Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/B7C4E510067111F1BC22D1653B3D8C67.roa
File: B7C4E510067111F1BC22D1653B3D8C67.roa (raw, json)
Hash identifier: KvlIwfCNinBDApUM0hPw82jOaBTrt/CmpdmsPJpgE8I=
Subject key identifier: 2F:31:CD:DC:5F:CF:3D:29:5A:07:46:CC:20:B5:BF:72:D9:F0:EB:E3
Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial: 016E
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/B7C4E510067111F1BC22D1653B3D8C67.roa
Signing time: Mon 09 Mar 2026 08:05:38 +0000
ROA not before: Mon 09 Mar 2026 08:05:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 141383
IP address blocks: 163.61.8.0/23 maxlen: 24
2001:df4:ffc0::/48 maxlen: 48
2402:4c60::/32 maxlen: 32
2402:4c60:100::/48 maxlen: 48
2402:4c60:101::/48 maxlen: 48
2402:4c60:102::/48 maxlen: 48
2402:4c60:103::/48 maxlen: 48
2402:4c60:110::/48 maxlen: 48
2402:4c60:111::/48 maxlen: 48
2402:4c60:112::/48 maxlen: 48
2402:4c60:113::/48 maxlen: 48
2402:4c60:120::/48 maxlen: 48
2402:4c60:121::/48 maxlen: 48
2402:4c60:122::/48 maxlen: 48
2402:4c60:123::/48 maxlen: 48
2402:4c60:130::/48 maxlen: 48
2402:4c60:131::/48 maxlen: 48
2402:4c60:132::/48 maxlen: 48
2402:4c60:133::/48 maxlen: 48
2402:4c60:200::/48 maxlen: 48
2402:4c60:201::/48 maxlen: 48
2402:4c60:202::/48 maxlen: 48
2402:4c60:203::/48 maxlen: 48
2402:4c60:1008::/48 maxlen: 48
2402:4c60:1009::/48 maxlen: 48
2402:4c60:100a::/48 maxlen: 48
2402:4c60:100b::/48 maxlen: 48
2402:4c60:100c::/48 maxlen: 48
2402:4c60:100d::/48 maxlen: 48
2402:4c60:100e::/48 maxlen: 48
2402:4c60:100f::/48 maxlen: 48
2402:4c60:1010::/48 maxlen: 48
2402:4c60:1011::/48 maxlen: 48
2402:4c60:1012::/48 maxlen: 48
2402:4c60:1013::/48 maxlen: 48
2402:4c60:1100::/48 maxlen: 48
2402:4c60:1101::/48 maxlen: 48
2402:4c60:1107::/48 maxlen: 48
2402:4c60:1110::/48 maxlen: 48
2402:4c60:1111::/48 maxlen: 48
2402:4c60:1120::/48 maxlen: 48
2402:4c60:1121::/48 maxlen: 48
2402:4c60:1130::/48 maxlen: 48
2402:4c60:1140::/48 maxlen: 48
2402:4c60:1150::/48 maxlen: 48
2402:4c60:1160::/48 maxlen: 48
2402:4c60:1170::/48 maxlen: 48
2402:4c60:1180::/48 maxlen: 48
2402:4c60:1200::/48 maxlen: 48
2402:4c60:1202::/48 maxlen: 48
2402:4c60:1210::/48 maxlen: 48
2402:4c60:1300::/48 maxlen: 48
2402:4c60:1305::/48 maxlen: 48
2402:4c60:1306::/48 maxlen: 48
2402:4c60:1310::/48 maxlen: 48
2402:4c60:1320::/48 maxlen: 48
2402:4c60:1500::/48 maxlen: 48
2402:4c60:1501::/48 maxlen: 48
2402:4c60:1503::/48 maxlen: 48
2402:4c60:1504::/48 maxlen: 48
2402:4c60:1510::/48 maxlen: 48
2402:4c60:1600::/48 maxlen: 48
2402:4c60:1601::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Validity
Not Before: Mar 9 08:05:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69ae7f52-28a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:42:99:25:ac:4d:54:68:e7:f6:42:3d:8a:
ac:cf:be:ac:a0:f3:d1:3d:cf:70:bd:ff:93:0c:fa:
1e:1b:89:b4:86:66:43:ab:3a:89:71:f4:46:4d:26:
91:b2:fd:e0:ec:cd:f2:dd:de:7d:cf:33:a3:80:50:
74:c6:49:e7:bb:7c:fd:b4:91:b2:10:d0:87:07:a6:
b6:d8:ae:02:df:ca:8f:4c:13:d5:b9:ee:ab:e4:45:
cb:60:2d:82:63:75:83:58:50:36:43:24:93:73:54:
05:8f:56:16:0f:7b:ce:a2:4f:02:75:b4:15:85:be:
19:98:c2:99:12:e0:eb:83:1d:b6:ae:3f:ab:36:f3:
26:17:5e:30:b4:d9:d4:b3:73:71:e7:35:aa:85:80:
53:ac:d2:f3:19:7f:6f:57:68:0e:d5:10:78:ff:21:
1b:90:bc:20:cf:ff:33:44:5b:c9:91:a0:4f:cd:6c:
99:20:e3:ad:c3:8d:1c:75:67:3c:30:34:be:8e:4f:
ed:a5:9f:2c:e3:39:d0:00:5e:79:58:05:4b:78:45:
e9:6f:12:97:15:7d:d5:68:9e:c6:e9:2a:f3:e2:58:
5d:3c:e5:dd:36:2e:e4:e0:bf:e3:c4:39:fb:cb:26:
24:41:ff:d4:ac:94:15:cf:45:00:44:a7:d1:ea:ee:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:31:CD:DC:5F:CF:3D:29:5A:07:46:CC:20:B5:BF:72:D9:F0:EB:E3
X509v3 Authority Key Identifier:
keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/B7C4E510067111F1BC22D1653B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.8.0/23
IPv6:
2001:df4:ffc0::/48
2402:4c60::/32
Signature Algorithm: sha256WithRSAEncryption
d1:f9:2d:be:0c:0f:3a:49:1f:fd:1e:a1:43:1d:c0:3e:70:89:
ba:34:85:1f:59:34:dc:2e:f2:12:0f:76:79:5b:de:7d:72:19:
f8:54:7b:5a:de:59:0c:bd:65:68:37:32:18:36:70:58:72:fb:
55:38:58:dd:fa:5a:b2:cc:bb:6a:1a:2c:10:a6:70:4b:1a:20:
27:df:c3:cc:83:c4:ca:82:28:8b:90:18:16:a9:7e:64:7e:86:
5f:bd:34:dc:7f:8c:64:62:05:c2:31:b1:53:b3:52:81:3a:dd:
94:a2:b8:13:33:6c:32:e6:d0:5e:a1:a8:f0:6e:5a:90:37:6f:
a1:2e:f6:ba:a3:f0:2c:ba:7b:33:dc:58:0f:b5:8e:74:6c:04:
43:47:43:9e:a3:ac:0c:c3:84:1d:09:49:9a:34:84:ef:f3:97:
3d:58:3f:e9:41:20:6a:8f:b2:4a:f4:f4:4b:42:0f:8b:4b:36:
98:41:6a:d1:3f:d8:33:08:1b:ff:5b:aa:67:eb:9f:df:90:50:
68:b1:64:4f:e5:07:c7:b7:3d:13:08:39:a5:04:ea:90:47:80:
9a:3c:8f:cb:7b:f1:83:c1:b1:9c:06:15:23:39:3a:b0:a7:c4:
14:19:43:92:85:14:ac:88:7e:1b:0e:84:c3:63:85:4f:53:14:
59:15:09:0c
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRFM0QxMTAvBgNVBAUTKDY5MTgxQ0Y0NTFGOEIzRkVDNjRGQzgyOThCNTIyRDQ4
OENBNUM5RTYwHhcNMjYwMzA5MDgwNTM4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFlN2Y1Mi0yOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscRCmSWsTVRo5/ZCPYqsz76soPPRPc9wvf+TDPoeG4m0hmZDqzqJcfRGTSaR
sv3g7M3y3d59zzOjgFB0xknnu3z9tJGyENCHB6a22K4C38qPTBPVue6r5EXLYC2C
Y3WDWFA2QySTc1QFj1YWD3vOok8CdbQVhb4ZmMKZEuDrgx22rj+rNvMmF14wtNnU
s3Nx5zWqhYBTrNLzGX9vV2gO1RB4/yEbkLwgz/8zRFvJkaBPzWyZIOOtw40cdWc8
MDS+jk/tpZ8s4znQAF55WAVLeEXpbxKXFX3VaJ7G6Srz4lhdPOXdNi7k4L/jxDn7
yyYkQf/UrJQVz0UARKfR6u7MxQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFC8xzdxf
zz0pWgdGzCC1v3LZ8OvjMB8GA1UdIwQYMBaAFGkYHPRR+LP+xk/IKYtSLUiMpcnm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REUzRC9GRDFFNDU1MERF
NjUxMUVGODI0M0VFMzBDNEY5QUUwMi9hUmdjOUZINHNfN0dUOGdwaTFJdFNJeWx5
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FSZ2M5Rkg0c183R1Q4Z3BpMUl0U0l5bHllWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkRFM0QvRkQxRTQ1NTBERTY1MTFFRjgyNDNFRTMwQzRGOUFFMDIvQjdDNEU1MTAw
NjcxMTFGMUJDMjJEMTY1M0IzRDhDNjcucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM
BAIAATAGAwQBoz0IMBYEAgACMBADBwAgAQ30/8ADBQAkAkxgMA0GCSqGSIb3DQEB
CwUAA4IBAQDR+S2+DA86SR/9HqFDHcA+cIm6NIUfWTTcLvISD3Z5W959chn4VHta
3lkMvWVoNzIYNnBYcvtVOFjd+lqyzLtqGiwQpnBLGiAn38PMg8TKgiiLkBgWqX5k
foZfvTTcf4xkYgXCMbFTs1KBOt2UorgTM2wy5tBeoajwblqQN2+hLva6o/Asunsz
3FgPtY50bARDR0Oeo6wMw4QdCUmaNITv85c9WD/pQSBqj7JK9PRLQg+LSzaYQWrR
P9gzCBv/W6pn65/fkFBosWRP5QfHtz0TCDmlBOqQR4CaPI/Le/GDwbGcBhUjOTqw
p8QUGUOShRSsiH4bDoTDY4VPUxRZFQkM
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:15:31 2026 by rpki-client