Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7FCBE10C736A11F1BCC391F164A30FBC.roa
File: 7FCBE10C736A11F1BCC391F164A30FBC.roa (raw, json)
Hash identifier: yTJYnyOP6DIvjNOe5mdB9aHOlZdn8YeC0hnTwrh4YrI=
Subject key identifier: 72:A8:59:B6:0D:13:25:BF:38:03:1E:87:5B:86:E5:B5:85:0E:E8:1B
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 3973
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7FCBE10C736A11F1BCC391F164A30FBC.roa
Signing time: Tue 30 Jun 2026 15:11:15 +0000
ROA not before: Tue 30 Jun 2026 15:11:14 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 3758
IP address blocks: 14.100.0.0/17 maxlen: 24
42.60.0.0/16 maxlen: 24
42.61.0.0/16 maxlen: 24
58.185.0.0/16 maxlen: 24
101.78.64.0/18 maxlen: 24
115.42.128.0/17 maxlen: 24
115.66.0.0/16 maxlen: 24
116.12.128.0/17 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 24
116.15.0.0/16 maxlen: 24
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.128.0/18 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.192.0/19 maxlen: 24
118.201.224.0/19 maxlen: 24
119.73.128.0/17 maxlen: 24
119.74.0.0/16 maxlen: 24
119.75.0.0/18 maxlen: 24
119.234.128.0/18 maxlen: 24
119.234.192.0/19 maxlen: 19
121.6.0.0/16 maxlen: 24
121.7.0.0/16 maxlen: 24
124.66.128.0/19 maxlen: 19
124.66.133.0/24 maxlen: 24
124.66.150.0/24 maxlen: 24
124.66.156.0/24 maxlen: 24
124.66.157.0/24 maxlen: 24
124.66.158.0/24 maxlen: 24
124.66.159.0/24 maxlen: 24
180.255.0.0/17 maxlen: 17
180.255.0.0/18 maxlen: 24
180.255.64.0/18 maxlen: 24
203.124.0.0/22 maxlen: 24
203.125.0.0/16 maxlen: 24
203.126.0.0/16 maxlen: 24
203.127.0.0/16 maxlen: 24
203.169.64.0/18 maxlen: 24
219.74.0.0/16 maxlen: 24
219.75.0.0/17 maxlen: 24
220.255.0.0/17 maxlen: 24
220.255.128.0/17 maxlen: 24
2001:c20::/32 maxlen: 32
2001:c20::/38 maxlen: 38
2001:c20:10::/48 maxlen: 48
2001:c20:18::/48 maxlen: 48
2001:c20:400::/38 maxlen: 38
2001:c20:401::/48 maxlen: 48
2001:c20:403::/48 maxlen: 48
2001:c20:801::/48 maxlen: 48
2001:c20:2006::/48 maxlen: 48
2001:c20:2007::/48 maxlen: 48
2001:c20:2010::/48 maxlen: 48
2001:c20:3001::/48 maxlen: 48
2001:c20:3c00::/38 maxlen: 38
2001:c20:4800::/38 maxlen: 38
2001:c20:4805::/48 maxlen: 48
2001:c20:48ba::/48 maxlen: 48
2001:c20:48da::/48 maxlen: 48
2001:c20:48fe::/48 maxlen: 48
2001:c20:4c00::/38 maxlen: 38
2001:c20:5000::/38 maxlen: 38
2001:c20:5008::/48 maxlen: 48
2001:c20:6c00::/38 maxlen: 38
2001:c20:7009::/48 maxlen: 48
2001:c20:7800::/38 maxlen: 38
2001:c20:7804::/48 maxlen: 48
2001:c20:7806::/48 maxlen: 48
2001:c20:7807::/48 maxlen: 48
2001:c20:8400::/38 maxlen: 38
2001:c20:8405::/48 maxlen: 48
2001:c20:8406::/48 maxlen: 48
2001:c20:8407::/48 maxlen: 48
2001:c20:8408::/48 maxlen: 48
2001:c20:8409::/48 maxlen: 48
2001:c20:a005::/48 maxlen: 48
2001:c20:b005::/48 maxlen: 48
2001:c20:c814::/48 maxlen: 48
2001:c20:c818::/48 maxlen: 48
2001:c20:d004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14707 (0x3973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Jun 30 15:11:14 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a43dc92-57e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:54:d6:9a:cb:b4:cf:8c:9f:b9:43:af:cf:
c9:fd:29:c4:31:6c:b2:5a:f7:85:52:73:13:88:e2:
c4:1a:5a:e7:a3:1e:38:9e:07:92:4d:0d:6e:4e:19:
dd:55:0b:ae:0d:3b:52:ed:db:c1:45:86:7b:2e:52:
2c:53:81:5a:53:56:20:91:b1:4d:8c:9f:7a:89:af:
8a:30:fd:da:84:7b:12:e0:fe:49:01:35:76:17:c3:
0d:70:3c:70:8c:ae:a1:0f:72:72:60:27:6b:9b:e0:
77:3a:0c:52:63:be:e0:27:7e:82:d4:43:00:ad:c5:
8e:69:79:d3:68:32:15:f4:a0:49:ed:ca:e9:85:4f:
4d:ed:41:0b:bf:f2:c8:71:50:d8:05:7f:23:8f:cc:
28:8b:13:c1:12:82:9f:0b:4b:1d:4f:59:a3:ce:31:
d7:98:3f:94:ba:b3:eb:5b:de:38:fe:c1:a4:ed:4c:
65:22:9e:b1:4e:d3:d6:a5:08:b4:51:9c:0a:09:9f:
d1:fa:23:9f:8d:3d:6f:f4:3f:0d:40:e5:51:c1:7e:
00:42:3c:36:e2:ca:61:01:3d:60:a2:7d:f3:91:61:
c7:be:46:87:53:b9:2d:34:fc:ee:d3:8c:27:14:ad:
4f:e2:07:31:49:d0:a7:4b:0f:d8:e4:99:bf:21:66:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A8:59:B6:0D:13:25:BF:38:03:1E:87:5B:86:E5:B5:85:0E:E8:1B
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7FCBE10C736A11F1BCC391F164A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/15
58.185.0.0/16
101.78.64.0/18
115.42.128.0/17
115.66.0.0/16
116.12.128.0/17
116.14.0.0/15
118.200.0.0/15
119.73.128.0-119.75.63.255
119.234.128.0-119.234.223.255
121.6.0.0/15
124.66.128.0/19
180.255.0.0/17
203.124.0.0/22
203.125.0.0-203.127.255.255
203.169.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/16
IPv6:
2001:c20::/32
Signature Algorithm: sha256WithRSAEncryption
27:1b:17:e0:67:2d:fc:e9:14:04:7c:29:c3:85:c8:ac:79:8d:
6c:f2:ee:71:da:06:9b:2c:75:a1:3a:30:8f:37:4d:b5:fb:04:
f6:2f:aa:96:11:3d:4b:38:b6:ec:51:40:8c:fb:5b:4c:56:82:
c5:5a:e4:9f:09:06:8a:9e:09:68:73:f6:25:fd:c5:e5:ee:47:
da:99:56:8d:7f:98:ad:66:ab:f1:ae:a1:9c:c1:6f:3b:7d:df:
c4:a3:21:40:f7:33:ef:51:10:dd:b8:f4:47:dc:62:0a:11:ba:
1a:02:e1:6d:ae:b9:ab:e7:ac:35:7a:be:3b:53:cc:72:d4:6d:
bf:cb:27:6f:ee:1a:9e:7b:a2:a9:5c:be:ed:d6:e0:df:66:ac:
38:ee:5a:b9:18:1f:1e:bc:7e:27:98:37:b4:c3:e2:74:56:3c:
19:4e:fc:c0:f4:04:6f:fd:c3:17:d8:39:dd:c2:53:5b:d1:49:
3f:18:1e:87:f3:79:02:b1:c4:f2:4d:8b:50:7b:75:2c:37:bf:
87:0f:44:07:dd:2e:43:5e:3b:74:fb:62:4e:67:71:11:73:32:
19:e8:0c:2c:6e:d9:f5:02:48:36:41:59:08:d8:64:44:1d:81:
c1:25:ec:26:52:d9:fd:20:66:16:ae:d4:53:be:54:1e:3d:b4:
1d:cb:46:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:11:33 2026 by rpki-client