Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/2C1D5C20B72111F18B4963C26E11F970.roa
File: 2C1D5C20B72111F18B4963C26E11F970.roa (raw, json)
Hash identifier: VRA5l/Xn9kZOQ1GfocsO5d5J9XDxO2ZUWIDOnv9IQNY=
Subject key identifier: 60:27:93:BF:1E:51:9C:66:03:13:44:61:63:74:29:A6:A5:7E:32:A0
Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Certificate serial: 361F
Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/2C1D5C20B72111F18B4963C26E11F970.roa
Signing time: Wed 23 Sep 2026 07:34:13 +0000
ROA not before: Wed 23 Sep 2026 07:34:13 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 9329
IP address blocks: 112.134.0.0/15 maxlen: 15
112.134.0.0/19 maxlen: 24
112.134.32.0/19 maxlen: 20
112.134.32.0/20 maxlen: 24
112.134.48.0/21 maxlen: 24
112.134.64.0/19 maxlen: 24
112.134.96.0/19 maxlen: 24
112.134.128.0/19 maxlen: 24
112.134.160.0/19 maxlen: 24
112.134.192.0/19 maxlen: 24
112.134.224.0/19 maxlen: 24
112.135.0.0/19 maxlen: 24
112.135.32.0/19 maxlen: 24
112.135.64.0/19 maxlen: 24
112.135.96.0/19 maxlen: 24
112.135.128.0/19 maxlen: 24
112.135.160.0/19 maxlen: 24
112.135.192.0/19 maxlen: 24
112.135.224.0/19 maxlen: 24
119.235.4.0/24 maxlen: 24
119.235.5.0/24 maxlen: 24
119.235.6.0/24 maxlen: 24
119.235.7.0/24 maxlen: 24
119.235.8.0/24 maxlen: 24
119.235.9.0/24 maxlen: 24
119.235.10.0/24 maxlen: 24
119.235.12.0/24 maxlen: 24
124.43.0.0/16 maxlen: 16
124.43.0.0/17 maxlen: 17
124.43.0.0/19 maxlen: 24
124.43.32.0/19 maxlen: 24
124.43.64.0/18 maxlen: 18
124.43.64.0/19 maxlen: 24
124.43.96.0/19 maxlen: 24
124.43.128.0/17 maxlen: 17
124.43.128.0/18 maxlen: 18
124.43.128.0/19 maxlen: 24
124.43.160.0/19 maxlen: 24
124.43.192.0/19 maxlen: 24
124.43.224.0/19 maxlen: 24
203.81.99.0/24 maxlen: 24
203.81.100.0/24 maxlen: 24
203.81.101.0/24 maxlen: 24
203.81.102.0/24 maxlen: 24
203.94.64.0/18 maxlen: 18
203.94.64.0/24 maxlen: 24
203.94.65.0/24 maxlen: 24
203.94.66.0/24 maxlen: 24
203.94.67.0/24 maxlen: 24
203.94.69.0/24 maxlen: 24
203.94.70.0/24 maxlen: 24
203.94.71.0/24 maxlen: 24
203.94.72.0/24 maxlen: 24
203.94.74.0/24 maxlen: 24
203.94.76.0/24 maxlen: 24
203.94.84.0/24 maxlen: 24
203.94.86.0/24 maxlen: 24
203.94.89.0/24 maxlen: 24
203.94.93.0/24 maxlen: 24
203.94.95.0/24 maxlen: 24
203.115.0.0/18 maxlen: 18
203.115.0.0/24 maxlen: 24
203.115.2.0/24 maxlen: 24
203.115.4.0/24 maxlen: 24
203.115.6.0/24 maxlen: 24
203.115.7.0/24 maxlen: 24
203.115.9.0/24 maxlen: 24
203.115.11.0/24 maxlen: 24
203.115.12.0/24 maxlen: 24
203.115.13.0/24 maxlen: 24
203.115.15.0/24 maxlen: 24
203.115.16.0/24 maxlen: 24
203.115.18.0/24 maxlen: 24
203.115.19.0/24 maxlen: 24
203.115.20.0/24 maxlen: 24
203.115.21.0/24 maxlen: 24
203.115.24.0/24 maxlen: 24
203.115.27.0/24 maxlen: 24
203.115.28.0/24 maxlen: 24
203.115.31.0/24 maxlen: 24
220.247.192.0/18 maxlen: 24
222.165.128.0/18 maxlen: 24
2402:d000::/32 maxlen: 40
2402:d000:20::/48 maxlen: 48
2402:d000:21::/48 maxlen: 48
2402:d000:140::/48 maxlen: 48
2402:d000:141::/48 maxlen: 48
2402:d000:142::/48 maxlen: 48
2402:d000:100c::/48 maxlen: 48
2402:d000:1060::/48 maxlen: 48
2402:d000:1064::/48 maxlen: 48
2402:d000:1068::/48 maxlen: 48
2402:d000:106c::/48 maxlen: 48
2402:d000:1074::/48 maxlen: 48
2402:d000:1088::/48 maxlen: 48
2402:d000:7000::/48 maxlen: 48
2402:d000:8100::/48 maxlen: 48
2402:d000:8104::/48 maxlen: 48
2402:d000:8108::/48 maxlen: 48
2402:d000:810c::/48 maxlen: 48
2402:d000:8110::/48 maxlen: 48
2402:d000:8114::/48 maxlen: 48
2402:d000:8118::/48 maxlen: 48
2402:d000:811c::/48 maxlen: 48
2402:d000:8120::/48 maxlen: 48
2402:d000:8124::/48 maxlen: 48
2402:d000:8128::/48 maxlen: 48
2402:d000:812c::/48 maxlen: 48
2402:d000:8130::/48 maxlen: 48
2402:d000:8134::/48 maxlen: 48
2402:d000:8138::/48 maxlen: 48
2402:d000:813c::/48 maxlen: 48
2402:d000:8140::/48 maxlen: 48
2402:d000:8f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13855 (0x361f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Validity
Not Before: Sep 23 07:34:13 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6ab380f5-1cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:01:6f:2b:be:25:cb:48:f7:9c:b7:c5:c3:
b8:ab:5d:53:a6:f0:2d:d0:ed:b8:12:77:66:87:75:
cf:d3:58:fc:78:3b:a3:76:4d:40:93:e2:96:05:17:
53:87:38:cb:ae:21:b1:96:8d:28:29:2d:c8:9d:36:
b9:ae:37:5c:81:f2:0a:ed:a9:ca:35:b7:d1:4e:fa:
a4:2d:63:83:b0:9b:e8:2c:30:ff:30:e4:25:f2:46:
12:0c:90:bf:fd:df:22:25:bb:91:db:67:8c:d6:e3:
1e:44:89:3e:1a:36:e0:04:73:a6:09:ce:5c:70:e6:
63:40:4c:f8:0d:d7:4b:80:5e:e1:9a:62:ed:53:79:
2c:99:74:da:57:cc:51:ae:69:ce:67:e3:86:79:9a:
72:21:68:9d:c9:c5:ca:11:5e:fc:2e:47:67:ad:5e:
77:b6:5b:ab:63:75:8f:56:46:63:cf:52:4f:a4:95:
65:6d:69:26:a7:15:71:b0:27:9e:53:3e:3b:4f:0a:
c3:e0:22:ae:72:fc:33:1c:06:cc:50:71:67:60:35:
45:fb:83:22:7a:4b:70:5d:95:9f:12:6a:53:87:4d:
24:ff:1a:9f:15:99:e8:c6:e5:c8:a3:80:f9:8d:22:
ad:21:5d:dc:14:9e:78:ae:5d:49:1e:d1:e0:65:b3:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:27:93:BF:1E:51:9C:66:03:13:44:61:63:74:29:A6:A5:7E:32:A0
X509v3 Authority Key Identifier:
keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/2C1D5C20B72111F18B4963C26E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
112.134.0.0/15
119.235.4.0-119.235.10.255
119.235.12.0/24
124.43.0.0/16
203.81.99.0-203.81.102.255
203.94.64.0/18
203.115.0.0/18
220.247.192.0/18
222.165.128.0/18
IPv6:
2402:d000::/32
Signature Algorithm: sha256WithRSAEncryption
73:8e:df:30:b7:e4:7d:8b:b4:ef:1d:c7:27:e7:39:aa:38:06:
95:96:86:27:5c:e2:26:f8:93:b8:0c:93:33:56:83:84:fa:9d:
9d:28:6e:f3:2d:bc:83:21:ce:8a:1a:dc:8d:82:95:12:bb:58:
86:f7:f8:35:17:48:3e:2b:a9:79:39:07:ce:e6:00:1d:b3:38:
cb:9d:4a:3e:09:bb:3b:c1:3b:68:2b:e6:ae:db:c6:14:72:f3:
57:71:d6:c3:45:00:d4:12:d2:17:bd:15:75:a2:0b:c4:bb:b0:
0b:d3:a5:ec:cd:c2:d4:5f:3d:c2:34:f3:3f:69:9e:f0:a8:43:
59:61:91:37:8d:99:8f:50:9a:c6:16:b4:8b:54:8f:a5:b3:a1:
92:1c:b0:59:c7:e3:69:da:6a:5f:0c:97:c8:3c:61:3f:b1:ca:
41:70:94:12:24:8a:7f:46:7f:ca:c8:74:a6:ad:2c:2c:7b:c7:
04:30:dd:73:a9:f3:19:60:86:88:dc:c2:3c:d3:7f:21:a5:61:
23:36:6b:a6:9b:e0:ec:b4:ef:ca:b1:bf:ab:cf:f9:87:44:85:
e0:47:4f:4a:ac:01:b0:e5:31:79:b6:17:9b:4e:bd:fb:d2:8e:
2f:d9:8e:8b:c5:bd:25:71:a1:4f:c9:36:68:47:04:be:6a:b0:
53:5c:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:49:44 2026 by rpki-client