Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/4A479BB45A7911E998A6BE80C4F9AE02.roa
File: 4A479BB45A7911E998A6BE80C4F9AE02.roa (raw, json)
Hash identifier: SQTld78qnXyeYc8UteanISoaKYi+6Nmu6hvrhUZ9aUk=
Subject key identifier: 5C:D5:EB:CC:EE:4B:46:79:14:1B:CE:D1:70:51:03:18:18:19:C9:88
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 26EB
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/4A479BB45A7911E998A6BE80C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:06:00 +0000
ROA not before: Tue 02 Sep 2025 16:04:08 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133543
IP address blocks: 115.67.8.0/21 maxlen: 21
115.67.8.0/24 maxlen: 24
115.67.9.0/24 maxlen: 24
115.67.10.0/24 maxlen: 24
115.67.11.0/24 maxlen: 24
115.67.12.0/24 maxlen: 24
115.67.13.0/24 maxlen: 24
115.67.14.0/24 maxlen: 24
115.67.15.0/24 maxlen: 24
2404:8d06::/31 maxlen: 32
2404:8d06::/36 maxlen: 36
2404:8d06:1000::/36 maxlen: 36
2404:8d06:2000::/36 maxlen: 36
2404:8d06:2000::/40 maxlen: 40
2404:8d06:3000::/36 maxlen: 36
2404:8d06:4000::/36 maxlen: 36
2404:8d06:4000::/40 maxlen: 40
2404:8d06:5000::/36 maxlen: 36
2404:8d06:6000::/36 maxlen: 36
2404:8d06:6000::/40 maxlen: 48
2404:8d06:7000::/36 maxlen: 36
2404:8d06:7000::/40 maxlen: 40
2404:8d06:8000::/36 maxlen: 36
2404:8d06:8000::/40 maxlen: 40
2404:8d06:9000::/36 maxlen: 36
2404:8d06:9000::/40 maxlen: 40
2404:8d06:a000::/36 maxlen: 36
2404:8d06:a000::/40 maxlen: 40
2404:8d06:b000::/36 maxlen: 36
2404:8d06:b000::/40 maxlen: 40
2404:8d06:c000::/36 maxlen: 36
2404:8d06:d000::/36 maxlen: 36
2404:8d06:e000::/36 maxlen: 36
2404:8d06:f000::/36 maxlen: 36
2404:8d07::/36 maxlen: 36
2404:8d07:1000::/36 maxlen: 36
2404:8d07:2000::/36 maxlen: 36
2404:8d07:3000::/36 maxlen: 36
2404:8d07:4000::/36 maxlen: 36
2404:8d07:5000::/36 maxlen: 36
2404:8d07:6000::/36 maxlen: 36
2404:8d07:7000::/36 maxlen: 36
2404:8d07:8000::/36 maxlen: 36
2404:8d07:9000::/36 maxlen: 36
2404:8d07:a000::/36 maxlen: 36
2404:8d07:b000::/36 maxlen: 36
2404:8d07:c000::/36 maxlen: 36
2404:8d07:d000::/36 maxlen: 36
2404:8d07:e000::/36 maxlen: 36
2404:8d07:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9963 (0x26eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Sep 2 16:04:08 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48008-5634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:22:f9:d0:9a:40:d3:c6:bc:14:80:0b:6f:
3a:a6:64:0f:3f:68:0f:17:56:78:18:3d:47:bb:6e:
e2:c3:d6:03:40:9e:56:98:23:75:ca:ce:0d:14:e0:
f3:27:eb:14:42:ae:97:98:00:b1:38:7b:c2:a5:3d:
60:0b:ef:22:2a:10:e8:7c:7e:da:fe:0a:11:3e:f4:
26:20:b2:50:6e:a8:51:bb:ea:4d:25:e1:22:7f:1d:
d4:3d:a0:07:63:eb:38:96:5d:ea:c6:10:30:b8:bb:
03:17:94:eb:9b:04:c4:0f:1e:39:d1:5f:c3:c0:29:
00:60:79:1a:09:ae:e2:3e:e7:79:3f:75:bf:c7:14:
68:b0:db:63:e8:3c:13:3d:74:f3:be:fe:a5:27:03:
55:49:5e:2d:a5:b0:cc:8e:67:8f:ab:e7:5c:99:ce:
10:46:8c:b8:fc:b3:8b:8f:46:53:da:54:ec:21:b2:
24:3c:7f:33:35:f3:08:34:6d:35:3b:67:c0:42:36:
f4:44:82:d0:b4:56:e1:b4:05:51:f3:12:07:91:ff:
56:64:16:54:c4:b4:dd:9c:85:47:02:69:22:93:32:
92:d5:eb:23:b7:e8:ec:53:2e:b8:69:22:a2:a0:f0:
f8:a6:d7:9a:3e:31:9d:f7:69:31:6c:c9:05:f3:3e:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D5:EB:CC:EE:4B:46:79:14:1B:CE:D1:70:51:03:18:18:19:C9:88
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/4A479BB45A7911E998A6BE80C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
115.67.8.0/21
IPv6:
2404:8d06::/31
Signature Algorithm: sha256WithRSAEncryption
6a:eb:9a:62:61:6a:19:af:fe:57:f0:44:57:7f:14:a1:d2:89:
2c:4d:c8:a1:32:f0:1e:17:26:19:c6:44:ac:da:71:c0:f1:8e:
ee:ae:c9:33:89:2c:5e:63:8e:4a:a6:1a:6e:43:48:a0:bc:62:
b5:5d:d3:f2:f0:41:76:b8:01:ab:b6:33:d3:54:34:c1:93:f4:
ec:94:d5:07:65:6d:ca:81:59:ec:a0:df:04:be:1a:42:f0:9c:
bb:a8:f4:a4:49:3a:31:c0:3d:35:f1:5a:6e:71:51:e2:fd:be:
b6:fa:6b:9a:85:17:c3:d9:53:16:01:00:8d:bf:48:a5:ed:d0:
a0:ec:48:f5:29:c8:65:e1:0b:2d:2a:0a:ca:21:3c:ed:c8:68:
f3:33:2b:e4:f0:59:dd:b0:1d:d7:66:88:5a:41:04:a8:7c:21:
e7:1b:be:fd:bc:cb:b0:30:16:b7:89:ba:b1:26:5e:5d:ce:01:
a0:ff:cc:d5:97:9c:50:0d:a4:e3:ab:f0:93:d7:c1:47:4e:ce:
31:fa:c5:b4:b3:59:39:2b:d2:1b:af:c1:a4:8e:b0:41:eb:4f:
cc:2f:a7:70:ef:04:41:eb:ca:7c:08:4e:ab:26:a5:57:a0:e9:
eb:af:dd:18:06:ef:29:98:69:0e:51:69:b7:d6:cb:39:f1:4f:
e7:56:e1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:10 2026 by rpki-client