Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/6FEF4E442DE011EA853E2328C4F9AE02.roa
File: 6FEF4E442DE011EA853E2328C4F9AE02.roa (raw, json)
Hash identifier: yhb7QiTNwaWZ43QEtEdSQmUgbkqueVHBiH7mFyaEGz0=
Subject key identifier: 36:5F:0D:4E:C0:F4:11:25:0E:C2:00:F4:3A:AE:BE:80:76:FA:AD:53
Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial: 2C74
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/6FEF4E442DE011EA853E2328C4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:22:47 +0000
ROA not before: Thu 20 Aug 2026 16:22:47 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 24203
IP address blocks: 140.213.3.0/24 maxlen: 24
140.213.4.0/24 maxlen: 24
140.213.5.0/24 maxlen: 24
140.213.6.0/24 maxlen: 24
140.213.7.0/24 maxlen: 24
140.213.9.0/24 maxlen: 24
140.213.10.0/24 maxlen: 24
140.213.12.0/24 maxlen: 24
140.213.14.0/24 maxlen: 24
140.213.16.0/24 maxlen: 24
140.213.19.0/24 maxlen: 24
140.213.20.0/24 maxlen: 24
140.213.23.0/24 maxlen: 24
140.213.29.0/24 maxlen: 24
140.213.32.0/24 maxlen: 24
140.213.33.0/24 maxlen: 24
140.213.35.0/24 maxlen: 24
140.213.36.0/24 maxlen: 24
140.213.38.0/24 maxlen: 24
140.213.39.0/24 maxlen: 24
140.213.42.0/24 maxlen: 24
140.213.47.0/24 maxlen: 24
140.213.50.0/24 maxlen: 24
140.213.51.0/24 maxlen: 24
140.213.53.0/24 maxlen: 24
140.213.56.0/24 maxlen: 24
140.213.58.0/24 maxlen: 24
140.213.62.0/24 maxlen: 24
140.213.72.0/24 maxlen: 24
140.213.75.0/24 maxlen: 24
140.213.88.0/24 maxlen: 24
140.213.114.0/24 maxlen: 24
140.213.138.0/24 maxlen: 24
140.213.139.0/24 maxlen: 24
140.213.142.0/24 maxlen: 24
140.213.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11380 (0x2c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Validity
Not Before: Aug 20 16:22:47 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a8729d7-378a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:ab:88:ae:e9:b7:62:64:da:68:83:4e:58:
a1:ec:46:35:6f:1f:34:2a:53:21:6c:ba:fc:f3:c4:
96:47:8a:98:11:f0:fe:7d:12:55:97:1b:65:5c:7c:
30:c6:17:c0:e5:30:6d:2e:a0:30:27:a4:70:6e:86:
b6:63:64:8a:54:71:f0:d6:61:d7:39:0c:c6:db:8a:
99:f8:cf:c0:bf:33:9e:7d:24:ba:b7:8c:bd:60:db:
98:e8:05:a9:14:5e:f0:2f:cc:af:7a:ad:02:39:9f:
ad:35:94:03:a7:3d:4a:8a:08:70:46:b3:49:46:0d:
0b:05:b5:87:09:ca:86:8f:15:c1:f2:6c:58:c8:88:
3a:78:aa:99:1d:50:85:30:32:3c:c9:91:48:e6:5f:
96:ab:63:81:2a:7c:7a:de:3c:88:d4:ab:97:3c:e1:
9a:47:d5:d4:cf:e1:9b:e3:7f:ce:40:81:65:33:7a:
b6:8e:14:f4:6d:83:05:52:dc:bf:df:2f:ab:61:7d:
e9:b1:41:c3:6a:1f:e7:a6:fd:63:72:b2:ef:d4:15:
27:92:1f:89:f2:7a:5e:71:d6:47:ff:9a:24:70:18:
75:0d:08:94:38:d5:94:09:dc:24:ee:5c:20:9c:15:
46:8b:c0:74:77:af:70:f2:c8:9e:4d:05:5e:b6:62:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5F:0D:4E:C0:F4:11:25:0E:C2:00:F4:3A:AE:BE:80:76:FA:AD:53
X509v3 Authority Key Identifier:
keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/6FEF4E442DE011EA853E2328C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
140.213.3.0-140.213.7.255
140.213.9.0-140.213.10.255
140.213.12.0/24
140.213.14.0/24
140.213.16.0/24
140.213.19.0-140.213.20.255
140.213.23.0/24
140.213.29.0/24
140.213.32.0/23
140.213.35.0-140.213.36.255
140.213.38.0/23
140.213.42.0/24
140.213.47.0/24
140.213.50.0/23
140.213.53.0/24
140.213.56.0/24
140.213.58.0/24
140.213.62.0/24
140.213.72.0/24
140.213.75.0/24
140.213.88.0/24
140.213.114.0/24
140.213.138.0/23
140.213.142.0/23
Signature Algorithm: sha256WithRSAEncryption
08:f6:4e:35:c3:8c:db:04:94:ad:c2:29:5d:a2:d5:2c:69:00:
e5:ac:28:a5:d3:e3:2f:86:d0:fc:16:80:ef:d0:16:24:6e:19:
e4:b8:e7:4a:15:39:ba:0b:00:84:3c:90:a2:bb:cf:85:17:ff:
ca:65:4b:24:07:1a:40:4b:9f:d4:cc:d0:8d:71:0d:df:fd:29:
fc:33:b5:b2:28:c9:b0:1b:69:61:cb:df:63:8b:dc:49:94:c8:
d2:1a:5d:2f:b1:3c:6e:d6:e8:00:3e:84:d8:65:09:64:98:be:
2e:68:c9:ed:96:a9:21:d0:c8:35:e6:a7:28:19:95:0f:2c:a8:
ba:a9:0b:bc:6d:eb:64:54:0b:60:1f:9b:58:e6:3d:ba:06:d4:
b8:4a:e7:59:74:9a:e2:5b:62:23:16:ae:bf:18:2c:f6:10:9e:
d3:22:91:fa:e2:2c:d7:da:1c:82:8d:41:74:df:51:08:b3:81:
21:9c:a9:86:0a:1c:b0:9f:3f:d8:54:a3:a9:ae:b5:e0:2f:32:
9b:ba:2c:ed:e7:35:c8:77:02:a5:d0:5d:7a:08:57:40:fc:68:
ef:7e:7b:a7:15:72:75:35:59:45:41:7e:66:4a:ba:2a:f7:e9:
6e:52:24:50:56:84:c6:e9:2d:70:8c:16:a9:2f:67:c7:9c:c7:
1c:44:25:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:21:59 2026 by rpki-client