Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/FF145268EEAB11EFAD1FDC0CC4F9AE02.roa
File: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (raw, json)
Hash identifier: 7XMMVE1Z8DTsPS4/NnB4jebA0dwEF029ZVyHQnWdxAY=
Subject key identifier: DC:38:F3:BE:6B:FD:AD:8C:03:AB:DB:2B:34:07:7C:17:17:92:73:B8
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 273F
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/FF145268EEAB11EFAD1FDC0CC4F9AE02.roa
Signing time: Wed 24 Jun 2026 06:21:32 +0000
ROA not before: Wed 24 Jun 2026 06:21:32 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132618
IP address blocks: 1.46.32.0/20 maxlen: 21
1.46.32.0/24 maxlen: 24
1.46.33.0/24 maxlen: 24
1.46.34.0/24 maxlen: 24
1.46.35.0/24 maxlen: 24
1.46.36.0/24 maxlen: 24
1.46.37.0/24 maxlen: 24
1.46.38.0/24 maxlen: 24
1.46.39.0/24 maxlen: 24
1.46.40.0/24 maxlen: 24
1.46.41.0/24 maxlen: 24
1.46.42.0/24 maxlen: 24
1.46.43.0/24 maxlen: 24
1.46.44.0/24 maxlen: 24
1.46.45.0/24 maxlen: 24
1.46.46.0/24 maxlen: 24
1.46.47.0/24 maxlen: 24
1.46.48.0/20 maxlen: 21
1.46.48.0/24 maxlen: 24
1.46.49.0/24 maxlen: 24
1.46.50.0/24 maxlen: 24
1.46.51.0/24 maxlen: 24
1.46.52.0/24 maxlen: 24
1.46.53.0/24 maxlen: 24
1.46.54.0/24 maxlen: 24
1.46.55.0/24 maxlen: 24
1.46.56.0/24 maxlen: 24
1.46.57.0/24 maxlen: 24
1.46.58.0/24 maxlen: 24
1.46.59.0/24 maxlen: 24
1.46.60.0/24 maxlen: 24
1.46.61.0/24 maxlen: 24
1.46.62.0/24 maxlen: 24
1.46.63.0/24 maxlen: 24
1.46.96.0/20 maxlen: 21
1.46.96.0/24 maxlen: 24
1.46.97.0/24 maxlen: 24
1.46.98.0/24 maxlen: 24
1.46.99.0/24 maxlen: 24
1.46.100.0/24 maxlen: 24
1.46.101.0/24 maxlen: 24
1.46.102.0/24 maxlen: 24
1.46.103.0/24 maxlen: 24
1.46.104.0/24 maxlen: 24
1.46.105.0/24 maxlen: 24
1.46.106.0/24 maxlen: 24
1.46.107.0/24 maxlen: 24
1.46.108.0/24 maxlen: 24
1.46.109.0/24 maxlen: 24
1.46.110.0/24 maxlen: 24
1.46.111.0/24 maxlen: 24
1.47.32.0/20 maxlen: 21
1.47.32.0/24 maxlen: 24
1.47.33.0/24 maxlen: 24
1.47.34.0/24 maxlen: 24
1.47.35.0/24 maxlen: 24
1.47.36.0/24 maxlen: 24
1.47.37.0/24 maxlen: 24
1.47.38.0/24 maxlen: 24
1.47.39.0/24 maxlen: 24
1.47.40.0/24 maxlen: 24
1.47.41.0/24 maxlen: 24
1.47.42.0/24 maxlen: 24
1.47.43.0/24 maxlen: 24
1.47.44.0/24 maxlen: 24
1.47.45.0/24 maxlen: 24
1.47.46.0/24 maxlen: 24
1.47.47.0/24 maxlen: 24
1.47.48.0/20 maxlen: 21
1.47.48.0/24 maxlen: 24
1.47.49.0/24 maxlen: 24
1.47.50.0/24 maxlen: 24
1.47.51.0/24 maxlen: 24
1.47.52.0/24 maxlen: 24
1.47.53.0/24 maxlen: 24
1.47.54.0/24 maxlen: 24
1.47.55.0/24 maxlen: 24
1.47.56.0/24 maxlen: 24
1.47.57.0/24 maxlen: 24
1.47.58.0/24 maxlen: 24
1.47.59.0/24 maxlen: 24
1.47.60.0/24 maxlen: 24
1.47.61.0/24 maxlen: 24
1.47.62.0/24 maxlen: 24
1.47.63.0/24 maxlen: 24
1.47.96.0/20 maxlen: 21
1.47.96.0/24 maxlen: 24
1.47.97.0/24 maxlen: 24
1.47.98.0/24 maxlen: 24
1.47.99.0/24 maxlen: 24
1.47.100.0/24 maxlen: 24
1.47.101.0/24 maxlen: 24
1.47.102.0/24 maxlen: 24
1.47.103.0/24 maxlen: 24
1.47.104.0/24 maxlen: 24
1.47.105.0/24 maxlen: 24
1.47.106.0/24 maxlen: 24
1.47.107.0/24 maxlen: 24
1.47.108.0/24 maxlen: 24
1.47.109.0/24 maxlen: 24
1.47.110.0/24 maxlen: 24
1.47.111.0/24 maxlen: 24
111.84.24.0/24 maxlen: 24
111.84.73.0/24 maxlen: 24
111.84.78.0/24 maxlen: 24
2404:8d02:4443::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Jul 2026 15:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10047 (0x273f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Jun 24 06:21:32 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a3b776c-0f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:4e:5f:cc:8d:ef:32:03:76:0e:06:5f:dc:
78:c6:df:c0:e6:a2:81:33:5c:17:f7:0d:71:13:f8:
9c:57:9b:4a:19:a3:7e:b4:b5:6c:82:64:c5:93:7f:
0a:61:95:90:a0:6a:27:74:d3:04:96:be:de:92:33:
42:6d:2e:11:cb:1e:e1:78:ed:63:d1:a4:a3:53:60:
aa:a5:be:b0:8a:02:f0:72:01:54:8f:ce:b6:f5:7d:
6d:e0:3e:0e:d7:0b:aa:da:1d:1f:b3:4d:45:6b:6d:
f8:8d:8d:e6:67:5d:01:c8:6b:40:20:cd:e3:6e:1a:
5e:fe:a5:c9:e8:7c:cd:51:6e:a1:76:70:fa:34:f7:
d4:98:0a:38:8d:31:c3:aa:fc:a0:d8:e1:7b:6a:8e:
d9:4e:66:4e:01:3b:11:23:66:ea:1f:43:0f:80:d1:
df:c0:c4:63:4f:8e:44:56:d3:60:3d:63:ed:82:ce:
52:c1:b6:81:cd:d4:86:51:e4:d0:bd:9b:10:7f:04:
2a:b1:56:a8:9c:68:6d:73:5b:13:6a:0b:13:fd:3e:
84:2e:7c:0a:84:ff:11:fc:e0:57:d7:dd:09:8b:4a:
d3:87:c0:58:42:c3:29:3b:7b:cc:40:0a:08:2b:99:
f0:d8:a3:08:86:97:ea:1e:44:c5:b5:ac:21:f0:bf:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:38:F3:BE:6B:FD:AD:8C:03:AB:DB:2B:34:07:7C:17:17:92:73:B8
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/FF145268EEAB11EFAD1FDC0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.46.32.0/19
1.46.96.0/20
1.47.32.0/19
1.47.96.0/20
111.84.24.0/24
111.84.73.0/24
111.84.78.0/24
IPv6:
2404:8d02:4443::/48
Signature Algorithm: sha256WithRSAEncryption
9e:99:d5:28:29:61:b8:89:90:8d:dd:a1:a7:20:18:7f:e5:56:
89:62:2d:ac:02:54:09:d3:88:f1:2e:a9:a1:42:24:fb:b2:9e:
ec:c4:01:a6:28:6e:a9:92:9a:2b:e6:07:d0:67:0a:40:21:62:
4d:e6:11:78:fe:6f:a3:27:fa:97:b4:ad:1b:67:fa:51:ec:e3:
c0:c1:5d:8c:e8:58:c1:c2:a7:0b:df:82:2e:3c:ce:ac:5c:e2:
eb:76:e7:8b:9d:30:29:6f:e3:07:7e:fa:ec:3c:83:b6:61:6a:
3d:46:92:99:bc:12:96:50:08:dc:e9:6b:5f:e0:79:76:33:00:
06:9d:84:23:b0:e9:a4:2c:24:70:89:e6:d2:e9:65:cb:73:c9:
eb:dd:c3:d3:91:a9:53:35:d4:f6:15:17:b6:1c:ed:4c:90:c8:
ce:c7:fa:3e:4b:2c:93:d4:ff:37:a1:6b:91:a2:0b:54:5c:d0:
5b:c6:9f:24:49:54:40:d0:03:a2:2c:fb:fb:72:f0:24:f8:43:
57:18:63:d9:e9:67:34:76:d4:3d:bf:f2:46:fa:5d:d6:fc:56:
8b:92:83:d9:e9:c3:26:69:c2:a5:10:84:b4:56:fa:be:53:87:
e9:45:34:50:72:a6:ad:ea:2f:13:33:dd:0c:db:5b:0c:d0:ad:
dc:73:38:72
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB
RjE0ODkyNkMwHhcNMjYwNjI0MDYyMTMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNiNzc2Yy0wZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjROX8yN7zIDdg4GX9x4xt/A5qKBM1wX9w1xE/icV5tKGaN+tLVsgmTFk38K
YZWQoGondNMElr7ekjNCbS4Ryx7heO1j0aSjU2Cqpb6wigLwcgFUj8629X1t4D4O
1wuq2h0fs01Fa234jY3mZ10ByGtAIM3jbhpe/qXJ6HzNUW6hdnD6NPfUmAo4jTHD
qvyg2OF7ao7ZTmZOATsRI2bqH0MPgNHfwMRjT45EVtNgPWPtgs5SwbaBzdSGUeTQ
vZsQfwQqsVaonGhtc1sTagsT/T6ELnwKhP8R/OBX190Ji0rTh8BYQsMpO3vMQAoI
K5nw2KMIhpfqHkTFtawh8L/SDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNw4875r
/a2MA6vbKzQHfBcXknO4MB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx
NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvRkYxNDUyNjhF
RUFCMTFFRkFEMUZEQzBDQzRGOUFFMDIucm9hMFQGCCsGAQUFBwEHAQH/BEUwQzAw
BAIAATAqAwQFAS4gAwQEAS5gAwQFAS8gAwQEAS9gAwQAb1QYAwQAb1RJAwQAb1RO
MA8EAgACMAkDBwAkBI0CREMwDQYJKoZIhvcNAQELBQADggEBAJ6Z1SgpYbiJkI3d
oacgGH/lVoliLawCVAnTiPEuqaFCJPuynuzEAaYobqmSmivmB9BnCkAhYk3mEXj+
b6Mn+pe0rRtn+lHs48DBXYzoWMHCpwvfgi48zqxc4ut254udMClv4wd++uw8g7Zh
aj1Gkpm8EpZQCNzpa1/geXYzAAadhCOw6aQsJHCJ5tLpZctzyevdw9ORqVM11PYV
F7Yc7UyQyM7H+j5LLJPU/zeha5GiC1Rc0FvGnyRJVEDQA6Is+/ty8CT4Q1cYY9np
ZzR21D2/8kb6Xdb8VouSg9npwyZpwqUQhLRW+r5Th+lFNFBypq3qLxMz3QzbWwzQ
rdxzOHI=
-----END CERTIFICATE-----
Generated at Mon Jul 13 11:34:46 2026 by rpki-client