Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/B6D9896CD51111F0AE06421FC4F9AE02.roa
File: B6D9896CD51111F0AE06421FC4F9AE02.roa (raw, json)
Hash identifier: OGWHocd14Ns6wl/8wGXYe1FqfJqjBsfhEzPPdCk/dFo=
Subject key identifier: 79:23:A4:BC:88:3A:9C:01:E9:3B:48:7B:8D:30:0A:A1:8D:57:8D:AF
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 1FE4
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/B6D9896CD51111F0AE06421FC4F9AE02.roa
Signing time: Tue 16 Jun 2026 09:02:58 +0000
ROA not before: Tue 16 Jun 2026 09:02:58 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45102
IP address blocks: 14.1.112.0/22 maxlen: 24
43.0.0.0/9 maxlen: 15
43.91.0.0/16 maxlen: 24
43.96.0.0/16 maxlen: 24
43.97.0.0/16 maxlen: 24
43.98.0.0/16 maxlen: 24
43.99.0.0/16 maxlen: 24
43.100.0.0/16 maxlen: 24
43.101.0.0/16 maxlen: 24
43.102.0.0/16 maxlen: 24
43.103.0.0/16 maxlen: 24
43.104.0.0/16 maxlen: 24
43.105.0.0/16 maxlen: 24
43.106.0.0/16 maxlen: 24
43.107.0.0/16 maxlen: 16
43.107.0.0/16 maxlen: 24
43.108.0.0/16 maxlen: 24
43.109.0.0/16 maxlen: 24
43.110.0.0/16 maxlen: 24
43.111.0.0/16 maxlen: 16
43.111.0.0/16 maxlen: 24
43.112.0.0/16 maxlen: 16
43.112.0.0/16 maxlen: 24
43.113.0.0/16 maxlen: 24
43.114.0.0/16 maxlen: 24
43.115.0.0/16 maxlen: 24
43.116.0.0/16 maxlen: 24
43.117.0.0/16 maxlen: 24
43.118.0.0/16 maxlen: 24
43.119.0.0/16 maxlen: 24
43.120.0.0/16 maxlen: 24
43.121.0.0/16 maxlen: 24
43.122.0.0/16 maxlen: 24
43.123.0.0/16 maxlen: 24
43.124.0.0/16 maxlen: 24
43.125.0.0/16 maxlen: 24
43.126.0.0/16 maxlen: 24
43.127.0.0/16 maxlen: 24
103.206.40.0/22 maxlen: 24
2404:2280::/32 maxlen: 48
240b:4000::/22 maxlen: 31
240b:4000::/32 maxlen: 48
240b:4001::/32 maxlen: 40
240b:4002::/32 maxlen: 48
240b:4003::/32 maxlen: 48
240b:4004::/32 maxlen: 48
240b:4005::/32 maxlen: 48
240b:4006::/32 maxlen: 48
240b:4007::/32 maxlen: 48
240b:4008::/32 maxlen: 48
240b:4009::/32 maxlen: 48
240b:400a::/32 maxlen: 48
240b:400b::/32 maxlen: 48
240b:400c::/32 maxlen: 48
240b:400d::/32 maxlen: 48
240b:400e::/32 maxlen: 48
240b:400f::/32 maxlen: 48
240b:4010::/32 maxlen: 48
240b:4011::/32 maxlen: 48
240b:4012::/32 maxlen: 48
240b:4013::/32 maxlen: 48
240b:4014::/32 maxlen: 48
240b:4015::/32 maxlen: 48
240b:4016::/32 maxlen: 48
240b:4017::/32 maxlen: 48
240b:4018::/32 maxlen: 48
240b:4019::/32 maxlen: 48
240b:401a::/32 maxlen: 48
240b:401b::/32 maxlen: 48
240b:401c::/32 maxlen: 48
240b:401d::/32 maxlen: 48
240b:401e::/32 maxlen: 48
240b:401f::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:09:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8164 (0x1fe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Jun 16 09:02:58 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a311142-b51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:66:a6:41:58:f6:84:9b:d4:47:66:d8:e5:
d0:b8:56:1e:12:00:ba:3a:38:90:38:bc:42:7e:2d:
8d:34:e3:26:66:ca:4d:67:d8:4a:9d:01:e6:0e:e5:
67:e7:a1:f7:f2:3b:57:0d:11:41:df:1d:ae:5f:81:
c7:f2:99:fc:f1:39:60:36:5e:80:f5:ea:65:de:5b:
a2:05:e6:67:93:94:0b:1b:3a:bc:66:f4:b5:01:12:
70:76:9e:4e:80:0e:48:f0:f8:a8:23:72:7a:17:97:
bf:60:af:69:87:0c:c8:f8:d7:e9:d1:59:9d:e5:5e:
f8:ed:31:b3:94:a7:82:bd:57:0c:6c:2b:6b:d2:9c:
a4:8a:6a:fb:bf:c0:bb:6f:95:4a:21:31:15:ea:23:
ec:af:cc:4a:ca:d9:77:d9:27:8a:e3:ac:d3:0c:bd:
08:9e:0c:83:cb:b6:e5:ee:ea:ad:1f:90:0e:15:f9:
27:c9:b8:6f:9a:db:8d:da:42:7b:6e:95:14:7a:e7:
b2:f1:b8:33:e2:e9:89:3a:b5:07:4c:3a:2b:b5:74:
9e:e8:2c:4c:97:d1:ff:bb:3b:24:bb:a8:c0:31:35:
df:d2:82:a3:92:b9:0e:40:b3:1a:ba:4d:66:e9:25:
dc:f1:2b:23:e4:9b:26:73:f7:1f:84:19:a9:23:8b:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:23:A4:BC:88:3A:9C:01:E9:3B:48:7B:8D:30:0A:A1:8D:57:8D:AF
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/B6D9896CD51111F0AE06421FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.1.112.0/22
43.0.0.0/9
103.206.40.0/22
IPv6:
2404:2280::/32
240b:4000::/22
Signature Algorithm: sha256WithRSAEncryption
59:89:db:ca:d0:88:39:fb:af:c6:4f:2d:54:54:b8:28:84:10:
82:6f:54:9b:da:87:5d:5e:e6:e8:5e:f0:98:31:09:36:96:8a:
1f:ae:21:35:1f:e3:a8:d2:ab:ff:41:d8:1b:5e:3d:e9:02:bc:
58:31:3c:5d:ef:bf:29:29:47:c7:e5:37:95:bb:c4:f6:46:81:
20:d1:84:38:3a:e8:ba:73:7c:ee:2e:64:05:c3:c3:69:55:51:
57:5e:84:dc:b3:60:47:c2:b6:4d:26:7a:c2:2d:47:ae:c1:66:
1f:9d:8f:a4:41:11:75:33:5b:96:25:90:4a:5d:be:9f:0a:76:
e6:f9:05:6f:16:a1:55:36:f1:92:89:a4:a5:0c:c2:07:f9:04:
ea:ad:f1:cc:ec:43:31:cf:1b:45:80:41:ab:02:84:3d:43:d2:
49:a2:c2:be:7f:e9:33:16:73:00:05:ad:44:d5:64:76:f1:5b:
ba:4f:a9:95:46:7f:8b:e1:b7:ce:c3:53:1f:e7:49:36:24:97:
6c:84:51:63:8e:28:0a:b4:73:1b:ec:07:ed:7c:2b:c2:22:b6:
87:da:ea:97:5a:63:40:0e:70:53:83:66:a0:f1:f8:4f:09:77:
62:38:0b:da:38:88:de:43:77:21:a1:d6:f7:bf:79:0d:67:85:
84:0e:a7:29
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgICH+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG
QkNCQkQ4QkQwHhcNMjYwNjE2MDkwMjU4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTMxMTE0Mi1iNTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsiFmpkFY9oSb1Edm2OXQuFYeEgC6OjiQOLxCfi2NNOMmZspNZ9hKnQHmDuVn
56H38jtXDRFB3x2uX4HH8pn88TlgNl6A9epl3luiBeZnk5QLGzq8ZvS1ARJwdp5O
gA5I8PioI3J6F5e/YK9phwzI+Nfp0Vmd5V747TGzlKeCvVcMbCtr0pykimr7v8C7
b5VKITEV6iPsr8xKytl32SeK46zTDL0IngyDy7bl7uqtH5AOFfknybhvmtuN2kJ7
bpUUeuey8bgz4umJOrUHTDortXSe6CxMl9H/uzsku6jAMTXf0oKjkrkOQLMauk1m
6SXc8Ssj5Jsmc/cfhBmpI4uizwIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFHkjpLyI
OpwB6TtIe40wCqGNV42vMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC
QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy
TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUExOTgvOTkzRjIwOTBBQkM0MTFFNkJENkJFRDE0QzRGOUFFMDIvQjZEOTg5NkNE
NTExMTFGMEFFMDY0MjFGQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAX
BAIAATARAwQCDgFwAwMHKwADBAJnzigwEwQCAAIwDQMFACQEIoADBAIkC0AwDQYJ
KoZIhvcNAQELBQADggEBAFmJ28rQiDn7r8ZPLVRUuCiEEIJvVJvah11e5uhe8Jgx
CTaWih+uITUf46jSq/9B2BtePekCvFgxPF3vvykpR8flN5W7xPZGgSDRhDg66Lpz
fO4uZAXDw2lVUVdehNyzYEfCtk0mesItR67BZh+dj6RBEXUzW5YlkEpdvp8Kdub5
BW8WoVU28ZKJpKUMwgf5BOqt8czsQzHPG0WAQasChD1D0kmiwr5/6TMWcwAFrUTV
ZHbxW7pPqZVGf4vht87DUx/nSTYkl2yEUWOOKAq0cxvsB+18K8Iitofa6pdaY0AO
cFODZqDx+E8Jd2I4C9o4iN5DdyGh1ve/eQ1nhYQOpyk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:45 2026 by rpki-client