Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/4A479BB45A7911E998A6BE80C4F9AE02.roa
File: 4A479BB45A7911E998A6BE80C4F9AE02.roa (raw, json)
Hash identifier: 45iqKZ00KElDKa9iNeZor0xEQ36vS3Q2LgeqdVDPoiM=
Subject key identifier: 7B:46:9D:47:E1:34:41:F8:6C:3E:94:6E:8D:73:63:C3:04:82:AB:71
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 271A
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/4A479BB45A7911E998A6BE80C4F9AE02.roa
Signing time: Thu 07 May 2026 10:21:21 +0000
ROA not before: Thu 07 May 2026 10:21:21 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133543
IP address blocks: 115.67.8.0/21 maxlen: 21
115.67.8.0/24 maxlen: 24
115.67.9.0/24 maxlen: 24
115.67.10.0/24 maxlen: 24
115.67.11.0/24 maxlen: 24
115.67.12.0/24 maxlen: 24
115.67.13.0/24 maxlen: 24
115.67.14.0/24 maxlen: 24
115.67.15.0/24 maxlen: 24
115.67.100.0/24 maxlen: 24
2404:8d06::/31 maxlen: 32
2404:8d06::/36 maxlen: 36
2404:8d06:1000::/36 maxlen: 36
2404:8d06:2000::/36 maxlen: 36
2404:8d06:2000::/40 maxlen: 40
2404:8d06:3000::/36 maxlen: 36
2404:8d06:4000::/36 maxlen: 36
2404:8d06:4000::/40 maxlen: 40
2404:8d06:5000::/36 maxlen: 36
2404:8d06:6000::/36 maxlen: 36
2404:8d06:6000::/40 maxlen: 48
2404:8d06:7000::/36 maxlen: 36
2404:8d06:7000::/40 maxlen: 40
2404:8d06:8000::/36 maxlen: 36
2404:8d06:8000::/40 maxlen: 40
2404:8d06:9000::/36 maxlen: 36
2404:8d06:9000::/40 maxlen: 40
2404:8d06:a000::/36 maxlen: 36
2404:8d06:a000::/40 maxlen: 40
2404:8d06:b000::/36 maxlen: 36
2404:8d06:b000::/40 maxlen: 40
2404:8d06:c000::/36 maxlen: 36
2404:8d06:d000::/36 maxlen: 36
2404:8d06:e000::/36 maxlen: 36
2404:8d06:f000::/36 maxlen: 36
2404:8d07::/36 maxlen: 36
2404:8d07:1000::/36 maxlen: 36
2404:8d07:2000::/36 maxlen: 36
2404:8d07:3000::/36 maxlen: 36
2404:8d07:4000::/36 maxlen: 36
2404:8d07:5000::/36 maxlen: 36
2404:8d07:6000::/36 maxlen: 36
2404:8d07:7000::/36 maxlen: 36
2404:8d07:8000::/36 maxlen: 36
2404:8d07:9000::/36 maxlen: 36
2404:8d07:a000::/36 maxlen: 36
2404:8d07:b000::/36 maxlen: 36
2404:8d07:c000::/36 maxlen: 36
2404:8d07:d000::/36 maxlen: 36
2404:8d07:e000::/36 maxlen: 36
2404:8d07:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:43:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10010 (0x271a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: May 7 10:21:21 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69fc67a1-2a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:3b:3e:1d:af:79:20:94:8e:35:63:06:99:
89:de:5a:ed:1e:c0:8e:4d:3f:0a:1e:51:f7:0c:41:
3a:47:bb:5d:4e:37:f1:20:e2:ff:9c:90:91:27:ac:
3f:7e:06:91:97:a8:b8:ae:4b:c8:1d:c4:ca:17:5a:
2b:e1:f0:ee:65:ba:33:89:26:00:c1:53:6d:4f:85:
30:e3:60:61:ff:45:cd:21:0b:09:c0:e2:74:89:bd:
7a:be:96:a2:1c:bc:7d:10:a9:c0:61:31:ec:f2:01:
66:ea:d6:ec:0b:0c:02:93:9e:0e:8c:23:4e:cc:79:
5d:08:cc:33:9d:77:2f:6f:1a:34:79:3f:f3:66:95:
51:24:15:c9:82:53:aa:f0:87:c3:76:89:e0:27:ba:
0a:9d:dd:f2:a0:f7:d0:ac:1e:e3:96:87:70:05:87:
18:96:9a:38:f8:75:28:89:0b:a3:69:75:de:0a:c8:
e2:b8:58:02:71:4f:ee:81:6f:d7:82:03:99:0a:47:
87:8d:4d:d5:0c:ac:22:cb:0a:30:99:e9:11:d6:ef:
c0:7e:3b:87:91:0a:cb:69:22:a4:71:cc:0b:ee:6b:
75:21:89:a9:37:ba:63:d8:dd:2e:86:10:c4:4c:02:
53:4b:d0:72:c4:31:b6:ae:77:f4:b8:48:ae:e5:24:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:9D:47:E1:34:41:F8:6C:3E:94:6E:8D:73:63:C3:04:82:AB:71
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/4A479BB45A7911E998A6BE80C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
115.67.8.0/21
115.67.100.0/24
IPv6:
2404:8d06::/31
Signature Algorithm: sha256WithRSAEncryption
22:89:c8:02:0c:e4:ba:af:3f:e8:fc:de:b6:56:04:24:28:a0:
11:78:bc:96:a0:ec:0f:22:a3:9b:d5:97:e1:78:08:21:f2:16:
92:1e:1c:2f:bf:f7:09:b2:7a:10:01:c8:9d:44:13:32:7a:a3:
7f:9c:96:0a:35:fc:d1:88:ff:d3:73:ee:cc:c5:13:4a:fb:e8:
c3:c2:a2:d0:da:5f:b0:bf:85:3b:81:af:14:0d:e1:b8:c3:a7:
3d:da:dc:82:ec:dc:1d:52:47:a6:49:da:ef:5a:38:5f:bd:aa:
8b:cc:d3:81:20:19:17:f3:a2:42:1e:d8:d7:a3:47:6a:67:f4:
d4:bd:19:f8:7f:25:f8:8d:23:da:ec:2c:c2:e9:3d:49:6b:4e:
8c:70:af:7f:67:37:e7:c0:0e:6e:c3:62:7e:bf:ae:ba:c2:f4:
f8:eb:55:85:16:b6:8c:9b:f8:4b:f7:8d:23:08:ff:cd:a1:0f:
45:ab:40:fc:30:22:a7:e8:e5:71:0e:69:51:5c:12:97:16:f9:
ee:2a:68:9e:74:a2:e1:c3:b8:bf:2c:6f:a3:62:66:07:03:72:
0a:ce:2b:4b:03:af:c0:21:0b:a5:87:cf:b6:d0:c7:40:9b:6e:
7d:91:f1:fd:f2:22:57:7c:d3:b4:3f:32:48:6d:3c:c5:79:b5:
14:e8:1d:b0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICJxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB
RjE0ODkyNkMwHhcNMjYwNTA3MTAyMTIxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZjNjdhMS0yYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLk7Ph2veSCUjjVjBpmJ3lrtHsCOTT8KHlH3DEE6R7tdTjfxIOL/nJCRJ6w/
fgaRl6i4rkvIHcTKF1or4fDuZboziSYAwVNtT4Uw42Bh/0XNIQsJwOJ0ib16vpai
HLx9EKnAYTHs8gFm6tbsCwwCk54OjCNOzHldCMwznXcvbxo0eT/zZpVRJBXJglOq
8IfDdongJ7oKnd3yoPfQrB7jlodwBYcYlpo4+HUoiQujaXXeCsjiuFgCcU/ugW/X
ggOZCkeHjU3VDKwiywowmekR1u/AfjuHkQrLaSKkccwL7mt1IYmpN7pj2N0uhhDE
TAJTS9ByxDG2rnf0uEiu5STNUwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHtGnUfh
NEH4bD6Ubo1zY8MEgqtxMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx
NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvNEE0NzlCQjQ1
QTc5MTFFOTk4QTZCRTgwQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQDc0MIAwQAc0NkMA0EAgACMAcDBQEkBI0GMA0GCSqGSIb3DQEBCwUA
A4IBAQAiicgCDOS6rz/o/N62VgQkKKAReLyWoOwPIqOb1ZfheAgh8haSHhwvv/cJ
snoQAcidRBMyeqN/nJYKNfzRiP/Tc+7MxRNK++jDwqLQ2l+wv4U7ga8UDeG4w6c9
2tyC7NwdUkemSdrvWjhfvaqLzNOBIBkX86JCHtjXo0dqZ/TUvRn4fyX4jSPa7CzC
6T1Ja06McK9/ZzfnwA5uw2J+v666wvT461WFFraMm/hL940jCP/NoQ9Fq0D8MCKn
6OVxDmlRXBKXFvnuKmiedKLhw7i/LG+jYmYHA3IKzitLA6/AIQulh8+20MdAm259
kfH98iJXfNO0PzJIbTzFebUU6B2w
-----END CERTIFICATE-----
Generated at Wed May 13 16:12:24 2026 by rpki-client