Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
File: 8F92939C46C711E9A5547325C4F9AE02.roa (raw, json)
Hash identifier: gImkVIX1Ti4fAjEUeoxwtMLyNZvCsjjTo3pecuPTMXQ=
Subject key identifier: C5:D7:E4:BF:73:3F:46:FF:D6:1F:E0:2B:AC:E7:F7:EB:6A:61:1B:64
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 2780
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
Signing time: Mon 28 Sep 2026 16:23:14 +0000
ROA not before: Mon 28 Sep 2026 16:23:14 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 10089
IP address blocks: 115.67.0.0/21 maxlen: 21
115.67.0.0/24 maxlen: 24
115.67.1.0/24 maxlen: 24
115.67.2.0/24 maxlen: 24
115.67.3.0/24 maxlen: 24
115.67.4.0/24 maxlen: 24
115.67.5.0/24 maxlen: 24
115.67.6.0/24 maxlen: 24
115.67.7.0/24 maxlen: 24
115.67.100.0/24 maxlen: 24
115.67.101.0/24 maxlen: 24
115.67.108.0/24 maxlen: 24
2404:8d00::/29 maxlen: 29
2404:8d04::/31 maxlen: 32
2404:8d04::/36 maxlen: 36
2404:8d04:1000::/36 maxlen: 36
2404:8d04:2000::/36 maxlen: 36
2404:8d04:3000::/36 maxlen: 36
2404:8d04:4000::/36 maxlen: 36
2404:8d04:5000::/36 maxlen: 36
2404:8d04:6000::/36 maxlen: 36
2404:8d04:7000::/36 maxlen: 36
2404:8d04:8000::/36 maxlen: 36
2404:8d04:9000::/36 maxlen: 36
2404:8d04:a000::/36 maxlen: 36
2404:8d04:b000::/36 maxlen: 36
2404:8d04:c000::/36 maxlen: 36
2404:8d04:d000::/36 maxlen: 36
2404:8d04:e000::/36 maxlen: 36
2404:8d04:f000::/36 maxlen: 36
2404:8d05::/36 maxlen: 36
2404:8d05:1000::/36 maxlen: 36
2404:8d05:2000::/36 maxlen: 36
2404:8d05:3000::/36 maxlen: 36
2404:8d05:4000::/36 maxlen: 36
2404:8d05:5000::/36 maxlen: 36
2404:8d05:6000::/36 maxlen: 36
2404:8d05:7000::/36 maxlen: 36
2404:8d05:8000::/36 maxlen: 36
2404:8d05:9000::/36 maxlen: 36
2404:8d05:a000::/36 maxlen: 36
2404:8d05:b000::/36 maxlen: 36
2404:8d05:c000::/36 maxlen: 36
2404:8d05:d000::/36 maxlen: 36
2404:8d05:e000::/36 maxlen: 36
2404:8d05:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10112 (0x2780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Sep 28 16:23:14 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aba9472-c4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:86:4c:02:e7:2e:5f:a5:d3:f4:34:ab:62:
b2:d6:91:a6:3e:66:44:5b:eb:41:6c:25:a6:68:1f:
44:bb:a2:fc:c4:89:b2:2b:cb:a4:97:5c:8b:81:97:
9c:bb:59:37:d2:90:82:a3:9d:0d:e8:0f:ee:cd:53:
3d:c0:25:d9:02:5e:4d:cc:23:81:56:de:dd:46:db:
ba:62:3b:0d:68:93:be:34:a8:5b:db:91:6e:24:02:
62:22:dd:f7:87:1e:05:64:4f:ff:16:4f:c5:45:4a:
e0:17:55:9f:87:ad:dd:51:c2:dd:3c:49:97:4c:c4:
62:ff:35:a7:dd:5a:ba:28:df:19:85:54:70:19:4e:
07:09:19:5a:a4:c7:0c:db:bf:53:dd:d4:1a:f3:1b:
6b:e9:b4:ef:af:14:c8:6a:12:a7:d9:02:12:22:44:
06:88:00:18:d9:c0:86:e6:89:0a:85:b6:33:d9:fd:
04:c5:f5:5b:87:67:36:73:d9:d2:eb:f1:2b:76:10:
89:46:f6:f7:86:f1:a1:7d:23:d8:50:55:6d:77:4d:
a8:69:ec:ba:c9:23:58:28:c0:9a:bf:ee:42:66:7a:
c4:25:14:bd:06:2c:93:9a:45:f3:f4:46:b1:de:a8:
10:cc:5e:b6:e1:93:44:2e:35:ad:6d:69:2c:a9:2b:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:E4:BF:73:3F:46:FF:D6:1F:E0:2B:AC:E7:F7:EB:6A:61:1B:64
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
115.67.0.0/21
115.67.100.0/23
115.67.108.0/24
IPv6:
2404:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
03:39:c0:95:b8:93:88:a6:a2:d1:2c:cd:c4:df:cb:7d:64:d2:
0b:22:70:43:c8:5b:0d:cf:0f:e4:63:d1:71:53:69:08:32:6a:
26:00:28:ee:13:55:9d:8d:6a:95:4d:48:85:8b:2f:f4:f8:4e:
3b:db:56:88:28:9a:e1:cd:19:ca:8a:3f:73:ab:09:a0:bd:b0:
96:88:ad:7b:1d:cd:24:08:cf:42:96:3b:14:4f:7e:96:ae:f2:
e0:a4:99:7c:af:db:3f:74:fd:7a:ce:6b:33:a2:2c:a0:7e:98:
2f:a9:59:da:b3:7e:fc:cf:01:dd:96:85:72:dc:51:4d:53:c1:
d4:b8:bb:63:86:50:67:0f:b3:de:f6:70:20:1b:e6:5b:dd:91:
e1:01:df:0b:66:35:c5:60:e2:c9:ac:82:92:ff:29:8d:ae:8d:
bf:44:06:d8:eb:9e:4e:be:61:93:ec:96:57:22:5d:04:f5:fb:
3f:5c:3d:68:67:a3:03:27:22:6d:ef:e6:60:f0:0b:a6:b4:02:
6f:95:bb:b5:c0:63:1a:c1:b8:0d:66:5a:cb:19:77:a8:67:ae:
13:ff:0f:76:38:6b:bc:43:26:20:d3:9d:77:ae:b9:0c:90:77:
35:2f:c9:61:e2:5e:c9:b8:1c:92:e0:83:51:ab:49:52:db:ce:
fd:c5:9b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:08:40 2026 by rpki-client