Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa
File: 6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa (raw, json)
Hash identifier: CV2Ah2EheqVgYD3smx7l67bOLL4aEoMWAZ6LiDXLGYU=
Subject key identifier: E4:E3:1F:BB:28:25:08:6C:24:CE:D3:B2:3C:00:14:17:7B:F8:C9:00
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 02A7
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa
Signing time: Mon 22 Jun 2026 06:32:23 +0000
ROA not before: Mon 22 Jun 2026 06:32:22 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 132280
IP address blocks: 83.118.0.0/17 maxlen: 18
83.118.0.0/21 maxlen: 23
83.118.8.0/21 maxlen: 23
83.118.16.0/21 maxlen: 23
83.118.24.0/21 maxlen: 23
83.118.26.0/23 maxlen: 24
83.118.32.0/21 maxlen: 23
83.118.32.0/24 maxlen: 24
83.118.35.0/24 maxlen: 24
83.118.36.0/24 maxlen: 24
83.118.40.0/21 maxlen: 23
83.118.45.0/24 maxlen: 24
83.118.48.0/21 maxlen: 23
83.118.52.0/24 maxlen: 24
83.118.55.0/24 maxlen: 24
83.118.56.0/21 maxlen: 23
83.118.56.0/23 maxlen: 24
83.118.61.0/24 maxlen: 24
83.118.64.0/21 maxlen: 23
83.118.65.0/24 maxlen: 24
83.118.72.0/21 maxlen: 23
83.118.75.0/24 maxlen: 24
83.118.80.0/21 maxlen: 23
83.118.88.0/21 maxlen: 23
83.118.92.0/24 maxlen: 24
83.118.96.0/21 maxlen: 23
83.118.98.0/24 maxlen: 24
83.118.104.0/21 maxlen: 23
83.118.105.0/24 maxlen: 24
83.118.109.0/24 maxlen: 24
83.118.111.0/24 maxlen: 24
83.118.112.0/21 maxlen: 23
83.118.112.0/24 maxlen: 24
83.118.114.0/24 maxlen: 24
83.118.118.0/24 maxlen: 24
83.118.120.0/21 maxlen: 23
83.118.120.0/23 maxlen: 24
83.118.124.0/24 maxlen: 24
83.118.126.0/24 maxlen: 24
87.124.0.0/17 maxlen: 23
87.124.1.0/24 maxlen: 24
87.124.2.0/23 maxlen: 24
87.124.4.0/22 maxlen: 24
87.124.8.0/21 maxlen: 24
87.124.16.0/20 maxlen: 24
87.124.32.0/19 maxlen: 24
87.124.64.0/20 maxlen: 24
87.124.80.0/21 maxlen: 24
87.124.88.0/23 maxlen: 24
87.124.90.0/24 maxlen: 24
87.124.94.0/23 maxlen: 24
87.124.96.0/19 maxlen: 24
89.126.128.0/18 maxlen: 21
89.127.128.0/18 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Jun 22 06:32:22 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a38d6f6-56e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:b2:3a:b0:51:6e:93:3e:f7:b1:0d:1a:06:
df:53:72:0f:60:45:2f:a1:c3:b0:c6:24:c0:0f:12:
2c:cb:3e:53:58:0a:b1:ac:4e:58:66:23:ef:09:89:
bb:56:58:2e:5a:be:3b:c2:74:23:9c:82:53:e3:eb:
6b:36:96:a3:d6:cb:7f:12:33:48:51:99:f6:2d:e6:
3e:f8:b3:71:ea:08:fc:7b:cd:e3:e1:6c:08:95:6d:
29:52:21:b8:26:5a:5f:79:c0:00:d6:2c:94:0e:b8:
93:00:f6:49:a0:fa:65:cc:96:d7:9c:45:b6:d2:66:
83:79:24:17:7d:e4:44:6d:69:d4:77:75:df:49:3f:
60:91:04:77:58:ad:47:ae:da:2c:84:e0:ef:87:e4:
51:43:b0:e3:cc:2b:5c:2d:80:91:df:3e:4b:4d:74:
40:bc:c6:b5:fc:39:50:f9:a2:0e:d8:69:cd:15:c2:
f1:48:c5:3a:df:b1:a9:4a:17:7e:30:b6:7e:51:6d:
be:88:08:11:5b:96:69:fd:a8:72:91:c3:4d:5a:31:
e8:98:22:5b:24:37:66:5f:7c:a8:da:8b:c7:3b:5b:
3b:f3:10:13:70:f9:a3:7b:29:21:24:5b:7e:4f:72:
80:de:9e:13:57:a7:55:69:f8:a1:af:94:31:c7:55:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E3:1F:BB:28:25:08:6C:24:CE:D3:B2:3C:00:14:17:7B:F8:C9:00
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
83.118.0.0/17
87.124.0.0/17
89.126.128.0/18
89.127.128.0/18
Signature Algorithm: sha256WithRSAEncryption
7c:98:7d:37:53:ae:0f:d3:1f:7c:97:01:19:56:5e:42:b1:bd:
46:cd:23:60:37:ac:b5:9e:73:0f:62:92:c2:ef:9c:4a:f4:67:
e0:0b:2d:45:05:e9:c2:71:e6:65:77:ec:0a:cf:9a:92:ce:c0:
1a:c6:f5:77:eb:8a:27:c5:3d:84:58:eb:31:a1:b7:4f:ae:d0:
ad:86:3c:1f:bd:63:41:5f:c9:5a:ed:4b:7a:1b:46:cf:cf:fc:
77:73:dc:02:32:36:09:b3:e6:d2:21:ad:f4:51:67:76:b0:0f:
ac:d5:b0:87:1a:ca:1e:44:8f:2a:0b:24:f9:76:de:44:b9:1e:
1b:4a:75:b9:c7:4f:0d:47:c3:fa:95:35:2a:0c:ac:5f:97:9d:
db:7f:22:fd:dd:c9:33:d1:2d:7d:1e:8f:bf:1d:57:88:b3:11:
72:3a:b6:16:6e:e9:77:82:56:71:19:cb:83:f6:0b:90:ad:a8:
11:54:db:70:6a:95:6d:d3:af:24:ae:c4:75:76:59:33:2f:0c:
e8:df:08:67:92:d8:ec:c2:92:85:dd:a2:be:9b:cc:16:10:61:
1b:0d:7e:cf:32:6d:4d:43:d9:e3:46:df:20:2e:80:f0:95:6b:
45:55:5c:ed:91:32:7c:f0:41:40:e8:ba:98:d9:70:95:fc:18:
3d:49:b1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:40:41 2026 by rpki-client