Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/FFB3EF94F53C11EEA5B4623BC4F9AE02.roa
File: FFB3EF94F53C11EEA5B4623BC4F9AE02.roa (raw, json)
Hash identifier: hXU0fMhszniiWKFHeS7FN4UDxH+8VvBrl1drFmVTTHE=
Subject key identifier: 56:ED:8F:9D:38:60:0E:38:97:C0:A9:84:8A:33:95:B7:AC:8D:5B:8D
Certificate issuer: /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Certificate serial: 0916
Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/FFB3EF94F53C11EEA5B4623BC4F9AE02.roa
Signing time: Wed 08 Apr 2026 20:26:28 +0000
ROA not before: Wed 08 Apr 2026 20:26:28 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9738
IP address blocks: 61.14.96.0/19 maxlen: 19
61.14.96.0/23 maxlen: 24
61.14.98.0/23 maxlen: 24
61.14.100.0/24 maxlen: 24
61.14.101.0/24 maxlen: 24
61.14.102.0/23 maxlen: 24
61.14.104.0/24 maxlen: 24
61.14.105.0/24 maxlen: 24
61.14.106.0/24 maxlen: 24
61.14.107.0/24 maxlen: 24
61.14.108.0/24 maxlen: 24
61.14.109.0/24 maxlen: 24
61.14.110.0/24 maxlen: 24
61.14.111.0/24 maxlen: 24
61.14.112.0/24 maxlen: 24
61.14.113.0/24 maxlen: 24
61.14.114.0/24 maxlen: 24
61.14.115.0/24 maxlen: 24
61.14.116.0/24 maxlen: 24
61.14.117.0/24 maxlen: 24
61.14.118.0/24 maxlen: 24
61.14.119.0/24 maxlen: 24
61.14.121.0/24 maxlen: 24
61.14.122.0/24 maxlen: 24
61.14.123.0/24 maxlen: 24
61.14.127.0/24 maxlen: 24
103.28.196.0/22 maxlen: 22
103.28.196.0/23 maxlen: 23
103.28.198.0/23 maxlen: 23
202.148.224.0/21 maxlen: 21
202.148.224.0/24 maxlen: 24
202.148.225.0/24 maxlen: 24
202.148.226.0/24 maxlen: 24
202.148.227.0/24 maxlen: 24
202.148.228.0/24 maxlen: 24
202.148.229.0/24 maxlen: 24
202.148.231.0/24 maxlen: 24
202.148.232.0/24 maxlen: 24
202.148.233.0/24 maxlen: 24
202.148.234.0/23 maxlen: 23
202.148.234.0/24 maxlen: 24
202.148.235.0/24 maxlen: 24
202.148.236.0/22 maxlen: 22
202.148.236.0/23 maxlen: 24
202.148.238.0/24 maxlen: 24
202.148.239.0/24 maxlen: 24
203.19.157.0/24 maxlen: 24
210.18.192.0/22 maxlen: 24
210.18.196.0/24 maxlen: 24
210.18.197.0/24 maxlen: 24
210.18.198.0/24 maxlen: 24
210.18.199.0/24 maxlen: 24
210.18.200.0/24 maxlen: 24
210.18.201.0/24 maxlen: 24
210.18.202.0/23 maxlen: 23
210.18.202.0/24 maxlen: 24
210.18.203.0/24 maxlen: 24
210.18.204.0/22 maxlen: 22
210.18.204.0/24 maxlen: 24
210.18.205.0/24 maxlen: 24
210.18.207.0/24 maxlen: 24
210.18.208.0/20 maxlen: 21
210.18.208.0/23 maxlen: 24
210.18.210.0/23 maxlen: 24
210.18.212.0/23 maxlen: 24
210.18.214.0/23 maxlen: 24
210.18.216.0/21 maxlen: 24
210.18.224.0/20 maxlen: 20
210.18.224.0/21 maxlen: 21
210.18.227.0/24 maxlen: 24
210.18.232.0/24 maxlen: 24
210.18.233.0/24 maxlen: 24
210.18.234.0/23 maxlen: 24
210.18.236.0/22 maxlen: 22
210.18.236.0/24 maxlen: 24
210.18.237.0/24 maxlen: 24
210.18.238.0/24 maxlen: 24
210.18.239.0/24 maxlen: 24
210.18.240.0/24 maxlen: 24
210.18.241.0/24 maxlen: 24
210.18.242.0/24 maxlen: 24
210.18.243.0/24 maxlen: 24
210.18.244.0/22 maxlen: 22
210.18.248.0/23 maxlen: 23
210.18.248.0/24 maxlen: 24
210.18.250.0/23 maxlen: 23
210.18.251.0/24 maxlen: 24
210.18.252.0/24 maxlen: 24
210.18.253.0/24 maxlen: 24
210.18.254.0/24 maxlen: 24
210.18.255.0/24 maxlen: 24
2403:c800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2326 (0x916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C627, serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Validity
Not Before: Apr 8 20:26:28 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d6b9f4-f2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7f:02:1b:8c:98:ce:06:ff:c6:68:70:f2:02:
27:a8:e1:ff:94:6f:b0:73:18:70:73:89:17:bd:51:
b5:6b:bf:a5:66:72:f2:48:3b:ac:75:d7:ab:66:89:
3b:ef:81:33:9b:c2:d6:08:9b:7d:3b:56:a7:94:f1:
d0:3d:97:c2:e3:3e:55:1e:dc:d8:30:11:7d:4f:50:
80:e0:06:2a:cf:3c:5c:7e:89:66:b4:85:6b:3b:74:
dd:3d:4f:e6:1b:45:54:98:b7:fb:cc:30:22:f3:9a:
61:c7:6a:49:09:ed:13:e5:50:17:9e:e9:aa:cd:dd:
2c:81:e7:0d:d0:50:3b:75:27:bc:2b:b3:f3:ee:d6:
39:e0:46:70:63:4e:bc:c5:5e:e3:14:9c:7a:4a:b0:
62:79:d5:dd:f2:5c:cb:5f:2e:42:f5:50:5e:2c:6b:
75:d6:45:7a:14:ef:74:a6:04:eb:88:48:4a:7d:66:
4b:97:6d:12:fb:75:62:d0:24:da:35:2b:e8:57:9d:
83:15:f0:d1:4f:38:3e:81:a5:d3:78:8e:f3:f0:9f:
8c:2b:50:c2:88:16:29:3f:31:0e:01:b4:22:4a:5f:
a7:28:bb:2d:00:7b:04:ce:87:54:25:40:99:f8:e9:
33:39:e3:68:4b:18:ce:09:06:6b:82:90:23:84:ad:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:ED:8F:9D:38:60:0E:38:97:C0:A9:84:8A:33:95:B7:AC:8D:5B:8D
X509v3 Authority Key Identifier:
keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/FFB3EF94F53C11EEA5B4623BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.14.96.0/19
103.28.196.0/22
202.148.224.0/20
203.19.157.0/24
210.18.192.0/18
IPv6:
2403:c800::/32
Signature Algorithm: sha256WithRSAEncryption
08:2a:c0:89:3a:e1:84:86:18:d3:97:76:ef:59:f6:4e:c9:ab:
c6:77:a8:19:ba:e3:84:8c:74:fd:48:75:9d:98:b9:73:2d:09:
8c:48:83:a9:d6:75:3f:16:2a:4b:e3:38:c3:ee:60:3b:ca:4a:
e1:77:3b:bf:05:83:6b:d2:e0:52:91:2e:e2:4a:58:a0:85:f7:
6f:ed:92:0b:3f:c2:44:a7:27:cb:54:ef:01:f6:e3:33:7b:1c:
3d:2e:6f:7a:25:a6:10:bf:61:27:7f:01:69:72:31:51:e2:b0:
48:4f:d4:6b:28:89:3e:a1:5d:fb:bd:d4:9e:79:d8:27:ca:6a:
48:c2:76:75:ad:59:3d:13:95:e5:29:f9:ec:9c:64:6a:28:d1:
dd:48:b1:31:91:d8:0f:08:6f:7e:cc:53:78:fb:ab:60:75:16:
eb:47:96:f0:ee:92:3d:24:2c:da:d4:ea:3b:93:52:38:52:3b:
e3:20:aa:04:72:55:2c:88:18:15:c6:4d:6f:ba:7b:eb:a8:c4:
04:1b:6c:75:2e:cd:69:ee:98:e9:7b:cb:97:e5:99:99:cc:07:
c6:20:86:0c:03:3c:a2:5f:3e:14:d7:1f:4b:89:f8:04:87:33:
b5:be:95:5f:66:93:1f:57:2d:90:c2:ba:3b:93:79:f4:a9:4a:
51:66:0d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:53 2026 by rpki-client