Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/C9E1BA1286EF11F19E006003A7EE528E.roa
File: C9E1BA1286EF11F19E006003A7EE528E.roa (raw, json)
Hash identifier: KeHkWNIoWYBYRdc3VPh8HjB66Rci2N2NvVGwtvQ9bgo=
Subject key identifier: 08:61:95:91:AB:38:EF:D8:80:16:1D:D1:1A:BA:00:F4:BE:C8:E4:CA
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 2015
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/C9E1BA1286EF11F19E006003A7EE528E.roa
Signing time: Mon 27 Jul 2026 07:14:15 +0000
ROA not before: Mon 27 Jul 2026 07:14:15 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134963
IP address blocks: 14.1.112.0/22 maxlen: 24
43.80.0.0/16 maxlen: 24
43.81.0.0/16 maxlen: 24
43.82.0.0/16 maxlen: 24
43.83.0.0/16 maxlen: 24
43.84.0.0/16 maxlen: 24
43.85.0.0/16 maxlen: 24
43.86.0.0/16 maxlen: 24
43.87.0.0/16 maxlen: 24
43.88.0.0/16 maxlen: 24
43.89.0.0/16 maxlen: 24
43.90.0.0/16 maxlen: 24
43.91.0.0/16 maxlen: 24
43.92.0.0/16 maxlen: 24
43.93.0.0/16 maxlen: 24
43.94.0.0/16 maxlen: 24
43.95.0.0/16 maxlen: 24
43.96.0.0/16 maxlen: 24
43.97.0.0/16 maxlen: 24
43.98.0.0/16 maxlen: 24
43.99.0.0/16 maxlen: 24
43.100.0.0/16 maxlen: 24
43.101.0.0/16 maxlen: 24
43.102.0.0/16 maxlen: 24
43.103.0.0/16 maxlen: 24
43.104.0.0/16 maxlen: 24
43.105.0.0/16 maxlen: 24
43.106.0.0/16 maxlen: 24
43.107.0.0/16 maxlen: 24
43.108.0.0/16 maxlen: 24
43.109.0.0/16 maxlen: 24
43.110.0.0/16 maxlen: 24
43.111.0.0/16 maxlen: 24
43.112.0.0/16 maxlen: 24
43.113.0.0/16 maxlen: 24
43.114.0.0/16 maxlen: 24
43.115.0.0/16 maxlen: 24
43.116.0.0/16 maxlen: 24
43.117.0.0/16 maxlen: 24
43.118.0.0/16 maxlen: 24
43.119.0.0/16 maxlen: 24
43.120.0.0/16 maxlen: 24
43.121.0.0/16 maxlen: 24
43.122.0.0/16 maxlen: 24
43.123.0.0/16 maxlen: 24
43.124.0.0/16 maxlen: 24
43.125.0.0/16 maxlen: 24
43.126.0.0/16 maxlen: 24
43.127.0.0/16 maxlen: 24
103.206.40.0/22 maxlen: 24
240b:4000::/32 maxlen: 48
240b:4001::/32 maxlen: 48
240b:4002::/32 maxlen: 48
240b:4003::/32 maxlen: 48
240b:4004::/32 maxlen: 48
240b:4005::/32 maxlen: 48
240b:4006::/32 maxlen: 48
240b:4007::/32 maxlen: 48
240b:4008::/32 maxlen: 48
240b:4009::/32 maxlen: 48
240b:400a::/32 maxlen: 48
240b:400b::/32 maxlen: 48
240b:400c::/32 maxlen: 48
240b:400d::/32 maxlen: 48
240b:400e::/32 maxlen: 48
240b:400f::/32 maxlen: 48
240b:4010::/32 maxlen: 48
240b:4011::/32 maxlen: 48
240b:4012::/32 maxlen: 48
240b:4013::/32 maxlen: 48
240b:4014::/32 maxlen: 48
240b:4015::/32 maxlen: 48
240b:4016::/32 maxlen: 48
240b:4017::/32 maxlen: 48
240b:4018::/32 maxlen: 48
240b:4019::/32 maxlen: 48
240b:401a::/32 maxlen: 48
240b:401b::/32 maxlen: 48
240b:401c::/32 maxlen: 48
240b:401d::/32 maxlen: 48
240b:401e::/32 maxlen: 48
240b:401f::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8213 (0x2015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Jul 27 07:14:15 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a670547-a3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:07:16:e9:5d:23:94:22:ba:6d:65:9c:3b:
36:b5:4e:c4:62:b5:d5:65:5f:11:f7:68:42:7a:7b:
f6:13:5c:22:c0:87:0b:91:be:b5:88:51:f6:b9:75:
72:01:24:b8:43:98:77:33:a6:aa:4b:89:9e:19:75:
9c:99:c3:c5:d9:32:fd:fe:c7:f3:41:07:29:ff:9d:
eb:eb:3d:0a:b2:b3:ca:e0:22:37:b4:8e:0f:cc:54:
e3:77:ce:98:4a:e2:1d:4f:73:57:4a:a6:e3:55:14:
9a:f4:3b:74:28:ee:43:eb:e6:f5:82:31:cc:62:e3:
28:d8:b9:fc:fb:56:e8:14:41:ea:7b:f0:55:d1:58:
d2:27:30:24:ee:61:98:3c:1c:be:16:22:25:72:b4:
c3:a1:05:07:11:a9:c2:7d:de:1e:60:5d:53:69:70:
59:4a:ac:03:de:6b:a6:f5:a9:e1:f8:fc:81:c9:3f:
d2:74:35:16:4f:7c:01:e2:b1:b2:0f:96:94:95:ce:
02:ab:56:d2:df:f5:ba:79:a0:23:6a:af:c8:c5:80:
75:f5:66:df:50:6a:25:a9:94:cb:5d:a3:b9:37:52:
b2:5f:34:31:9b:0d:7c:1f:a4:d0:b3:30:e5:b8:8d:
5d:20:1d:89:48:ac:0a:20:62:b4:59:c8:5b:7b:fa:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:61:95:91:AB:38:EF:D8:80:16:1D:D1:1A:BA:00:F4:BE:C8:E4:CA
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/C9E1BA1286EF11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
14.1.112.0/22
43.80.0.0-43.127.255.255
103.206.40.0/22
IPv6:
240b:4000::/27
Signature Algorithm: sha256WithRSAEncryption
c2:01:93:30:5b:3b:bb:06:e9:b5:8e:39:5c:1e:b6:6b:17:3c:
86:1e:70:7b:6c:24:e8:fd:ed:67:ee:9d:3f:ea:35:ef:09:ba:
78:9f:2e:f3:42:d6:6c:85:e7:50:a2:94:9b:8e:41:f9:0d:80:
f4:d3:48:1e:de:71:40:6e:a0:26:56:aa:9b:65:52:98:78:1d:
9b:5b:fd:15:24:c1:c1:6f:40:f2:ef:f9:5a:89:ab:7e:54:e7:
22:f8:cc:3d:7c:a0:97:25:0c:e1:25:2e:da:36:03:45:a7:d8:
41:0e:74:db:18:9f:83:b7:96:17:b5:ea:69:14:df:96:9d:85:
52:38:95:63:92:f2:4e:55:f0:26:0d:b3:65:ff:4b:61:f9:7d:
c6:cf:61:ee:4f:99:43:f2:12:c8:e9:43:59:5e:89:80:74:38:
37:f5:b2:6c:c4:75:a6:f7:39:3a:18:fb:77:5a:44:b0:a5:9f:
4a:d1:54:9a:ec:c5:dc:a0:cf:d1:d2:26:64:4a:44:db:cc:04:
f0:e8:7e:43:10:89:a9:3c:02:b6:74:53:e0:01:a3:7a:a1:e0:
05:ca:99:21:d7:b3:e8:81:8a:6d:6e:51:c2:55:38:36:4c:eb:
cd:89:c0:9c:f5:1a:6b:f3:66:40:02:3a:2b:5e:6d:f0:d4:c8:
4b:59:a2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:27:44 2026 by rpki-client