Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
File: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (raw, json)
Hash identifier: f1IGNhieFlad+lglHYXuxHBK/1cZW7IPzK8JCgEL25o=
Subject key identifier: 07:46:6E:CB:26:B3:7D:55:8C:4C:A8:82:1C:6B:C2:2C:C9:84:A1:0A
Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial: 35D9
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
Signing time: Tue 28 Jul 2026 15:16:55 +0000
ROA not before: Tue 28 Jul 2026 15:16:55 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45143
IP address blocks: 14.100.128.0/17 maxlen: 24
111.65.31.0/24 maxlen: 24
111.65.32.0/24 maxlen: 24
111.65.33.0/24 maxlen: 24
111.65.34.0/24 maxlen: 24
111.65.35.0/24 maxlen: 24
111.65.36.0/24 maxlen: 24
111.65.37.0/24 maxlen: 24
111.65.38.0/24 maxlen: 24
111.65.39.0/24 maxlen: 24
111.65.40.0/24 maxlen: 24
111.65.41.0/24 maxlen: 24
111.65.42.0/24 maxlen: 24
111.65.43.0/24 maxlen: 24
111.65.44.0/24 maxlen: 24
111.65.45.0/24 maxlen: 24
111.65.46.0/24 maxlen: 24
111.65.47.0/24 maxlen: 24
111.65.48.0/24 maxlen: 24
111.65.49.0/24 maxlen: 24
111.65.50.0/24 maxlen: 24
111.65.51.0/24 maxlen: 24
111.65.52.0/24 maxlen: 24
111.65.53.0/24 maxlen: 24
111.65.54.0/24 maxlen: 24
111.65.55.0/24 maxlen: 24
111.65.56.0/24 maxlen: 24
111.65.57.0/24 maxlen: 24
111.65.58.0/24 maxlen: 24
111.65.59.0/24 maxlen: 24
111.65.60.0/24 maxlen: 24
111.65.61.0/24 maxlen: 24
111.65.62.0/24 maxlen: 24
111.65.63.0/24 maxlen: 24
111.65.64.0/24 maxlen: 24
111.65.65.0/24 maxlen: 24
111.65.66.0/24 maxlen: 24
111.65.67.0/24 maxlen: 24
111.65.68.0/24 maxlen: 24
111.65.69.0/24 maxlen: 24
111.65.70.0/24 maxlen: 24
111.65.71.0/24 maxlen: 24
111.65.72.0/24 maxlen: 24
111.65.73.0/24 maxlen: 24
111.65.74.0/24 maxlen: 24
111.65.75.0/24 maxlen: 24
111.65.76.0/24 maxlen: 24
111.65.77.0/24 maxlen: 24
111.65.78.0/24 maxlen: 24
111.65.79.0/24 maxlen: 24
119.234.0.0/17 maxlen: 24
180.255.128.0/17 maxlen: 24
202.78.48.0/24 maxlen: 24
202.78.49.0/24 maxlen: 24
202.78.50.0/24 maxlen: 24
202.78.51.0/24 maxlen: 24
202.78.56.0/24 maxlen: 24
202.78.57.0/24 maxlen: 24
202.78.58.0/24 maxlen: 24
2400:1c00::/32 maxlen: 32
2400:1c00:1::/48 maxlen: 48
2400:1c00:2::/48 maxlen: 48
2400:1c00:3::/48 maxlen: 48
2400:1c00:4::/48 maxlen: 48
2400:1c00:b::/48 maxlen: 48
2400:1c00:c::/48 maxlen: 48
2400:1c00:13::/48 maxlen: 48
2400:1c00:1a::/48 maxlen: 48
2400:1c00:1b::/48 maxlen: 48
2400:1c00:1c::/48 maxlen: 48
2400:1c00:1e::/48 maxlen: 48
2400:1c00:1f::/48 maxlen: 48
2400:1c00:20::/44 maxlen: 44
2400:1c00:30::/44 maxlen: 44
2400:1c00:30::/45 maxlen: 45
2400:1c00:38::/45 maxlen: 45
2400:1c00:40::/44 maxlen: 44
2400:1c00:48::/45 maxlen: 45
2400:1c00:50::/44 maxlen: 44
2400:1c00:50::/45 maxlen: 45
2400:1c00:58::/46 maxlen: 46
2400:1c00:64::/48 maxlen: 48
2400:1c00:66::/48 maxlen: 48
2400:1c00:70::/44 maxlen: 44
2400:1c00:70::/45 maxlen: 45
2400:1c00:78::/47 maxlen: 47
2400:1c00:7a::/47 maxlen: 47
2400:1c00:80::/43 maxlen: 43
2400:1c00:a0::/43 maxlen: 43
2400:1c00:f0::/44 maxlen: 44
2400:1c00:100::/44 maxlen: 44
2400:1c00:110::/44 maxlen: 44
2400:1c00:120::/44 maxlen: 44
2400:1c00:130::/44 maxlen: 44
2400:1c00:140::/44 maxlen: 44
2400:1c00:150::/44 maxlen: 44
2400:1c00:160::/44 maxlen: 44
2400:1c00:170::/44 maxlen: 44
2400:1c00:170::/48 maxlen: 48
2400:1c00:170::/60 maxlen: 60
2400:1c00:17f::/48 maxlen: 48
2400:1c00:180::/48 maxlen: 48
2400:1c00:180::/60 maxlen: 60
2400:1c00:190::/44 maxlen: 44
2400:1c00:1a0::/44 maxlen: 44
2400:1c00:1b0::/44 maxlen: 44
2400:1c00:1d0::/44 maxlen: 44
2400:1c00:1d0::/45 maxlen: 45
2400:1c00:1d8::/45 maxlen: 45
2400:1c00:1e0::/44 maxlen: 44
2400:1c00:220::/44 maxlen: 44
2400:1c00:230::/44 maxlen: 44
2400:1c00:258::/46 maxlen: 46
2400:1c00:25c::/46 maxlen: 46
2400:1c00:25c::/47 maxlen: 47
2400:1c00:25e::/47 maxlen: 47
2400:1c00:27c::/46 maxlen: 46
2400:1c00:300::/44 maxlen: 44
2400:1c00:310::/45 maxlen: 45
2400:1c00:310::/54 maxlen: 54
2400:1c00:318::/45 maxlen: 45
2400:1c00:480::/44 maxlen: 44
2400:1c00:490::/44 maxlen: 44
2400:1c00:500::/45 maxlen: 45
2400:1c00:508::/45 maxlen: 45
2400:1c00:57c::/46 maxlen: 46
2400:1c00:580::/45 maxlen: 45
2400:1c00:590::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13785 (0x35d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Validity
Not Before: Jul 28 15:16:55 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a68c7e7-a02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:67:48:1a:4a:cd:21:c9:be:17:72:cf:76:
e3:74:12:3e:f7:72:90:3f:d5:74:fe:69:db:f3:60:
cd:58:f8:eb:05:7d:cd:ba:80:b9:17:a0:43:a9:fc:
bd:9b:57:94:d6:cb:72:9b:2e:45:74:51:52:dd:af:
28:74:0f:14:86:d4:61:75:d2:88:6c:e5:f1:f9:5d:
b3:94:9f:f2:1c:f5:59:4c:89:7d:89:95:c3:85:74:
ba:36:89:a2:7a:ca:59:b4:91:65:e3:e9:3c:ed:b3:
bc:90:08:db:fe:f1:2b:3c:b5:dc:3f:39:da:ae:29:
74:87:18:5a:aa:60:9d:15:ad:bc:e9:e4:5e:72:b2:
ae:4e:91:85:f7:ef:78:9f:06:7a:c7:58:e3:c6:48:
d9:b7:ec:11:f0:51:08:28:9a:a1:8f:45:00:ca:dd:
f8:56:48:e6:63:40:6b:98:52:b9:6b:9f:c2:83:6b:
50:8c:0a:87:aa:28:60:fb:78:0a:94:17:96:30:7b:
2e:65:37:ed:4d:c1:ad:88:89:85:56:cf:ee:d7:b6:
74:4c:3b:cb:ff:22:fe:fa:86:0d:4d:f4:39:ac:25:
02:84:9f:d1:25:8b:20:0d:53:a9:68:fb:9c:94:7d:
dd:a9:3e:4f:4f:f9:d8:7e:8e:64:d1:5a:f4:69:b5:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:46:6E:CB:26:B3:7D:55:8C:4C:A8:82:1C:6B:C2:2C:C9:84:A1:0A
X509v3 Authority Key Identifier:
keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.100.128.0/17
111.65.31.0-111.65.79.255
119.234.0.0/17
180.255.128.0/17
202.78.48.0/22
202.78.56.0-202.78.58.255
IPv6:
2400:1c00::/32
Signature Algorithm: sha256WithRSAEncryption
05:9b:b2:cb:6f:11:0a:2e:74:d8:8c:25:65:8f:8a:98:6b:51:
0f:81:08:86:61:09:f0:0b:0e:1c:ba:eb:c1:91:a6:41:07:06:
e2:c0:e8:c6:7b:2b:27:51:4d:8c:99:c5:8c:0a:54:00:d7:38:
c1:74:13:37:0c:e8:21:19:d9:7e:e8:95:d1:53:e5:9f:1c:80:
59:5b:cf:b6:07:6c:a5:f2:0e:37:25:6e:f2:a0:28:81:06:45:
16:bc:5a:81:0e:31:a5:96:44:f9:f1:93:d4:fd:3d:4b:59:e5:
07:c7:cf:5b:70:d8:18:9e:9e:83:c2:c8:ab:aa:4c:2c:c7:d3:
26:08:48:78:7d:58:0c:bc:43:15:7f:00:23:86:f2:8d:e1:af:
b5:31:a7:71:22:c6:3b:32:80:46:49:71:c1:23:16:4e:47:1f:
25:92:9d:ac:6e:38:c3:e8:bb:a8:58:6e:e0:65:56:9a:bf:8b:
50:dc:cb:08:80:83:d4:19:7b:c2:98:3a:33:9a:ba:6b:cf:a8:
47:83:28:51:48:38:62:6a:59:b3:fa:80:e7:d5:43:91:39:98:
fa:f7:57:e5:29:9a:83:b5:8b:54:4c:1e:aa:e9:9c:f7:49:28:
23:5d:54:63:83:ad:20:2e:1a:0c:65:75:06:b9:42:3e:1a:a3:
54:af:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:38 2026 by rpki-client