Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/F412434CEC5811F0BA858F3E4B6F56BC.roa
File: F412434CEC5811F0BA858F3E4B6F56BC.roa (raw, json)
Hash identifier: 3KWZL639MlxP8Ldf2VS+STSDg8V8JEao/E2ryi2KhGs=
Subject key identifier: 7E:F6:34:04:56:60:C0:36:8E:0D:7C:7F:6A:B1:C8:A7:B0:B6:BF:3E
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 07C6
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/F412434CEC5811F0BA858F3E4B6F56BC.roa
Signing time: Fri 20 Feb 2026 06:18:47 +0000
ROA not before: Fri 20 Feb 2026 06:18:47 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 133481
IP address blocks: 14.207.160.0/24 maxlen: 24
14.207.163.0/24 maxlen: 24
27.130.0.0/22 maxlen: 22
27.130.4.0/22 maxlen: 22
27.130.8.0/22 maxlen: 22
27.130.12.0/22 maxlen: 22
27.130.16.0/22 maxlen: 22
27.130.20.0/22 maxlen: 22
27.130.24.0/22 maxlen: 22
27.130.28.0/22 maxlen: 22
27.130.32.0/22 maxlen: 22
27.130.36.0/22 maxlen: 22
27.130.40.0/22 maxlen: 22
27.130.44.0/22 maxlen: 22
27.130.48.0/22 maxlen: 22
27.130.52.0/22 maxlen: 22
27.130.56.0/22 maxlen: 22
27.130.60.0/22 maxlen: 22
27.130.64.0/22 maxlen: 22
27.130.68.0/22 maxlen: 22
27.130.72.0/22 maxlen: 22
27.130.76.0/22 maxlen: 22
27.130.80.0/22 maxlen: 22
27.130.84.0/22 maxlen: 22
27.130.88.0/22 maxlen: 22
27.130.92.0/22 maxlen: 22
27.130.96.0/22 maxlen: 22
27.130.100.0/22 maxlen: 22
27.130.104.0/22 maxlen: 22
27.130.108.0/22 maxlen: 22
27.130.112.0/22 maxlen: 22
27.130.116.0/22 maxlen: 22
27.130.120.0/22 maxlen: 22
27.130.124.0/22 maxlen: 22
27.130.128.0/22 maxlen: 22
27.130.132.0/22 maxlen: 22
27.130.136.0/22 maxlen: 22
27.130.140.0/22 maxlen: 22
27.130.144.0/22 maxlen: 22
27.130.148.0/22 maxlen: 22
27.130.152.0/22 maxlen: 22
27.130.156.0/22 maxlen: 22
27.130.160.0/22 maxlen: 22
27.130.164.0/22 maxlen: 22
27.130.168.0/22 maxlen: 22
27.130.172.0/22 maxlen: 22
27.130.176.0/22 maxlen: 22
27.130.180.0/22 maxlen: 22
27.130.184.0/22 maxlen: 22
27.130.188.0/22 maxlen: 22
27.130.192.0/22 maxlen: 22
27.130.196.0/22 maxlen: 22
27.130.200.0/22 maxlen: 22
27.130.204.0/22 maxlen: 22
27.130.208.0/22 maxlen: 22
27.130.212.0/22 maxlen: 22
27.130.216.0/22 maxlen: 22
27.130.220.0/22 maxlen: 22
27.130.224.0/22 maxlen: 22
27.130.228.0/22 maxlen: 22
27.130.232.0/22 maxlen: 22
27.130.236.0/22 maxlen: 22
27.130.240.0/22 maxlen: 22
27.130.244.0/22 maxlen: 22
27.130.248.0/22 maxlen: 22
27.130.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1990 (0x7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Feb 20 06:18:47 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6997fcc7-af5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:ad:d4:0a:fa:58:fd:8d:40:a6:5f:73:db:
2d:c8:cf:9a:77:50:bf:e9:65:ad:88:f7:e5:e0:c3:
46:f7:8a:18:fe:99:b2:8d:fb:69:48:38:f8:3b:48:
f6:52:ee:fc:47:47:5b:d4:98:d7:92:8c:79:e1:54:
5e:0a:3a:c0:72:e4:0b:a6:40:45:f1:c1:97:14:e0:
39:1b:84:29:03:ae:7f:06:64:89:a5:4b:e1:85:fb:
99:c8:af:19:a6:49:0f:b0:aa:42:f7:a7:5b:91:f9:
8e:f4:ae:43:50:ac:94:b8:c5:bd:04:27:60:66:2c:
e7:91:b3:73:c7:03:96:f5:85:03:7d:93:df:a3:cf:
41:df:d7:92:d4:3a:28:61:19:e5:5d:d4:15:01:b7:
7d:5e:49:e2:aa:8c:a6:1e:b2:2b:ee:70:74:c0:d2:
fc:e0:66:3d:86:68:92:e6:3c:78:cf:07:94:57:4b:
a9:76:4f:3c:ea:ef:b5:4a:40:93:f6:8d:fb:16:89:
ac:4d:b3:58:e6:48:7c:4c:fb:40:d6:9d:25:15:8a:
d1:fa:c3:25:e2:e3:b9:15:31:6d:fc:71:1f:80:27:
f5:ce:6e:3e:68:24:a6:77:ac:b0:52:ba:85:5c:bb:
fd:72:fc:7c:a8:e1:48:58:c4:de:e9:39:a6:cf:7f:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F6:34:04:56:60:C0:36:8E:0D:7C:7F:6A:B1:C8:A7:B0:B6:BF:3E
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/F412434CEC5811F0BA858F3E4B6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.207.160.0/24
14.207.163.0/24
27.130.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:0e:65:80:74:a2:65:13:62:b8:e7:27:a4:de:c9:be:27:08:
ab:1d:53:f2:45:7d:10:72:ed:4b:19:f5:78:a9:03:13:4b:59:
17:5e:45:2a:ac:c0:d9:17:ba:b6:1b:ba:d8:b6:9e:bc:3a:6e:
e5:a4:ba:bb:be:2e:81:a2:41:e0:a6:9f:e5:ca:6c:10:99:38:
b6:f7:61:46:10:3c:d3:0d:c2:67:8a:69:51:51:53:30:17:39:
5a:f7:d4:8d:0c:c6:b1:0d:7b:ff:ca:eb:51:35:16:98:57:be:
e1:5b:e3:e1:ff:a6:3c:9e:67:3c:0a:9c:41:df:f5:a3:fa:58:
a5:d1:78:b4:f1:e1:2a:8c:0b:26:4a:dc:83:be:bc:5a:91:23:
4b:30:8a:6c:4b:30:30:33:f0:a3:80:b7:5c:d9:0b:cd:12:ff:
9a:9c:98:e6:f5:ae:73:67:68:19:01:91:2b:88:7a:c8:16:ac:
f4:b2:8c:a1:19:91:e0:13:fa:0c:96:36:59:e4:8e:9b:57:ab:
30:98:5f:dd:fb:8d:a1:1a:b0:c8:77:52:79:5e:24:f8:e7:fe:
cb:22:e2:40:08:3e:60:52:de:81:5c:dc:70:88:76:d4:a0:45:
86:e3:16:27:48:34:76:8b:69:60:20:b8:ec:40:d2:fa:dd:3d:
84:32:ce:f4
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgICB8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE
RDhDRUNEMDQwHhcNMjYwMjIwMDYxODQ3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTk3ZmNjNy1hZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyXut1Ar6WP2NQKZfc9styM+ad1C/6WWtiPfl4MNG94oY/pmyjftpSDj4O0j2
Uu78R0db1JjXkox54VReCjrAcuQLpkBF8cGXFOA5G4QpA65/BmSJpUvhhfuZyK8Z
pkkPsKpC96dbkfmO9K5DUKyUuMW9BCdgZiznkbNzxwOW9YUDfZPfo89B39eS1Doo
YRnlXdQVAbd9XkniqoymHrIr7nB0wNL84GY9hmiS5jx4zweUV0updk886u+1SkCT
9o37FomsTbNY5kh8TPtA1p0lFYrR+sMl4uO5FTFt/HEfgCf1zm4+aCSmd6ywUrqF
XLv9cvx8qOFIWMTe6Tmmz3+PqQIDAQABo4ICoDCCApwwHQYDVR0OBBYEFH72NARW
YMA2jg18f2qxyKewtr8+MB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1
NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvRjQxMjQzNENF
QzU4MTFGMEJBODU4RjNFNEI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKgYIKwYBBQUHAQcBAf8E
GzAZMBcEAgABMBEDBAAOz6ADBAAOz6MDAwAbgjANBgkqhkiG9w0BAQsFAAOCAQEA
Gg5lgHSiZRNiuOcnpN7JvicIqx1T8kV9EHLtSxn1eKkDE0tZF15FKqzA2Re6thu6
2LaevDpu5aS6u74ugaJB4Kaf5cpsEJk4tvdhRhA80w3CZ4ppUVFTMBc5WvfUjQzG
sQ17/8rrUTUWmFe+4Vvj4f+mPJ5nPAqcQd/1o/pYpdF4tPHhKowLJkrcg768WpEj
SzCKbEswMDPwo4C3XNkLzRL/mpyY5vWuc2doGQGRK4h6yBas9LKMoRmR4BP6DJY2
WeSOm1erMJhf3fuNoRqwyHdSeV4k+Of+yyLiQAg+YFLegVzccIh21KBFhuMWJ0g0
dotpYCC47EDS+t09hDLO9A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:32 2026 by rpki-client