Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/4A479BB45A7911E998A6BE80C4F9AE02.roa
File: 4A479BB45A7911E998A6BE80C4F9AE02.roa (raw, json)
Hash identifier: r+NJ3jKOR4vbaI18u5l5ojoc7t3kUi7BlcVZrzgaNHg=
Subject key identifier: 98:9D:42:A4:26:A9:42:92:80:66:BD:4C:E0:89:25:49:E1:68:03:EB
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 2783
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/4A479BB45A7911E998A6BE80C4F9AE02.roa
Signing time: Mon 28 Sep 2026 16:23:21 +0000
ROA not before: Mon 28 Sep 2026 16:23:21 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 133543
IP address blocks: 115.67.8.0/21 maxlen: 21
115.67.8.0/24 maxlen: 24
115.67.9.0/24 maxlen: 24
115.67.10.0/24 maxlen: 24
115.67.11.0/24 maxlen: 24
115.67.12.0/24 maxlen: 24
115.67.13.0/24 maxlen: 24
115.67.14.0/24 maxlen: 24
115.67.15.0/24 maxlen: 24
115.67.100.0/24 maxlen: 24
2404:8d06::/31 maxlen: 32
2404:8d06::/36 maxlen: 36
2404:8d06:1000::/36 maxlen: 36
2404:8d06:2000::/36 maxlen: 36
2404:8d06:2000::/40 maxlen: 40
2404:8d06:3000::/36 maxlen: 36
2404:8d06:4000::/36 maxlen: 36
2404:8d06:4000::/40 maxlen: 40
2404:8d06:5000::/36 maxlen: 36
2404:8d06:6000::/36 maxlen: 36
2404:8d06:6000::/40 maxlen: 48
2404:8d06:7000::/36 maxlen: 36
2404:8d06:7000::/40 maxlen: 40
2404:8d06:8000::/36 maxlen: 36
2404:8d06:8000::/40 maxlen: 40
2404:8d06:9000::/36 maxlen: 36
2404:8d06:9000::/40 maxlen: 40
2404:8d06:a000::/36 maxlen: 36
2404:8d06:a000::/40 maxlen: 40
2404:8d06:b000::/36 maxlen: 36
2404:8d06:b000::/40 maxlen: 40
2404:8d06:c000::/36 maxlen: 36
2404:8d06:d000::/36 maxlen: 36
2404:8d06:e000::/36 maxlen: 36
2404:8d06:f000::/36 maxlen: 36
2404:8d07::/36 maxlen: 36
2404:8d07:1000::/36 maxlen: 36
2404:8d07:2000::/36 maxlen: 36
2404:8d07:3000::/36 maxlen: 36
2404:8d07:4000::/36 maxlen: 36
2404:8d07:5000::/36 maxlen: 36
2404:8d07:6000::/36 maxlen: 36
2404:8d07:7000::/36 maxlen: 36
2404:8d07:8000::/36 maxlen: 36
2404:8d07:9000::/36 maxlen: 36
2404:8d07:a000::/36 maxlen: 36
2404:8d07:b000::/36 maxlen: 36
2404:8d07:c000::/36 maxlen: 36
2404:8d07:d000::/36 maxlen: 36
2404:8d07:e000::/36 maxlen: 36
2404:8d07:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 15:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10115 (0x2783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Sep 28 16:23:21 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aba9479-a216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:0f:e0:1e:05:52:25:c7:6d:87:f3:e8:30:
d4:0c:8e:88:76:98:b6:9c:c4:63:46:3e:c2:26:d7:
39:49:15:b6:2c:02:10:6a:5b:ea:39:fb:6c:1d:7c:
6a:e3:2e:ce:87:42:da:9b:93:a5:07:b1:23:fa:c2:
83:6c:16:b3:e5:ff:1b:a4:91:23:f3:62:8d:99:d9:
cc:45:e1:e3:3b:67:ed:58:0f:22:5c:8a:5a:6b:82:
a5:c4:cb:a9:d9:25:d9:55:05:d6:6d:6b:25:30:b8:
7b:fe:60:94:3d:fb:cd:10:f5:d4:60:b6:99:26:a7:
90:f5:e7:b6:ac:12:c9:f2:3f:da:51:5a:77:b4:88:
59:12:cd:69:86:64:52:23:15:b3:9d:26:ec:0a:66:
a5:4e:26:40:0a:0e:e7:a8:28:f7:d1:7e:19:ba:06:
a5:ed:10:ae:e5:4f:13:21:a3:52:c9:fb:86:2b:f4:
d0:ad:73:c8:fa:86:ba:62:20:2d:84:82:45:ef:9a:
22:32:5c:c4:fe:7a:28:7c:df:15:b2:82:3a:4b:ca:
38:9b:c7:69:53:83:74:d6:38:88:a0:89:07:22:4c:
13:45:92:4b:cb:8d:81:3e:0c:5e:a9:45:dd:b3:28:
09:41:87:9a:86:35:1c:33:14:4e:b6:17:d7:b4:5c:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9D:42:A4:26:A9:42:92:80:66:BD:4C:E0:89:25:49:E1:68:03:EB
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/4A479BB45A7911E998A6BE80C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
115.67.8.0/21
115.67.100.0/24
IPv6:
2404:8d06::/31
Signature Algorithm: sha256WithRSAEncryption
49:f2:03:36:7e:0d:fe:e0:0a:05:c2:eb:e4:78:0e:cd:95:42:
82:78:cb:9f:76:59:be:22:fe:16:10:cf:83:95:6b:bb:f4:fb:
aa:53:5d:97:f0:3c:9a:c1:b5:fc:17:3d:be:00:eb:53:ee:0b:
9f:79:55:39:dc:8e:e2:cf:82:9f:0c:3c:82:d5:13:de:03:2b:
42:1b:b1:11:0a:20:2a:df:0e:20:44:2f:95:77:49:c9:b1:aa:
e9:3f:e0:c1:55:71:80:d9:f8:7b:f6:1c:c2:2a:d3:57:9b:58:
9d:06:f2:ab:f6:bc:5a:7c:7d:f7:7a:9a:f0:7c:76:6e:64:12:
5b:84:43:5f:2e:9c:6f:4a:ea:c1:07:bc:80:3d:3a:c4:5d:3f:
ed:18:b5:a9:6f:e0:58:a7:e4:fe:35:38:cf:ec:8d:11:ed:fa:
c3:dc:5b:46:9d:e2:84:1e:34:e0:5e:c0:7b:c5:5a:2d:d8:32:
61:c7:34:33:67:ab:cf:7a:62:ed:2e:f0:09:0f:77:65:87:17:
7d:a9:e0:fa:1a:c2:c1:76:c8:4e:7d:3d:18:59:7a:82:0c:bd:
d8:11:d7:7d:31:06:4d:6a:b1:db:58:8b:90:9d:c3:77:0b:db:
01:26:9b:41:e6:31:40:ab:1a:dd:c7:1c:b9:c2:a3:0b:65:de:
d7:9e:1b:4d
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICJ4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB
RjE0ODkyNkMwHhcNMjYwOTI4MTYyMzIxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJhOTQ3OS1hMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAonMP4B4FUiXHbYfz6DDUDI6Idpi2nMRjRj7CJtc5SRW2LAIQalvqOftsHXxq
4y7Oh0Lam5OlB7Ej+sKDbBaz5f8bpJEj82KNmdnMReHjO2ftWA8iXIpaa4KlxMup
2SXZVQXWbWslMLh7/mCUPfvNEPXUYLaZJqeQ9ee2rBLJ8j/aUVp3tIhZEs1phmRS
IxWznSbsCmalTiZACg7nqCj30X4Zugal7RCu5U8TIaNSyfuGK/TQrXPI+oa6YiAt
hIJF75oiMlzE/noofN8VsoI6S8o4m8dpU4N01jiIoIkHIkwTRZJLy42BPgxeqUXd
sygJQYeahjUcMxROthfXtFwl9QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJidQqQm
qUKSgGa9TOCJJUnhaAPrMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx
NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr
bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvNEE0NzlCQjQ1
QTc5MTFFOTk4QTZCRTgwQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQDc0MIAwQAc0NkMA0EAgACMAcDBQEkBI0GMA0GCSqGSIb3DQEBCwUA
A4IBAQBJ8gM2fg3+4AoFwuvkeA7NlUKCeMufdlm+Iv4WEM+DlWu79PuqU12X8Dya
wbX8Fz2+AOtT7gufeVU53I7iz4KfDDyC1RPeAytCG7ERCiAq3w4gRC+Vd0nJsarp
P+DBVXGA2fh79hzCKtNXm1idBvKr9rxafH33eprwfHZuZBJbhENfLpxvSurBB7yA
PTrEXT/tGLWpb+BYp+T+NTjP7I0R7frD3FtGneKEHjTgXsB7xVot2DJhxzQzZ6vP
emLtLvAJD3dlhxd9qeD6GsLBdshOfT0YWXqCDL3YEdd9MQZNarHbWIuQncN3C9sB
JptB5jFAqxrdxxy5wqMLZd7XnhtN
-----END CERTIFICATE-----
Generated at Tue Oct 13 07:54:10 2026 by rpki-client