Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/6FD03784861C11F18E80495A81A30FBC.roa
File: 6FD03784861C11F18E80495A81A30FBC.roa (raw, json)
Hash identifier: +OaHRdor7FrSH8stlmfhFUun2yan7PWVuqWKNlAkwUA=
Subject key identifier: E9:C1:58:D1:17:FC:63:5A:DE:47:61:CF:F4:A0:37:63:BD:6D:23:31
Certificate issuer: /CN=A916A3BE/serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Certificate serial: 0ABA
Authority key identifier: A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/6FD03784861C11F18E80495A81A30FBC.roa
Signing time: Wed 22 Jul 2026 22:35:22 +0000
ROA not before: Wed 22 Jul 2026 22:35:22 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 45280
IP address blocks: 114.134.160.0/20 maxlen: 20
114.134.160.0/24 maxlen: 24
114.134.161.0/24 maxlen: 24
114.134.162.0/24 maxlen: 24
114.134.163.0/24 maxlen: 24
114.134.164.0/24 maxlen: 24
114.134.165.0/24 maxlen: 24
114.134.166.0/24 maxlen: 24
114.134.167.0/24 maxlen: 24
114.134.168.0/24 maxlen: 24
114.134.169.0/24 maxlen: 24
114.134.170.0/24 maxlen: 24
114.134.171.0/24 maxlen: 24
114.134.172.0/24 maxlen: 24
114.134.173.0/24 maxlen: 24
114.134.174.0/24 maxlen: 24
114.134.175.0/24 maxlen: 24
114.134.176.0/21 maxlen: 21
114.134.176.0/24 maxlen: 24
114.134.177.0/24 maxlen: 24
114.134.178.0/24 maxlen: 24
114.134.179.0/24 maxlen: 24
114.134.180.0/24 maxlen: 24
114.134.181.0/24 maxlen: 24
114.134.182.0/24 maxlen: 24
114.134.183.0/24 maxlen: 24
203.80.60.0/23 maxlen: 23
203.80.60.0/24 maxlen: 24
203.80.61.0/24 maxlen: 24
2402:7e00::/32 maxlen: 32
2407:ca00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2746 (0xaba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A3BE, serialNumber=A10603302BFEC82A07F8C5D42E458B76C5FF91A4
Validity
Not Before: Jul 22 22:35:22 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a6145aa-df80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:53:1b:50:01:7f:2f:a9:db:c0:9f:98:f8:
42:2b:36:c1:59:56:b4:ee:72:b3:4a:8d:a7:58:0f:
51:cc:4e:71:34:40:7f:db:e8:35:b7:26:7e:cf:8d:
3a:b3:65:9c:09:9c:5d:30:bf:a2:2a:c5:dd:57:28:
db:98:3c:92:e6:50:c2:35:eb:43:d5:bd:0c:6a:1c:
c2:96:65:d9:a1:08:4c:5d:27:4c:e6:87:3f:b9:af:
e6:5d:2b:9d:1e:85:68:03:34:ce:39:d7:25:f3:f0:
b7:f6:d9:a0:64:66:65:ef:58:dd:96:38:da:48:31:
cc:1a:dc:4d:b3:28:f0:f2:5f:eb:c6:f7:d9:00:96:
8d:e8:6f:a8:f6:c0:dd:59:ed:81:b7:38:05:9d:ee:
3a:64:4b:99:56:72:36:c9:8b:05:f8:f4:71:97:04:
9b:5f:b1:b1:08:5a:72:4b:8d:cf:74:71:da:46:2c:
66:85:c8:bd:01:49:fa:e2:71:f8:c5:57:d9:57:e1:
82:af:43:ac:fa:ab:5f:16:dd:8f:ff:db:44:08:99:
85:2a:61:d5:f7:a4:30:75:62:02:4f:fe:55:14:a4:
4c:28:b1:46:9f:33:40:09:4a:2a:7f:e1:bf:ed:52:
8e:8a:93:a5:a2:eb:4f:5c:13:4c:ca:c5:27:5e:30:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C1:58:D1:17:FC:63:5A:DE:47:61:CF:F4:A0:37:63:BD:6D:23:31
X509v3 Authority Key Identifier:
keyid:A1:06:03:30:2B:FE:C8:2A:07:F8:C5:D4:2E:45:8B:76:C5:FF:91:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/oQYDMCv-yCoH-MXULkWLdsX_kaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oQYDMCv-yCoH-MXULkWLdsX_kaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3BE/89B4F678841911EA98FF0637C4F9AE02/6FD03784861C11F18E80495A81A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
114.134.160.0-114.134.183.255
203.80.60.0/23
IPv6:
2402:7e00::/32
2407:ca00::/32
Signature Algorithm: sha256WithRSAEncryption
bd:12:60:2c:d0:c3:70:25:8b:ba:71:ad:e4:cd:ef:b9:01:e8:
e5:e1:86:69:33:a9:da:ca:69:d8:76:10:a3:71:5a:89:76:de:
50:b0:5e:a7:ed:dc:a9:b0:2e:15:67:94:f9:39:27:22:c1:de:
47:6c:59:97:fb:41:1d:42:2a:90:83:a2:7c:e9:0a:86:73:07:
ca:a6:37:81:76:e4:f8:ff:d7:22:66:93:0b:0a:f8:ef:a6:0b:
e2:67:cb:2c:5c:6c:f5:46:09:45:f3:58:f8:94:65:c9:91:5e:
90:b1:c8:ec:e5:f4:4e:86:ea:3d:16:e6:d8:e9:bd:a3:ef:3f:
33:e3:b8:db:bb:18:40:ef:a7:3d:a3:45:e4:c6:49:48:48:e0:
ab:d1:d1:51:ef:23:cf:cf:e3:f0:65:05:9c:d9:a5:89:ea:24:
c4:d6:50:16:0d:50:4c:5e:d2:8c:5e:0b:8e:2b:ad:e6:9e:4d:
86:24:16:be:bb:e6:9d:09:1c:60:3d:1e:b0:1c:6a:57:19:1f:
da:e3:2b:37:db:73:55:1e:69:55:f1:b6:99:89:51:ef:2f:7e:
81:4e:96:17:d1:2a:1f:a1:43:57:8a:31:6d:4a:f2:f0:43:94:
ec:13:3b:18:96:52:ee:1b:98:e2:11:03:d6:36:07:b0:7f:c6:
6d:88:53:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:19:09 2026 by rpki-client