Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/EEFB07CCB8A311ED8F694046C4F9AE02.roa
File: EEFB07CCB8A311ED8F694046C4F9AE02.roa (raw, json)
Hash identifier: NGEAnl3l5oDQana61IIIn9qfeo19DHZLGNsyAcO7Ej0=
Subject key identifier: F3:AD:DC:1C:B3:83:F3:5E:48:31:7B:82:B9:1A:76:8B:A2:63:6C:22
Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Certificate serial: 224E
Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/EEFB07CCB8A311ED8F694046C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:54:06 +0000
ROA not before: Tue 04 Mar 2025 16:33:15 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 17551
IP address blocks: 14.192.56.0/22 maxlen: 22
14.192.56.0/23 maxlen: 23
14.192.58.0/23 maxlen: 23
103.15.148.0/22 maxlen: 22
103.29.172.0/24 maxlen: 24
103.29.173.0/24 maxlen: 24
103.53.117.0/24 maxlen: 24
103.53.118.0/24 maxlen: 24
103.53.119.0/24 maxlen: 24
103.227.64.0/23 maxlen: 23
103.232.252.0/22 maxlen: 22
110.232.240.0/21 maxlen: 21
117.53.128.0/20 maxlen: 20
125.214.80.0/21 maxlen: 21
202.47.120.0/22 maxlen: 22
203.22.132.0/24 maxlen: 24
203.27.231.0/24 maxlen: 24
203.30.68.0/24 maxlen: 24
203.83.4.0/22 maxlen: 22
203.147.96.0/21 maxlen: 21
2400:b880::/32 maxlen: 32
2407:5400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl
rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:19:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8782 (0x224e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Validity
Not Before: Mar 4 16:33:15 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a4611e-cf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b2:bf:2a:e1:c2:40:ae:be:c4:56:77:21:be:
93:46:c3:f0:8f:d3:6c:45:ef:ef:25:93:4c:35:2f:
f8:f9:b6:f3:7c:4c:b2:43:79:26:88:6c:c5:0f:4b:
d5:02:68:4f:3e:54:43:d1:e9:01:3f:5d:84:f1:44:
10:3b:7c:4b:2b:4a:15:9b:0b:66:be:7b:1d:8e:6d:
35:a1:3b:e9:9a:c8:dc:28:a3:9c:71:83:48:36:08:
f0:a7:ff:8d:8d:39:c6:e5:da:ca:78:03:12:59:5d:
52:34:be:68:e2:63:1c:e2:e5:21:e5:89:91:a0:ef:
93:d9:bd:42:88:43:d2:b8:3b:cd:66:7f:9e:45:e5:
b1:7c:5c:5e:4a:b3:d2:e5:a0:f1:f3:55:88:b8:c8:
b9:b6:ff:f6:6e:48:7d:f0:4b:a4:dd:1c:25:1f:72:
d7:dd:b6:d5:90:bb:12:ee:19:a2:a7:01:6b:47:c8:
64:70:b0:8b:3c:d9:d3:9a:14:da:fa:ba:b3:4b:e4:
c3:0f:16:86:44:35:c1:f1:e4:af:33:52:1c:b5:c5:
7f:cf:52:0a:fb:47:67:ad:d8:0d:02:da:52:cd:06:
79:41:ed:40:9a:ed:56:ba:64:1a:97:b2:8e:19:45:
a7:1c:cc:33:bb:63:43:dc:a5:5e:1d:43:d5:60:a5:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:DC:1C:B3:83:F3:5E:48:31:7B:82:B9:1A:76:8B:A2:63:6C:22
X509v3 Authority Key Identifier:
keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/EEFB07CCB8A311ED8F694046C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.56.0/22
103.15.148.0/22
103.29.172.0/23
103.53.117.0-103.53.119.255
103.227.64.0/23
103.232.252.0/22
110.232.240.0/21
117.53.128.0/20
125.214.80.0/21
202.47.120.0/22
203.22.132.0/24
203.27.231.0/24
203.30.68.0/24
203.83.4.0/22
203.147.96.0/21
IPv6:
2400:b880::/32
2407:5400::/32
Signature Algorithm: sha256WithRSAEncryption
22:cb:99:fb:64:15:43:6d:eb:56:e1:af:c2:06:6d:13:f7:9a:
99:39:1e:84:9c:f6:88:72:b6:1f:91:5f:63:21:7b:cb:b5:ff:
cc:39:ea:67:2a:c1:5c:85:d2:ee:b7:b9:98:9e:0b:72:58:83:
0b:e2:7d:20:ad:f5:dc:fd:2b:c3:2e:50:cf:ff:21:7f:ca:8a:
f8:95:02:ca:e6:2e:1a:e9:69:39:be:31:48:82:8f:89:6b:f1:
bf:17:cd:a6:52:df:79:1c:b3:50:59:c8:7c:07:aa:65:49:19:
9b:6b:da:f6:8f:f7:b6:58:61:f8:3e:5b:8e:76:2a:25:95:72:
81:ed:f7:da:84:99:0d:7d:96:7c:56:be:99:fa:9d:3b:48:32:
27:0f:44:fa:02:26:03:e7:8e:b5:8b:75:4c:fb:28:75:ad:b2:
8e:39:56:f3:e6:2c:fb:ca:79:1d:9d:62:fd:c9:9d:90:b5:7b:
fe:6e:92:7f:d2:46:c3:0d:ba:e1:33:fd:2f:95:88:41:b1:24:
3c:1d:d6:33:a5:cc:22:c8:32:f0:44:c4:94:62:66:bb:e3:4c:
c5:b7:cd:6f:2b:f3:2d:2a:eb:fa:6e:ef:b3:88:f6:a2:2c:74:
b0:a0:25:f4:e8:dc:e5:8f:c6:18:89:83:b1:17:d4:39:30:0d:
e5:9d:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:15 2026 by rpki-client