Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CC2D8BDE86EF11F19E006003A7EE528E.roa
File: CC2D8BDE86EF11F19E006003A7EE528E.roa (raw, json)
Hash identifier: d4i+z1Mv2GtUqNC8gLCSYFchOfSALA1lnJbOM2UDKmA=
Subject key identifier: 75:55:A0:76:A4:C1:D8:85:8F:F1:57:F2:02:37:A3:71:C5:E5:61:FD
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 2016
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CC2D8BDE86EF11F19E006003A7EE528E.roa
Signing time: Mon 27 Jul 2026 07:14:17 +0000
ROA not before: Mon 27 Jul 2026 07:14:17 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45102
IP address blocks: 14.1.112.0/22 maxlen: 24
43.0.0.0/9 maxlen: 15
43.80.0.0/16 maxlen: 24
43.81.0.0/16 maxlen: 24
43.82.0.0/16 maxlen: 24
43.83.0.0/16 maxlen: 24
43.84.0.0/16 maxlen: 24
43.85.0.0/16 maxlen: 24
43.86.0.0/16 maxlen: 24
43.87.0.0/16 maxlen: 24
43.88.0.0/16 maxlen: 24
43.89.0.0/16 maxlen: 24
43.90.0.0/16 maxlen: 24
43.91.0.0/16 maxlen: 24
43.92.0.0/16 maxlen: 24
43.93.0.0/16 maxlen: 24
43.94.0.0/16 maxlen: 24
43.95.0.0/16 maxlen: 24
43.96.0.0/16 maxlen: 24
43.97.0.0/16 maxlen: 24
43.98.0.0/16 maxlen: 24
43.99.0.0/16 maxlen: 24
43.100.0.0/16 maxlen: 24
43.101.0.0/16 maxlen: 24
43.102.0.0/16 maxlen: 24
43.103.0.0/16 maxlen: 24
43.104.0.0/16 maxlen: 24
43.105.0.0/16 maxlen: 24
43.106.0.0/16 maxlen: 24
43.107.0.0/16 maxlen: 24
43.108.0.0/16 maxlen: 24
43.109.0.0/16 maxlen: 24
43.110.0.0/16 maxlen: 24
43.111.0.0/16 maxlen: 24
43.112.0.0/16 maxlen: 24
43.113.0.0/16 maxlen: 24
43.114.0.0/16 maxlen: 24
43.115.0.0/16 maxlen: 24
43.116.0.0/16 maxlen: 24
43.117.0.0/16 maxlen: 24
43.118.0.0/16 maxlen: 24
43.119.0.0/16 maxlen: 24
43.120.0.0/16 maxlen: 24
43.121.0.0/16 maxlen: 24
43.122.0.0/16 maxlen: 24
43.123.0.0/16 maxlen: 24
43.124.0.0/16 maxlen: 24
43.125.0.0/16 maxlen: 24
43.126.0.0/16 maxlen: 24
43.127.0.0/16 maxlen: 24
103.206.40.0/22 maxlen: 24
2404:2280::/32 maxlen: 48
240b:4000::/22 maxlen: 31
240b:4000::/32 maxlen: 48
240b:4001::/32 maxlen: 40
240b:4002::/32 maxlen: 48
240b:4003::/32 maxlen: 48
240b:4004::/32 maxlen: 48
240b:4005::/32 maxlen: 48
240b:4006::/32 maxlen: 48
240b:4007::/32 maxlen: 48
240b:4008::/32 maxlen: 48
240b:4009::/32 maxlen: 48
240b:400a::/32 maxlen: 48
240b:400b::/32 maxlen: 48
240b:400c::/32 maxlen: 48
240b:400d::/32 maxlen: 48
240b:400e::/32 maxlen: 48
240b:400f::/32 maxlen: 48
240b:4010::/32 maxlen: 48
240b:4011::/32 maxlen: 48
240b:4012::/32 maxlen: 48
240b:4013::/32 maxlen: 48
240b:4014::/32 maxlen: 48
240b:4015::/32 maxlen: 48
240b:4016::/32 maxlen: 48
240b:4017::/32 maxlen: 48
240b:4018::/32 maxlen: 48
240b:4019::/32 maxlen: 48
240b:401a::/32 maxlen: 48
240b:401b::/32 maxlen: 48
240b:401c::/32 maxlen: 48
240b:401d::/32 maxlen: 48
240b:401e::/32 maxlen: 48
240b:401f::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8214 (0x2016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Jul 27 07:14:17 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a670549-2caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:65:e4:7c:4a:ee:08:af:02:ad:b3:bf:7f:
04:8b:6b:28:fb:ec:46:46:9d:3f:1b:3c:7c:42:5c:
0f:99:05:1a:c3:7e:dd:71:e8:e6:33:ab:de:a3:b5:
7b:c0:a4:ab:ca:6d:a8:cc:32:7e:1a:08:0a:48:bb:
a9:f7:1c:70:ad:57:d1:0f:eb:1b:47:87:fd:09:4e:
2b:2a:ce:11:ba:e3:eb:f4:20:b5:20:a6:08:f0:37:
02:4d:d3:ae:30:42:6a:9f:86:ad:06:52:8d:86:76:
b8:33:9b:34:25:1a:54:41:b9:98:1a:b2:f6:33:05:
fb:67:8f:0c:ad:34:0e:24:da:ec:f8:95:a8:86:df:
2f:c8:ba:ca:18:2c:e8:49:c0:8b:82:b6:3f:90:4f:
95:23:39:88:18:8c:85:33:bb:42:55:c6:eb:c1:96:
59:98:09:06:57:e1:01:7f:2d:42:b9:52:29:0b:ae:
c0:73:8c:46:a9:05:e1:cb:6b:ec:9a:e7:f4:4f:d7:
0e:16:4a:56:63:fc:a0:b2:17:cd:66:c6:66:04:a7:
e4:6e:c4:64:cd:8d:14:68:ab:2d:2c:5c:4e:05:13:
fd:2d:01:d1:d2:03:17:ed:57:a9:03:75:53:11:28:
c9:84:d4:8c:0c:4e:83:ad:b4:68:ea:2f:95:00:9a:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:A0:76:A4:C1:D8:85:8F:F1:57:F2:02:37:A3:71:C5:E5:61:FD
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/CC2D8BDE86EF11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
14.1.112.0/22
43.0.0.0/9
103.206.40.0/22
IPv6:
2404:2280::/32
240b:4000::/22
Signature Algorithm: sha256WithRSAEncryption
65:8c:26:c9:b8:9b:36:44:51:1b:82:91:85:0b:d9:f8:ab:eb:
0a:a9:f7:87:2a:c1:7c:35:12:cd:97:b2:d4:e3:e3:2c:a6:5f:
54:7f:f6:e6:16:a3:83:42:1d:0f:58:3e:63:fb:be:46:5b:6a:
4d:04:8d:d3:42:e5:2a:07:79:89:d2:1b:32:10:a1:80:71:52:
63:25:91:82:3d:59:a1:d1:55:f0:0c:66:1b:68:f5:e0:40:21:
39:5b:58:61:46:2d:ae:9b:6d:0e:c0:8a:dc:28:93:24:93:bc:
d5:7b:ca:78:b1:10:fb:09:69:85:f4:3c:87:eb:3f:45:0f:de:
47:0c:8a:ff:b6:1f:d4:4c:17:5a:79:1a:eb:31:61:fc:b1:43:
9f:62:3b:f0:84:f9:d6:c6:94:ba:68:96:6d:0c:59:c5:eb:64:
d0:2d:f7:1c:f2:2e:f0:2d:d9:10:ed:80:66:2b:62:f4:ba:15:
26:6c:38:92:d3:59:e6:0c:14:4d:20:d8:71:55:f2:c2:46:bd:
58:88:42:75:f9:e6:32:6b:df:33:ac:0b:11:a4:96:5b:7f:12:
51:78:ab:cd:03:c9:f5:25:52:40:3d:a5:fd:bc:d6:ba:31:af:
2e:8d:84:25:38:1a:ea:2f:43:31:7f:08:b6:13:67:a6:d6:f8:
0a:5a:84:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:02:30 2026 by rpki-client