Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa
File: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (raw, json)
Hash identifier: xyMhDnjS1J7j5KhCCxE7FkpfD0zlq+Ub21i1KmDM4ok=
Subject key identifier: 2A:AC:92:57:7C:AC:81:A6:E7:B5:54:6C:4E:EC:E1:0F:EB:46:BC:DD
Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial: 0B66
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:47:33 +0000
ROA not before: Wed 02 Jul 2025 20:29:46 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 9381
IP address blocks: 14.136.0.0/16 maxlen: 24
14.198.0.0/17 maxlen: 24
14.198.128.0/18 maxlen: 24
14.198.192.0/19 maxlen: 24
14.198.224.0/20 maxlen: 24
14.199.0.0/16 maxlen: 24
43.224.232.0/22 maxlen: 24
58.176.0.0/15 maxlen: 15
58.176.0.0/16 maxlen: 24
58.177.0.0/16 maxlen: 24
59.148.0.0/15 maxlen: 15
59.148.0.0/16 maxlen: 24
59.149.0.0/16 maxlen: 24
61.92.0.0/15 maxlen: 15
61.92.0.0/16 maxlen: 24
61.93.0.0/16 maxlen: 24
61.238.0.0/15 maxlen: 15
61.238.0.0/16 maxlen: 24
61.239.0.0/16 maxlen: 24
61.244.0.0/16 maxlen: 24
103.243.0.0/22 maxlen: 24
110.235.0.0/17 maxlen: 24
119.246.0.0/15 maxlen: 15
119.246.0.0/16 maxlen: 24
119.247.0.0/16 maxlen: 24
123.202.0.0/15 maxlen: 15
123.202.0.0/16 maxlen: 24
123.203.0.0/16 maxlen: 24
124.244.0.0/16 maxlen: 24
183.178.0.0/15 maxlen: 15
183.178.0.0/16 maxlen: 24
183.179.0.0/16 maxlen: 24
202.77.4.0/22 maxlen: 24
202.77.24.0/21 maxlen: 24
202.77.32.0/19 maxlen: 24
203.80.64.0/18 maxlen: 24
203.80.192.0/18 maxlen: 24
203.185.0.0/18 maxlen: 24
203.186.0.0/16 maxlen: 24
210.6.0.0/16 maxlen: 24
2401:f400::/32 maxlen: 32
2403:f500::/32 maxlen: 32
2403:f500::/35 maxlen: 35
2403:f500:2000::/35 maxlen: 35
2403:f500:6000::/35 maxlen: 35
2403:f500:8000::/35 maxlen: 35
2403:f500:a000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2918 (0xb66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Validity
Not Before: Jul 2 20:29:46 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47bb5-4290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:99:d2:4b:46:13:e2:d6:08:b0:db:d6:59:
3a:22:b3:e2:19:ea:6a:9c:36:47:a4:6e:67:9a:69:
27:d9:66:d8:2e:f6:73:24:ad:82:e3:36:2d:4d:aa:
9e:97:64:63:4c:88:9f:f3:01:db:c2:d3:74:37:e2:
a6:91:8d:a2:6c:0a:3f:2c:b4:f4:80:59:27:a7:ea:
a1:7d:c0:52:8b:f2:60:d7:c2:cc:e8:e6:31:02:5a:
36:e8:69:3f:04:67:cd:b4:73:1e:f5:c9:a3:ce:5c:
84:cd:2c:35:91:41:b0:86:90:9d:b6:5b:99:eb:04:
d3:b1:1d:21:e5:77:12:48:63:bb:4f:1e:5f:38:5b:
20:b0:0f:7c:fc:dc:9d:93:11:93:dd:d2:72:17:c3:
1b:03:10:09:12:68:33:90:ad:71:c8:d4:42:b0:67:
66:90:1c:1e:b8:74:4c:a0:08:f3:28:77:ec:0f:f7:
b5:26:43:7a:19:b3:3f:5e:a1:be:cf:b9:8c:7d:71:
1b:ca:90:3b:42:e9:80:17:e5:4b:67:32:98:ea:41:
8b:21:7d:cd:34:9e:0a:79:1b:11:c8:99:16:bc:b0:
88:91:1a:b9:bb:47:61:bf:4a:2b:fe:89:cf:cc:ff:
32:86:8f:0d:a2:09:51:95:2c:60:89:fd:de:6f:01:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AC:92:57:7C:AC:81:A6:E7:B5:54:6C:4E:EC:E1:0F:EB:46:BC:DD
X509v3 Authority Key Identifier:
keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.136.0.0/16
14.198.0.0-14.198.239.255
14.199.0.0/16
43.224.232.0/22
58.176.0.0/15
59.148.0.0/15
61.92.0.0/15
61.238.0.0/15
61.244.0.0/16
103.243.0.0/22
110.235.0.0/17
119.246.0.0/15
123.202.0.0/15
124.244.0.0/16
183.178.0.0/15
202.77.4.0/22
202.77.24.0-202.77.63.255
203.80.64.0/18
203.80.192.0/18
203.185.0.0/18
203.186.0.0/16
210.6.0.0/16
IPv6:
2401:f400::/32
2403:f500::/32
Signature Algorithm: sha256WithRSAEncryption
9f:9a:74:5b:9b:d5:df:d9:95:d3:63:bc:e3:0a:6b:99:f0:fb:
62:76:6b:18:b8:c3:82:65:63:9e:1b:4e:f3:7f:58:0c:d4:a8:
66:39:2c:98:ad:c1:80:3f:8f:9c:49:d6:06:a7:00:52:0d:8c:
91:66:f6:dc:0b:75:1e:16:22:8e:e0:e8:86:14:fe:0c:f2:77:
4a:ea:ac:6b:30:2f:74:be:0c:b3:de:5b:90:ea:fb:13:fe:df:
8d:e7:4b:5c:29:dd:6a:74:4e:95:f8:e5:ac:14:72:26:28:a4:
4c:ce:42:8a:d0:3a:e2:bd:68:ef:93:cb:82:76:14:e7:d9:bb:
89:c0:10:7a:7c:5e:f0:11:81:dd:dd:31:89:9f:b8:c7:97:64:
f8:45:b3:7b:d9:f6:94:32:44:58:d9:c6:64:0e:f9:0d:4e:cc:
5e:6e:88:ba:dd:e4:09:d3:59:6d:04:6e:79:49:ff:73:10:52:
97:8f:4d:61:81:db:1e:a6:1e:75:78:4a:3b:bd:22:95:cc:3d:
0a:28:34:f4:f8:4c:3e:ce:30:ea:45:9c:39:1b:f9:bc:ec:61:
8d:71:ed:7f:77:40:fe:45:be:a2:aa:7e:54:48:61:dd:31:56:
a6:4a:a5:ad:f9:26:db:84:bb:63:84:0f:ef:7e:cc:3b:39:47:
e5:58:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:46 2026 by rpki-client