Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
File: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (raw, json)
Hash identifier: M2tZaZY+VtTJR4ttrGMuLbgoQBKpx51lR8nHOr7SfHc=
Subject key identifier: 29:95:BF:C5:30:43:78:38:36:32:6C:8B:72:71:AD:06:63:F7:A6:32
Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial: 35B0
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
Signing time: Tue 26 May 2026 01:36:16 +0000
ROA not before: Tue 26 May 2026 01:36:16 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 45143
IP address blocks: 14.100.128.0/17 maxlen: 24
111.65.31.0/24 maxlen: 24
111.65.32.0/24 maxlen: 24
111.65.33.0/24 maxlen: 24
111.65.34.0/24 maxlen: 24
111.65.35.0/24 maxlen: 24
111.65.36.0/24 maxlen: 24
111.65.37.0/24 maxlen: 24
111.65.38.0/24 maxlen: 24
111.65.39.0/24 maxlen: 24
111.65.40.0/24 maxlen: 24
111.65.41.0/24 maxlen: 24
111.65.42.0/24 maxlen: 24
111.65.43.0/24 maxlen: 24
111.65.44.0/24 maxlen: 24
111.65.45.0/24 maxlen: 24
111.65.46.0/24 maxlen: 24
111.65.47.0/24 maxlen: 24
111.65.48.0/24 maxlen: 24
111.65.49.0/24 maxlen: 24
111.65.50.0/24 maxlen: 24
111.65.51.0/24 maxlen: 24
111.65.52.0/24 maxlen: 24
111.65.53.0/24 maxlen: 24
111.65.54.0/24 maxlen: 24
111.65.55.0/24 maxlen: 24
111.65.56.0/24 maxlen: 24
111.65.57.0/24 maxlen: 24
111.65.58.0/24 maxlen: 24
111.65.59.0/24 maxlen: 24
111.65.60.0/24 maxlen: 24
111.65.61.0/24 maxlen: 24
111.65.62.0/24 maxlen: 24
111.65.63.0/24 maxlen: 24
111.65.64.0/24 maxlen: 24
111.65.65.0/24 maxlen: 24
111.65.66.0/24 maxlen: 24
111.65.67.0/24 maxlen: 24
111.65.68.0/24 maxlen: 24
111.65.69.0/24 maxlen: 24
111.65.70.0/24 maxlen: 24
111.65.71.0/24 maxlen: 24
111.65.72.0/24 maxlen: 24
111.65.73.0/24 maxlen: 24
111.65.74.0/24 maxlen: 24
111.65.75.0/24 maxlen: 24
111.65.76.0/24 maxlen: 24
111.65.77.0/24 maxlen: 24
111.65.78.0/24 maxlen: 24
111.65.79.0/24 maxlen: 24
119.234.0.0/17 maxlen: 24
180.255.128.0/17 maxlen: 24
202.78.48.0/24 maxlen: 24
202.78.49.0/24 maxlen: 24
202.78.50.0/24 maxlen: 24
202.78.51.0/24 maxlen: 24
202.78.56.0/24 maxlen: 24
202.78.57.0/24 maxlen: 24
202.78.58.0/24 maxlen: 24
2400:1c00::/32 maxlen: 32
2400:1c00:1::/48 maxlen: 48
2400:1c00:2::/48 maxlen: 48
2400:1c00:3::/48 maxlen: 48
2400:1c00:4::/48 maxlen: 48
2400:1c00:b::/48 maxlen: 48
2400:1c00:c::/48 maxlen: 48
2400:1c00:13::/48 maxlen: 48
2400:1c00:1a::/48 maxlen: 48
2400:1c00:1b::/48 maxlen: 48
2400:1c00:1c::/48 maxlen: 48
2400:1c00:1e::/48 maxlen: 48
2400:1c00:1f::/48 maxlen: 48
2400:1c00:20::/44 maxlen: 44
2400:1c00:30::/44 maxlen: 44
2400:1c00:30::/45 maxlen: 45
2400:1c00:38::/45 maxlen: 45
2400:1c00:40::/44 maxlen: 44
2400:1c00:48::/45 maxlen: 45
2400:1c00:50::/44 maxlen: 44
2400:1c00:50::/45 maxlen: 45
2400:1c00:58::/46 maxlen: 46
2400:1c00:64::/48 maxlen: 48
2400:1c00:66::/48 maxlen: 48
2400:1c00:70::/44 maxlen: 44
2400:1c00:70::/45 maxlen: 45
2400:1c00:78::/47 maxlen: 47
2400:1c00:7a::/47 maxlen: 47
2400:1c00:80::/43 maxlen: 43
2400:1c00:a0::/43 maxlen: 43
2400:1c00:f0::/44 maxlen: 44
2400:1c00:100::/44 maxlen: 44
2400:1c00:110::/44 maxlen: 44
2400:1c00:120::/44 maxlen: 44
2400:1c00:130::/44 maxlen: 44
2400:1c00:140::/44 maxlen: 44
2400:1c00:150::/44 maxlen: 44
2400:1c00:160::/44 maxlen: 44
2400:1c00:170::/44 maxlen: 44
2400:1c00:170::/48 maxlen: 48
2400:1c00:170::/60 maxlen: 60
2400:1c00:17f::/48 maxlen: 48
2400:1c00:180::/48 maxlen: 48
2400:1c00:180::/60 maxlen: 60
2400:1c00:190::/44 maxlen: 44
2400:1c00:1a0::/44 maxlen: 44
2400:1c00:1b0::/44 maxlen: 44
2400:1c00:1d0::/44 maxlen: 44
2400:1c00:1d0::/45 maxlen: 45
2400:1c00:1d8::/45 maxlen: 45
2400:1c00:1e0::/44 maxlen: 44
2400:1c00:220::/44 maxlen: 44
2400:1c00:230::/44 maxlen: 44
2400:1c00:258::/46 maxlen: 46
2400:1c00:25c::/46 maxlen: 46
2400:1c00:25c::/47 maxlen: 47
2400:1c00:25e::/47 maxlen: 47
2400:1c00:27c::/46 maxlen: 46
2400:1c00:300::/44 maxlen: 44
2400:1c00:310::/45 maxlen: 45
2400:1c00:310::/54 maxlen: 54
2400:1c00:318::/45 maxlen: 45
2400:1c00:480::/44 maxlen: 44
2400:1c00:490::/44 maxlen: 44
2400:1c00:500::/45 maxlen: 45
2400:1c00:508::/45 maxlen: 45
2400:1c00:57c::/46 maxlen: 46
2400:1c00:580::/45 maxlen: 45
2400:1c00:590::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 14:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13744 (0x35b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Validity
Not Before: May 26 01:36:16 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a14f910-29a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:df:a3:30:9f:ad:83:4d:ad:c9:89:38:b5:
3c:90:0d:b8:14:8e:f8:ad:bf:13:72:46:b8:6c:c3:
2d:53:e1:b7:d4:10:6a:8e:ab:4e:b4:43:a5:fc:73:
d4:4f:0d:a2:82:9f:ae:3d:13:4a:c6:1b:af:d5:f3:
4e:0b:08:36:11:63:6f:85:27:e0:29:31:d1:0b:10:
fd:db:f4:02:56:59:9b:00:e4:38:c4:43:b2:07:90:
f0:aa:1f:c5:72:1b:ff:88:56:1e:ec:96:ae:3b:00:
4e:bc:25:67:ae:2c:8a:98:a4:37:81:f6:b9:6a:f3:
f8:fc:1b:c2:e8:4e:d5:d6:48:21:ed:e8:f2:8c:0a:
38:67:66:29:45:be:6f:c7:c2:1c:77:5f:0e:19:b9:
d6:77:73:9b:8c:38:f0:7f:d9:37:1b:a1:58:ee:85:
45:63:a3:5b:f2:71:71:3e:db:b2:15:0c:19:89:b5:
01:ae:fd:0c:51:19:9d:8a:e0:93:df:40:b6:5b:86:
73:70:11:ce:1e:3c:43:de:62:2f:ed:00:04:2b:57:
10:99:7d:cf:01:ad:43:ce:ee:15:1c:f1:25:c4:8b:
09:d0:24:d5:07:91:cf:ed:05:1c:47:f6:1b:23:97:
00:58:f2:a0:ab:22:11:c5:f6:26:32:30:eb:5d:54:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:95:BF:C5:30:43:78:38:36:32:6C:8B:72:71:AD:06:63:F7:A6:32
X509v3 Authority Key Identifier:
keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.100.128.0/17
111.65.31.0-111.65.79.255
119.234.0.0/17
180.255.128.0/17
202.78.48.0/22
202.78.56.0-202.78.58.255
IPv6:
2400:1c00::/32
Signature Algorithm: sha256WithRSAEncryption
75:13:b6:4b:ae:72:5d:a0:73:7f:09:8c:50:14:89:f4:4f:43:
d2:59:1d:a0:f9:fc:7f:0d:00:d1:87:87:6a:f5:76:56:83:49:
4d:41:c5:9c:bf:72:e6:5c:e7:88:1c:4b:6b:bc:2f:48:74:7b:
eb:a1:f2:d0:82:70:19:f9:32:f2:d4:cc:5d:04:6d:3e:9d:f8:
32:ef:3c:60:cc:a8:6d:9a:e3:f5:5a:37:27:5d:62:4d:b8:81:
ea:fc:52:ce:48:31:6a:46:b9:7a:cd:08:5f:e6:ef:48:59:ab:
76:ac:46:2a:45:01:73:a3:7f:48:ac:3f:16:a7:f2:71:2a:15:
4a:6a:76:25:83:c5:b6:7c:2a:c1:d5:03:e6:fc:13:33:f5:17:
cb:91:be:91:69:93:84:5b:e2:99:70:df:50:a5:18:43:ca:0b:
02:1e:51:45:92:46:aa:81:32:57:02:44:d7:fc:a3:46:8d:aa:
6e:d3:b8:aa:af:70:0a:c2:02:8a:cc:81:63:18:45:e6:a3:36:
d2:73:39:86:d0:3b:d3:cc:27:e5:d1:a4:af:c8:71:d6:4a:dc:
02:49:14:91:72:44:f9:17:b5:40:ac:09:e2:36:94:96:04:6c:
78:96:85:76:12:48:85:69:1c:81:c3:d7:90:9f:cb:c0:3d:8a:
5b:ed:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:50:52 2026 by rpki-client