Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/314E917C651E11E8A8903D42C4F9AE02.roa
File: 314E917C651E11E8A8903D42C4F9AE02.roa (raw, json)
Hash identifier: 9ej0uJb9isKtTSetZZYMiqBTjxBpRK1yCazawhZTpz4=
Subject key identifier: 96:61:06:41:E1:D6:EA:37:AC:E6:51:09:99:93:B6:D8:04:2E:F8:26
Certificate issuer: /CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Certificate serial: 179E
Authority key identifier: 65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/314E917C651E11E8A8903D42C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:35:08 +0000
ROA not before: Fri 20 Feb 2026 17:14:23 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 38883
IP address blocks: 103.29.200.0/22 maxlen: 24
115.146.64.0/20 maxlen: 20
115.146.64.0/24 maxlen: 24
115.146.65.0/24 maxlen: 24
115.146.66.0/24 maxlen: 24
115.146.67.0/24 maxlen: 24
115.146.68.0/24 maxlen: 24
115.146.69.0/24 maxlen: 24
115.146.70.0/24 maxlen: 24
115.146.71.0/24 maxlen: 24
115.146.72.0/24 maxlen: 24
115.146.73.0/24 maxlen: 24
115.146.74.0/24 maxlen: 24
115.146.75.0/24 maxlen: 24
115.146.76.0/24 maxlen: 24
115.146.78.0/24 maxlen: 24
115.146.79.0/24 maxlen: 24
119.63.216.0/21 maxlen: 21
119.63.216.0/24 maxlen: 24
119.63.217.0/24 maxlen: 24
119.63.218.0/24 maxlen: 24
119.63.219.0/24 maxlen: 24
119.63.220.0/24 maxlen: 24
119.63.221.0/24 maxlen: 24
119.63.222.0/24 maxlen: 24
119.63.223.0/24 maxlen: 24
2402:7400::/32 maxlen: 32
2402:7400::/36 maxlen: 36
2402:7400:2000::/36 maxlen: 36
2402:7400:5000::/36 maxlen: 36
2402:7400:6000::/36 maxlen: 36
2402:7400:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6046 (0x179e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8219, serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Validity
Not Before: Feb 20 17:14:23 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a44e9c-cc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:26:0a:9d:44:9f:c3:94:4f:b6:b0:d5:fc:
1b:da:b0:74:a1:7d:9f:51:56:37:68:31:9a:aa:82:
e2:38:b8:2a:1b:91:c2:ce:93:02:8f:e9:9d:31:bf:
a3:4f:88:42:8a:f5:33:fd:9f:08:ce:cb:92:f2:2b:
8e:c7:6d:02:25:1b:04:f0:eb:42:b6:59:87:20:e0:
b6:8e:f6:7f:72:22:a9:fb:9d:0f:cc:79:14:36:6e:
a6:0c:a6:ff:83:2d:39:20:57:a4:30:a7:74:98:a5:
ee:6a:c0:56:64:82:10:70:08:11:14:61:0e:9f:78:
26:fc:7f:6b:7b:02:55:d0:eb:e3:04:57:43:8a:a4:
62:4e:61:d9:e9:74:f2:61:49:71:6c:02:e8:c0:88:
15:4c:7b:4a:e4:b8:04:93:be:c1:4c:68:5e:bd:af:
68:82:81:5b:1f:33:9e:3b:9b:98:fd:34:b7:cc:2a:
da:17:14:ca:3a:0f:fa:45:96:49:81:dc:19:62:38:
95:6e:17:b5:24:d0:f4:a9:3f:f5:0b:b3:38:1d:92:
6c:90:2b:02:b2:38:57:b0:a4:24:c0:94:03:19:52:
96:75:69:1c:b9:32:7d:2f:43:dd:61:55:b9:62:be:
4b:ad:c2:38:29:b1:48:37:e7:85:d6:8f:c8:64:dd:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:61:06:41:E1:D6:EA:37:AC:E6:51:09:99:93:B6:D8:04:2E:F8:26
X509v3 Authority Key Identifier:
keyid:65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/314E917C651E11E8A8903D42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.29.200.0/22
115.146.64.0/20
119.63.216.0/21
IPv6:
2402:7400::/32
Signature Algorithm: sha256WithRSAEncryption
4f:b0:de:e8:69:63:c6:22:6e:d9:80:07:3e:03:76:02:ff:ac:
6d:e9:b0:2a:bb:42:a1:13:ee:3f:4c:24:ce:48:3d:9c:56:e9:
31:f3:f6:6b:17:98:4e:b7:52:f8:76:85:bd:08:7a:c2:1e:a0:
07:97:e9:3b:d8:36:cf:b2:03:c2:8e:c0:84:b2:5f:ab:e0:94:
78:ca:6f:ad:d2:70:20:ff:16:16:03:d0:7a:79:e3:33:2b:34:
d9:64:15:7a:fc:c8:8b:76:05:87:21:8d:34:03:49:35:0f:44:
45:c3:f3:c7:fc:31:23:79:06:7c:6d:c0:a1:ed:40:09:7e:19:
da:5b:42:a8:0b:b1:ac:e4:8b:86:06:9e:fe:5e:ed:51:e9:96:
e5:b7:74:dc:b4:90:08:1f:13:16:ad:e7:aa:ab:ab:0f:56:21:
42:22:27:b7:36:1b:c8:bc:45:d3:f2:e9:9d:65:bd:e9:8e:91:
5a:73:54:e9:bf:43:e0:92:b5:08:c3:c3:15:7a:bd:04:40:a7:
57:8d:ac:28:92:a5:9d:45:22:7d:7d:56:71:4a:73:8e:6e:1e:
cc:ff:4c:6a:9d:83:85:7a:83:3b:a5:a9:85:12:11:35:a7:b1:
19:cb:3b:77:1d:dd:62:d2:e0:bf:26:5b:f7:90:00:53:23:0d:
20:bf:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:21 2026 by rpki-client