Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/6B1F445C781F11F0B7BE0756C4F9AE02.roa
File: 6B1F445C781F11F0B7BE0756C4F9AE02.roa (raw, json)
Hash identifier: FASI0xoUA7JffP5LRe7HJ8aDDFjhDxg+/yZ9w57IuRI=
Subject key identifier: 62:F2:55:93:31:76:C1:54:00:C2:FE:9E:C4:5D:04:76:E1:B7:43:33
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 38C2
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/6B1F445C781F11F0B7BE0756C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:23:16 +0000
ROA not before: Mon 18 Aug 2025 14:50:27 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 3758
IP address blocks: 14.100.0.0/17 maxlen: 24
42.60.0.0/16 maxlen: 24
42.61.0.0/16 maxlen: 24
58.185.0.0/16 maxlen: 24
101.78.64.0/18 maxlen: 24
115.42.128.0/17 maxlen: 17
115.42.160.0/24 maxlen: 24
115.42.161.0/24 maxlen: 24
115.42.162.0/24 maxlen: 24
115.42.163.0/24 maxlen: 24
115.42.164.0/22 maxlen: 22
115.42.181.0/24 maxlen: 24
115.42.185.0/24 maxlen: 24
115.42.195.0/24 maxlen: 24
115.42.196.0/24 maxlen: 24
115.42.204.0/24 maxlen: 24
115.42.206.0/24 maxlen: 24
115.42.215.0/24 maxlen: 24
115.42.216.0/24 maxlen: 24
115.42.217.0/24 maxlen: 24
115.42.219.0/24 maxlen: 24
115.42.222.0/24 maxlen: 24
115.42.251.0/24 maxlen: 24
115.42.255.0/24 maxlen: 24
115.66.0.0/16 maxlen: 24
116.12.128.0/17 maxlen: 17
116.12.137.0/24 maxlen: 24
116.12.138.0/24 maxlen: 24
116.12.147.0/24 maxlen: 24
116.12.154.0/24 maxlen: 24
116.12.156.0/24 maxlen: 24
116.12.205.0/24 maxlen: 24
116.12.206.0/24 maxlen: 24
116.12.213.0/24 maxlen: 24
116.12.214.0/24 maxlen: 24
116.12.226.0/24 maxlen: 24
116.12.229.0/24 maxlen: 24
116.12.234.0/24 maxlen: 24
116.12.235.0/24 maxlen: 24
116.12.238.0/24 maxlen: 24
116.12.243.0/24 maxlen: 24
116.12.250.0/24 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 24
116.15.0.0/16 maxlen: 24
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.128.0/18 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.192.0/19 maxlen: 24
118.201.224.0/19 maxlen: 24
119.73.128.0/17 maxlen: 17
119.73.130.0/24 maxlen: 24
119.73.145.0/24 maxlen: 24
119.73.148.0/24 maxlen: 24
119.73.162.0/24 maxlen: 24
119.73.191.0/24 maxlen: 24
119.73.197.0/24 maxlen: 24
119.73.201.0/24 maxlen: 24
119.73.226.0/24 maxlen: 24
119.73.242.0/24 maxlen: 24
119.73.246.0/24 maxlen: 24
119.73.251.0/24 maxlen: 24
119.73.253.0/24 maxlen: 24
119.74.0.0/16 maxlen: 24
119.75.0.0/18 maxlen: 18
119.75.19.0/24 maxlen: 24
119.75.33.0/24 maxlen: 24
119.75.36.0/24 maxlen: 24
119.75.41.0/24 maxlen: 24
119.75.48.0/24 maxlen: 24
119.75.53.0/24 maxlen: 24
119.75.57.0/24 maxlen: 24
119.234.128.0/18 maxlen: 24
119.234.192.0/19 maxlen: 19
121.6.0.0/16 maxlen: 24
121.7.0.0/16 maxlen: 24
124.66.128.0/19 maxlen: 19
124.66.133.0/24 maxlen: 24
124.66.150.0/24 maxlen: 24
124.66.156.0/24 maxlen: 24
124.66.157.0/24 maxlen: 24
124.66.158.0/24 maxlen: 24
124.66.159.0/24 maxlen: 24
180.255.0.0/18 maxlen: 24
180.255.64.0/18 maxlen: 24
203.124.0.0/22 maxlen: 22
203.125.0.0/16 maxlen: 24
203.126.0.0/16 maxlen: 24
203.127.0.0/16 maxlen: 24
203.169.64.0/18 maxlen: 18
219.74.0.0/16 maxlen: 24
219.75.0.0/17 maxlen: 24
220.255.0.0/22 maxlen: 22
220.255.0.0/24 maxlen: 24
220.255.1.0/24 maxlen: 24
220.255.2.0/24 maxlen: 24
220.255.3.0/24 maxlen: 24
220.255.4.0/22 maxlen: 22
220.255.4.0/24 maxlen: 24
220.255.5.0/24 maxlen: 24
220.255.6.0/24 maxlen: 24
220.255.7.0/24 maxlen: 24
220.255.8.0/21 maxlen: 21
220.255.11.0/24 maxlen: 24
220.255.12.0/24 maxlen: 24
220.255.13.0/24 maxlen: 24
220.255.14.0/24 maxlen: 24
220.255.15.0/24 maxlen: 24
220.255.16.0/20 maxlen: 20
220.255.32.0/19 maxlen: 19
220.255.64.0/18 maxlen: 18
220.255.128.0/17 maxlen: 24
2001:c20::/32 maxlen: 32
2001:c20::/38 maxlen: 38
2001:c20:10::/48 maxlen: 48
2001:c20:18::/48 maxlen: 48
2001:c20:400::/38 maxlen: 38
2001:c20:401::/48 maxlen: 48
2001:c20:403::/48 maxlen: 48
2001:c20:801::/48 maxlen: 48
2001:c20:2006::/48 maxlen: 48
2001:c20:2007::/48 maxlen: 48
2001:c20:2010::/48 maxlen: 48
2001:c20:3001::/48 maxlen: 48
2001:c20:3c00::/38 maxlen: 38
2001:c20:4800::/38 maxlen: 38
2001:c20:4805::/48 maxlen: 48
2001:c20:48ba::/48 maxlen: 48
2001:c20:48da::/48 maxlen: 48
2001:c20:48fe::/48 maxlen: 48
2001:c20:4c00::/38 maxlen: 38
2001:c20:5000::/38 maxlen: 38
2001:c20:5008::/48 maxlen: 48
2001:c20:6c00::/38 maxlen: 38
2001:c20:7009::/48 maxlen: 48
2001:c20:7800::/38 maxlen: 38
2001:c20:7804::/48 maxlen: 48
2001:c20:7806::/48 maxlen: 48
2001:c20:7807::/48 maxlen: 48
2001:c20:8400::/38 maxlen: 38
2001:c20:8405::/48 maxlen: 48
2001:c20:8406::/48 maxlen: 48
2001:c20:8407::/48 maxlen: 48
2001:c20:8408::/48 maxlen: 48
2001:c20:8409::/48 maxlen: 48
2001:c20:a005::/48 maxlen: 48
2001:c20:b005::/48 maxlen: 48
2001:c20:c814::/48 maxlen: 48
2001:c20:d004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14530 (0x38c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Aug 18 14:50:27 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48414-ca73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:77:f9:c8:db:32:95:15:43:4e:9d:a6:1e:
41:e1:f4:da:1f:1b:67:69:7d:97:de:68:60:ae:19:
e0:16:be:f5:bd:6d:f0:db:6e:16:76:a5:6b:30:3f:
62:5d:c1:c5:45:02:6f:c6:e8:6c:f6:97:82:ef:d2:
fe:e4:62:17:cb:8c:ed:94:59:91:df:8b:90:f6:85:
b5:bd:66:73:8b:aa:eb:4f:b3:5f:dd:8f:55:b8:f5:
9d:1d:0b:47:af:6c:33:90:49:46:e1:54:2a:f4:3b:
43:a7:a2:5e:7f:6a:70:83:d3:67:1f:3f:2f:94:84:
f6:4b:5c:c9:1a:9d:0d:30:b3:d0:b2:99:40:8e:66:
c5:09:67:e8:f5:af:e3:c1:bb:f3:d3:57:35:9a:f6:
68:77:53:8e:1d:e5:41:83:68:95:5c:66:06:77:29:
43:35:bf:86:cc:37:36:25:9c:8b:d1:3f:68:47:d8:
29:02:67:df:0a:14:4f:b0:d7:d0:83:4e:7d:4d:24:
ef:2e:93:8b:4e:dd:ae:0d:8a:08:d3:10:29:ef:0a:
f0:86:dd:cd:84:75:c4:2d:c4:8a:cf:44:cb:d1:1e:
69:0c:d4:0c:f7:ff:21:79:ef:b7:16:8c:86:d1:a9:
e9:5a:f9:80:6d:d7:bf:80:b0:b4:2d:76:ff:65:fc:
f1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F2:55:93:31:76:C1:54:00:C2:FE:9E:C4:5D:04:76:E1:B7:43:33
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/6B1F445C781F11F0B7BE0756C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/15
58.185.0.0/16
101.78.64.0/18
115.42.128.0/17
115.66.0.0/16
116.12.128.0/17
116.14.0.0/15
118.200.0.0/15
119.73.128.0-119.75.63.255
119.234.128.0-119.234.223.255
121.6.0.0/15
124.66.128.0/19
180.255.0.0/17
203.124.0.0/22
203.125.0.0-203.127.255.255
203.169.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/16
IPv6:
2001:c20::/32
Signature Algorithm: sha256WithRSAEncryption
6e:57:70:1f:07:9d:06:a5:8a:0b:cd:93:78:8e:28:df:3e:74:
18:4e:9f:74:0d:dc:f3:d3:d5:fa:81:42:df:80:3b:99:18:f1:
3a:1c:d5:fe:7a:f4:28:55:32:7c:5a:52:57:5f:ca:38:24:b2:
2b:20:b2:4b:ea:9c:c1:2c:7b:1f:6d:63:eb:a9:05:15:f5:bc:
e3:50:01:4a:5a:c4:cb:5f:6b:11:5d:36:1c:0a:7a:d6:0b:72:
b8:e8:2b:ea:b8:bd:a5:36:77:a8:e0:aa:ec:5f:ea:ec:51:32:
65:a0:11:44:62:a2:cf:6b:6a:63:24:c3:f8:c5:da:7e:4d:16:
92:7c:10:96:7b:aa:1e:fc:71:f6:3c:62:38:43:ef:78:9e:db:
cf:c7:71:1c:ef:16:ed:1b:46:7a:a2:28:40:ee:73:18:f7:e8:
50:77:fd:98:ac:1c:1a:30:f9:73:c9:43:90:52:86:db:44:b5:
54:a2:e8:4d:8b:25:64:08:f2:e4:da:ba:f0:ec:5a:8a:57:6c:
96:8e:52:f9:12:7b:f7:18:6f:5a:14:9f:17:b4:25:ea:00:ca:
39:85:61:2a:10:a9:5c:aa:78:41:6b:92:7d:cb:5b:0e:74:ba:
0b:76:44:ba:13:5d:27:2e:e8:5a:11:0c:51:a7:f9:5d:b0:4e:
3f:99:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:52:54 2026 by rpki-client