Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/F9B55ECA922111EAB5138581C4F9AE02.roa
File: F9B55ECA922111EAB5138581C4F9AE02.roa (raw, json)
Hash identifier: 7GjaEIbY9Tvs1toOOISZx4qlcR+eoOyi2E2xS4O0Vug=
Subject key identifier: 7B:14:57:96:93:CA:B4:D5:E8:AE:FF:76:01:C5:1D:0C:F1:E3:D7:87
Certificate issuer: /CN=A914C33A/serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Certificate serial: 1797
Authority key identifier: 54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/F9B55ECA922111EAB5138581C4F9AE02.roa
Signing time: Sat 10 Oct 2026 16:22:20 +0000
ROA not before: Sat 10 Oct 2026 16:22:20 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 7642
IP address blocks: 69.94.32.0/20 maxlen: 20
69.94.32.0/23 maxlen: 24
69.94.34.0/23 maxlen: 24
69.94.36.0/23 maxlen: 24
69.94.38.0/23 maxlen: 24
69.94.40.0/23 maxlen: 24
69.94.42.0/23 maxlen: 24
69.94.44.0/23 maxlen: 24
69.94.46.0/23 maxlen: 24
69.94.80.0/20 maxlen: 20
69.94.80.0/23 maxlen: 24
69.94.82.0/23 maxlen: 24
69.94.84.0/23 maxlen: 24
69.94.86.0/23 maxlen: 24
69.94.88.0/23 maxlen: 24
69.94.90.0/23 maxlen: 24
69.94.92.0/23 maxlen: 24
69.94.94.0/23 maxlen: 24
209.212.192.0/19 maxlen: 19
209.212.192.0/23 maxlen: 24
209.212.194.0/23 maxlen: 24
209.212.196.0/23 maxlen: 24
209.212.198.0/23 maxlen: 24
209.212.200.0/23 maxlen: 24
209.212.202.0/23 maxlen: 24
209.212.204.0/23 maxlen: 24
209.212.206.0/23 maxlen: 24
209.212.208.0/23 maxlen: 24
209.212.210.0/23 maxlen: 24
209.212.212.0/23 maxlen: 24
209.212.214.0/23 maxlen: 24
209.212.216.0/23 maxlen: 24
209.212.218.0/23 maxlen: 24
209.212.220.0/23 maxlen: 24
209.212.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 15:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6039 (0x1797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C33A, serialNumber=54411D9070E20C9FFCFFC414FD09320BF39AB6E8
Validity
Not Before: Oct 10 16:22:20 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aca663c-baf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2e:e8:dc:4c:76:12:6b:3d:1d:fc:25:7d:0c:
ba:6b:1e:c5:ca:e5:7a:37:80:e4:e2:ff:84:c8:c6:
39:73:b3:8a:c5:ab:3f:d0:04:5f:ff:d3:07:06:4a:
d5:1b:57:62:23:bd:08:7a:55:61:eb:e7:6a:db:bd:
1a:3e:38:8b:86:f8:ad:58:94:ca:e2:03:df:dd:e8:
77:bc:d4:37:33:ac:95:3d:e3:c3:3b:02:1d:36:00:
bb:9b:0f:e8:01:c1:61:49:80:a4:40:7e:fb:20:b1:
35:9f:88:eb:97:07:d3:b0:84:fc:3e:a2:09:db:ec:
94:c0:6b:40:9a:f9:e1:fd:e2:be:c3:06:77:9d:fe:
3f:bf:5e:3e:e0:8e:ab:ed:a2:aa:f1:84:89:26:f1:
ea:f4:02:e0:64:40:e9:05:4a:43:08:f6:89:41:36:
13:94:74:50:a4:f3:77:62:7b:52:48:66:88:20:6a:
1c:a3:ae:aa:c7:f4:89:45:d9:3e:b9:a2:2e:2e:f8:
a5:38:4a:3a:06:14:27:10:e3:7a:8c:76:82:80:bd:
c7:27:3f:60:50:06:8b:3c:8e:da:14:d1:b5:d4:f6:
ad:17:30:a0:69:7a:68:06:9c:aa:3e:ba:6f:12:00:
45:00:44:d9:b3:81:c7:0a:9d:ca:d1:ca:d1:0f:3f:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:14:57:96:93:CA:B4:D5:E8:AE:FF:76:01:C5:1D:0C:F1:E3:D7:87
X509v3 Authority Key Identifier:
keyid:54:41:1D:90:70:E2:0C:9F:FC:FF:C4:14:FD:09:32:0B:F3:9A:B6:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/VEEdkHDiDJ_8_8QU_QkyC_Oatug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VEEdkHDiDJ_8_8QU_QkyC_Oatug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/FEC77C9A073611E8AB7DCB4AC4F9AE02/F9B55ECA922111EAB5138581C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
69.94.32.0/20
69.94.80.0/20
209.212.192.0/19
Signature Algorithm: sha256WithRSAEncryption
60:56:73:b0:88:65:37:54:7c:ed:a4:dc:bf:3d:1a:57:a8:a1:
63:a3:44:8c:0d:24:4e:ba:4a:c4:08:88:55:8e:c4:87:48:00:
93:98:7e:e5:29:d9:eb:75:c0:ee:73:c6:cf:b3:74:9a:c1:b3:
9e:c0:ac:09:ce:6d:7f:f5:28:aa:f2:9f:b9:70:9f:b5:3a:2a:
c1:5c:ed:4d:51:b1:fe:44:05:23:1a:ff:52:10:c1:b1:47:f0:
b7:81:d5:19:13:47:57:b3:5a:14:08:ae:cc:e5:1d:2e:35:b7:
35:3d:5f:b7:c4:39:45:ad:4e:92:38:aa:37:ba:94:94:ad:04:
1e:ab:4c:c9:53:f0:5b:ed:df:ed:5c:40:c8:b5:b9:5c:d9:2e:
f9:13:10:a5:b2:6c:ec:c1:b7:bf:4f:00:99:ae:3d:31:17:f7:
64:a6:93:4c:cf:44:d1:90:6a:de:bb:e1:57:1b:f1:0e:33:2e:
a7:f9:f2:19:47:b3:20:39:8f:57:86:1d:1d:34:d8:22:83:1f:
b0:4d:07:50:cd:d2:8e:95:2c:63:52:f0:7f:f5:a5:c2:73:62:
b6:eb:54:61:a1:21:c3:45:54:10:d1:6c:ed:8e:c6:11:73:ea:
03:df:0b:3b:8b:56:f6:6f:bc:d8:e4:ee:e2:84:82:04:cb:ed:
c1:7f:22:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:49:53 2026 by rpki-client