Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/9C999FFA869711F1901843ED6DA30FBC.roa
File: 9C999FFA869711F1901843ED6DA30FBC.roa (raw, json)
Hash identifier: Bfc7qQz91ZN6GpvXixbjVqZmVwm0X+STvJTMfd8cwzI=
Subject key identifier: BC:09:E8:06:02:0C:81:96:5E:F0:C9:9F:B3:6A:F5:1B:A2:E5:C7:65
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 087A
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/9C999FFA869711F1901843ED6DA30FBC.roa
Signing time: Thu 23 Jul 2026 13:08:35 +0000
ROA not before: Thu 23 Jul 2026 13:08:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 45758
IP address blocks: 14.207.0.0/16 maxlen: 17
27.130.0.0/16 maxlen: 17
43.245.144.0/22 maxlen: 23
49.48.0.0/15 maxlen: 17
103.16.204.0/22 maxlen: 23
110.164.0.0/16 maxlen: 17
110.164.4.0/24 maxlen: 24
110.164.6.0/24 maxlen: 24
110.164.11.0/24 maxlen: 24
110.164.14.0/24 maxlen: 24
110.164.17.0/24 maxlen: 24
110.164.21.0/24 maxlen: 24
110.164.28.0/24 maxlen: 24
110.164.40.0/24 maxlen: 24
110.164.41.0/24 maxlen: 24
171.4.0.0/14 maxlen: 17
180.183.0.0/16 maxlen: 17
183.88.0.0/15 maxlen: 17
223.204.0.0/14 maxlen: 17
2403:6200::/32 maxlen: 33
2403:6200:8810::/44 maxlen: 44
2403:6200:8820::/44 maxlen: 44
2403:6200:8830::/44 maxlen: 44
2403:6200:8840::/44 maxlen: 44
2403:6200:8850::/44 maxlen: 44
2403:6200:8860::/44 maxlen: 44
2403:6200:8870::/44 maxlen: 44
2403:6200:8880::/44 maxlen: 44
2403:6200:8890::/44 maxlen: 44
2403:6200:88a0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 13:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2170 (0x87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Jul 23 13:08:35 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a621253-587e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:03:78:b7:b5:84:d5:36:05:ea:c7:f3:27:
d9:5e:1e:f9:ab:bd:98:e2:b0:11:3d:eb:f5:86:6a:
08:0f:93:bf:f8:63:d9:00:dc:01:27:d0:46:8e:61:
38:09:7b:87:fa:0f:86:0d:18:b9:cf:08:36:6d:a3:
27:82:73:7b:4a:7b:87:cb:4f:fa:4a:39:9d:7c:1b:
57:db:e3:d4:95:2d:6f:94:af:82:06:53:26:e9:3a:
22:58:90:8c:97:f6:78:2a:b6:48:c7:3e:37:cd:b8:
b5:15:f5:f8:1c:88:b7:e4:8d:c0:30:68:17:52:0c:
d8:e8:a3:8a:f6:a0:8e:b5:d5:92:52:ce:7c:41:a4:
e2:9a:4b:06:f1:57:80:56:7e:c1:77:9b:e6:ab:1a:
b0:28:3a:6a:a3:00:53:85:7f:08:13:22:86:01:34:
28:a9:10:94:25:c8:18:a1:70:65:03:66:db:16:18:
3a:93:52:97:a7:2a:e5:5b:ed:0c:d0:1f:d8:a7:3c:
ac:27:18:87:9f:e5:59:c5:36:af:56:82:68:9d:c7:
b9:31:67:f3:8c:63:ab:b4:7b:38:07:e8:12:f1:bb:
0c:b7:ee:f8:8b:01:2d:ab:1c:ae:22:00:d1:91:93:
33:0a:40:0c:42:1c:41:d1:ae:a5:6e:13:9a:e7:9f:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:09:E8:06:02:0C:81:96:5E:F0:C9:9F:B3:6A:F5:1B:A2:E5:C7:65
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/9C999FFA869711F1901843ED6DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
14.207.0.0/16
27.130.0.0/16
43.245.144.0/22
49.48.0.0/15
103.16.204.0/22
110.164.0.0/16
171.4.0.0/14
180.183.0.0/16
183.88.0.0/15
223.204.0.0/14
IPv6:
2403:6200::/32
Signature Algorithm: sha256WithRSAEncryption
95:7d:66:d4:12:9c:58:69:62:af:d7:b9:ba:c5:bc:2d:f4:ae:
4a:a4:40:4c:f3:52:6a:47:96:c4:52:4b:7f:28:b7:88:44:b8:
93:dd:1f:ba:d8:25:4d:4f:02:83:37:74:33:31:0e:53:dd:47:
94:03:8d:dc:d9:ae:d2:10:23:d9:0e:7a:6e:3a:7c:e6:47:7a:
b7:41:5b:08:ca:83:6b:b9:f4:9f:32:89:fe:cd:30:df:42:f5:
61:9b:c3:da:e8:69:bd:2f:ec:fb:d1:82:fd:8a:03:3c:4d:94:
53:86:fe:c6:9a:0f:04:c8:db:fc:cd:13:0c:28:de:f6:9a:e2:
a0:9a:07:eb:07:b1:bc:19:3c:82:4f:93:aa:da:fe:fe:91:b6:
4d:a0:e6:df:3a:ce:db:08:0d:ff:90:34:56:2d:27:56:1e:43:
29:75:2a:30:a7:e0:91:9a:6c:10:5d:5e:d3:a2:6c:00:c1:23:
df:da:5b:47:bc:1d:6a:34:f6:15:1e:cb:8c:78:6c:3e:06:d4:
bd:04:a1:9d:79:07:8a:71:ce:5d:3c:a4:ee:72:dc:d8:bb:47:
45:9b:83:50:9e:dd:f3:d5:e5:87:4d:6f:c0:75:b2:b5:f2:68:
3b:a7:66:42:af:61:25:2f:14:d3:62:33:c1:dc:ff:d4:f1:38:
7b:e1:b1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:01 2026 by rpki-client