Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/E843F284713E11F19E9E757977A30FBC.roa
File: E843F284713E11F19E9E757977A30FBC.roa (raw, json)
Hash identifier: 1LATEDLbE6UzYtjHKhu7hwZUi7dLP2mzLqy3jn9a12Y=
Subject key identifier: A7:65:B2:34:5E:E1:E3:1E:02:62:60:AE:98:23:24:82:8C:93:7A:7A
Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Certificate serial: 35E7
Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/E843F284713E11F19E9E757977A30FBC.roa
Signing time: Fri 26 Jun 2026 09:10:42 +0000
ROA not before: Fri 26 Jun 2026 09:10:42 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 9329
IP address blocks: 112.134.0.0/15 maxlen: 15
112.134.0.0/19 maxlen: 24
112.134.32.0/19 maxlen: 24
112.134.64.0/19 maxlen: 24
112.134.96.0/19 maxlen: 24
112.134.128.0/19 maxlen: 24
112.134.160.0/19 maxlen: 24
112.134.192.0/19 maxlen: 24
112.134.224.0/19 maxlen: 24
112.135.0.0/19 maxlen: 24
112.135.32.0/19 maxlen: 24
112.135.64.0/19 maxlen: 24
112.135.96.0/19 maxlen: 24
112.135.128.0/19 maxlen: 24
112.135.160.0/19 maxlen: 24
112.135.192.0/19 maxlen: 24
112.135.224.0/19 maxlen: 24
119.235.4.0/24 maxlen: 24
119.235.5.0/24 maxlen: 24
119.235.6.0/24 maxlen: 24
119.235.7.0/24 maxlen: 24
119.235.8.0/24 maxlen: 24
119.235.9.0/24 maxlen: 24
119.235.10.0/24 maxlen: 24
119.235.12.0/24 maxlen: 24
124.43.0.0/16 maxlen: 16
124.43.0.0/17 maxlen: 17
124.43.0.0/19 maxlen: 24
124.43.32.0/19 maxlen: 24
124.43.64.0/18 maxlen: 18
124.43.64.0/19 maxlen: 24
124.43.96.0/19 maxlen: 24
124.43.128.0/17 maxlen: 17
124.43.128.0/18 maxlen: 18
124.43.128.0/19 maxlen: 24
124.43.160.0/19 maxlen: 24
124.43.192.0/19 maxlen: 24
124.43.224.0/19 maxlen: 24
203.81.99.0/24 maxlen: 24
203.81.100.0/24 maxlen: 24
203.81.101.0/24 maxlen: 24
203.81.102.0/24 maxlen: 24
203.94.64.0/18 maxlen: 18
203.94.64.0/24 maxlen: 24
203.94.65.0/24 maxlen: 24
203.94.66.0/24 maxlen: 24
203.94.67.0/24 maxlen: 24
203.94.69.0/24 maxlen: 24
203.94.70.0/24 maxlen: 24
203.94.71.0/24 maxlen: 24
203.94.72.0/24 maxlen: 24
203.94.74.0/24 maxlen: 24
203.94.76.0/24 maxlen: 24
203.94.84.0/24 maxlen: 24
203.94.86.0/24 maxlen: 24
203.94.89.0/24 maxlen: 24
203.94.93.0/24 maxlen: 24
203.94.95.0/24 maxlen: 24
203.115.0.0/18 maxlen: 18
203.115.0.0/24 maxlen: 24
203.115.2.0/24 maxlen: 24
203.115.4.0/24 maxlen: 24
203.115.6.0/24 maxlen: 24
203.115.7.0/24 maxlen: 24
203.115.9.0/24 maxlen: 24
203.115.11.0/24 maxlen: 24
203.115.12.0/24 maxlen: 24
203.115.13.0/24 maxlen: 24
203.115.15.0/24 maxlen: 24
203.115.16.0/24 maxlen: 24
203.115.18.0/24 maxlen: 24
203.115.19.0/24 maxlen: 24
203.115.20.0/24 maxlen: 24
203.115.21.0/24 maxlen: 24
203.115.24.0/24 maxlen: 24
203.115.27.0/24 maxlen: 24
203.115.28.0/24 maxlen: 24
203.115.31.0/24 maxlen: 24
220.247.192.0/18 maxlen: 24
222.165.128.0/18 maxlen: 24
2402:d000::/32 maxlen: 40
2402:d000:20::/48 maxlen: 48
2402:d000:21::/48 maxlen: 48
2402:d000:140::/48 maxlen: 48
2402:d000:141::/48 maxlen: 48
2402:d000:142::/48 maxlen: 48
2402:d000:100c::/48 maxlen: 48
2402:d000:1060::/48 maxlen: 48
2402:d000:1064::/48 maxlen: 48
2402:d000:1068::/48 maxlen: 48
2402:d000:106c::/48 maxlen: 48
2402:d000:1074::/48 maxlen: 48
2402:d000:1088::/48 maxlen: 48
2402:d000:7000::/48 maxlen: 48
2402:d000:8100::/48 maxlen: 48
2402:d000:8104::/48 maxlen: 48
2402:d000:8108::/48 maxlen: 48
2402:d000:810c::/48 maxlen: 48
2402:d000:8110::/48 maxlen: 48
2402:d000:8114::/48 maxlen: 48
2402:d000:8118::/48 maxlen: 48
2402:d000:811c::/48 maxlen: 48
2402:d000:8120::/48 maxlen: 48
2402:d000:8124::/48 maxlen: 48
2402:d000:8128::/48 maxlen: 48
2402:d000:812c::/48 maxlen: 48
2402:d000:8130::/48 maxlen: 48
2402:d000:8134::/48 maxlen: 48
2402:d000:8138::/48 maxlen: 48
2402:d000:813c::/48 maxlen: 48
2402:d000:8140::/48 maxlen: 48
2402:d000:8f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13799 (0x35e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Validity
Not Before: Jun 26 09:10:42 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a3e4212-fbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:de:c0:de:8e:d7:2b:88:0a:1b:d3:e2:58:
88:f7:b4:08:96:05:d0:ce:e4:f7:ca:88:c1:d5:85:
97:e6:23:14:74:c8:e6:54:22:85:8a:6d:aa:22:b7:
f1:9f:10:e8:6a:dc:61:fe:72:43:87:16:58:43:ed:
84:dd:62:ef:d7:62:1b:ce:b4:ef:d4:92:6d:4f:2e:
ec:28:71:c7:fa:64:3d:fa:4e:5f:95:d4:4e:30:f9:
f2:6f:62:ca:ee:a6:19:44:7f:0e:3d:f7:2a:bb:63:
32:a3:cc:4d:91:47:73:19:91:d0:18:de:76:bb:e0:
03:c2:bd:41:d9:d5:6e:6e:80:8f:37:22:c2:aa:48:
bc:b6:bb:c7:86:a7:f1:85:38:48:78:6c:42:2f:51:
06:37:af:91:e4:89:ac:e0:02:44:7d:0c:3a:e6:61:
20:2a:3e:07:28:ab:82:3b:53:72:ef:42:35:ca:19:
18:cd:45:c8:12:7f:c1:8e:d9:5a:f8:5f:52:ec:d5:
dc:a3:4b:e5:a1:e9:b2:3f:4b:31:3c:6d:51:67:4b:
29:07:87:18:8f:c0:15:c9:39:de:96:c6:7f:e4:6e:
ea:d1:75:e7:3c:97:aa:70:f5:1e:5f:aa:0d:e8:f1:
3e:17:17:c7:29:b1:78:b9:57:0d:ce:58:56:94:c4:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:B2:34:5E:E1:E3:1E:02:62:60:AE:98:23:24:82:8C:93:7A:7A
X509v3 Authority Key Identifier:
keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/E843F284713E11F19E9E757977A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
112.134.0.0/15
119.235.4.0-119.235.10.255
119.235.12.0/24
124.43.0.0/16
203.81.99.0-203.81.102.255
203.94.64.0/18
203.115.0.0/18
220.247.192.0/18
222.165.128.0/18
IPv6:
2402:d000::/32
Signature Algorithm: sha256WithRSAEncryption
54:6d:77:de:6d:84:37:2a:e3:c1:93:fb:b4:e3:74:e7:ed:30:
06:3d:c8:1d:80:2d:bc:4e:6e:02:aa:58:bd:52:57:96:fe:30:
99:96:c1:3a:4b:59:43:02:d7:84:a2:1f:c6:bc:41:ce:c0:78:
4d:b9:2a:ab:be:8c:db:c7:6b:52:73:d1:e1:1d:d4:df:7c:b6:
ca:27:94:39:e6:b9:67:62:f2:9b:f5:c5:92:8e:5d:15:04:4e:
a2:ea:02:8c:9a:3b:1a:fa:2d:d5:d5:bd:aa:d5:39:95:31:9a:
6a:45:f1:5d:5c:a8:00:5e:0d:05:5c:1e:3d:97:24:82:36:b2:
26:37:b4:82:72:66:47:3a:28:65:29:02:f1:5c:f3:13:15:ee:
2d:78:42:82:69:6f:58:f5:89:19:c6:eb:4b:74:bc:ff:b8:ca:
fc:d8:64:d8:d0:78:9d:c0:c7:54:2d:54:3c:7d:98:c2:23:58:
18:37:34:b0:c0:a5:eb:25:4a:54:c4:f8:2d:c8:0c:56:6e:01:
7b:84:15:f3:e1:4f:e8:c8:8c:17:b9:d3:d6:1c:b7:b7:1c:5b:
14:8a:fb:bf:9f:e4:f0:80:7b:54:e3:2e:ea:ae:c9:82:78:fe:
81:5f:36:68:4c:d3:14:2e:03:0d:44:cd:b3:39:3d:11:61:a8:
39:d0:11:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:50 2026 by rpki-client