Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/6215E9C089CF11ECA1DA1810C4F9AE02.roa
File: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (raw, json)
Hash identifier: tckSAKTOei05940ALy4Vf/C0qPnj/LXYBJGPT90xVGM=
Subject key identifier: 71:AC:6A:6F:03:E9:96:C6:7C:D7:00:B6:D3:AB:E4:ED:A4:DC:73:5B
Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Certificate serial: 354E
Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/6215E9C089CF11ECA1DA1810C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:10:41 +0000
ROA not before: Thu 22 May 2025 14:50:45 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 38182
IP address blocks: 58.84.16.0/22 maxlen: 24
113.23.128.0/17 maxlen: 17
113.23.128.0/24 maxlen: 24
113.23.129.0/24 maxlen: 24
113.23.130.0/23 maxlen: 23
113.23.130.0/24 maxlen: 24
113.23.131.0/24 maxlen: 24
113.23.132.0/23 maxlen: 23
113.23.132.0/24 maxlen: 24
113.23.133.0/24 maxlen: 24
113.23.134.0/24 maxlen: 24
113.23.135.0/24 maxlen: 24
113.23.136.0/24 maxlen: 24
113.23.137.0/24 maxlen: 24
113.23.138.0/24 maxlen: 24
113.23.139.0/24 maxlen: 24
113.23.140.0/24 maxlen: 24
113.23.141.0/24 maxlen: 24
113.23.142.0/24 maxlen: 24
113.23.143.0/24 maxlen: 24
113.23.144.0/24 maxlen: 24
113.23.145.0/24 maxlen: 24
113.23.146.0/24 maxlen: 24
113.23.147.0/24 maxlen: 24
113.23.148.0/24 maxlen: 24
113.23.149.0/24 maxlen: 24
113.23.150.0/24 maxlen: 24
113.23.151.0/24 maxlen: 24
113.23.152.0/24 maxlen: 24
113.23.153.0/24 maxlen: 24
113.23.154.0/24 maxlen: 24
113.23.155.0/24 maxlen: 24
113.23.156.0/24 maxlen: 24
113.23.157.0/24 maxlen: 24
113.23.158.0/24 maxlen: 24
113.23.159.0/24 maxlen: 24
113.23.160.0/22 maxlen: 22
113.23.160.0/24 maxlen: 24
113.23.161.0/24 maxlen: 24
113.23.162.0/24 maxlen: 24
113.23.163.0/24 maxlen: 24
113.23.164.0/24 maxlen: 24
113.23.165.0/24 maxlen: 24
113.23.166.0/24 maxlen: 24
113.23.167.0/24 maxlen: 24
113.23.168.0/24 maxlen: 24
113.23.169.0/24 maxlen: 24
113.23.170.0/24 maxlen: 24
113.23.171.0/24 maxlen: 24
113.23.172.0/24 maxlen: 24
113.23.173.0/24 maxlen: 24
113.23.174.0/24 maxlen: 24
113.23.175.0/24 maxlen: 24
113.23.176.0/24 maxlen: 24
113.23.177.0/24 maxlen: 24
113.23.178.0/24 maxlen: 24
113.23.179.0/24 maxlen: 24
113.23.180.0/24 maxlen: 24
113.23.181.0/24 maxlen: 24
113.23.182.0/24 maxlen: 24
113.23.183.0/24 maxlen: 24
113.23.184.0/24 maxlen: 24
113.23.185.0/24 maxlen: 24
113.23.186.0/24 maxlen: 24
113.23.187.0/24 maxlen: 24
113.23.188.0/24 maxlen: 24
113.23.189.0/24 maxlen: 24
113.23.190.0/24 maxlen: 24
113.23.191.0/24 maxlen: 24
113.23.192.0/24 maxlen: 24
113.23.193.0/24 maxlen: 24
113.23.194.0/24 maxlen: 24
113.23.195.0/24 maxlen: 24
113.23.196.0/24 maxlen: 24
113.23.197.0/24 maxlen: 24
113.23.198.0/24 maxlen: 24
113.23.199.0/24 maxlen: 24
113.23.200.0/24 maxlen: 24
113.23.201.0/24 maxlen: 24
113.23.202.0/24 maxlen: 24
113.23.203.0/24 maxlen: 24
113.23.204.0/24 maxlen: 24
113.23.205.0/24 maxlen: 24
113.23.206.0/24 maxlen: 24
113.23.207.0/24 maxlen: 24
113.23.208.0/24 maxlen: 24
113.23.209.0/24 maxlen: 24
113.23.210.0/24 maxlen: 24
113.23.211.0/24 maxlen: 24
113.23.212.0/24 maxlen: 24
113.23.213.0/24 maxlen: 24
113.23.214.0/24 maxlen: 24
113.23.215.0/24 maxlen: 24
113.23.216.0/24 maxlen: 24
113.23.217.0/24 maxlen: 24
113.23.218.0/24 maxlen: 24
113.23.219.0/24 maxlen: 24
113.23.220.0/24 maxlen: 24
113.23.221.0/24 maxlen: 24
113.23.222.0/24 maxlen: 24
113.23.223.0/24 maxlen: 24
113.23.224.0/24 maxlen: 24
113.23.225.0/24 maxlen: 24
113.23.226.0/24 maxlen: 24
113.23.227.0/24 maxlen: 24
113.23.228.0/24 maxlen: 24
113.23.229.0/24 maxlen: 24
113.23.230.0/24 maxlen: 24
113.23.231.0/24 maxlen: 24
113.23.232.0/24 maxlen: 24
113.23.233.0/24 maxlen: 24
113.23.234.0/24 maxlen: 24
113.23.235.0/24 maxlen: 24
113.23.236.0/24 maxlen: 24
113.23.237.0/24 maxlen: 24
113.23.238.0/24 maxlen: 24
113.23.239.0/24 maxlen: 24
113.23.240.0/24 maxlen: 24
113.23.241.0/24 maxlen: 24
113.23.242.0/24 maxlen: 24
113.23.243.0/24 maxlen: 24
113.23.244.0/24 maxlen: 24
113.23.245.0/24 maxlen: 24
113.23.246.0/24 maxlen: 24
113.23.247.0/24 maxlen: 24
113.23.248.0/24 maxlen: 24
113.23.249.0/24 maxlen: 24
113.23.250.0/24 maxlen: 24
113.23.251.0/24 maxlen: 24
113.23.252.0/24 maxlen: 24
113.23.253.0/24 maxlen: 24
113.23.254.0/24 maxlen: 24
113.23.255.0/24 maxlen: 24
203.188.232.0/21 maxlen: 21
203.188.232.0/24 maxlen: 24
203.188.233.0/24 maxlen: 24
203.188.234.0/23 maxlen: 23
203.188.234.0/24 maxlen: 24
203.188.235.0/24 maxlen: 24
203.188.236.0/24 maxlen: 24
203.188.237.0/24 maxlen: 24
203.188.238.0/24 maxlen: 24
203.188.239.0/24 maxlen: 24
2407:f800::/40 maxlen: 40
2407:f800::/48 maxlen: 48
2407:f800::3:0:0/96 maxlen: 96
2407:f800:100::/40 maxlen: 40
2407:f800:200::/40 maxlen: 40
2407:f800:200::/48 maxlen: 48
2407:f800:300::/40 maxlen: 40
2407:f800:300::/48 maxlen: 48
2407:f800:400::/40 maxlen: 40
2407:f800:400::/48 maxlen: 48
2407:f800:500::/40 maxlen: 40
2407:f800:500::/48 maxlen: 48
2407:f800:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13646 (0x354e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321
Validity
Not Before: May 22 14:50:45 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40291-71dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:e7:71:b3:27:fc:d7:05:e1:36:22:d1:92:
74:83:df:c0:03:6a:bf:16:9a:41:7e:54:ce:93:9f:
6a:73:68:4f:e4:e9:ca:f1:ea:52:0f:32:2d:a1:8d:
73:a5:28:66:b5:9f:45:f9:d0:de:a7:c3:eb:6e:cf:
91:93:1d:4c:b6:dc:88:79:7c:cf:9b:30:95:17:49:
39:fe:8a:8b:a1:99:be:69:fd:6a:74:db:32:c0:2c:
ad:11:ad:d2:85:46:58:96:7e:9f:34:ed:31:01:0d:
35:63:5c:68:d8:0c:a1:aa:cc:fa:a8:19:d6:28:57:
3a:ff:38:3f:fe:65:57:89:d5:88:0a:ee:88:9f:63:
09:9a:e7:c1:17:f5:c1:a5:55:35:84:a7:2b:91:cb:
73:10:eb:0d:e8:56:12:3b:2d:02:8b:5b:81:c3:87:
d4:3d:ae:4b:7c:f9:dd:de:45:cc:0a:b1:1a:b3:c0:
98:ac:43:f6:94:4e:51:0b:e1:5d:13:de:5b:01:01:
0c:e4:76:ea:0e:b5:8c:5e:51:b9:3b:0d:f5:42:29:
5e:a3:4e:df:59:e0:02:fb:bd:bb:f1:a6:d6:c6:35:
f3:1d:d8:30:e9:c2:26:b8:e3:b6:c7:7b:2d:56:28:
4b:fe:a1:ac:f8:42:7f:3b:b0:10:72:ce:a3:5e:8d:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AC:6A:6F:03:E9:96:C6:7C:D7:00:B6:D3:AB:E4:ED:A4:DC:73:5B
X509v3 Authority Key Identifier:
keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/6215E9C089CF11ECA1DA1810C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.84.16.0/22
113.23.128.0/17
203.188.232.0/21
IPv6:
2407:f800::-2407:f800:5ff:ffff:ffff:ffff:ffff:ffff
2407:f800:800::/40
Signature Algorithm: sha256WithRSAEncryption
91:67:37:ff:af:27:ce:75:11:1b:8b:e7:50:50:16:94:87:c9:
6f:49:fe:cc:5e:10:ea:e0:1f:e5:4a:aa:e9:5d:2e:d8:15:67:
47:bd:de:17:4a:f2:41:e9:1d:23:48:26:3d:c5:2c:31:be:0c:
be:5b:ef:8b:d6:83:4c:d5:5b:b9:fd:3e:72:87:76:80:fb:94:
56:1c:d8:c6:d1:6a:49:ea:52:a0:17:d4:4f:fa:38:01:9b:b7:
e4:fc:00:93:ac:5c:89:d7:a9:42:4f:8e:b0:a8:96:be:e9:78:
36:a8:5f:67:e5:ac:ce:e7:03:49:38:c8:55:d4:35:c1:a0:d0:
5a:2b:f9:72:a8:0b:16:fd:c2:b9:66:16:80:6f:02:7e:dd:ef:
cf:3e:0d:7f:51:47:8f:ed:24:1c:2c:23:e1:a2:bf:8f:45:92:
38:12:df:80:32:6f:16:82:6f:cb:b4:c4:c7:74:0a:b6:e8:01:
a5:fa:d0:5e:b8:56:23:78:e5:65:8a:8a:0a:34:85:83:6d:c0:
bf:75:df:3a:a5:3f:af:d3:97:9d:87:ed:16:aa:b1:01:5c:63:
b3:78:b7:13:35:9d:13:13:4b:c9:f3:37:95:1a:6b:c7:04:c7:
ee:4b:2e:c8:6f:a2:9b:11:2e:e8:72:4f:ed:b0:79:cd:a2:5e:
5f:b8:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:44 2026 by rpki-client