Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/DB4BDEF8686911F1BDD5F198A147A888.roa
File: DB4BDEF8686911F1BDD5F198A147A888.roa (raw, json)
Hash identifier: iqgrkmCxNLB1Vu6irNonHXhWmrxbWNO5kKg/rLYZZq0=
Subject key identifier: 9A:57:B4:2C:7F:B9:5E:A9:43:EF:5E:36:F0:E3:1A:7A:E8:9E:E1:1C
Certificate issuer: /CN=A916AAFF/serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Certificate serial: 01DC
Authority key identifier: E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/DB4BDEF8686911F1BDD5F198A147A888.roa
Signing time: Mon 15 Jun 2026 04:10:59 +0000
ROA not before: Mon 15 Jun 2026 04:10:59 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 38819
IP address blocks: 14.0.128.0/17 maxlen: 17
14.0.128.0/24 maxlen: 24
14.0.129.0/24 maxlen: 24
14.0.130.0/24 maxlen: 24
14.0.131.0/24 maxlen: 24
14.0.132.0/22 maxlen: 22
14.0.136.0/22 maxlen: 22
14.0.136.0/24 maxlen: 24
14.0.140.0/24 maxlen: 24
14.0.141.0/24 maxlen: 24
14.0.142.0/24 maxlen: 24
14.0.143.0/24 maxlen: 24
14.0.144.0/24 maxlen: 24
14.0.145.0/24 maxlen: 24
14.0.146.0/24 maxlen: 24
14.0.152.0/21 maxlen: 21
14.0.152.0/24 maxlen: 24
14.0.153.0/24 maxlen: 24
14.0.154.0/24 maxlen: 24
14.0.155.0/24 maxlen: 24
14.0.156.0/24 maxlen: 24
14.0.157.0/24 maxlen: 24
14.0.158.0/24 maxlen: 24
14.0.159.0/24 maxlen: 24
14.0.160.0/21 maxlen: 21
14.0.160.0/24 maxlen: 24
14.0.161.0/24 maxlen: 24
14.0.162.0/24 maxlen: 24
14.0.163.0/24 maxlen: 24
14.0.164.0/24 maxlen: 24
14.0.165.0/24 maxlen: 24
14.0.166.0/24 maxlen: 24
14.0.167.0/24 maxlen: 24
14.0.168.0/21 maxlen: 21
14.0.168.0/24 maxlen: 24
14.0.169.0/24 maxlen: 24
14.0.170.0/24 maxlen: 24
14.0.171.0/24 maxlen: 24
14.0.172.0/24 maxlen: 24
14.0.173.0/24 maxlen: 24
14.0.174.0/24 maxlen: 24
14.0.175.0/24 maxlen: 24
14.0.176.0/21 maxlen: 21
14.0.176.0/24 maxlen: 24
14.0.177.0/24 maxlen: 24
14.0.178.0/24 maxlen: 24
14.0.179.0/24 maxlen: 24
14.0.180.0/24 maxlen: 24
14.0.181.0/24 maxlen: 24
14.0.182.0/24 maxlen: 24
14.0.183.0/24 maxlen: 24
14.0.192.0/24 maxlen: 24
14.0.193.0/24 maxlen: 24
14.0.194.0/24 maxlen: 24
14.0.195.0/24 maxlen: 24
14.0.196.0/22 maxlen: 22
14.0.200.0/24 maxlen: 24
14.0.201.0/24 maxlen: 24
14.0.202.0/23 maxlen: 23
14.0.204.0/23 maxlen: 23
14.0.206.0/24 maxlen: 24
14.0.207.0/24 maxlen: 24
14.0.208.0/21 maxlen: 21
14.0.208.0/24 maxlen: 24
14.0.215.0/24 maxlen: 24
14.0.216.0/21 maxlen: 21
14.0.216.0/24 maxlen: 24
14.0.223.0/24 maxlen: 24
14.0.224.0/21 maxlen: 21
14.0.224.0/24 maxlen: 24
14.0.225.0/24 maxlen: 24
14.0.226.0/24 maxlen: 24
14.0.227.0/24 maxlen: 24
14.0.228.0/24 maxlen: 24
14.0.229.0/24 maxlen: 24
14.0.230.0/24 maxlen: 24
14.0.231.0/24 maxlen: 24
14.0.232.0/21 maxlen: 21
14.0.232.0/24 maxlen: 24
14.0.233.0/24 maxlen: 24
14.0.234.0/24 maxlen: 24
14.0.235.0/24 maxlen: 24
14.0.236.0/24 maxlen: 24
14.0.237.0/24 maxlen: 24
14.0.240.0/21 maxlen: 21
14.0.240.0/24 maxlen: 24
14.0.247.0/24 maxlen: 24
110.4.0.0/19 maxlen: 19
110.4.0.0/24 maxlen: 24
110.4.1.0/24 maxlen: 24
110.4.2.0/24 maxlen: 24
110.4.4.0/24 maxlen: 24
110.4.8.0/24 maxlen: 24
110.4.9.0/24 maxlen: 24
110.4.11.0/24 maxlen: 24
110.4.13.0/24 maxlen: 24
110.4.14.0/24 maxlen: 24
110.4.15.0/24 maxlen: 24
110.4.16.0/24 maxlen: 24
110.4.17.0/24 maxlen: 24
110.4.18.0/24 maxlen: 24
110.4.19.0/24 maxlen: 24
110.4.20.0/24 maxlen: 24
110.4.21.0/24 maxlen: 24
110.4.22.0/24 maxlen: 24
110.4.25.0/24 maxlen: 24
203.210.0.0/20 maxlen: 20
203.210.2.0/24 maxlen: 24
203.210.3.0/24 maxlen: 24
203.210.4.0/24 maxlen: 24
203.210.6.0/24 maxlen: 24
203.210.7.0/24 maxlen: 24
203.210.8.0/24 maxlen: 24
2403:1000::/32 maxlen: 32
2403:1000:1000::/36 maxlen: 36
2403:1000:1100::/40 maxlen: 40
2403:1000:1200::/40 maxlen: 40
2403:1000:1300::/40 maxlen: 40
2403:1000:2000::/36 maxlen: 36
2403:1000:3000::/36 maxlen: 36
2403:1000:3100::/40 maxlen: 40
2403:1000:4000::/36 maxlen: 36
2403:1000:4100::/40 maxlen: 40
2403:1000:5000::/36 maxlen: 36
2403:1000:5100::/40 maxlen: 40
2403:1000:5300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AAFF, serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Validity
Not Before: Jun 15 04:10:59 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a2f7b53-196f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:dc:9e:ad:09:52:d0:3d:65:b8:28:4f:73:
f9:c4:d1:6e:2e:6d:c6:4b:b5:da:ff:a7:27:83:2d:
96:e9:02:d4:a2:52:e5:36:45:2b:9a:41:0c:61:71:
c1:48:c2:d2:f2:43:cd:45:4b:c0:f9:c2:a1:c9:f6:
cd:3b:1b:90:94:54:9c:47:75:04:1d:1c:c5:30:5f:
5f:af:e2:a5:ca:3e:19:05:06:4b:24:eb:00:1f:c9:
9d:4a:5a:03:76:b4:1f:49:88:e2:67:3a:6e:60:47:
f7:b0:c9:e7:9b:04:dd:3b:9e:10:16:d0:6a:41:ca:
b7:32:e5:22:13:dd:fa:ea:74:51:33:cd:2e:e3:6c:
ee:a2:cb:db:71:48:46:b2:b7:0b:d3:a0:fd:69:2b:
63:b8:f7:63:52:2c:83:a7:cf:11:1e:ce:b4:ad:9f:
f6:07:46:7f:9e:25:dd:22:6f:f2:26:e9:0f:2e:a2:
7f:a7:81:35:5e:e5:4e:21:22:03:f7:77:ff:99:78:
dd:6c:e2:f3:7c:17:52:c8:bf:c1:21:67:c9:33:33:
bb:99:ed:e3:fd:5d:25:04:8c:f8:d2:1a:ec:68:dd:
15:cf:2c:41:c4:f8:1a:18:9c:6f:4c:25:f8:f7:44:
f3:d3:36:c4:e0:ae:a8:81:30:6b:1b:9e:51:b3:8f:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:57:B4:2C:7F:B9:5E:A9:43:EF:5E:36:F0:E3:1A:7A:E8:9E:E1:1C
X509v3 Authority Key Identifier:
keyid:E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/DB4BDEF8686911F1BDD5F198A147A888.roa
sbgp-ipAddrBlock: critical
IPv4:
14.0.128.0/17
110.4.0.0/19
203.210.0.0/20
IPv6:
2403:1000::/32
Signature Algorithm: sha256WithRSAEncryption
1f:1b:ef:c5:86:43:10:bf:93:33:53:14:bd:79:7a:f1:00:73:
57:7b:d3:dd:5b:26:26:bc:c1:ce:de:a5:91:cb:e8:04:21:2f:
c7:2c:13:d8:04:a3:a1:d2:fe:9a:3e:e1:39:3e:64:a0:a6:88:
f1:78:dd:dc:7a:4f:f7:a3:87:90:cc:38:99:df:64:e1:e4:81:
69:96:bb:ea:41:10:e0:7c:09:12:88:c1:50:ba:47:55:24:be:
da:36:fa:d0:eb:bf:83:47:9a:a5:c8:dd:4b:d0:cd:0a:4d:90:
04:58:bb:ce:da:35:ce:6b:29:fc:e4:23:e0:29:67:9e:8b:87:
33:ae:5c:8d:b3:e0:17:fe:65:57:73:4e:3a:4f:de:e0:6a:8e:
64:91:0c:ad:84:ee:4e:c0:3e:51:fd:6c:54:be:68:f1:70:77:
e6:f7:49:74:e4:c5:e5:f2:f6:7b:a1:e0:70:d2:ca:df:8a:33:
51:e5:ae:d6:31:9d:34:72:98:ff:d8:af:32:07:71:e6:f8:48:
2d:5d:7f:59:52:44:62:86:5e:b8:3d:21:1e:68:e3:ea:47:a3:
37:30:d0:b2:ce:80:8f:d7:54:65:02:72:87:cd:a5:fe:d6:59:
42:61:ad:76:f4:ae:39:30:83:e6:ab:bf:c0:62:ef:f6:72:76:
cf:65:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:35 2026 by rpki-client