Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/8F75257455E911E9AE112D6CC4F9AE02.roa
File: 8F75257455E911E9AE112D6CC4F9AE02.roa (raw, json)
Hash identifier: N/R+8vPZJokbXr/3RDT9z/N8TcDj96G+vFNXOa/HDA8=
Subject key identifier: C3:4A:0B:92:07:D5:30:97:15:1E:7B:76:B0:5C:51:AF:6F:B2:CD:1F
Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Certificate serial: 10A0
Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/8F75257455E911E9AE112D6CC4F9AE02.roa
Signing time: Sun 14 Jun 2026 18:20:15 +0000
ROA not before: Sun 14 Jun 2026 18:20:14 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 136531
IP address blocks: 103.91.228.0/22 maxlen: 22
103.91.228.0/24 maxlen: 24
103.91.229.0/24 maxlen: 24
103.91.230.0/24 maxlen: 24
103.91.231.0/24 maxlen: 24
2401:14c0::/32 maxlen: 32
2401:14c0:1::/48 maxlen: 48
2401:14c0:2::/48 maxlen: 48
2401:14c0:3::/48 maxlen: 48
2401:14c0:4::/48 maxlen: 48
2401:14c0:5::/48 maxlen: 48
2401:14c0:6::/48 maxlen: 48
2401:14c0:7::/48 maxlen: 48
2401:14c0:8::/48 maxlen: 48
2401:14c0:9::/48 maxlen: 48
2401:14c0:a::/48 maxlen: 48
2401:14c0:b::/48 maxlen: 48
2401:14c0:c::/48 maxlen: 48
2401:14c0:d::/48 maxlen: 48
2401:14c0:e::/48 maxlen: 48
2401:14c0:f::/48 maxlen: 48
2401:14c0:10::/48 maxlen: 48
2401:14c0:11::/48 maxlen: 48
2401:14c0:12::/48 maxlen: 48
2401:14c0:13::/48 maxlen: 48
2401:14c0:14::/48 maxlen: 48
2401:14c0:15::/48 maxlen: 48
2401:14c0:16::/48 maxlen: 48
2401:14c0:21::/48 maxlen: 48
2401:14c0:2a::/48 maxlen: 48
2401:14c0:2c::/48 maxlen: 48
2401:14c0:2d::/48 maxlen: 48
2401:14c0:4a::/48 maxlen: 48
2401:14c0:8a::/48 maxlen: 48
2401:14c0:8b::/48 maxlen: 48
2401:14c0:8c::/48 maxlen: 48
2401:14c0:8d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4256 (0x10a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE96, serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Validity
Not Before: Jun 14 18:20:14 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2ef0de-3025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:cd:4e:84:54:48:5d:25:1f:ce:ac:f2:1e:
3c:00:a4:06:8e:11:ee:23:81:76:78:2c:5e:45:e9:
94:33:fe:e7:78:3b:39:48:f0:40:2b:12:a1:2d:c1:
3d:7d:14:10:51:84:9c:eb:82:c6:8d:33:f6:16:07:
ef:c9:c8:10:3c:96:06:29:6b:3f:95:55:b7:2d:36:
bd:f0:4f:cd:69:b4:68:30:c4:bd:2e:38:d5:d3:ca:
39:6f:64:bb:dc:59:96:c5:38:d5:e2:40:ff:43:b4:
42:40:c8:38:f7:11:44:45:2d:36:be:b0:50:9d:8c:
40:4c:5e:e4:93:d5:3a:c3:37:0e:df:3f:a2:65:23:
70:1d:a6:6e:6a:e1:29:b2:66:f9:b9:38:14:0e:25:
d6:11:5d:17:0b:79:d8:7f:91:35:79:7d:7d:d5:91:
b6:3f:e5:c2:19:3c:41:0d:49:cc:05:25:22:3c:ae:
63:7c:68:ce:87:e1:20:32:31:2b:37:f8:c8:bf:2d:
e6:11:37:a7:01:a2:cf:1e:0f:e5:fb:55:e7:40:38:
33:93:6c:37:8c:41:78:ba:12:63:a8:30:a2:c9:91:
27:1a:20:e0:40:58:73:64:26:cf:ca:9e:b8:27:e4:
4d:5f:aa:58:7c:79:34:17:93:7f:cf:1d:37:2e:53:
15:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4A:0B:92:07:D5:30:97:15:1E:7B:76:B0:5C:51:AF:6F:B2:CD:1F
X509v3 Authority Key Identifier:
keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/8F75257455E911E9AE112D6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.228.0/22
IPv6:
2401:14c0::/32
Signature Algorithm: sha256WithRSAEncryption
8d:d6:bd:c1:b9:eb:39:79:81:88:9c:db:fa:65:e2:2a:ae:c5:
51:03:8e:d8:6c:ff:22:ed:c0:cd:75:73:96:da:ed:6b:35:7e:
ea:2f:ad:7c:51:e4:a9:d5:3d:b3:7d:0c:1a:87:a1:29:b8:00:
6f:b3:93:96:73:19:30:32:a7:94:2a:d4:78:e1:9b:69:aa:dc:
02:81:81:9b:f8:36:f7:31:cc:8f:b4:28:22:98:4d:23:f5:3e:
ea:a0:a9:73:50:45:a3:10:22:14:d3:94:ed:9d:9c:53:67:b8:
9b:74:da:de:d0:d9:32:ef:4f:07:6b:c2:61:be:a7:28:62:7e:
3e:01:f1:a0:c5:15:ee:85:f8:07:ae:3c:84:36:8e:43:b4:99:
1b:5a:c5:a4:e1:aa:cb:b3:00:79:b5:bb:fa:8b:ff:e4:1f:e7:
85:2b:23:59:ca:b7:a8:e0:d2:77:d8:09:12:f1:89:ad:81:ee:
38:6b:45:c5:aa:60:e5:88:7c:75:93:7f:d5:e9:22:8d:f1:99:
d6:90:ec:90:a2:53:58:e1:bf:1a:aa:79:f6:92:9c:29:c7:1a:
e7:dd:c1:8b:a8:5b:5b:6b:e8:88:1a:c6:a8:90:a6:a9:46:2a:
9a:38:fc:b3:d9:3c:c6:4a:df:d3:e9:b4:83:21:d5:93:bf:16:
35:89:03:9d
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICEKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJFOTYxMTAvBgNVBAUTKEZFNEIyRTU0RjE4MEM4MDlBRjFFQzk5RTlBN0M3RTI3
MzJEOUREQTYwHhcNMjYwNjE0MTgyMDE0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJlZjBkZS0zMDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1rNToRUSF0lH86s8h48AKQGjhHuI4F2eCxeRemUM/7neDs5SPBAKxKhLcE9
fRQQUYSc64LGjTP2FgfvycgQPJYGKWs/lVW3LTa98E/NabRoMMS9LjjV08o5b2S7
3FmWxTjV4kD/Q7RCQMg49xFERS02vrBQnYxATF7kk9U6wzcO3z+iZSNwHaZuauEp
smb5uTgUDiXWEV0XC3nYf5E1eX191ZG2P+XCGTxBDUnMBSUiPK5jfGjOh+EgMjEr
N/jIvy3mETenAaLPHg/l+1XnQDgzk2w3jEF4uhJjqDCiyZEnGiDgQFhzZCbPyp64
J+RNX6pYfHk0F5N/zx03LlMVnQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMNKC5IH
1TCXFR57drBcUa9vss0fMB8GA1UdIwQYMBaAFP5LLlTxgMgJrx7Jnpp8ficy2d2m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkU5Ni9FREE2NUFDNDU1
RTgxMUU5QjMwNTM3NkJDNEY5QUUwMi9fa3N1VlBHQXlBbXZIc21lbW54LUp6TFoz
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19rc3VWUEdBeUFtdkhzbWVtbngtSnpMWjNhWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEJFOTYvRURBNjVBQzQ1NUU4MTFFOUIzMDUzNzZCQzRGOUFFMDIvOEY3NTI1NzQ1
NUU5MTFFOUFFMTEyRDZDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ1vkMA0EAgACMAcDBQAkARTAMA0GCSqGSIb3DQEBCwUAA4IBAQCN
1r3Bues5eYGInNv6ZeIqrsVRA47YbP8i7cDNdXOW2u1rNX7qL618UeSp1T2zfQwa
h6EpuABvs5OWcxkwMqeUKtR44ZtpqtwCgYGb+Db3McyPtCgimE0j9T7qoKlzUEWj
ECIU05TtnZxTZ7ibdNre0Nky708Ha8JhvqcoYn4+AfGgxRXuhfgHrjyENo5DtJkb
WsWk4arLswB5tbv6i//kH+eFKyNZyreo4NJ32AkS8Ymtge44a0XFqmDliHx1k3/V
6SKN8ZnWkOyQolNY4b8aqnn2kpwpxxrn3cGLqFtba+iIGsaokKapRiqaOPyz2TzG
St/T6bSDIdWTvxY1iQOd
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:23:04 2026 by rpki-client