Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/769A6D0C29EA11F19F51207DA0833773.roa
File: 769A6D0C29EA11F19F51207DA0833773.roa (raw, json)
Hash identifier: XcjhinNbZJy1c41oN0q9J25LNTzXS/kfkrE7fESwpr4=
Subject key identifier: DA:E6:F9:91:A3:BA:0D:BC:35:66:83:A7:A5:52:03:DE:BC:BB:72:D7
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 014A
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/769A6D0C29EA11F19F51207DA0833773.roa
Signing time: Tue 28 Jul 2026 19:40:12 +0000
ROA not before: Tue 28 Jul 2026 19:40:12 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 198148
IP address blocks: 63.217.120.0/22 maxlen: 22
63.218.156.0/23 maxlen: 23
63.222.52.0/24 maxlen: 24
63.222.105.0/24 maxlen: 24
63.222.106.0/24 maxlen: 24
63.222.184.0/21 maxlen: 21
63.222.184.0/24 maxlen: 24
63.222.185.0/24 maxlen: 24
63.222.186.0/24 maxlen: 24
63.222.187.0/24 maxlen: 24
63.222.188.0/24 maxlen: 24
63.222.189.0/24 maxlen: 24
63.222.190.0/24 maxlen: 24
63.222.191.0/24 maxlen: 24
63.222.200.0/21 maxlen: 21
63.222.200.0/24 maxlen: 24
63.222.201.0/24 maxlen: 24
63.222.202.0/24 maxlen: 24
63.222.203.0/24 maxlen: 24
63.222.204.0/24 maxlen: 24
63.222.205.0/24 maxlen: 24
63.222.206.0/24 maxlen: 24
63.222.207.0/24 maxlen: 24
63.222.208.0/21 maxlen: 21
63.222.208.0/24 maxlen: 24
63.222.209.0/24 maxlen: 24
63.222.210.0/24 maxlen: 24
63.222.211.0/24 maxlen: 24
63.222.212.0/24 maxlen: 24
63.222.213.0/24 maxlen: 24
63.222.214.0/24 maxlen: 24
63.222.215.0/24 maxlen: 24
63.222.216.0/21 maxlen: 21
63.222.216.0/24 maxlen: 24
63.222.217.0/24 maxlen: 24
63.222.218.0/24 maxlen: 24
63.222.219.0/24 maxlen: 24
63.222.220.0/24 maxlen: 24
63.222.221.0/24 maxlen: 24
63.222.222.0/24 maxlen: 24
63.222.223.0/24 maxlen: 24
63.222.248.0/21 maxlen: 21
63.222.248.0/24 maxlen: 24
63.222.249.0/24 maxlen: 24
63.222.250.0/24 maxlen: 24
63.222.251.0/24 maxlen: 24
63.222.252.0/24 maxlen: 24
63.222.253.0/24 maxlen: 24
63.222.254.0/24 maxlen: 24
63.222.255.0/24 maxlen: 24
63.223.27.0/24 maxlen: 24
65.72.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:40:12 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a69059c-4dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:d0:67:64:a1:bb:01:02:87:eb:a2:af:f3:
c0:7f:70:18:1b:57:3d:97:45:72:54:a3:30:65:85:
63:25:75:2f:5d:90:77:7f:56:13:64:24:7a:b4:f4:
21:d7:ea:78:a4:61:db:0a:57:00:08:b9:73:1e:06:
8d:61:67:b0:eb:a5:cb:cf:dd:cc:32:28:d8:8d:d7:
dc:27:4d:7c:5d:72:99:7d:de:c2:a6:64:5d:79:78:
4c:1f:05:61:f5:f6:d1:3d:21:85:01:4e:bb:ea:a2:
fa:da:54:45:17:3b:1c:93:51:b8:09:27:9d:bc:39:
f6:77:e7:4f:2a:7c:1a:9f:09:f4:6d:25:ca:27:4e:
1c:f3:cb:3c:86:8c:c7:71:9e:9f:1e:06:aa:30:2a:
d0:ae:77:d1:d4:f2:08:f9:77:48:08:18:ea:df:e9:
dc:48:bc:81:d5:75:63:73:32:ad:cd:bb:ab:00:b3:
37:4a:b0:f5:fe:a8:8b:b8:2f:60:37:27:e3:30:2d:
fb:e5:bb:a2:d4:3e:1a:91:c4:aa:4d:dc:9f:55:90:
30:51:1a:8a:ec:ad:10:66:7e:0a:f5:bc:b6:bd:eb:
29:76:cb:02:5d:72:a6:8c:ef:39:b0:19:6f:4a:d3:
75:cb:04:58:7a:3c:bf:5d:2a:77:b7:fe:48:c7:8c:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E6:F9:91:A3:BA:0D:BC:35:66:83:A7:A5:52:03:DE:BC:BB:72:D7
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/769A6D0C29EA11F19F51207DA0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
63.217.120.0/22
63.218.156.0/23
63.222.52.0/24
63.222.105.0-63.222.106.255
63.222.184.0/21
63.222.200.0-63.222.223.255
63.222.248.0/21
63.223.27.0/24
65.72.64.0/20
Signature Algorithm: sha256WithRSAEncryption
37:e5:97:f6:94:be:51:21:a1:a6:f3:2c:fb:07:be:9a:8c:da:
98:d1:d9:93:8d:44:44:e2:b0:8c:b2:d6:4d:38:08:c0:91:92:
ff:3d:3d:31:3f:e8:15:33:ed:3f:99:9f:95:8d:65:87:60:1d:
4e:ef:44:b6:b8:5d:dc:53:34:aa:69:c3:99:4d:f1:82:b2:4b:
11:d9:c0:81:c0:ad:57:7a:f0:02:fd:e6:1f:6f:a6:eb:38:8f:
72:40:b3:7a:fa:a4:e2:f1:98:87:51:38:64:1f:e0:5d:75:20:
b3:f5:8e:c4:56:58:75:15:42:28:fe:20:52:e6:4d:a6:b6:ef:
86:d2:ba:16:04:c4:cb:9e:36:ea:6e:df:a7:18:f7:ec:24:98:
b4:38:4f:db:6f:1e:e4:c9:7f:11:97:db:da:5d:b1:ae:02:4d:
bb:af:64:ef:64:69:80:1c:ed:80:57:55:a0:08:89:38:ee:4e:
a7:0c:33:04:e1:ca:ce:29:e0:81:ec:3c:24:5f:a0:0e:63:7d:
79:cb:39:7a:1d:21:ea:66:1d:a2:9e:33:dd:1d:c1:71:0c:74:
fc:4b:5f:dc:5c:d4:95:57:a4:08:00:da:1f:74:6c:ea:6d:b2:
ae:70:85:8c:99:f8:8b:1d:e9:ee:68:cd:dd:d4:be:c1:ed:0c:
4d:2d:39:61
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5
MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDEyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5MDU5Yy00ZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAydfQZ2ShuwECh+uir/PAf3AYG1c9l0VyVKMwZYVjJXUvXZB3f1YTZCR6tPQh
1+p4pGHbClcACLlzHgaNYWew66XLz93MMijYjdfcJ018XXKZfd7CpmRdeXhMHwVh
9fbRPSGFAU676qL62lRFFzsck1G4CSedvDn2d+dPKnwanwn0bSXKJ04c88s8hozH
cZ6fHgaqMCrQrnfR1PII+XdICBjq3+ncSLyB1XVjczKtzburALM3SrD1/qiLuC9g
NyfjMC375bui1D4akcSqTdyfVZAwURqK7K0QZn4K9by2vespdssCXXKmjO85sBlv
StN1ywRYejy/XSp3t/5Ix4xaTwIDAQABo4ICoDCCApwwHQYDVR0OBBYEFNrm+ZGj
ug28NWaDp6VSA968u3LXMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5
NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvNzY5QTZEMEMy
OUVBMTFGMTlGNTEyMDdEQTA4MzM3NzMucm9hMF8GCCsGAQUFBwEHAQH/BFAwTjBM
BAIAATBGAwQCP9l4AwQBP9qcAwQAP940MAwDBAA/3mkDBAA/3moDBAM/3rgwDAME
Az/eyAMEBT/ewAMEAz/e+AMEAD/fGwMEBEFIQDANBgkqhkiG9w0BAQsFAAOCAQEA
N+WX9pS+USGhpvMs+we+mozamNHZk41EROKwjLLWTTgIwJGS/z09MT/oFTPtP5mf
lY1lh2AdTu9Etrhd3FM0qmnDmU3xgrJLEdnAgcCtV3rwAv3mH2+m6ziPckCzevqk
4vGYh1E4ZB/gXXUgs/WOxFZYdRVCKP4gUuZNprbvhtK6FgTEy5426m7fpxj37CSY
tDhP228e5Ml/EZfb2l2xrgJNu69k72RpgBztgFdVoAiJOO5OpwwzBOHKzinggew8
JF+gDmN9ecs5eh0h6mYdop4z3R3BcQx0/Etf3FzUlVekCADaH3Rs6m2yrnCFjJn4
ix3p7mjN3dS+we0MTS05YQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:57:19 2026 by rpki-client