Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/B378944629EB11F1A56364AEA0833773.roa
File: B378944629EB11F1A56364AEA0833773.roa (raw, json)
Hash identifier: cAvnpeCwrI8U4iNdSNmGuh8RWfG4mN1P2I94y3MxP0E=
Subject key identifier: 54:0A:67:63:81:5C:32:D9:C5:20:37:9A:A6:1B:A9:6C:A0:D5:05:74
Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial: 0149
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/B378944629EB11F1A56364AEA0833773.roa
Signing time: Tue 28 Jul 2026 19:40:10 +0000
ROA not before: Tue 28 Jul 2026 19:40:10 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 19194
IP address blocks: 63.223.64.0/23 maxlen: 24
63.223.66.0/24 maxlen: 24
63.223.67.0/24 maxlen: 24
63.223.68.0/24 maxlen: 24
63.223.69.0/24 maxlen: 24
63.223.71.0/24 maxlen: 24
63.223.72.0/23 maxlen: 24
63.223.74.0/24 maxlen: 24
63.223.75.0/24 maxlen: 24
63.223.76.0/24 maxlen: 24
63.223.77.0/24 maxlen: 24
63.223.78.0/24 maxlen: 24
63.223.79.0/24 maxlen: 24
63.223.80.0/24 maxlen: 24
63.223.81.0/24 maxlen: 24
63.223.82.0/24 maxlen: 24
63.223.83.0/24 maxlen: 24
63.223.84.0/24 maxlen: 24
63.223.85.0/24 maxlen: 24
63.223.86.0/24 maxlen: 24
63.223.87.0/24 maxlen: 24
63.223.88.0/24 maxlen: 24
63.223.91.0/24 maxlen: 24
63.223.92.0/24 maxlen: 24
63.223.93.0/24 maxlen: 24
63.223.94.0/24 maxlen: 24
63.223.95.0/24 maxlen: 24
63.223.96.0/24 maxlen: 24
63.223.97.0/24 maxlen: 24
63.223.98.0/24 maxlen: 24
63.223.100.0/24 maxlen: 24
63.223.101.0/24 maxlen: 24
63.223.102.0/24 maxlen: 24
63.223.103.0/24 maxlen: 24
63.223.104.0/24 maxlen: 24
63.223.105.0/24 maxlen: 24
63.223.107.0/24 maxlen: 24
63.223.108.0/24 maxlen: 24
63.223.110.0/24 maxlen: 24
63.223.111.0/24 maxlen: 24
63.223.112.0/24 maxlen: 24
63.223.113.0/24 maxlen: 24
63.223.114.0/24 maxlen: 24
63.223.116.0/24 maxlen: 24
63.223.118.0/24 maxlen: 24
63.223.119.0/24 maxlen: 24
63.223.120.0/24 maxlen: 24
63.223.121.0/24 maxlen: 24
63.223.122.0/24 maxlen: 24
63.223.124.0/24 maxlen: 24
63.223.125.0/24 maxlen: 24
63.223.126.0/24 maxlen: 24
63.223.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:41:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Validity
Not Before: Jul 28 19:40:10 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a69059a-e890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:34:f1:cf:bf:84:4e:34:e4:77:d1:79:fb:
94:5d:11:a0:3e:d9:f1:5f:81:62:dd:36:1c:d3:76:
1d:07:d8:73:70:1a:69:e0:1c:7f:a9:3c:4e:b8:b1:
a5:23:b8:8c:65:f6:8d:f3:cc:77:24:1f:cb:c0:72:
6b:82:c2:ab:7f:54:5f:55:1f:27:cd:18:68:87:87:
3a:40:80:cd:e3:a3:49:d8:ee:e1:64:4a:54:9c:dc:
df:bd:33:88:7d:fd:ac:ed:89:2c:4d:86:9f:c0:f9:
4b:52:27:cb:d3:73:b7:17:2b:df:a8:75:d5:a9:57:
20:f4:99:00:a1:d6:fc:b1:94:f0:c8:29:0e:12:5c:
7d:79:c4:73:96:40:64:bf:44:22:59:25:52:86:ae:
b8:c0:59:b2:e9:0b:9c:cd:52:d1:12:3b:9f:b8:bb:
49:6c:91:bf:89:e7:0c:b5:2b:22:a9:47:75:5b:b4:
ae:75:33:8f:44:63:49:3a:fe:5d:de:3f:a5:32:cf:
92:04:f7:00:ad:67:f3:f3:84:01:a2:83:ef:92:9c:
a8:67:66:61:ac:d1:a0:02:17:e0:83:16:30:d2:a4:
7c:da:df:8d:47:4b:67:7e:27:51:ea:75:0e:79:c2:
a8:2d:9a:48:9c:fc:aa:68:9d:4a:58:7a:7a:37:8f:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0A:67:63:81:5C:32:D9:C5:20:37:9A:A6:1B:A9:6C:A0:D5:05:74
X509v3 Authority Key Identifier:
keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/B378944629EB11F1A56364AEA0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
63.223.64.0-63.223.69.255
63.223.71.0-63.223.88.255
63.223.91.0-63.223.98.255
63.223.100.0-63.223.105.255
63.223.107.0-63.223.108.255
63.223.110.0-63.223.114.255
63.223.116.0/24
63.223.118.0-63.223.122.255
63.223.124.0/22
Signature Algorithm: sha256WithRSAEncryption
90:ae:7a:74:d3:c8:90:32:fd:da:69:d4:44:68:31:84:de:cc:
0d:14:9f:ee:10:a7:f2:85:5f:1a:f9:0c:92:a9:72:d6:14:cb:
92:28:26:29:ca:f3:b3:6e:17:c2:f0:42:1f:fc:2e:70:3b:93:
7f:b7:76:71:be:16:b2:09:d7:58:ea:08:66:8a:0c:36:f5:eb:
82:63:48:34:95:51:14:0b:46:7a:9a:56:1a:f5:86:ab:ba:12:
37:a2:b1:2f:46:b5:d5:8a:06:69:c0:99:ff:68:88:f0:40:57:
71:4e:ab:4f:ac:37:72:68:ee:5f:48:3b:35:7d:00:34:1b:92:
e6:88:b8:c1:29:89:6b:cc:c7:b7:2f:cb:20:30:ed:be:e3:28:
f6:7a:b7:55:0a:df:0e:23:41:30:f4:86:d5:3d:a9:2b:ba:20:
bf:1c:5e:05:fb:4b:90:13:08:c8:1f:c2:e5:33:02:d1:14:eb:
d3:3c:c2:57:56:d9:71:37:e6:e8:1c:6a:83:c3:25:6f:a6:6c:
ef:b6:e3:5b:41:f7:a2:66:4f:f3:a5:97:33:65:cc:c4:ae:7f:
7f:fc:c7:96:31:15:21:e8:43:7e:89:64:79:9b:ea:1d:1d:d2:
f5:6a:0b:2e:0f:83:19:70:64:c8:fb:7b:64:9d:cd:33:d0:0a:
4f:62:9f:f8
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5
MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDEwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY5MDU5YS1lODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuxU08c+/hE405HfRefuUXRGgPtnxX4Fi3TYc03YdB9hzcBpp4Bx/qTxOuLGl
I7iMZfaN88x3JB/LwHJrgsKrf1RfVR8nzRhoh4c6QIDN46NJ2O7hZEpUnNzfvTOI
ff2s7YksTYafwPlLUifL03O3FyvfqHXVqVcg9JkAodb8sZTwyCkOElx9ecRzlkBk
v0QiWSVShq64wFmy6QuczVLREjufuLtJbJG/iecMtSsiqUd1W7SudTOPRGNJOv5d
3j+lMs+SBPcArWfz84QBooPvkpyoZ2ZhrNGgAhfggxYw0qR82t+NR0tnfidR6nUO
ecKoLZpInPyqaJ1KWHp6N4+E8QIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFFQKZ2OB
XDLZxSA3mqYbqWyg1QV0MB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5
NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvQjM3ODk0NDYy
OUVCMTFGMUE1NjM2NEFFQTA4MzM3NzMucm9hMIGHBggrBgEFBQcBBwEB/wR4MHYw
dAQCAAEwbjAMAwQGP99AAwQBP99EMAwDBAA/30cDBAA/31gwDAMEAD/fWwMEAD/f
YjAMAwQCP99kAwQBP99oMAwDBAA/32sDBAA/32wwDAMEAT/fbgMEAD/fcgMEAD/f
dDAMAwQBP992AwQAP996AwQCP998MA0GCSqGSIb3DQEBCwUAA4IBAQCQrnp008iQ
Mv3aadREaDGE3swNFJ/uEKfyhV8a+QySqXLWFMuSKCYpyvOzbhfC8EIf/C5wO5N/
t3ZxvhayCddY6ghmigw29euCY0g0lVEUC0Z6mlYa9YaruhI3orEvRrXVigZpwJn/
aIjwQFdxTqtPrDdyaO5fSDs1fQA0G5LmiLjBKYlrzMe3L8sgMO2+4yj2erdVCt8O
I0Ew9IbVPakruiC/HF4F+0uQEwjIH8LlMwLRFOvTPMJXVtlxN+boHGqDwyVvpmzv
tuNbQfeiZk/zpZczZczErn9//MeWMRUh6EN+iWR5m+odHdL1agsuD4MZcGTI+3tk
nc0z0ApPYp/4
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:35 2026 by rpki-client