Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
File: 14C388C2114311F0B3944E67C4F9AE02.roa (raw, json)
Hash identifier: nJBtKbmjIDObVhJplk88U8/szQXpOrygsZiu6IEmPV0=
Subject key identifier: 62:29:65:3D:EC:CA:80:C4:63:4F:12:69:6F:BB:17:3E:01:B7:0B:0A
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 09B8
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
Signing time: Tue 15 Sep 2026 04:02:59 +0000
ROA not before: Tue 15 Sep 2026 04:02:59 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24560
IP address blocks: 27.56.128.0/20 maxlen: 24
27.56.144.0/20 maxlen: 24
27.56.160.0/19 maxlen: 24
27.57.0.0/16 maxlen: 24
27.58.0.0/16 maxlen: 24
27.62.116.0/24 maxlen: 24
27.62.117.0/24 maxlen: 24
27.63.176.0/20 maxlen: 24
106.200.0.0/18 maxlen: 24
106.200.192.0/18 maxlen: 24
106.201.0.0/16 maxlen: 24
106.202.128.0/17 maxlen: 24
106.203.192.0/18 maxlen: 24
106.205.0.0/18 maxlen: 24
106.205.64.0/18 maxlen: 24
106.212.0.0/17 maxlen: 24
106.212.128.0/17 maxlen: 24
106.213.0.0/17 maxlen: 24
106.214.0.0/16 maxlen: 24
106.215.0.0/17 maxlen: 24
106.215.128.0/19 maxlen: 24
106.215.160.0/20 maxlen: 24
106.215.176.0/21 maxlen: 24
106.215.184.0/21 maxlen: 24
106.215.192.0/21 maxlen: 24
106.215.200.0/24 maxlen: 24
106.219.64.0/19 maxlen: 24
106.219.96.0/20 maxlen: 24
106.219.120.0/22 maxlen: 24
106.219.124.0/22 maxlen: 24
106.219.128.0/21 maxlen: 24
106.219.136.0/22 maxlen: 24
106.219.144.0/20 maxlen: 24
106.219.160.0/20 maxlen: 24
106.219.176.0/21 maxlen: 24
106.222.192.0/18 maxlen: 24
110.224.128.0/17 maxlen: 24
110.225.0.0/16 maxlen: 24
110.226.0.0/16 maxlen: 24
110.227.0.0/16 maxlen: 24
117.96.0.0/16 maxlen: 24
117.97.128.0/18 maxlen: 24
117.98.192.0/20 maxlen: 24
117.98.208.0/21 maxlen: 21
117.98.216.0/21 maxlen: 24
117.99.96.0/20 maxlen: 24
117.99.160.0/19 maxlen: 24
223.177.0.0/16 maxlen: 24
223.178.0.0/17 maxlen: 24
223.178.192.0/18 maxlen: 24
223.179.128.0/19 maxlen: 24
223.181.0.0/17 maxlen: 24
223.181.128.0/18 maxlen: 24
223.182.64.0/18 maxlen: 24
223.182.164.0/22 maxlen: 24
223.182.172.0/22 maxlen: 24
223.182.180.0/22 maxlen: 24
223.182.248.0/21 maxlen: 24
223.184.0.0/17 maxlen: 24
223.185.12.0/22 maxlen: 24
223.185.16.0/20 maxlen: 24
223.185.32.0/19 maxlen: 24
223.185.128.0/21 maxlen: 24
223.185.136.0/21 maxlen: 24
223.185.144.0/20 maxlen: 24
223.185.160.0/20 maxlen: 24
223.185.176.0/20 maxlen: 24
223.190.0.0/17 maxlen: 24
223.190.192.0/18 maxlen: 24
223.224.172.0/23 maxlen: 24
223.226.0.0/16 maxlen: 24
223.229.128.0/17 maxlen: 24
223.230.0.0/16 maxlen: 24
223.233.64.0/18 maxlen: 24
223.235.0.0/16 maxlen: 24
223.236.0.0/16 maxlen: 24
223.239.0.0/16 maxlen: 24
2401:4900:1c00::/41 maxlen: 48
2401:4900:1c80::/41 maxlen: 48
2401:4900:1f20::/44 maxlen: 48
2401:4900:1f30::/44 maxlen: 48
2401:4900:7d2c::/47 maxlen: 48
2401:4900:7d2e::/47 maxlen: 48
2401:4900:8800::/37 maxlen: 48
2401:4900:934b::/48 maxlen: 48
2401:4900:934c::/48 maxlen: 48
2401:4900:934d::/48 maxlen: 48
2401:4900:934e::/48 maxlen: 48
2401:4900:a090::/44 maxlen: 48
2401:4900:ab73::/48 maxlen: 48
2401:4900:ab74::/46 maxlen: 48
2401:4900:ab78::/45 maxlen: 48
2401:4900:ad10::/44 maxlen: 48
2401:4900:bf00::/44 maxlen: 48
2401:4900:bf10::/44 maxlen: 48
2401:4900:c388::/45 maxlen: 48
2401:4900:c390::/44 maxlen: 48
2401:4900:c3a0::/44 maxlen: 48
2401:4900:c3b0::/45 maxlen: 48
2401:4900:cc00::/44 maxlen: 48
2401:4900:cc10::/44 maxlen: 48
2401:4900:cff4::/46 maxlen: 48
2401:4900:d0e0::/44 maxlen: 48
2401:4900:d0f0::/44 maxlen: 48
2401:4900:dbf8::/46 maxlen: 48
2401:4900:e084::/46 maxlen: 48
2401:4900:e0bc::/46 maxlen: 48
2401:4900:e82c::/46 maxlen: 48
2401:4900:e833::/48 maxlen: 48
2401:4900:e834::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2488 (0x9b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Sep 15 04:02:59 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aa8c373-58be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:23:74:0a:f9:d2:73:e6:bf:e3:26:15:8c:13:
7a:af:e4:60:de:8c:b7:68:7a:ec:3d:20:68:37:47:
74:f8:e4:cc:e4:eb:ea:9f:d2:aa:25:33:bb:ac:4d:
f7:2a:72:a1:e1:40:f0:f5:55:c6:48:2a:75:66:3d:
d3:14:c4:a6:05:bd:be:1e:47:46:f4:b9:99:78:26:
35:2e:3c:a4:bc:22:3f:a4:70:77:fa:5c:51:5c:6b:
e5:09:4b:48:93:0e:5f:4c:74:e6:fe:7a:b0:2f:dc:
bf:ec:b4:bb:49:a6:13:bc:c8:b6:1d:51:17:ea:cb:
30:0b:64:bf:d8:6d:d5:dd:95:cb:da:fa:51:2a:d0:
6a:45:72:e3:2b:c9:58:82:fa:20:1c:e4:53:e8:ed:
79:73:ec:ec:80:ae:f1:4d:ca:73:26:dc:a8:2b:bd:
f5:5c:8f:7e:61:81:3a:15:07:da:b0:1b:6f:ab:e9:
81:d5:97:28:a5:ff:8d:88:59:24:09:9d:c8:f0:2d:
ae:c1:13:dc:8c:74:60:6b:c5:87:16:9c:40:6f:23:
b1:64:7a:1f:90:dc:de:20:85:3f:4c:71:71:6c:06:
ec:66:f1:fa:ac:26:75:d3:ae:87:ca:8d:bf:02:7f:
b6:1a:e7:3f:20:33:8a:f4:75:a2:38:24:69:c1:a8:
bd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:65:3D:EC:CA:80:C4:63:4F:12:69:6F:BB:17:3E:01:B7:0B:0A
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.56.128.0/18
27.57.0.0-27.58.255.255
27.62.116.0/23
27.63.176.0/20
106.200.0.0/18
106.200.192.0-106.201.255.255
106.202.128.0/17
106.203.192.0/18
106.205.0.0/17
106.212.0.0-106.213.127.255
106.214.0.0-106.215.200.255
106.219.64.0-106.219.111.255
106.219.120.0-106.219.139.255
106.219.144.0-106.219.183.255
106.222.192.0/18
110.224.128.0-110.227.255.255
117.96.0.0/16
117.97.128.0/18
117.98.192.0/19
117.99.96.0/20
117.99.160.0/19
223.177.0.0-223.178.127.255
223.178.192.0/18
223.179.128.0/19
223.181.0.0-223.181.191.255
223.182.64.0/18
223.182.164.0/22
223.182.172.0/22
223.182.180.0/22
223.182.248.0/21
223.184.0.0/17
223.185.12.0-223.185.63.255
223.185.128.0/18
223.190.0.0/17
223.190.192.0/18
223.224.172.0/23
223.226.0.0/16
223.229.128.0-223.230.255.255
223.233.64.0/18
223.235.0.0-223.236.255.255
223.239.0.0/16
IPv6:
2401:4900:1c00::/40
2401:4900:1f20::/43
2401:4900:7d2c::/46
2401:4900:8800::/37
2401:4900:934b::-2401:4900:934e:ffff:ffff:ffff:ffff:ffff
2401:4900:a090::/44
2401:4900:ab73::-2401:4900:ab7f:ffff:ffff:ffff:ffff:ffff
2401:4900:ad10::/44
2401:4900:bf00::/43
2401:4900:c388::-2401:4900:c3b7:ffff:ffff:ffff:ffff:ffff
2401:4900:cc00::/43
2401:4900:cff4::/46
2401:4900:d0e0::/43
2401:4900:dbf8::/46
2401:4900:e084::/46
2401:4900:e0bc::/46
2401:4900:e82c::/46
2401:4900:e833::-2401:4900:e835:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d9:5c:54:ab:27:21:16:9b:56:86:7e:3e:12:e5:6d:1a:97:38:
17:1e:d3:4c:ea:65:a2:2f:29:d4:36:44:a9:52:8b:ee:87:b7:
bc:73:77:a4:7a:3c:e2:c8:51:a4:56:4d:59:b0:32:c6:e4:51:
92:a1:90:d3:f0:a4:46:5e:ce:81:4f:de:90:cd:e6:03:fa:6e:
64:5d:44:f9:cc:cb:f7:2f:5d:d6:b0:0b:23:c9:a5:c8:cf:52:
0b:8e:03:0a:4e:3a:ba:b5:7b:05:10:5d:cc:e8:98:96:fe:c0:
61:ec:62:02:cc:e0:c5:4d:e4:ce:f4:ba:03:56:2e:6a:1e:04:
00:58:9f:07:0a:79:86:7f:f0:31:02:d5:e6:8c:96:88:62:69:
9c:3b:32:d4:5e:34:de:df:9d:2b:61:f1:27:b0:70:65:e3:d1:
29:3e:01:7f:1f:4c:4b:db:35:dd:0b:f0:5e:f9:b6:d5:fc:ee:
ed:a3:34:8a:65:97:8d:7d:46:15:42:c9:6a:d0:3a:93:33:d8:
1d:72:ce:d7:ca:91:27:03:c2:07:f7:5d:47:24:ad:3e:07:d3:
b2:ef:9d:7a:c0:2d:8e:55:dc:ff:57:e3:66:37:be:d8:dd:ac:
e7:a7:87:27:02:fe:8c:cc:2c:f0:ec:f3:99:fa:ce:a6:06:39:
dd:fd:48:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:07:08 2026 by rpki-client