Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/964F254A4AEC11EF91EC775FC4F9AE02.roa
File: 964F254A4AEC11EF91EC775FC4F9AE02.roa (raw, json)
Hash identifier: HkNBHfCCxWQ28dFsr4VLP9uYL5uGGo+V0spZFxOBLiI=
Subject key identifier: DD:F0:2B:8F:A8:76:04:66:15:E5:22:64:30:5A:48:DE:94:27:E9:DB
Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial: 35D0
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/964F254A4AEC11EF91EC775FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:22:03 +0000
ROA not before: Thu 29 Jan 2026 08:23:36 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 3758
IP address blocks: 128.106.0.0/18 maxlen: 24
128.106.64.0/18 maxlen: 24
128.106.128.0/17 maxlen: 24
160.213.32.0/21 maxlen: 21
160.213.52.0/22 maxlen: 22
160.213.56.0/21 maxlen: 21
160.213.84.0/22 maxlen: 22
160.213.92.0/22 maxlen: 22
160.213.96.0/22 maxlen: 22
160.213.100.0/23 maxlen: 23
160.213.106.0/23 maxlen: 23
160.213.120.0/21 maxlen: 21
160.213.128.0/20 maxlen: 20
160.213.144.0/22 maxlen: 22
160.213.156.0/22 maxlen: 22
160.213.160.0/21 maxlen: 21
160.213.168.0/22 maxlen: 22
160.213.184.0/21 maxlen: 21
160.213.216.0/21 maxlen: 21
160.213.224.0/19 maxlen: 19
165.21.0.0/16 maxlen: 16
165.21.12.0/24 maxlen: 24
165.21.18.0/24 maxlen: 24
165.21.19.0/24 maxlen: 24
165.21.31.0/24 maxlen: 24
165.21.36.0/23 maxlen: 23
165.21.39.0/24 maxlen: 24
165.21.49.0/24 maxlen: 24
165.21.50.0/24 maxlen: 24
165.21.52.0/24 maxlen: 24
165.21.70.0/24 maxlen: 24
165.21.71.0/24 maxlen: 24
165.21.72.0/24 maxlen: 24
165.21.74.0/24 maxlen: 24
165.21.84.0/24 maxlen: 24
165.21.88.0/24 maxlen: 24
165.21.91.0/24 maxlen: 24
165.21.93.0/24 maxlen: 24
165.21.94.0/24 maxlen: 24
165.21.95.0/24 maxlen: 24
165.21.100.0/24 maxlen: 24
165.21.101.0/24 maxlen: 24
165.21.104.0/24 maxlen: 24
165.21.108.0/24 maxlen: 24
165.21.109.0/24 maxlen: 24
165.21.122.0/24 maxlen: 24
165.21.123.0/24 maxlen: 24
165.21.138.0/24 maxlen: 24
165.21.139.0/24 maxlen: 24
165.21.238.0/24 maxlen: 24
165.21.244.0/24 maxlen: 24
165.21.246.0/24 maxlen: 24
165.21.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13776 (0x35d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Validity
Not Before: Jan 29 08:23:36 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a483cb-1dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:39:3f:d8:f1:b7:fd:bf:29:c5:d1:f2:00:
12:24:2e:34:f2:03:d1:c5:55:ec:bb:6d:4e:11:48:
7a:c0:bd:17:f4:10:bb:e9:d8:5b:ca:a7:27:06:39:
73:58:b9:46:8b:b5:96:46:0f:9e:e0:f9:2a:b7:4d:
9c:31:6c:e8:74:04:46:f1:37:4e:1c:7d:80:e9:11:
e7:82:68:7e:b3:bc:91:16:23:d1:fb:e6:3e:c2:fe:
31:f5:f4:0c:da:b2:22:d6:90:be:b8:88:a9:77:15:
61:0b:97:50:7d:4a:df:ca:13:7a:fe:03:d9:f2:ae:
b5:2e:68:7f:08:6e:f2:4f:b3:94:9b:50:f1:df:a1:
b7:7e:bf:80:c9:79:4a:69:15:db:d9:c9:15:bc:cb:
61:81:0d:89:f0:46:ca:29:1b:93:f5:5f:30:69:f6:
7b:39:ed:ee:4d:f4:96:f3:28:60:60:d7:05:1c:1f:
c5:f6:5f:8e:c6:b2:0b:02:a2:20:2b:1b:f2:cf:9b:
b4:40:94:3b:96:0b:c0:66:f5:1b:f2:ea:9a:db:e1:
57:b5:9b:39:f8:01:77:a2:77:7a:59:89:06:da:0d:
67:a4:f0:93:ac:30:83:2a:f9:5a:d7:fc:87:9f:98:
e2:3e:13:50:a7:e9:35:cc:37:1f:8c:d2:ee:e9:8e:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F0:2B:8F:A8:76:04:66:15:E5:22:64:30:5A:48:DE:94:27:E9:DB
X509v3 Authority Key Identifier:
keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/964F254A4AEC11EF91EC775FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
128.106.0.0/16
160.213.32.0/21
160.213.52.0-160.213.63.255
160.213.84.0/22
160.213.92.0-160.213.101.255
160.213.106.0/23
160.213.120.0-160.213.147.255
160.213.156.0-160.213.171.255
160.213.184.0/21
160.213.216.0-160.213.255.255
165.21.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:35:4b:c0:6d:8b:5b:b6:26:80:14:df:e3:a4:24:37:3c:23:
2b:85:d7:95:e5:94:c2:bb:31:67:86:cf:58:a6:f3:45:e8:e1:
4d:b0:b6:fc:3d:94:f3:8a:9c:d6:1c:10:78:5b:c8:c9:b8:fb:
d4:8d:1e:18:6c:f2:92:3b:bd:44:31:82:78:43:38:57:0b:9a:
a1:fd:0c:35:d3:fe:e9:00:17:cb:e4:fd:f2:85:42:b8:47:b4:
e7:94:b6:71:8d:40:a4:e6:e8:6d:0c:ce:5a:0c:14:43:b6:13:
c2:e1:06:3e:d0:76:3e:71:a0:37:5f:6e:e0:f2:b2:91:24:09:
6c:37:09:03:b0:2c:37:cb:67:ef:e2:86:20:b7:24:4c:d9:5c:
fd:3a:2e:ab:17:dd:26:83:5c:e6:94:ec:1b:6a:34:9f:42:c5:
3e:2f:dd:8d:f4:18:f0:87:fc:27:f7:47:8f:c9:67:80:5d:55:
44:15:d1:4b:7d:8c:22:dc:dd:b0:72:46:65:5f:b2:59:07:22:
ba:28:34:98:ac:99:c3:48:d6:33:35:92:73:ec:b7:c0:80:18:
6a:75:e8:37:51:4d:4a:c6:4f:d2:3a:1e:1f:b2:ff:2e:00:e9:
e2:e1:91:ef:cf:a3:86:fc:a3:9e:fb:35:3d:39:5f:5d:c7:6e:
82:17:28:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:42:41 2026 by rpki-client