maxlen: 24
175.103.23.0/24 maxlen: 24
175.103.24.0/23 maxlen: 23
175.103.26.0/23 maxlen: 23
175.103.28.0/22 maxlen: 24
2404:fa00::/36 maxlen: 36
2404:fa00::/40 maxlen: 40
2404:fa00:1000::/36 maxlen: 36
2404:fa00:2000::/36 maxlen: 36
2404:fa00:5000::/36 maxlen: 36
2404:fa00:d000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl
rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13629 (0x353d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919819A, serialNumber=358399C736EF055D5D592CAB19016FE3816F6608
Validity
Not Before: Jul 2 15:20:55 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a421dd-3830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:16:0c:cd:fb:8d:34:c1:de:d6:1e:8e:d4:
b4:8f:ef:ab:29:84:f7:de:fa:f2:56:6d:b6:f8:29:
cd:db:e0:6b:2d:b4:4b:f6:86:e9:60:d6:0f:de:8a:
ce:ce:e2:f4:59:0b:3b:83:f7:ef:ab:b1:82:f1:95:
4a:98:76:55:91:ef:12:eb:ab:e5:ef:3a:87:b0:b5:
c9:62:9e:9d:b2:fe:fa:df:63:c6:23:2c:e8:89:ff:
44:6d:87:54:db:0d:c3:9a:08:d5:53:10:12:47:e8:
21:75:76:e4:f3:82:2d:ce:9a:f1:e6:fd:2d:9f:5b:
de:68:77:65:7f:97:ca:1f:65:34:41:fa:a1:14:ff:
be:d6:7a:10:05:51:5c:6e:9a:a9:35:83:9e:2d:8f:
c9:c9:37:81:d6:26:e7:39:10:59:d2:80:e7:1e:4c:
01:ea:fd:66:34:be:0c:cc:27:50:b2:dc:23:88:2b:
a7:41:e7:e0:7f:d1:a0:0b:19:3d:f9:c1:13:ea:7d:
77:f3:f3:08:b3:fd:ab:13:bc:43:58:45:ff:0a:d3:
d5:70:ba:b1:b1:18:6a:31:40:37:cb:6e:73:20:28:
a8:f9:70:a6:99:ba:89:13:c4:75:11:70:3c:ee:3d:
c5:5a:dd:d1:9b:ed:9c:a0:0a:6d:cc:1b:8b:e5:19:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:67:BD:8B:A7:09:F7:A0:91:7B:77:3C:4C:44:DD:90:CA:7E:CE
X509v3 Authority Key Identifier:
keyid:35:83:99:C7:36:EF:05:5D:5D:59:2C:AB:19:01:6F:E3:81:6F:66:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/NYOZxzbvBV1dWSyrGQFv44FvZgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYOZxzbvBV1dWSyrGQFv44FvZgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919819A/63EA20921D9E11E2ADB73F8E08B02CD2/73462B74643C11EB9E7DF918C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.0.0/22
110.173.232.0/21
111.118.216.0/22
119.17.32.0/19
123.254.112.0/20
163.47.52.0/22
175.103.16.0/20
IPv6:
2404:fa00::-2404:fa00:2fff:ffff:ffff:ffff:ffff:ffff
2404:fa00:5000::/36
2404:fa00:d000::/36
Signature Algorithm: sha256WithRSAEncryption
71:4f:db:5f:6c:6e:ec:98:8a:74:32:13:6d:55:dd:a3:cc:4c:
2f:c2:7d:a3:54:3f:ca:dd:cf:61:75:a1:16:d5:f1:4f:07:49:
c3:f3:8b:e5:78:61:6d:c8:76:35:66:9c:31:60:6b:8b:7e:8c:
53:64:f0:b5:a3:e4:79:c1:27:73:3d:03:01:7a:47:47:85:df:
6f:17:cc:c6:ae:de:81:3e:ff:3f:5e:64:3d:1b:48:91:07:1a:
cb:b1:a0:94:fa:44:47:4d:b6:9e:a9:6b:1b:29:69:1e:d9:00:
5d:6e:13:9a:87:87:f6:55:5a:5f:59:ab:81:70:b9:77:cc:f1:
67:85:46:1b:ad:1e:b8:2c:a7:2f:22:b7:0a:8f:f7:33:4d:ff:
40:bc:48:d2:c8:dd:14:c7:0e:d0:b1:00:21:2e:f2:23:b3:08:
b6:62:78:18:d2:a7:ee:a0:28:7a:6e:40:ae:59:e4:2e:24:80:
43:58:96:ff:de:3e:87:cc:b5:55:54:32:06:d7:57:87:f7:f0:
70:e2:b7:d1:87:6f:9b:8d:b1:19:5d:cc:10:89:f6:c7:1b:02:
8e:ff:cb:7d:d9:21:83:dd:8b:18:71:b1:36:d6:6d:4f:9c:8c:
64:71:9c:6f:c3:cf:d4:2a:0a:d7:0a:c0:87:49:10:a1:d4:ac:
75:b6:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:16 2026 by rpki-client