Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/6FEF4E442DE011EA853E2328C4F9AE02.roa
File: 6FEF4E442DE011EA853E2328C4F9AE02.roa (raw, json)
Hash identifier: lwhgxQ+LgrJn47zyUAnLsM4ouCqlk1HX6qTOZMFb/HM=
Subject key identifier: B7:5F:78:3E:7E:3C:1C:C7:5B:F9:8C:34:BF:11:FA:1C:47:44:D3:76
Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial: 2BC6
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/6FEF4E442DE011EA853E2328C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:51:37 +0000
ROA not before: Fri 16 Jan 2026 16:12:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 24203
IP address blocks: 140.213.3.0/24 maxlen: 24
140.213.4.0/24 maxlen: 24
140.213.5.0/24 maxlen: 24
140.213.6.0/24 maxlen: 24
140.213.7.0/24 maxlen: 24
140.213.9.0/24 maxlen: 24
140.213.10.0/24 maxlen: 24
140.213.12.0/24 maxlen: 24
140.213.14.0/24 maxlen: 24
140.213.16.0/24 maxlen: 24
140.213.19.0/24 maxlen: 24
140.213.20.0/24 maxlen: 24
140.213.23.0/24 maxlen: 24
140.213.29.0/24 maxlen: 24
140.213.32.0/24 maxlen: 24
140.213.33.0/24 maxlen: 24
140.213.35.0/24 maxlen: 24
140.213.36.0/24 maxlen: 24
140.213.38.0/24 maxlen: 24
140.213.39.0/24 maxlen: 24
140.213.42.0/24 maxlen: 24
140.213.47.0/24 maxlen: 24
140.213.50.0/24 maxlen: 24
140.213.51.0/24 maxlen: 24
140.213.53.0/24 maxlen: 24
140.213.56.0/24 maxlen: 24
140.213.58.0/24 maxlen: 24
140.213.62.0/24 maxlen: 24
140.213.72.0/24 maxlen: 24
140.213.75.0/24 maxlen: 24
140.213.88.0/24 maxlen: 24
140.213.114.0/24 maxlen: 24
140.213.138.0/24 maxlen: 24
140.213.139.0/24 maxlen: 24
140.213.142.0/24 maxlen: 24
140.213.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11206 (0x2bc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Validity
Not Before: Jan 16 16:12:55 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a48ab9-9120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:cd:b6:de:f5:e2:8d:ab:bf:aa:69:77:87:
d3:a1:ca:7d:9e:a8:a8:e3:f1:fb:54:57:54:4a:09:
78:6b:33:b0:c9:77:e0:c7:ac:77:3b:53:97:47:1f:
49:73:96:ba:e7:ff:a5:b8:b3:07:fc:3b:02:2d:58:
8c:56:1b:e3:bf:2e:59:cb:e8:80:f5:30:53:9f:79:
83:af:25:14:2e:d8:ea:83:99:ae:7f:4c:7d:fb:df:
75:92:37:13:5b:f6:2a:af:d3:de:21:11:de:0c:4e:
29:ea:7d:c3:a8:b2:d5:39:46:bf:d0:03:8f:f0:ec:
b8:0c:61:16:3e:e8:d5:8d:23:34:02:bb:46:60:e7:
e1:1c:9f:41:dc:e9:1b:c6:35:5f:81:af:51:ed:87:
1e:9b:06:69:ea:fb:9a:2c:f4:97:73:37:c7:f4:6a:
5f:e1:f6:96:d1:a2:40:ed:72:f9:18:92:50:58:56:
2d:05:4a:1a:eb:3b:8f:1f:66:dd:e7:de:7f:4a:19:
8d:18:ab:8e:54:0f:00:79:b3:94:cf:df:8e:f2:c1:
a5:be:8a:96:26:a8:18:59:14:f4:f4:64:43:a3:e0:
c6:8e:e4:f3:53:3f:e8:57:9c:e5:35:06:a8:71:6a:
ca:a1:6f:62:20:e4:d4:95:85:e9:8b:8a:a0:e9:49:
dd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:78:3E:7E:3C:1C:C7:5B:F9:8C:34:BF:11:FA:1C:47:44:D3:76
X509v3 Authority Key Identifier:
keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/6FEF4E442DE011EA853E2328C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
140.213.3.0-140.213.7.255
140.213.9.0-140.213.10.255
140.213.12.0/24
140.213.14.0/24
140.213.16.0/24
140.213.19.0-140.213.20.255
140.213.23.0/24
140.213.29.0/24
140.213.32.0/23
140.213.35.0-140.213.36.255
140.213.38.0/23
140.213.42.0/24
140.213.47.0/24
140.213.50.0/23
140.213.53.0/24
140.213.56.0/24
140.213.58.0/24
140.213.62.0/24
140.213.72.0/24
140.213.75.0/24
140.213.88.0/24
140.213.114.0/24
140.213.138.0/23
140.213.142.0/23
Signature Algorithm: sha256WithRSAEncryption
73:d5:07:22:81:26:b1:04:31:8f:0a:0b:fa:59:05:ac:b2:e6:
66:e6:74:18:21:e5:d5:ac:80:88:dc:58:c2:ac:0b:9f:bd:61:
55:35:50:a3:66:74:d9:cb:2f:87:3d:e9:80:e8:f2:cc:39:e1:
e7:cb:02:6e:c2:15:cb:dd:15:b7:33:8c:9a:65:39:96:5f:d4:
1e:57:99:1c:95:1e:da:88:a8:be:fd:a3:23:00:af:73:90:43:
06:32:4e:ac:aa:40:c9:6f:b2:ae:10:f8:d2:f2:c6:9e:87:e6:
44:5e:b1:d1:8f:98:bc:d6:88:ba:22:11:e8:0a:2f:79:62:50:
4c:eb:d5:b4:da:28:db:4b:8a:6d:a2:06:cb:7a:d7:ac:89:2c:
ae:c2:0a:94:6d:27:37:67:1d:31:32:5d:ea:a9:90:86:1b:ea:
d3:f2:3c:14:5d:6b:1d:ac:1f:14:ea:29:7a:77:c4:b5:c0:0b:
7c:eb:64:00:13:26:04:d1:37:a8:f9:35:03:92:47:02:8a:81:
34:a9:48:f5:b0:20:79:ee:d2:d3:3e:29:29:7d:a7:43:1d:be:
2b:10:94:1a:9f:0e:c5:22:4d:5d:01:00:a1:da:05:b8:f4:0f:
00:4c:24:cc:1d:d6:b6:82:82:72:32:6c:78:e3:cb:10:eb:f4:
bc:db:ee:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:36 2026 by rpki-client