Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/69E8AC12555811EFA88AEA24C4F9AE02.roa
File: 69E8AC12555811EFA88AEA24C4F9AE02.roa (raw, json)
Hash identifier: oI34aH3hpczf3eqTRk1pvaILPdvwF3ngOoufaFpS/RU=
Subject key identifier: C2:F6:E7:0C:CB:77:E8:E4:66:D6:7B:B9:E4:8B:A1:E7:5F:13:59:23
Certificate issuer: /CN=A916AAFF/serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Certificate serial: 01A2
Authority key identifier: E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/69E8AC12555811EFA88AEA24C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:55:01 +0000
ROA not before: Fri 29 Aug 2025 05:25:23 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 38819
IP address blocks: 14.0.128.0/17 maxlen: 17
14.0.128.0/24 maxlen: 24
14.0.129.0/24 maxlen: 24
14.0.130.0/24 maxlen: 24
14.0.131.0/24 maxlen: 24
14.0.132.0/22 maxlen: 22
14.0.136.0/22 maxlen: 22
14.0.136.0/24 maxlen: 24
14.0.140.0/24 maxlen: 24
14.0.141.0/24 maxlen: 24
14.0.142.0/24 maxlen: 24
14.0.143.0/24 maxlen: 24
14.0.144.0/24 maxlen: 24
14.0.145.0/24 maxlen: 24
14.0.146.0/24 maxlen: 24
14.0.152.0/21 maxlen: 21
14.0.152.0/24 maxlen: 24
14.0.153.0/24 maxlen: 24
14.0.154.0/24 maxlen: 24
14.0.155.0/24 maxlen: 24
14.0.156.0/24 maxlen: 24
14.0.157.0/24 maxlen: 24
14.0.158.0/24 maxlen: 24
14.0.159.0/24 maxlen: 24
14.0.160.0/21 maxlen: 21
14.0.160.0/24 maxlen: 24
14.0.161.0/24 maxlen: 24
14.0.162.0/24 maxlen: 24
14.0.163.0/24 maxlen: 24
14.0.164.0/24 maxlen: 24
14.0.165.0/24 maxlen: 24
14.0.166.0/24 maxlen: 24
14.0.167.0/24 maxlen: 24
14.0.168.0/21 maxlen: 21
14.0.168.0/24 maxlen: 24
14.0.169.0/24 maxlen: 24
14.0.170.0/24 maxlen: 24
14.0.171.0/24 maxlen: 24
14.0.172.0/24 maxlen: 24
14.0.173.0/24 maxlen: 24
14.0.174.0/24 maxlen: 24
14.0.175.0/24 maxlen: 24
14.0.176.0/21 maxlen: 21
14.0.176.0/24 maxlen: 24
14.0.177.0/24 maxlen: 24
14.0.178.0/24 maxlen: 24
14.0.179.0/24 maxlen: 24
14.0.180.0/24 maxlen: 24
14.0.181.0/24 maxlen: 24
14.0.182.0/24 maxlen: 24
14.0.183.0/24 maxlen: 24
14.0.192.0/24 maxlen: 24
14.0.193.0/24 maxlen: 24
14.0.194.0/24 maxlen: 24
14.0.195.0/24 maxlen: 24
14.0.196.0/22 maxlen: 22
14.0.200.0/24 maxlen: 24
14.0.201.0/24 maxlen: 24
14.0.202.0/23 maxlen: 23
14.0.204.0/23 maxlen: 23
14.0.206.0/24 maxlen: 24
14.0.207.0/24 maxlen: 24
14.0.208.0/21 maxlen: 21
14.0.208.0/24 maxlen: 24
14.0.215.0/24 maxlen: 24
14.0.216.0/21 maxlen: 21
14.0.216.0/24 maxlen: 24
14.0.223.0/24 maxlen: 24
14.0.224.0/21 maxlen: 21
14.0.224.0/24 maxlen: 24
14.0.225.0/24 maxlen: 24
14.0.226.0/24 maxlen: 24
14.0.227.0/24 maxlen: 24
14.0.228.0/24 maxlen: 24
14.0.229.0/24 maxlen: 24
14.0.230.0/24 maxlen: 24
14.0.231.0/24 maxlen: 24
14.0.232.0/21 maxlen: 21
14.0.232.0/24 maxlen: 24
14.0.233.0/24 maxlen: 24
14.0.234.0/24 maxlen: 24
14.0.235.0/24 maxlen: 24
14.0.236.0/24 maxlen: 24
14.0.237.0/24 maxlen: 24
14.0.240.0/21 maxlen: 21
14.0.240.0/24 maxlen: 24
14.0.247.0/24 maxlen: 24
110.4.0.0/19 maxlen: 19
110.4.0.0/24 maxlen: 24
110.4.1.0/24 maxlen: 24
110.4.2.0/24 maxlen: 24
110.4.4.0/24 maxlen: 24
110.4.8.0/24 maxlen: 24
110.4.9.0/24 maxlen: 24
110.4.11.0/24 maxlen: 24
110.4.13.0/24 maxlen: 24
110.4.14.0/24 maxlen: 24
110.4.15.0/24 maxlen: 24
110.4.16.0/24 maxlen: 24
110.4.17.0/24 maxlen: 24
110.4.18.0/24 maxlen: 24
110.4.19.0/24 maxlen: 24
110.4.20.0/24 maxlen: 24
110.4.21.0/24 maxlen: 24
110.4.22.0/24 maxlen: 24
110.4.25.0/24 maxlen: 24
203.210.0.0/20 maxlen: 20
203.210.2.0/24 maxlen: 24
203.210.3.0/24 maxlen: 24
203.210.4.0/24 maxlen: 24
203.210.6.0/24 maxlen: 24
203.210.7.0/24 maxlen: 24
203.210.8.0/24 maxlen: 24
2403:1000::/32 maxlen: 32
2403:1000:1100::/40 maxlen: 40
2403:1000:1200::/40 maxlen: 40
2403:1000:1300::/40 maxlen: 40
2403:1000:3100::/40 maxlen: 40
2403:1000:4100::/40 maxlen: 40
2403:1000:5100::/40 maxlen: 40
2403:1000:5300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AAFF, serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Validity
Not Before: Aug 29 05:25:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a588a5-597c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:f1:5a:bc:4a:15:30:15:56:6f:e3:cd:42:
4c:3d:d0:42:b6:86:e8:16:13:c1:2e:07:c3:10:0f:
09:14:79:02:72:46:6c:a3:b0:1d:4d:a0:0c:8b:6d:
11:24:9c:cc:f3:29:7c:d2:06:64:cd:16:57:da:23:
c6:3c:91:3f:ed:c9:b4:e2:91:0a:d6:f4:39:a9:20:
da:e7:22:45:d3:1f:a3:13:36:b1:9c:5d:f1:4c:49:
a7:7b:7a:2d:9d:34:70:3e:1e:6a:a5:b3:71:30:ea:
91:11:c6:c9:18:c9:5f:ae:a8:dd:3e:b0:89:5f:b2:
7c:b2:a5:5d:6f:da:10:90:ca:e0:80:aa:11:55:d3:
a8:1a:5d:a0:d4:fc:49:6a:23:e5:0a:6c:c7:39:18:
9d:3c:1d:39:e2:d5:87:79:92:ab:7d:e9:fb:7f:bf:
72:bd:99:ea:bf:63:19:5f:74:42:8b:ad:df:c5:bc:
4d:d9:43:0c:5e:23:29:ba:e2:56:f9:1d:a6:2d:b0:
19:a7:81:d4:64:e6:a6:b9:d4:7e:db:ea:56:0c:a4:
f0:c9:ff:ae:d1:ed:b5:9c:ac:fa:ed:0f:14:c5:1f:
a8:8a:03:49:bf:ec:5f:7a:3b:83:f9:c0:83:44:42:
55:c5:42:26:62:a8:9a:d8:30:56:92:2d:fd:70:4b:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:E7:0C:CB:77:E8:E4:66:D6:7B:B9:E4:8B:A1:E7:5F:13:59:23
X509v3 Authority Key Identifier:
keyid:E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/69E8AC12555811EFA88AEA24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.0.128.0/17
110.4.0.0/19
203.210.0.0/20
IPv6:
2403:1000::/32
Signature Algorithm: sha256WithRSAEncryption
9d:41:2e:36:44:fa:6c:4e:0c:38:b9:ae:40:22:fb:60:99:b2:
41:98:6e:b8:b6:02:fd:e0:3a:36:f8:f5:c6:4e:ad:25:bf:25:
2f:03:41:6d:df:47:22:0d:a0:1f:af:7b:05:fe:6e:c7:31:1a:
88:b3:f7:e3:86:4c:00:6c:bf:40:a2:08:84:ad:88:0e:74:a8:
4d:44:8f:9e:94:43:e8:80:f1:48:b7:62:a9:83:58:91:5b:ad:
2a:95:28:45:d2:8a:cd:65:95:d4:8f:da:b2:07:d1:90:56:bd:
f8:32:c0:a6:10:58:e6:51:67:ef:1e:da:c2:8c:81:10:d0:de:
2c:d2:00:bf:87:d9:7d:30:d6:1c:4b:74:67:7a:3e:1b:ca:38:
06:25:81:b2:5a:3b:32:36:e0:47:02:5a:67:45:11:8a:a6:01:
50:94:0d:02:cb:55:23:9c:e7:4c:fc:8d:61:60:f7:5e:0a:7d:
7d:9c:35:aa:20:56:06:e2:14:79:3c:4d:96:d0:ba:84:ef:36:
9b:92:2c:de:a6:0c:00:73:01:96:c5:7d:79:46:ae:13:dd:b3:
e6:35:bc:16:51:02:ee:14:2b:29:4e:53:22:71:a8:76:de:8e:
db:52:53:59:70:3e:8b:4e:3b:26:69:c9:10:c6:63:f7:5e:28:
96:e4:81:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:03 2026 by rpki-client