Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CB0B87D886EF11F19E006003A7EE528E.roa
File: CB0B87D886EF11F19E006003A7EE528E.roa (raw, json)
Hash identifier: 01D0gNOrmeWfFnfKx9BZLWhsvfkWia8AUzDxIIpl65k=
Subject key identifier: 10:48:CA:F4:56:43:48:68:D6:C2:E8:D9:20:79:E7:BF:A4:9D:C2:24
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 1FFC
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CB0B87D886EF11F19E006003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:39:49 +0000
ROA not before: Thu 23 Jul 2026 23:39:49 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 37963
IP address blocks: 43.0.0.0/9 maxlen: 15
43.0.0.0/16 maxlen: 24
43.1.0.0/16 maxlen: 24
43.2.0.0/16 maxlen: 24
43.3.0.0/16 maxlen: 24
43.4.0.0/16 maxlen: 24
43.5.0.0/16 maxlen: 24
43.6.0.0/16 maxlen: 24
43.7.0.0/16 maxlen: 24
43.8.0.0/16 maxlen: 24
43.9.0.0/16 maxlen: 24
43.10.0.0/16 maxlen: 24
43.11.0.0/16 maxlen: 24
43.12.0.0/16 maxlen: 24
43.13.0.0/16 maxlen: 24
43.14.0.0/16 maxlen: 24
43.15.0.0/16 maxlen: 24
43.16.0.0/16 maxlen: 24
43.17.0.0/16 maxlen: 24
43.18.0.0/16 maxlen: 24
43.19.0.0/16 maxlen: 24
43.20.0.0/16 maxlen: 24
43.21.0.0/16 maxlen: 24
43.22.0.0/16 maxlen: 24
43.23.0.0/16 maxlen: 24
43.24.0.0/16 maxlen: 24
43.25.0.0/16 maxlen: 24
43.26.0.0/16 maxlen: 24
43.27.0.0/16 maxlen: 24
43.28.0.0/16 maxlen: 24
43.29.0.0/16 maxlen: 24
43.30.0.0/16 maxlen: 24
43.31.0.0/16 maxlen: 24
43.32.0.0/16 maxlen: 24
43.33.0.0/16 maxlen: 24
43.35.0.0/16 maxlen: 24
43.36.0.0/16 maxlen: 24
43.37.0.0/16 maxlen: 24
43.38.0.0/16 maxlen: 24
43.39.0.0/16 maxlen: 24
43.40.0.0/16 maxlen: 24
43.41.0.0/16 maxlen: 24
43.42.0.0/16 maxlen: 24
43.43.0.0/16 maxlen: 24
43.44.0.0/16 maxlen: 24
43.45.0.0/16 maxlen: 24
43.46.0.0/16 maxlen: 24
43.47.0.0/16 maxlen: 24
43.48.0.0/16 maxlen: 24
43.49.0.0/16 maxlen: 24
43.50.0.0/16 maxlen: 24
43.51.0.0/16 maxlen: 24
43.52.0.0/16 maxlen: 24
43.53.0.0/16 maxlen: 24
43.54.0.0/16 maxlen: 24
43.55.0.0/16 maxlen: 24
43.56.0.0/16 maxlen: 24
43.57.0.0/16 maxlen: 24
43.58.0.0/16 maxlen: 24
43.59.0.0/16 maxlen: 24
43.60.0.0/16 maxlen: 24
43.61.0.0/16 maxlen: 24
43.62.0.0/16 maxlen: 24
43.63.0.0/16 maxlen: 24
43.64.0.0/16 maxlen: 24
43.65.0.0/16 maxlen: 24
43.66.0.0/16 maxlen: 24
43.67.0.0/16 maxlen: 24
43.68.0.0/16 maxlen: 24
43.69.0.0/16 maxlen: 24
43.70.0.0/16 maxlen: 24
43.71.0.0/16 maxlen: 24
43.72.0.0/16 maxlen: 24
43.73.0.0/16 maxlen: 24
43.74.0.0/16 maxlen: 24
43.75.0.0/16 maxlen: 24
43.76.0.0/16 maxlen: 24
43.78.0.0/16 maxlen: 24
43.79.0.0/16 maxlen: 24
43.80.0.0/16 maxlen: 24
43.81.0.0/16 maxlen: 24
43.82.0.0/16 maxlen: 24
43.83.0.0/16 maxlen: 24
43.84.0.0/16 maxlen: 24
43.85.0.0/16 maxlen: 24
43.86.0.0/16 maxlen: 24
43.87.0.0/16 maxlen: 24
43.88.0.0/16 maxlen: 24
43.89.0.0/16 maxlen: 24
43.90.0.0/16 maxlen: 24
43.91.0.0/16 maxlen: 24
43.95.0.0/16 maxlen: 24
43.96.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8188 (0x1ffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Jul 23 23:39:49 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a62a645-7c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:94:10:64:93:4f:0a:b1:a6:5f:50:df:f2:
a9:e2:bf:ca:ed:29:1a:f4:7f:ab:d2:c6:e4:28:90:
fc:47:d4:e8:12:3c:96:e4:b1:31:f3:79:04:3f:7e:
2e:e4:1b:59:64:f3:1d:e2:b5:15:3f:7d:80:1d:30:
27:b7:29:5b:dd:78:6e:03:d0:17:96:36:2c:63:1b:
74:04:c6:cd:10:57:ae:41:68:71:77:0d:a7:54:6c:
f3:c9:e4:11:b1:79:c0:a5:2b:ff:ef:df:63:d0:fc:
b2:0d:53:d6:ee:74:ca:d0:d5:f0:8a:c6:1d:47:41:
be:07:67:d2:7d:e2:da:26:7e:38:0b:7d:51:a6:09:
0a:32:47:a3:7e:65:8c:52:f5:b2:56:87:34:41:4e:
2d:0f:34:1a:b5:c7:4f:8f:50:c7:df:68:52:41:45:
16:63:16:62:3c:ff:0a:8a:5d:a3:25:ac:f4:5a:58:
75:6a:8d:fa:8e:58:16:23:63:c0:17:6e:59:33:9e:
ba:55:31:d9:bb:65:71:96:36:a0:39:79:8e:6a:e9:
51:b2:2e:3d:80:18:41:30:b7:25:c7:1a:1c:97:7d:
cb:d4:c6:e1:91:0b:06:92:ea:cb:6d:fb:5b:d9:1a:
bf:fa:d6:f7:0a:7a:03:86:ac:59:6c:44:f9:12:14:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:CA:F4:56:43:48:68:D6:C2:E8:D9:20:79:E7:BF:A4:9D:C2:24
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CB0B87D886EF11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
43.0.0.0/9
Signature Algorithm: sha256WithRSAEncryption
5e:b0:f3:f1:f3:43:f1:3d:05:6f:16:30:e9:f6:6b:9c:6c:fb:
67:f8:9a:69:18:f8:06:5f:dd:3b:3a:1f:4a:25:8e:b4:03:da:
75:86:a7:8f:a7:0f:9c:07:7f:ed:1f:c1:23:0c:3a:4d:8d:45:
38:5e:00:b4:9a:4a:f6:db:07:8d:6d:a2:d9:84:ab:9f:de:bb:
cd:5e:d0:d9:1a:3b:79:0c:b2:61:92:d9:71:8b:38:f3:55:07:
7b:85:13:34:6e:25:94:2c:31:67:91:34:45:50:30:a3:b5:b0:
a5:22:e2:6d:4b:4b:39:be:f0:b7:93:08:eb:6f:e6:a2:7f:c4:
e1:f5:15:24:2e:2c:15:97:86:a1:58:09:ab:26:85:f2:c8:cd:
16:1c:9f:f6:ce:4e:ed:eb:08:4d:12:ae:31:db:f8:ae:a3:23:
50:c0:25:e8:ea:10:c9:01:7a:fb:f8:cc:2a:6d:3a:87:e7:ab:
6a:54:c5:b5:67:cb:9d:8e:cb:ab:a2:43:d8:a9:9b:d3:62:2a:
36:ce:85:2e:3f:65:e3:06:31:13:7e:cb:64:18:ab:e5:5d:2c:
f1:e5:43:38:eb:5b:5a:0f:ee:79:a4:76:2d:45:2d:53:2f:24:
27:7c:49:b1:0f:13:61:68:b1:a3:c1:95:d6:da:fc:81:0f:3e:
16:5d:a1:0c
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgICH/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG
QkNCQkQ4QkQwHhcNMjYwNzIzMjMzOTQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYyYTY0NS03YzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw7+UEGSTTwqxpl9Q3/Kp4r/K7Ska9H+r0sbkKJD8R9ToEjyW5LEx83kEP34u
5BtZZPMd4rUVP32AHTAntylb3XhuA9AXljYsYxt0BMbNEFeuQWhxdw2nVGzzyeQR
sXnApSv/799j0PyyDVPW7nTK0NXwisYdR0G+B2fSfeLaJn44C31RpgkKMkejfmWM
UvWyVoc0QU4tDzQatcdPj1DH32hSQUUWYxZiPP8Kil2jJaz0Wlh1ao36jlgWI2PA
F25ZM566VTHZu2VxljagOXmOaulRsi49gBhBMLclxxocl33L1MbhkQsGkurLbftb
2Rq/+tb3CnoDhqxZbET5EhT7GwIDAQABo4ICXzCCAlswHQYDVR0OBBYEFBBIyvRW
Q0ho1sLo2SB557+kncIkMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC
QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy
TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUExOTgvOTkzRjIwOTBBQkM0MTFFNkJENkJFRDE0QzRGOUFFMDIvQ0IwQjg3RDg4
NkVGMTFGMTlFMDA2MDAzQTdFRTUyOEUucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMHKwAwDQYJKoZIhvcNAQELBQADggEBAF6w8/HzQ/E9BW8WMOn2a5xs
+2f4mmkY+AZf3Ts6H0oljrQD2nWGp4+nD5wHf+0fwSMMOk2NRTheALSaSvbbB41t
otmEq5/eu81e0NkaO3kMsmGS2XGLOPNVB3uFEzRuJZQsMWeRNEVQMKO1sKUi4m1L
Szm+8LeTCOtv5qJ/xOH1FSQuLBWXhqFYCasmhfLIzRYcn/bOTu3rCE0SrjHb+K6j
I1DAJejqEMkBevv4zCptOofnq2pUxbVny52Oy6uiQ9ipm9NiKjbOhS4/ZeMGMRN+
y2QYq+VdLPHlQzjrW1oP7nmkdi1FLVMvJCd8SbEPE2FosaPBldba/IEPPhZdoQw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:04 2026 by rpki-client