Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/C9E1BA1286EF11F19E006003A7EE528E.roa
File: C9E1BA1286EF11F19E006003A7EE528E.roa (raw, json)
Hash identifier: dc09ktJ4CG2NLl6lNtb7dlIGYmHK51makFhrJVQebLE=
Subject key identifier: BB:D8:8C:6F:A4:D7:BA:0B:E5:89:1C:CC:0B:C8:D2:19:67:26:49:23
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 1FFB
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/C9E1BA1286EF11F19E006003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:39:47 +0000
ROA not before: Thu 23 Jul 2026 23:39:47 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134963
IP address blocks: 14.1.112.0/22 maxlen: 24
43.96.0.0/16 maxlen: 24
43.97.0.0/16 maxlen: 24
43.98.0.0/16 maxlen: 24
43.99.0.0/16 maxlen: 24
43.100.0.0/16 maxlen: 24
43.101.0.0/16 maxlen: 24
43.102.0.0/16 maxlen: 24
43.103.0.0/16 maxlen: 24
43.104.0.0/16 maxlen: 24
43.105.0.0/16 maxlen: 24
43.106.0.0/16 maxlen: 24
43.107.0.0/16 maxlen: 24
43.108.0.0/16 maxlen: 24
43.109.0.0/16 maxlen: 24
43.110.0.0/16 maxlen: 24
43.111.0.0/16 maxlen: 24
43.112.0.0/16 maxlen: 24
43.113.0.0/16 maxlen: 24
43.114.0.0/16 maxlen: 24
43.115.0.0/16 maxlen: 24
43.116.0.0/16 maxlen: 24
43.117.0.0/16 maxlen: 24
43.118.0.0/16 maxlen: 24
43.119.0.0/16 maxlen: 24
43.120.0.0/16 maxlen: 24
43.121.0.0/16 maxlen: 24
43.122.0.0/16 maxlen: 24
43.123.0.0/16 maxlen: 24
43.124.0.0/16 maxlen: 24
43.125.0.0/16 maxlen: 24
43.126.0.0/16 maxlen: 24
43.127.0.0/16 maxlen: 24
103.206.40.0/22 maxlen: 24
240b:4000::/32 maxlen: 48
240b:4001::/32 maxlen: 48
240b:4002::/32 maxlen: 48
240b:4003::/32 maxlen: 48
240b:4004::/32 maxlen: 48
240b:4005::/32 maxlen: 48
240b:4006::/32 maxlen: 48
240b:4007::/32 maxlen: 48
240b:4008::/32 maxlen: 48
240b:4009::/32 maxlen: 48
240b:400a::/32 maxlen: 48
240b:400b::/32 maxlen: 48
240b:400c::/32 maxlen: 48
240b:400d::/32 maxlen: 48
240b:400e::/32 maxlen: 48
240b:400f::/32 maxlen: 48
240b:4010::/32 maxlen: 48
240b:4011::/32 maxlen: 48
240b:4012::/32 maxlen: 48
240b:4013::/32 maxlen: 48
240b:4014::/32 maxlen: 48
240b:4015::/32 maxlen: 48
240b:4016::/32 maxlen: 48
240b:4017::/32 maxlen: 48
240b:4018::/32 maxlen: 48
240b:4019::/32 maxlen: 48
240b:401a::/32 maxlen: 48
240b:401b::/32 maxlen: 48
240b:401c::/32 maxlen: 48
240b:401d::/32 maxlen: 48
240b:401e::/32 maxlen: 48
240b:401f::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8187 (0x1ffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Jul 23 23:39:47 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a62a643-c3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:34:37:f1:53:dd:13:8b:5a:58:b0:e9:87:
5b:40:a3:46:88:d7:3c:e6:6f:19:74:34:e4:d9:ed:
23:09:db:97:0d:ad:4b:33:37:d0:b3:ad:86:f9:bb:
d7:d0:4f:96:b3:26:2a:23:68:a0:bb:b4:50:81:ba:
0b:5a:f1:d7:47:e4:78:05:46:d8:b5:37:9a:9d:d7:
1c:f5:b8:2b:9c:9c:47:a4:9e:1a:da:3e:b8:e4:3e:
52:2a:40:cc:80:8b:79:31:47:c3:12:d3:79:a8:d1:
39:b3:12:cc:9b:34:e0:41:4e:f2:dd:19:7a:7d:9a:
36:d9:aa:1a:aa:4a:63:1c:e9:0d:63:bd:d9:73:a9:
6b:b3:72:d5:5f:cf:62:8e:e7:e6:8e:b1:bd:f5:ac:
f9:75:9d:6f:41:4c:49:42:a0:25:c4:bb:04:f6:ec:
ff:09:a6:03:46:14:e2:3d:52:1a:82:06:92:30:71:
cf:56:20:b4:b5:29:ce:7a:02:05:9d:50:b1:98:6f:
56:d5:5d:cc:97:d9:f7:c6:51:58:d9:52:d9:25:6e:
47:a6:e6:75:29:67:47:52:dd:b6:39:ca:d5:45:19:
43:a2:6a:23:25:28:31:5d:43:4d:e9:23:85:09:b5:
6a:da:b9:c4:fa:d6:ba:ed:5b:52:52:8b:ed:82:02:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D8:8C:6F:A4:D7:BA:0B:E5:89:1C:CC:0B:C8:D2:19:67:26:49:23
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/C9E1BA1286EF11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
14.1.112.0/22
43.96.0.0/11
103.206.40.0/22
IPv6:
240b:4000::/27
Signature Algorithm: sha256WithRSAEncryption
03:cb:23:bf:e6:22:a0:bb:2c:cd:ff:2a:0c:47:82:b9:c9:89:
f2:ee:f7:54:39:b9:dc:53:0f:6b:e3:77:67:c9:0d:10:b4:7c:
56:92:a4:4d:36:86:59:53:66:99:bf:33:38:2b:b1:40:80:7c:
18:ff:f7:1d:72:22:58:34:e1:7a:5b:c2:6e:73:90:d0:54:26:
60:80:08:2d:3c:e6:2c:44:1e:4b:8d:8c:c9:be:ec:60:b7:1d:
29:e8:f4:d7:a2:e8:89:84:62:a7:98:4e:44:b3:f1:5d:94:fb:
41:c8:10:6b:2a:3b:c1:1c:f7:fa:51:82:58:99:3d:db:1f:d5:
7e:c2:3b:f2:eb:b7:04:07:a0:17:fe:b1:8e:6c:57:47:37:8b:
73:98:e3:72:49:7b:26:cf:60:81:6f:63:ee:27:d4:de:b3:67:
1d:d4:28:ba:57:cb:b2:d5:42:43:e9:73:dd:fa:93:89:2f:d6:
e6:4a:d0:0a:b2:bb:2d:5a:64:84:9b:6d:a8:80:2d:f3:90:5f:
4f:39:2f:e4:9c:eb:75:66:a1:90:8a:aa:57:89:95:6e:22:af:
a6:5c:ab:80:e7:2a:87:da:7d:27:a2:eb:65:57:79:a8:2b:f9:
76:64:2c:c4:fd:69:67:4a:7b:59:7b:65:9d:88:0d:81:f7:a9:
f1:0a:d9:00
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgICH/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG
QkNCQkQ4QkQwHhcNMjYwNzIzMjMzOTQ3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYyYTY0My1jM2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1pI0N/FT3ROLWliw6YdbQKNGiNc85m8ZdDTk2e0jCduXDa1LMzfQs62G+bvX
0E+WsyYqI2igu7RQgboLWvHXR+R4BUbYtTeandcc9bgrnJxHpJ4a2j645D5SKkDM
gIt5MUfDEtN5qNE5sxLMmzTgQU7y3Rl6fZo22aoaqkpjHOkNY73Zc6lrs3LVX89i
jufmjrG99az5dZ1vQUxJQqAlxLsE9uz/CaYDRhTiPVIaggaSMHHPViC0tSnOegIF
nVCxmG9W1V3Ml9n3xlFY2VLZJW5HpuZ1KWdHUt22OcrVRRlDomojJSgxXUNN6SOF
CbVq2rnE+ta67VtSUovtggKydQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFLvYjG+k
17oL5YkczAvI0hlnJkkjMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC
QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy
TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUExOTgvOTkzRjIwOTBBQkM0MTFFNkJENkJFRDE0QzRGOUFFMDIvQzlFMUJBMTI4
NkVGMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAX
BAIAATARAwQCDgFwAwMFK2ADBAJnzigwDQQCAAIwBwMFBSQLQAAwDQYJKoZIhvcN
AQELBQADggEBAAPLI7/mIqC7LM3/KgxHgrnJifLu91Q5udxTD2vjd2fJDRC0fFaS
pE02hllTZpm/MzgrsUCAfBj/9x1yIlg04Xpbwm5zkNBUJmCACC085ixEHkuNjMm+
7GC3HSno9Nei6ImEYqeYTkSz8V2U+0HIEGsqO8Ec9/pRgliZPdsf1X7CO/LrtwQH
oBf+sY5sV0c3i3OY43JJeybPYIFvY+4n1N6zZx3UKLpXy7LVQkPpc936k4kv1uZK
0Aqyuy1aZISbbaiALfOQX085L+Sc63VmoZCKqleJlW4ir6Zcq4DnKofafSei62VX
eagr+XZkLMT9aWdKe1l7ZZ2IDYH3qfEK2QA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:51:49 2026 by rpki-client