Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/7814B330E45E11E681F82341C4F9AE02.roa
File: 7814B330E45E11E681F82341C4F9AE02.roa (raw, json)
Hash identifier: FVNSKaXDdy0CaXltkNWY4bF0klXSYM3BzCHdZ56uQag=
Subject key identifier: 93:19:39:73:B0:AC:6B:0A:2B:AB:7A:2A:08:B3:0D:74:10:65:D6:06
Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Certificate serial: 1D0A
Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/7814B330E45E11E681F82341C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:45:41 +0000
ROA not before: Tue 25 Nov 2025 06:26:42 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132167
IP address blocks: 69.160.0.0/19 maxlen: 19
69.160.0.0/21 maxlen: 21
69.160.0.0/24 maxlen: 24
69.160.1.0/24 maxlen: 24
69.160.2.0/24 maxlen: 24
69.160.3.0/24 maxlen: 24
69.160.4.0/24 maxlen: 24
69.160.5.0/24 maxlen: 24
69.160.6.0/24 maxlen: 24
69.160.7.0/24 maxlen: 24
69.160.8.0/21 maxlen: 21
69.160.8.0/24 maxlen: 24
69.160.9.0/24 maxlen: 24
69.160.10.0/24 maxlen: 24
69.160.11.0/24 maxlen: 24
69.160.13.0/24 maxlen: 24
69.160.14.0/24 maxlen: 24
69.160.16.0/21 maxlen: 21
69.160.16.0/24 maxlen: 24
69.160.17.0/24 maxlen: 24
69.160.18.0/24 maxlen: 24
69.160.19.0/24 maxlen: 24
69.160.20.0/24 maxlen: 24
69.160.21.0/24 maxlen: 24
69.160.22.0/24 maxlen: 24
69.160.23.0/24 maxlen: 24
69.160.24.0/21 maxlen: 21
69.160.24.0/24 maxlen: 24
69.160.25.0/24 maxlen: 24
69.160.26.0/24 maxlen: 24
69.160.27.0/24 maxlen: 24
69.160.28.0/24 maxlen: 24
69.160.29.0/24 maxlen: 24
69.160.30.0/24 maxlen: 24
69.160.31.0/24 maxlen: 24
74.50.208.0/21 maxlen: 21
74.50.208.0/24 maxlen: 24
74.50.209.0/24 maxlen: 24
74.50.210.0/24 maxlen: 24
74.50.211.0/24 maxlen: 24
74.50.212.0/24 maxlen: 24
74.50.213.0/24 maxlen: 24
74.50.214.0/24 maxlen: 24
74.50.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7434 (0x1d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Validity
Not Before: Nov 25 06:26:42 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47b45-47b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:69:60:ec:d6:5a:bd:2e:fa:f6:d2:87:2a:
29:2b:13:aa:ea:5e:91:71:63:7f:26:7b:54:a8:60:
d0:1c:13:0d:e6:15:8d:5e:1e:80:d8:66:ed:1f:c5:
24:43:4e:27:a3:b9:12:a6:bb:13:39:0e:df:94:c0:
b0:fb:33:33:54:71:d3:c3:7c:20:ff:11:ce:81:4c:
a4:80:2a:49:d2:57:17:be:d8:02:a5:10:da:b0:f3:
cd:ca:c4:73:5e:6a:43:82:46:2c:d4:9d:31:6f:0e:
9a:9d:5a:7a:93:dc:2b:f9:ef:5a:85:76:d6:a4:86:
ea:f2:3e:14:66:3b:76:7d:46:5c:67:01:97:1a:5d:
76:fe:e7:87:26:9e:de:09:1f:1e:60:54:ce:1b:a4:
be:0e:f9:ac:cb:c6:58:32:dd:40:91:74:5b:ae:44:
5c:36:1f:5a:84:ed:84:39:c0:b4:b5:c5:93:58:a5:
a9:bd:3e:27:6c:35:40:c3:0d:f0:e9:7c:d9:ef:09:
2c:c4:51:23:00:56:3f:74:e7:25:7c:47:66:3c:c7:
2a:0d:e8:8f:db:a4:92:25:a3:70:c1:8c:54:11:98:
d4:68:95:af:b8:6e:b9:2e:23:ba:e2:5f:fc:9c:a1:
90:e0:3f:7f:69:9b:41:5f:04:b3:ce:09:e6:13:51:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:39:73:B0:AC:6B:0A:2B:AB:7A:2A:08:B3:0D:74:10:65:D6:06
X509v3 Authority Key Identifier:
keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/7814B330E45E11E681F82341C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
69.160.0.0/19
74.50.208.0/21
Signature Algorithm: sha256WithRSAEncryption
05:e5:ff:94:5a:36:0c:6b:ad:61:c5:07:5a:e9:66:3c:32:b5:
67:e0:9e:d3:36:f4:41:8e:44:bb:07:db:21:96:81:a3:8f:58:
87:c9:d1:fa:90:7b:66:d3:3e:a3:a2:c3:71:bd:4a:99:a3:b8:
3f:8b:47:59:53:aa:b2:8a:89:db:ab:64:87:4a:71:d7:18:8c:
79:0d:41:8f:c9:cf:b3:e4:68:09:b5:9a:87:10:26:ba:40:66:
fa:c6:0d:c0:cb:c5:8a:a3:bc:79:ba:ee:0e:09:2b:08:3b:09:
ab:0b:26:68:16:09:c2:47:c5:9c:f3:6d:a6:07:95:7b:ed:46:
7e:23:55:8c:4a:bd:a5:9c:b3:74:7f:73:05:94:02:f8:6c:cc:
af:58:1b:8c:03:1e:e5:2f:7f:2e:bf:cd:57:ca:c4:50:37:f5:
8b:6d:5e:15:4b:05:fc:3e:65:9a:a7:1a:bd:ae:71:0f:94:d2:
6e:d4:9b:68:e2:48:d1:54:28:18:ea:98:a9:97:ee:1c:ee:a5:
5a:e9:64:03:93:79:c9:be:5e:ec:3d:85:ad:31:d3:11:c2:5f:
5d:d6:e1:09:83:7b:f2:5b:36:cc:ca:ac:75:a2:bf:c2:d8:f3:
8d:93:e8:55:fe:d1:12:01:b5:ff:04:93:7b:4d:75:48:7a:86:
e5:3a:d7:14
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICHQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw
NkYyRkVFMjQwHhcNMjUxMTI1MDYyNjQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2I0NS00N2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyqJpYOzWWr0u+vbShyopKxOq6l6RcWN/JntUqGDQHBMN5hWNXh6A2GbtH8Uk
Q04no7kSprsTOQ7flMCw+zMzVHHTw3wg/xHOgUykgCpJ0lcXvtgCpRDasPPNysRz
XmpDgkYs1J0xbw6anVp6k9wr+e9ahXbWpIbq8j4UZjt2fUZcZwGXGl12/ueHJp7e
CR8eYFTOG6S+Dvmsy8ZYMt1AkXRbrkRcNh9ahO2EOcC0tcWTWKWpvT4nbDVAww3w
6XzZ7wksxFEjAFY/dOclfEdmPMcqDeiP26SSJaNwwYxUEZjUaJWvuG65LiO64l/8
nKGQ4D9/aZtBXwSzzgnmE1FY/QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJMZOXOw
rGsKK6t6KgizDXQQZdYGMB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0
NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDU1MTkvQTJGQzMyNjRFNDVDMTFFNjhDRURGQTNFQzRGOUFFMDIvNzgxNEIzMzBF
NDVFMTFFNjgxRjgyMzQxQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQFRaAAAwQDSjLQMA0GCSqGSIb3DQEBCwUAA4IBAQAF5f+UWjYMa61h
xQda6WY8MrVn4J7TNvRBjkS7B9shloGjj1iHydH6kHtm0z6josNxvUqZo7g/i0dZ
U6qyionbq2SHSnHXGIx5DUGPyc+z5GgJtZqHECa6QGb6xg3Ay8WKo7x5uu4OCSsI
OwmrCyZoFgnCR8Wc822mB5V77UZ+I1WMSr2lnLN0f3MFlAL4bMyvWBuMAx7lL38u
v81XysRQN/WLbV4VSwX8PmWapxq9rnEPlNJu1Jto4kjRVCgY6pipl+4c7qVa6WQD
k3nJvl7sPYWtMdMRwl9d1uEJg3vyWzbMyqx1or/C2PONk+hV/tESAbX/BJN7TXVI
eoblOtcU
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:48:56 2026 by rpki-client