Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
File: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (raw, json)
Hash identifier: jSyladWwIPcLDhRoJV9EkcXRD2yn45YjwYV1xLB7tkA=
Subject key identifier: D6:5F:C6:2C:74:41:A5:63:BA:4F:60:DE:BC:C2:95:82:0E:54:33:FE
Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial: 3582
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:19:56 +0000
ROA not before: Wed 25 Feb 2026 17:39:49 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 45143
IP address blocks: 14.100.128.0/17 maxlen: 24
111.65.31.0/24 maxlen: 24
111.65.32.0/24 maxlen: 24
111.65.33.0/24 maxlen: 24
111.65.34.0/24 maxlen: 24
111.65.35.0/24 maxlen: 24
111.65.36.0/24 maxlen: 24
111.65.37.0/24 maxlen: 24
111.65.38.0/24 maxlen: 24
111.65.39.0/24 maxlen: 24
111.65.40.0/24 maxlen: 24
111.65.41.0/24 maxlen: 24
111.65.42.0/24 maxlen: 24
111.65.43.0/24 maxlen: 24
111.65.44.0/24 maxlen: 24
111.65.45.0/24 maxlen: 24
111.65.46.0/24 maxlen: 24
111.65.47.0/24 maxlen: 24
111.65.48.0/24 maxlen: 24
111.65.49.0/24 maxlen: 24
111.65.50.0/24 maxlen: 24
111.65.51.0/24 maxlen: 24
111.65.52.0/24 maxlen: 24
111.65.53.0/24 maxlen: 24
111.65.54.0/24 maxlen: 24
111.65.55.0/24 maxlen: 24
111.65.56.0/24 maxlen: 24
111.65.57.0/24 maxlen: 24
111.65.58.0/24 maxlen: 24
111.65.59.0/24 maxlen: 24
111.65.60.0/24 maxlen: 24
111.65.61.0/24 maxlen: 24
111.65.62.0/24 maxlen: 24
111.65.63.0/24 maxlen: 24
111.65.64.0/24 maxlen: 24
111.65.65.0/24 maxlen: 24
111.65.66.0/24 maxlen: 24
111.65.67.0/24 maxlen: 24
111.65.68.0/24 maxlen: 24
111.65.69.0/24 maxlen: 24
111.65.70.0/24 maxlen: 24
111.65.71.0/24 maxlen: 24
111.65.72.0/24 maxlen: 24
111.65.73.0/24 maxlen: 24
111.65.74.0/24 maxlen: 24
111.65.75.0/24 maxlen: 24
111.65.76.0/24 maxlen: 24
111.65.77.0/24 maxlen: 24
111.65.78.0/24 maxlen: 24
111.65.79.0/24 maxlen: 24
119.234.0.0/17 maxlen: 24
180.255.128.0/17 maxlen: 24
202.78.56.0/24 maxlen: 24
202.78.57.0/24 maxlen: 24
202.78.58.0/24 maxlen: 24
2400:1c00::/32 maxlen: 32
2400:1c00:1::/48 maxlen: 48
2400:1c00:2::/48 maxlen: 48
2400:1c00:3::/48 maxlen: 48
2400:1c00:4::/48 maxlen: 48
2400:1c00:b::/48 maxlen: 48
2400:1c00:c::/48 maxlen: 48
2400:1c00:13::/48 maxlen: 48
2400:1c00:1a::/48 maxlen: 48
2400:1c00:1b::/48 maxlen: 48
2400:1c00:1c::/48 maxlen: 48
2400:1c00:1e::/48 maxlen: 48
2400:1c00:1f::/48 maxlen: 48
2400:1c00:20::/44 maxlen: 44
2400:1c00:30::/44 maxlen: 44
2400:1c00:30::/45 maxlen: 45
2400:1c00:38::/45 maxlen: 45
2400:1c00:40::/44 maxlen: 44
2400:1c00:48::/45 maxlen: 45
2400:1c00:50::/44 maxlen: 44
2400:1c00:50::/45 maxlen: 45
2400:1c00:58::/46 maxlen: 46
2400:1c00:64::/48 maxlen: 48
2400:1c00:66::/48 maxlen: 48
2400:1c00:70::/44 maxlen: 44
2400:1c00:70::/45 maxlen: 45
2400:1c00:78::/47 maxlen: 47
2400:1c00:7a::/47 maxlen: 47
2400:1c00:80::/43 maxlen: 43
2400:1c00:a0::/43 maxlen: 43
2400:1c00:f0::/44 maxlen: 44
2400:1c00:100::/44 maxlen: 44
2400:1c00:110::/44 maxlen: 44
2400:1c00:120::/44 maxlen: 44
2400:1c00:130::/44 maxlen: 44
2400:1c00:140::/44 maxlen: 44
2400:1c00:150::/44 maxlen: 44
2400:1c00:160::/44 maxlen: 44
2400:1c00:170::/44 maxlen: 44
2400:1c00:170::/48 maxlen: 48
2400:1c00:170::/60 maxlen: 60
2400:1c00:17f::/48 maxlen: 48
2400:1c00:180::/48 maxlen: 48
2400:1c00:180::/60 maxlen: 60
2400:1c00:190::/44 maxlen: 44
2400:1c00:1a0::/44 maxlen: 44
2400:1c00:1b0::/44 maxlen: 44
2400:1c00:1d0::/44 maxlen: 44
2400:1c00:1d0::/45 maxlen: 45
2400:1c00:1d8::/45 maxlen: 45
2400:1c00:1e0::/44 maxlen: 44
2400:1c00:220::/44 maxlen: 44
2400:1c00:230::/44 maxlen: 44
2400:1c00:258::/46 maxlen: 46
2400:1c00:25c::/46 maxlen: 46
2400:1c00:25c::/47 maxlen: 47
2400:1c00:25e::/47 maxlen: 47
2400:1c00:27c::/46 maxlen: 46
2400:1c00:300::/44 maxlen: 44
2400:1c00:310::/45 maxlen: 45
2400:1c00:310::/54 maxlen: 54
2400:1c00:318::/45 maxlen: 45
2400:1c00:480::/44 maxlen: 44
2400:1c00:490::/44 maxlen: 44
2400:1c00:500::/45 maxlen: 45
2400:1c00:508::/45 maxlen: 45
2400:1c00:57c::/46 maxlen: 46
2400:1c00:580::/45 maxlen: 45
2400:1c00:590::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13698 (0x3582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Validity
Not Before: Feb 25 17:39:49 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4834c-e7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:9d:f9:4a:e5:eb:58:1b:13:86:da:f3:96:
3c:12:15:63:d6:03:d5:25:8a:2e:ee:e0:27:1b:c3:
7f:fd:cc:00:1a:d3:b8:98:fe:30:a2:36:68:b7:22:
52:8d:ea:53:f5:ec:9a:61:22:4b:62:02:72:a9:b3:
02:26:f8:9c:1f:ca:7e:18:e1:a3:45:d7:f7:8b:51:
3c:18:fa:98:e4:81:63:10:f1:b9:02:d9:cc:64:9c:
4c:55:64:ba:af:9e:f0:ba:ab:c0:ba:db:4f:9d:15:
a4:74:d0:0e:49:07:5a:84:a8:d4:c6:1f:64:b8:14:
39:67:c2:f9:2d:a6:a5:b4:86:fb:71:2b:d5:10:48:
e9:80:45:a6:51:ad:26:6e:c9:78:5e:06:53:97:fc:
55:2d:c2:2f:f4:a9:a0:ec:19:83:1e:73:da:97:de:
9f:dd:b9:a2:90:32:ab:5f:b6:22:fa:df:bb:af:ae:
8c:5c:b3:6b:7c:11:d1:4f:7b:06:c2:25:b2:12:d7:
76:06:c9:29:d7:b1:85:44:1c:96:28:0b:92:57:37:
12:99:46:1d:e7:c3:d0:55:df:e9:6e:13:f2:36:78:
7d:92:ed:91:b9:b4:dd:17:ac:16:66:c6:6e:7e:43:
c7:78:48:4f:e7:fb:1f:e8:05:95:1d:fd:af:97:8c:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5F:C6:2C:74:41:A5:63:BA:4F:60:DE:BC:C2:95:82:0E:54:33:FE
X509v3 Authority Key Identifier:
keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.100.128.0/17
111.65.31.0-111.65.79.255
119.234.0.0/17
180.255.128.0/17
202.78.56.0-202.78.58.255
IPv6:
2400:1c00::/32
Signature Algorithm: sha256WithRSAEncryption
3c:9c:62:35:8c:60:27:28:f0:ad:aa:03:e4:b6:c9:0d:52:75:
48:0c:c7:ff:9e:b9:88:75:aa:32:18:88:91:f7:de:01:c5:4b:
95:92:ef:a4:3f:13:fd:4e:f2:e9:38:c8:7a:1b:c5:0e:ea:29:
23:e4:4c:58:e4:c8:38:fb:1d:dc:8e:0d:fe:61:dd:f1:b5:66:
5a:b2:d4:f3:c7:3d:b4:c4:20:9e:46:10:3b:34:16:61:42:ef:
9a:05:42:a2:1e:ee:a9:5f:b7:13:fd:cd:35:db:e6:ff:86:f2:
0f:0d:72:65:2f:2c:cf:c4:46:9e:28:15:3e:df:55:a7:60:d2:
bb:b5:01:17:36:9a:00:be:31:32:d4:e0:f9:60:a3:f2:3c:28:
c8:cb:2a:87:fc:e0:da:eb:91:2e:95:d5:73:81:5e:5a:76:8f:
81:5f:91:ef:28:a1:a1:d5:bd:57:bf:7d:a2:43:b7:8e:d9:19:
a5:5c:89:f6:7a:5f:7b:9a:c2:80:a4:b3:d5:4c:2f:c3:b6:d4:
83:9e:6e:4a:15:0b:c5:39:1f:73:15:32:77:99:ae:ef:d2:62:
4b:fe:8d:cc:27:5c:e1:07:3b:41:f2:3a:20:a1:91:34:fd:ad:
84:69:66:fb:1a:6d:2f:88:69:2e:c5:be:9c:66:0e:8f:af:30:
74:98:d5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:19 2026 by rpki-client