Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7EBCB52A736A11F1BCC391F164A30FBC.roa
File: 7EBCB52A736A11F1BCC391F164A30FBC.roa (raw, json)
Hash identifier: ArJNKUKtjEheTRxeZ/nKb91dyZwB0to2iDZqg/D1WDs=
Subject key identifier: EE:09:AE:2A:23:BB:DC:75:F1:71:43:DC:E4:1C:38:EA:D7:F4:04:96
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 3971
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7EBCB52A736A11F1BCC391F164A30FBC.roa
Signing time: Tue 30 Jun 2026 15:11:10 +0000
ROA not before: Tue 30 Jun 2026 15:11:10 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 19905
IP address blocks: 14.100.0.0/17 maxlen: 24
42.60.0.0/16 maxlen: 24
42.61.0.0/16 maxlen: 24
58.185.0.0/16 maxlen: 24
115.42.128.0/17 maxlen: 24
115.66.0.0/16 maxlen: 24
116.12.128.0/17 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 24
116.15.0.0/16 maxlen: 24
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.128.0/18 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.199.0/24 maxlen: 24
118.201.204.0/24 maxlen: 24
118.201.205.0/24 maxlen: 24
118.201.206.0/24 maxlen: 24
118.201.209.0/24 maxlen: 24
118.201.214.0/24 maxlen: 24
118.201.215.0/24 maxlen: 24
118.201.218.0/24 maxlen: 24
118.201.219.0/24 maxlen: 24
119.73.128.0/17 maxlen: 24
119.74.0.0/16 maxlen: 24
119.75.0.0/18 maxlen: 24
121.6.0.0/16 maxlen: 24
124.66.128.0/19 maxlen: 24
180.255.0.0/17 maxlen: 17
180.255.0.0/18 maxlen: 24
180.255.64.0/18 maxlen: 24
203.124.0.0/22 maxlen: 24
203.125.0.0/16 maxlen: 24
203.126.0.0/16 maxlen: 24
203.127.0.0/16 maxlen: 24
203.169.64.0/18 maxlen: 24
219.74.0.0/16 maxlen: 24
219.75.0.0/17 maxlen: 24
220.255.0.0/17 maxlen: 24
220.255.128.0/17 maxlen: 24
2001:c20::/48 maxlen: 48
2001:c20:18::/48 maxlen: 48
2001:c20:30::/48 maxlen: 48
2001:c20:38::/48 maxlen: 48
2001:c20:100::/48 maxlen: 48
2001:c20:101::/48 maxlen: 48
2001:c20:103::/48 maxlen: 48
2001:c20:108::/48 maxlen: 48
2001:c20:110::/48 maxlen: 48
2001:c20:111::/48 maxlen: 48
2001:c20:121::/48 maxlen: 48
2001:c20:400::/48 maxlen: 48
2001:c20:405::/48 maxlen: 48
2001:c20:1800::/48 maxlen: 48
2001:c20:2010::/48 maxlen: 48
2001:c20:2011::/48 maxlen: 48
2001:c20:2800::/48 maxlen: 48
2001:c20:3800::/48 maxlen: 48
2001:c20:4800::/48 maxlen: 48
2001:c20:4882::/48 maxlen: 48
2001:c20:4c00::/48 maxlen: 48
2001:c20:7000::/48 maxlen: 48
2001:c20:7004::/48 maxlen: 48
2001:c20:7006::/48 maxlen: 48
2001:c20:7800::/48 maxlen: 48
2001:c20:7807::/48 maxlen: 48
2001:c20:8400::/48 maxlen: 48
2001:c20:8c00::/48 maxlen: 48
2001:c20:a800::/48 maxlen: 48
2001:c20:b000::/48 maxlen: 48
2001:c20:b404::/48 maxlen: 48
2001:c20:c801::/48 maxlen: 48
2001:c20:c818::/48 maxlen: 48
2001:c20:c830::/48 maxlen: 48
2001:c20:c836::/48 maxlen: 48
2001:c20:c837::/48 maxlen: 48
2001:c20:c847::/48 maxlen: 48
2001:c20:c849::/48 maxlen: 48
2001:c20:d800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14705 (0x3971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Jun 30 15:11:10 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a43dc8e-006d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c7:98:70:49:0a:95:2f:5b:2a:43:3e:8a:9f:
3b:25:49:2d:9d:3c:14:22:0d:6e:f0:06:36:7e:9b:
16:89:63:c0:56:ca:09:98:2f:23:12:cd:2a:70:49:
c6:6e:6c:83:8b:27:d6:1d:5f:f9:2c:02:31:28:6e:
c4:85:58:1c:9d:7a:f7:e3:46:82:ea:d4:26:0e:d8:
fb:df:cd:59:b0:f0:1b:5f:15:f6:b9:d5:be:40:71:
cb:b4:07:9a:21:8f:2a:03:02:56:7b:c6:42:f7:55:
25:ad:ef:13:54:ab:d6:75:92:c1:f8:12:33:e4:bb:
35:21:33:a0:8a:43:15:71:b4:56:d8:43:d2:3f:a1:
12:19:90:d7:30:aa:25:82:6d:1d:05:6d:07:1d:86:
e4:b1:0a:ea:f0:2d:1e:ef:21:9e:8b:ce:43:c9:35:
17:c0:f9:4f:1b:e4:e6:b4:85:dd:32:f1:67:2e:e5:
23:cc:cf:5f:ed:9f:36:85:1b:cf:9e:56:cb:ce:84:
54:4b:c0:4d:6e:41:89:13:d8:e0:63:7b:6e:46:0d:
fd:4f:c1:6e:56:c6:46:e7:f3:aa:82:50:bd:ec:bc:
e7:a0:03:80:ff:b6:f6:1c:b6:f0:68:34:6a:20:8b:
b1:56:d7:de:82:e7:de:06:0f:76:a4:b2:98:2d:50:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:09:AE:2A:23:BB:DC:75:F1:71:43:DC:E4:1C:38:EA:D7:F4:04:96
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7EBCB52A736A11F1BCC391F164A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/15
58.185.0.0/16
115.42.128.0/17
115.66.0.0/16
116.12.128.0/17
116.14.0.0/15
118.200.0.0/15
119.73.128.0-119.75.63.255
121.6.0.0/16
124.66.128.0/19
180.255.0.0/17
203.124.0.0/22
203.125.0.0-203.127.255.255
203.169.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/16
IPv6:
2001:c20::/48
2001:c20:18::/48
2001:c20:30::/48
2001:c20:38::/48
2001:c20:100::/47
2001:c20:103::/48
2001:c20:108::/48
2001:c20:110::/47
2001:c20:121::/48
2001:c20:400::/48
2001:c20:405::/48
2001:c20:1800::/48
2001:c20:2010::/47
2001:c20:2800::/48
2001:c20:3800::/48
2001:c20:4800::/48
2001:c20:4882::/48
2001:c20:4c00::/48
2001:c20:7000::/48
2001:c20:7004::/48
2001:c20:7006::/48
2001:c20:7800::/48
2001:c20:7807::/48
2001:c20:8400::/48
2001:c20:8c00::/48
2001:c20:a800::/48
2001:c20:b000::/48
2001:c20:b404::/48
2001:c20:c801::/48
2001:c20:c818::/48
2001:c20:c830::/48
2001:c20:c836::/47
2001:c20:c847::/48
2001:c20:c849::/48
2001:c20:d800::/48
Signature Algorithm: sha256WithRSAEncryption
8c:93:a2:99:3b:6b:e4:e0:b5:ce:85:74:b9:a7:8e:22:ca:a4:
f7:6b:0f:eb:b9:db:0f:4b:3d:07:80:fb:e4:fc:24:58:ec:6a:
85:73:c4:1d:60:9d:1f:64:36:97:62:19:1a:75:19:4e:91:25:
b1:33:c0:1d:bd:76:09:11:e4:9e:27:a4:e2:5a:3a:46:44:0a:
c8:4e:0f:0f:b8:43:3e:97:13:b8:dc:86:61:48:71:9d:46:a3:
45:8f:84:9e:90:1d:37:70:c5:00:90:87:38:3d:31:bc:a6:b0:
f6:eb:61:e9:c2:e1:5b:36:b0:dd:4b:88:fa:3b:0b:86:35:2f:
ad:17:6e:c4:8a:f5:4d:ca:29:a6:de:0d:53:3d:08:77:2a:60:
7b:b8:18:fd:0a:b2:e7:90:c8:62:b0:b8:bd:e2:c2:30:3d:fc:
69:97:97:ca:4c:6a:4c:d8:b0:2b:a9:a3:45:f7:84:51:d9:b2:
8e:97:d0:bb:8c:d3:1f:3f:59:c8:31:5a:6f:a8:f9:70:39:d1:
af:65:df:0b:0c:12:c5:2a:77:ed:af:4e:47:76:61:f8:5d:0a:
da:ae:d5:7a:79:f2:05:57:a5:ff:4d:fb:b9:1e:81:7c:8b:30:
b1:e0:52:5f:6b:de:96:53:30:b0:af:c0:d4:ed:86:b6:a4:cb:
02:a1:df:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:39 2026 by rpki-client