Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/F412434CEC5811F0BA858F3E4B6F56BC.roa
File: F412434CEC5811F0BA858F3E4B6F56BC.roa (raw, json)
Hash identifier: 3gJ0JjSufsJQV4FJopiJzqDoqnWMAYfObfBz+eYqLps=
Subject key identifier: 4A:53:2E:4D:23:A0:46:26:CE:78:89:6D:41:AF:44:C6:E7:BC:5A:16
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 07FD
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/F412434CEC5811F0BA858F3E4B6F56BC.roa
Signing time: Sun 01 Mar 2026 21:25:31 +0000
ROA not before: Fri 20 Feb 2026 06:18:47 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 133481
IP address blocks: 14.207.160.0/24 maxlen: 24
14.207.163.0/24 maxlen: 24
27.130.0.0/22 maxlen: 22
27.130.4.0/22 maxlen: 22
27.130.8.0/22 maxlen: 22
27.130.12.0/22 maxlen: 22
27.130.16.0/22 maxlen: 22
27.130.20.0/22 maxlen: 22
27.130.24.0/22 maxlen: 22
27.130.28.0/22 maxlen: 22
27.130.32.0/22 maxlen: 22
27.130.36.0/22 maxlen: 22
27.130.40.0/22 maxlen: 22
27.130.44.0/22 maxlen: 22
27.130.48.0/22 maxlen: 22
27.130.52.0/22 maxlen: 22
27.130.56.0/22 maxlen: 22
27.130.60.0/22 maxlen: 22
27.130.64.0/22 maxlen: 22
27.130.68.0/22 maxlen: 22
27.130.72.0/22 maxlen: 22
27.130.76.0/22 maxlen: 22
27.130.80.0/22 maxlen: 22
27.130.84.0/22 maxlen: 22
27.130.88.0/22 maxlen: 22
27.130.92.0/22 maxlen: 22
27.130.96.0/22 maxlen: 22
27.130.100.0/22 maxlen: 22
27.130.104.0/22 maxlen: 22
27.130.108.0/22 maxlen: 22
27.130.112.0/22 maxlen: 22
27.130.116.0/22 maxlen: 22
27.130.120.0/22 maxlen: 22
27.130.124.0/22 maxlen: 22
27.130.128.0/22 maxlen: 22
27.130.132.0/22 maxlen: 22
27.130.136.0/22 maxlen: 22
27.130.140.0/22 maxlen: 22
27.130.144.0/22 maxlen: 22
27.130.148.0/22 maxlen: 22
27.130.152.0/22 maxlen: 22
27.130.156.0/22 maxlen: 22
27.130.160.0/22 maxlen: 22
27.130.164.0/22 maxlen: 22
27.130.168.0/22 maxlen: 22
27.130.172.0/22 maxlen: 22
27.130.176.0/22 maxlen: 22
27.130.180.0/22 maxlen: 22
27.130.184.0/22 maxlen: 22
27.130.188.0/22 maxlen: 22
27.130.192.0/22 maxlen: 22
27.130.196.0/22 maxlen: 22
27.130.200.0/22 maxlen: 22
27.130.204.0/22 maxlen: 22
27.130.208.0/22 maxlen: 22
27.130.212.0/22 maxlen: 22
27.130.216.0/22 maxlen: 22
27.130.220.0/22 maxlen: 22
27.130.224.0/22 maxlen: 22
27.130.228.0/22 maxlen: 22
27.130.232.0/22 maxlen: 22
27.130.236.0/22 maxlen: 22
27.130.240.0/22 maxlen: 22
27.130.244.0/22 maxlen: 22
27.130.248.0/22 maxlen: 22
27.130.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 22:52:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045 (0x7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Feb 20 06:18:47 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4aecb-a090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e2:8b:c3:7d:90:91:da:c3:ca:cb:cf:af:a9:
cc:00:e4:8e:ac:b1:e1:67:87:82:13:67:ea:dc:ad:
cf:da:b1:73:31:5a:66:17:ad:1a:6a:7b:de:e9:09:
9f:3d:3e:5d:62:53:1e:05:5c:e1:22:5a:f3:6c:fb:
84:e7:e4:32:8f:42:1d:47:03:fa:20:8c:28:3d:74:
c2:4c:23:42:c8:b0:a3:b7:0b:0d:54:54:48:92:3e:
db:d5:bd:f6:56:7b:35:af:53:f6:08:ad:96:d2:5e:
3d:d5:f3:f1:cd:3e:81:f7:3d:ec:cd:fa:c6:3c:57:
27:20:e2:90:36:6a:6d:c4:7d:3f:a4:8a:44:1e:54:
8a:52:d6:22:83:6b:65:26:31:c9:e7:de:05:a5:10:
73:9a:f2:c7:6d:7b:10:e8:53:7d:68:db:88:de:ab:
0b:38:f2:b7:fc:d9:a2:8a:f2:6c:df:9b:79:c2:67:
0d:6e:a4:12:4f:90:4f:fe:86:e3:f7:68:9b:3c:1e:
d5:aa:2b:0e:99:7c:6c:2a:fe:56:c5:df:2c:d7:f7:
25:ae:85:ec:4f:18:ff:31:0a:d0:15:b2:44:a4:66:
34:3e:84:bb:df:d5:31:e1:5e:a1:91:4d:25:e7:13:
e3:58:d3:6e:f6:99:ce:c4:db:ac:a5:a6:41:07:84:
f4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:53:2E:4D:23:A0:46:26:CE:78:89:6D:41:AF:44:C6:E7:BC:5A:16
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/F412434CEC5811F0BA858F3E4B6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
14.207.160.0/24
14.207.163.0/24
27.130.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:c5:bc:9c:dd:4b:eb:f0:6e:39:96:30:13:86:04:99:24:83:
fd:6d:ad:d5:90:2b:25:38:f2:95:83:77:1b:45:87:cf:18:42:
1e:85:1f:1a:54:5c:60:a5:9a:28:c0:e3:b6:75:59:80:58:5d:
54:77:20:b3:64:f9:2f:ae:3d:e0:c9:62:0d:cd:b9:ca:99:2e:
85:74:ce:67:c7:66:6b:7f:b8:94:fa:68:d5:54:15:e0:85:35:
5b:3c:75:9c:43:ea:a0:81:df:89:ac:b1:aa:a2:5a:c7:7d:0a:
99:e6:78:47:4c:19:6f:09:3f:21:db:82:fa:af:39:fe:4a:8a:
f7:51:25:de:7a:55:4d:8d:23:6c:5c:0d:35:9e:d6:0e:e2:01:
14:eb:fd:1d:1d:f0:2f:97:7b:88:fe:41:e8:a8:28:b8:fc:ea:
93:db:a6:3a:fe:04:44:c0:2a:5c:c6:31:50:7b:e6:80:bf:cb:
21:fa:d0:09:57:b2:72:f8:3b:bb:79:97:af:4e:a9:b1:1e:4d:
88:bb:8b:91:31:c3:d7:22:d7:a2:cd:dc:b1:f6:a3:5d:c5:8c:
ab:ab:68:34:bb:1c:53:b5:d5:9c:fb:a3:fa:9a:84:44:24:51:
ed:77:ef:e1:c2:2b:ef:b0:90:25:04:fa:7e:de:c1:95:87:b1:
e8:0f:4b:4a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE
RDhDRUNEMDQwHhcNMjYwMjIwMDYxODQ3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWVjYi1hMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2uKLw32QkdrDysvPr6nMAOSOrLHhZ4eCE2fq3K3P2rFzMVpmF60aanve6Qmf
PT5dYlMeBVzhIlrzbPuE5+Qyj0IdRwP6IIwoPXTCTCNCyLCjtwsNVFRIkj7b1b32
Vns1r1P2CK2W0l491fPxzT6B9z3szfrGPFcnIOKQNmptxH0/pIpEHlSKUtYig2tl
JjHJ594FpRBzmvLHbXsQ6FN9aNuI3qsLOPK3/NmiivJs35t5wmcNbqQST5BP/obj
92ibPB7VqisOmXxsKv5Wxd8s1/clroXsTxj/MQrQFbJEpGY0PoS739Ux4V6hkU0l
5xPjWNNu9pnOxNuspaZBB4T07wIDAQABo4ICazCCAmcwHQYDVR0OBBYEFEpTLk0j
oEYmzniJbUGvRMbnvFoWMB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1
NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvRjQxMjQzNENF
QzU4MTFGMEJBODU4RjNFNEI2RjU2QkMucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX
BAIAATARAwQADs+gAwQADs+jAwMAG4IwDQYJKoZIhvcNAQELBQADggEBAI7FvJzd
S+vwbjmWMBOGBJkkg/1trdWQKyU48pWDdxtFh88YQh6FHxpUXGClmijA47Z1WYBY
XVR3ILNk+S+uPeDJYg3NucqZLoV0zmfHZmt/uJT6aNVUFeCFNVs8dZxD6qCB34ms
saqiWsd9CpnmeEdMGW8JPyHbgvqvOf5KivdRJd56VU2NI2xcDTWe1g7iARTr/R0d
8C+Xe4j+QeioKLj86pPbpjr+BETAKlzGMVB75oC/yyH60AlXsnL4O7t5l69OqbEe
TYi7i5Exw9ci16LN3LH2o13FjKuraDS7HFO11Zz7o/qahEQkUe137+HCK++wkCUE
+n7ewZWHsegPS0o=
-----END CERTIFICATE-----
Generated at Sat Mar 7 19:05:58 2026 by rpki-client