Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/B7C4E510067111F1BC22D1653B3D8C67.roa
File: B7C4E510067111F1BC22D1653B3D8C67.roa (raw, json)
Hash identifier: 5lx7zoc3QHDEOq1rYuvv9MeX99lELILy7aYIvpJiAOs=
Subject key identifier: 14:0E:0A:E3:4F:0E:D0:63:29:A3:0D:14:B0:65:DB:29:4C:D0:DE:10
Certificate issuer: /CN=A916DE3D/serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Certificate serial: 01B6
Authority key identifier: 69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/B7C4E510067111F1BC22D1653B3D8C67.roa
Signing time: Tue 28 Jul 2026 10:33:14 +0000
ROA not before: Tue 28 Jul 2026 10:33:14 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 141383
IP address blocks: 163.61.8.0/23 maxlen: 24
2001:df4:ffc0::/48 maxlen: 48
2402:4c60::/32 maxlen: 32
2402:4c60:100::/48 maxlen: 48
2402:4c60:101::/48 maxlen: 48
2402:4c60:102::/48 maxlen: 48
2402:4c60:103::/48 maxlen: 48
2402:4c60:110::/48 maxlen: 48
2402:4c60:111::/48 maxlen: 48
2402:4c60:112::/48 maxlen: 48
2402:4c60:113::/48 maxlen: 48
2402:4c60:120::/48 maxlen: 48
2402:4c60:121::/48 maxlen: 48
2402:4c60:122::/48 maxlen: 48
2402:4c60:123::/48 maxlen: 48
2402:4c60:130::/48 maxlen: 48
2402:4c60:131::/48 maxlen: 48
2402:4c60:132::/48 maxlen: 48
2402:4c60:133::/48 maxlen: 48
2402:4c60:200::/48 maxlen: 48
2402:4c60:201::/48 maxlen: 48
2402:4c60:202::/48 maxlen: 48
2402:4c60:203::/48 maxlen: 48
2402:4c60:1008::/48 maxlen: 48
2402:4c60:1009::/48 maxlen: 48
2402:4c60:100a::/48 maxlen: 48
2402:4c60:100b::/48 maxlen: 48
2402:4c60:100c::/48 maxlen: 48
2402:4c60:100d::/48 maxlen: 48
2402:4c60:100e::/48 maxlen: 48
2402:4c60:100f::/48 maxlen: 48
2402:4c60:1010::/48 maxlen: 48
2402:4c60:1011::/48 maxlen: 48
2402:4c60:1012::/48 maxlen: 48
2402:4c60:1013::/48 maxlen: 48
2402:4c60:1100::/48 maxlen: 48
2402:4c60:1101::/48 maxlen: 48
2402:4c60:1107::/48 maxlen: 48
2402:4c60:1110::/48 maxlen: 48
2402:4c60:1111::/48 maxlen: 48
2402:4c60:1120::/48 maxlen: 48
2402:4c60:1121::/48 maxlen: 48
2402:4c60:1130::/48 maxlen: 48
2402:4c60:1140::/48 maxlen: 48
2402:4c60:1150::/48 maxlen: 48
2402:4c60:1160::/48 maxlen: 48
2402:4c60:1170::/48 maxlen: 48
2402:4c60:1180::/48 maxlen: 48
2402:4c60:1200::/48 maxlen: 48
2402:4c60:1202::/48 maxlen: 48
2402:4c60:1210::/48 maxlen: 48
2402:4c60:1300::/48 maxlen: 48
2402:4c60:1305::/48 maxlen: 48
2402:4c60:1306::/48 maxlen: 48
2402:4c60:1310::/48 maxlen: 48
2402:4c60:1320::/48 maxlen: 48
2402:4c60:1500::/48 maxlen: 48
2402:4c60:1501::/48 maxlen: 48
2402:4c60:1503::/48 maxlen: 48
2402:4c60:1504::/48 maxlen: 48
2402:4c60:1510::/48 maxlen: 48
2402:4c60:1600::/48 maxlen: 48
2402:4c60:1601::/48 maxlen: 48
2402:4c60:2008::/48 maxlen: 48
2402:4c60:2009::/48 maxlen: 48
2402:4c60:200a::/48 maxlen: 48
2402:4c60:200b::/48 maxlen: 48
2402:4c60:200c::/48 maxlen: 48
2402:4c60:200d::/48 maxlen: 48
2402:4c60:200e::/48 maxlen: 48
2402:4c60:200f::/48 maxlen: 48
2402:4c60:2010::/48 maxlen: 48
2402:4c60:2011::/48 maxlen: 48
2402:4c60:2012::/48 maxlen: 48
2402:4c60:2013::/48 maxlen: 48
2402:4c60:2107::/48 maxlen: 48
2402:4c60:2202::/48 maxlen: 48
2402:4c60:2305::/48 maxlen: 48
2402:4c60:2306::/48 maxlen: 48
2402:4c60:2503::/48 maxlen: 48
2402:4c60:2504::/48 maxlen: 48
2402:4c60:2601::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 06:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 438 (0x1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DE3D, serialNumber=69181CF451F8B3FEC64FC8298B522D488CA5C9E6
Validity
Not Before: Jul 28 10:33:14 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a68856a-fe70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:73:c9:a5:6b:ca:d1:b2:1b:2d:49:35:04:
b0:08:42:52:1e:44:59:8b:4c:16:fa:c0:ff:a2:5b:
53:77:c4:0b:b7:29:dd:08:2a:87:b7:a4:c0:33:07:
79:87:d8:32:2a:0a:51:31:4d:48:31:3f:d5:7b:3a:
b5:58:33:8b:57:4f:82:83:02:04:33:d6:7d:2e:ed:
74:b0:91:b3:bf:94:bb:84:e4:4d:9c:e9:0f:8d:a3:
67:e9:4b:c9:4f:bc:64:96:82:fe:dc:e3:20:e6:9b:
88:2a:42:21:79:ed:8d:8b:16:08:0d:d5:66:56:17:
e6:e3:c1:ab:f3:73:30:43:66:d0:00:f3:d3:db:50:
ce:f5:f6:71:02:54:05:1b:64:2c:af:df:bf:ee:9b:
0b:cb:2b:f7:67:00:c3:2a:60:63:0d:a1:38:e6:40:
bb:ed:bc:87:e3:c2:73:be:22:01:c6:10:c3:1b:76:
f2:79:d6:fa:90:9e:f3:02:1e:5b:4d:e9:10:21:56:
db:fa:f1:3f:31:d0:79:8b:ea:f1:f0:40:20:b2:0e:
f9:16:c0:ca:38:77:5c:7c:dd:ac:0f:3f:17:9e:81:
a0:ad:be:5b:b1:c9:c7:e6:d1:eb:b2:07:65:dd:1b:
18:7c:f1:13:f2:b1:94:2b:88:94:e4:45:60:c8:a3:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0E:0A:E3:4F:0E:D0:63:29:A3:0D:14:B0:65:DB:29:4C:D0:DE:10
X509v3 Authority Key Identifier:
keyid:69:18:1C:F4:51:F8:B3:FE:C6:4F:C8:29:8B:52:2D:48:8C:A5:C9:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/aRgc9FH4s_7GT8gpi1ItSIylyeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aRgc9FH4s_7GT8gpi1ItSIylyeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DE3D/FD1E4550DE6511EF8243EE30C4F9AE02/B7C4E510067111F1BC22D1653B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
163.61.8.0/23
IPv6:
2001:df4:ffc0::/48
2402:4c60::/32
Signature Algorithm: sha256WithRSAEncryption
a9:a9:7d:b9:e5:2e:7e:ed:b9:10:9a:4d:26:8a:45:a0:46:78:
27:6c:dd:59:8c:6b:33:e0:30:bf:ce:1a:ee:3f:89:34:24:e8:
de:00:13:bc:b8:ea:9a:96:f6:c8:6f:1d:ce:ae:37:6c:22:67:
04:6a:31:b3:25:00:95:74:81:cc:b8:34:3d:38:0c:3c:0f:b5:
cb:15:ed:10:1d:1f:1e:2f:0b:46:a1:6c:d4:a0:38:ba:d8:4a:
72:4d:6d:b9:d4:37:9d:f0:0b:b5:b9:a2:c1:01:bb:09:3f:9a:
4e:aa:9c:d0:76:6e:89:58:a6:54:cf:db:c3:84:80:a5:46:0a:
4f:38:1d:a0:03:5a:86:47:90:67:3b:d7:e4:8b:67:96:cc:d0:
c4:15:e7:f6:df:13:e3:e0:26:06:8f:91:ba:26:09:a9:d2:bd:
22:73:b8:f0:70:98:53:34:58:91:87:91:fc:9c:25:63:89:b0:
13:bc:47:42:d4:0e:39:14:30:3f:29:fc:49:bd:fa:25:54:85:
47:6b:aa:bd:25:07:e4:2d:ef:31:77:a3:a8:51:18:63:f1:0b:
d5:ac:44:e2:11:b9:76:80:94:1c:ed:84:f5:f6:3a:31:d4:ea:
67:3b:fb:2d:79:a4:a6:d6:8d:35:84:cf:bc:20:57:46:47:65:
e1:94:16:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:02:56 2026 by rpki-client