Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/B378944629EB11F1A56364AEA0833773.roa
File: B378944629EB11F1A56364AEA0833773.roa (raw, json)
Hash identifier: KkMaEoLHjubBV4dCwUvtTWe/P7nP2jglmLjaZO3foA4=
Subject key identifier: 68:BB:D7:5A:A3:62:3E:13:24:51:C3:EF:C3:67:22:48:15:97:EE:9E
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 0122
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/B378944629EB11F1A56364AEA0833773.roa
Signing time: Fri 12 Jun 2026 07:14:18 +0000
ROA not before: Fri 12 Jun 2026 07:14:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 19194
IP address blocks: 63.223.64.0/23 maxlen: 24
63.223.66.0/24 maxlen: 24
63.223.67.0/24 maxlen: 24
63.223.68.0/24 maxlen: 24
63.223.69.0/24 maxlen: 24
63.223.71.0/24 maxlen: 24
63.223.72.0/23 maxlen: 24
63.223.74.0/24 maxlen: 24
63.223.75.0/24 maxlen: 24
63.223.76.0/24 maxlen: 24
63.223.77.0/24 maxlen: 24
63.223.78.0/24 maxlen: 24
63.223.79.0/24 maxlen: 24
63.223.80.0/24 maxlen: 24
63.223.81.0/24 maxlen: 24
63.223.82.0/24 maxlen: 24
63.223.83.0/24 maxlen: 24
63.223.84.0/24 maxlen: 24
63.223.85.0/24 maxlen: 24
63.223.86.0/24 maxlen: 24
63.223.87.0/24 maxlen: 24
63.223.88.0/24 maxlen: 24
63.223.91.0/24 maxlen: 24
63.223.92.0/24 maxlen: 24
63.223.93.0/24 maxlen: 24
63.223.94.0/24 maxlen: 24
63.223.95.0/24 maxlen: 24
63.223.96.0/24 maxlen: 24
63.223.97.0/24 maxlen: 24
63.223.98.0/24 maxlen: 24
63.223.100.0/24 maxlen: 24
63.223.101.0/24 maxlen: 24
63.223.102.0/24 maxlen: 24
63.223.103.0/24 maxlen: 24
63.223.104.0/24 maxlen: 24
63.223.105.0/24 maxlen: 24
63.223.107.0/24 maxlen: 24
63.223.108.0/24 maxlen: 24
63.223.110.0/24 maxlen: 24
63.223.111.0/24 maxlen: 24
63.223.112.0/24 maxlen: 24
63.223.113.0/24 maxlen: 24
63.223.114.0/24 maxlen: 24
63.223.116.0/24 maxlen: 24
63.223.118.0/24 maxlen: 24
63.223.119.0/24 maxlen: 24
63.223.120.0/24 maxlen: 24
63.223.121.0/24 maxlen: 24
63.223.122.0/24 maxlen: 24
63.223.124.0/24 maxlen: 24
63.223.125.0/24 maxlen: 24
63.223.126.0/24 maxlen: 24
63.223.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jun 12 07:14:18 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6a2bb1ca-e160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:74:83:7c:c8:1f:e4:bd:6b:14:66:64:34:
fc:6e:ca:5d:b9:7f:f6:48:78:73:1d:c1:8e:a9:81:
a6:f9:a1:d3:9c:a4:2e:b8:38:4e:51:d2:9e:17:d1:
d4:ad:51:d6:23:5f:d2:0a:cf:99:85:6b:76:53:71:
2b:94:69:dd:f5:39:2c:2e:db:15:4d:ac:e2:24:bc:
7e:58:54:f4:6e:58:00:55:99:1f:cb:69:07:55:c9:
c5:65:e6:4b:c8:e8:80:e5:05:49:7f:3a:32:ff:a2:
2c:6b:ba:ce:4f:14:07:3d:17:e2:eb:86:88:59:ce:
23:30:bb:41:ca:dd:90:a5:99:ac:16:04:0b:b7:be:
82:9e:85:25:49:56:22:5c:37:c8:21:42:53:18:85:
9f:7d:29:1e:94:71:08:69:0e:8f:b8:77:5c:c5:dc:
3c:4f:32:08:e5:30:4f:f7:a2:4a:37:4b:8f:a9:e5:
9d:91:e9:f6:db:52:a3:fa:4f:1a:22:25:6c:62:8b:
6e:7b:61:4c:94:fc:e4:c5:51:6b:2e:6b:1c:1f:e6:
90:3d:36:9a:0c:d7:fe:34:3a:f9:09:3f:49:10:44:
ee:c2:64:92:d9:86:fd:e5:f9:6c:59:52:99:5c:6f:
15:f7:d2:eb:a3:ff:dd:0c:2e:f1:4d:46:7b:e0:f0:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BB:D7:5A:A3:62:3E:13:24:51:C3:EF:C3:67:22:48:15:97:EE:9E
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/B378944629EB11F1A56364AEA0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
63.223.64.0-63.223.69.255
63.223.71.0-63.223.88.255
63.223.91.0-63.223.98.255
63.223.100.0-63.223.105.255
63.223.107.0-63.223.108.255
63.223.110.0-63.223.114.255
63.223.116.0/24
63.223.118.0-63.223.122.255
63.223.124.0/22
Signature Algorithm: sha256WithRSAEncryption
63:20:55:5a:be:0f:8e:e6:e4:78:df:70:e9:41:13:44:ae:5a:
fa:a8:6f:df:39:73:bd:77:60:bc:f2:2c:28:1d:11:b1:ce:89:
18:e0:a5:1e:b8:5e:38:8b:83:b3:c9:1e:e2:cf:99:de:9f:81:
f3:a5:32:9a:c9:7b:0e:a4:a5:4c:d6:28:69:33:d8:de:ff:c3:
bc:ef:70:dc:e4:a5:4e:31:93:77:66:4e:73:5e:ba:7f:d5:dd:
16:42:ad:30:81:38:eb:94:9d:91:2e:2a:66:6e:40:af:2c:a8:
1e:cc:b3:cb:6b:33:6f:19:af:60:dd:e1:64:0d:e4:21:68:03:
52:08:1d:24:bc:a3:ed:95:1c:09:ad:1c:46:93:95:3a:10:2a:
8e:55:c5:5c:85:98:43:84:04:81:05:19:08:f3:17:13:35:dc:
5c:8d:b7:f0:b0:16:a8:c0:63:e3:2c:89:61:73:e3:a8:10:99:
40:ff:aa:a8:74:72:70:9e:36:df:44:2c:12:9d:0d:4b:1b:48:
c0:dc:d4:b7:20:4e:3a:d9:1d:12:dd:e0:2c:1d:c3:22:7d:71:
2a:68:f3:0e:4f:55:fd:ff:44:f1:81:3c:4e:2e:8d:e0:30:f4:
a0:78:18:64:01:7e:42:02:d1:aa:d9:e2:91:68:dd:3f:03:da:
d5:d8:30:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:49:31 2026 by rpki-client