Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/EE375CF036BD11E7B9B7251EC4F9AE02.roa
File: EE375CF036BD11E7B9B7251EC4F9AE02.roa (raw, json)
Hash identifier: rQ6V7Y61svC1RGEBFjHv6e6/KqkzoqhKsBdBw7nwZ54=
Subject key identifier: A8:76:D5:87:9D:78:F6:6C:58:14:DE:94:E1:3C:A4:F1:62:F7:6C:1D
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 1F7F
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/EE375CF036BD11E7B9B7251EC4F9AE02.roa
Signing time: Sat 28 Feb 2026 05:49:38 +0000
ROA not before: Sat 28 Feb 2026 05:49:37 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134963
IP address blocks: 14.1.112.0/22 maxlen: 24
43.96.0.0/16 maxlen: 24
43.97.0.0/16 maxlen: 24
43.98.0.0/16 maxlen: 24
43.99.0.0/16 maxlen: 24
43.100.0.0/16 maxlen: 24
43.101.0.0/16 maxlen: 24
43.102.0.0/16 maxlen: 24
43.103.0.0/16 maxlen: 24
43.104.0.0/16 maxlen: 24
43.105.0.0/16 maxlen: 24
43.106.0.0/16 maxlen: 24
43.107.0.0/16 maxlen: 24
43.108.0.0/16 maxlen: 24
43.109.0.0/16 maxlen: 24
43.110.0.0/16 maxlen: 24
43.111.0.0/16 maxlen: 24
43.112.0.0/16 maxlen: 24
43.113.0.0/16 maxlen: 24
43.114.0.0/16 maxlen: 24
43.115.0.0/16 maxlen: 24
43.116.0.0/16 maxlen: 24
43.117.0.0/16 maxlen: 24
43.118.0.0/16 maxlen: 24
43.119.0.0/16 maxlen: 24
43.120.0.0/16 maxlen: 24
43.121.0.0/16 maxlen: 24
43.122.0.0/16 maxlen: 24
43.123.0.0/16 maxlen: 24
43.124.0.0/16 maxlen: 24
43.125.0.0/16 maxlen: 24
43.126.0.0/16 maxlen: 24
43.127.0.0/16 maxlen: 16
43.127.0.0/16 maxlen: 24
103.206.40.0/22 maxlen: 24
240b:4000::/32 maxlen: 48
240b:4001::/32 maxlen: 48
240b:4002::/32 maxlen: 48
240b:4003::/32 maxlen: 48
240b:4004::/32 maxlen: 48
240b:4005::/32 maxlen: 48
240b:4006::/32 maxlen: 48
240b:4007::/32 maxlen: 48
240b:4008::/32 maxlen: 48
240b:4009::/32 maxlen: 48
240b:400a::/32 maxlen: 48
240b:400b::/32 maxlen: 48
240b:400c::/32 maxlen: 48
240b:400d::/32 maxlen: 48
240b:400e::/32 maxlen: 48
240b:400f::/32 maxlen: 48
240b:4010::/32 maxlen: 48
240b:4011::/32 maxlen: 48
240b:4012::/32 maxlen: 48
240b:4013::/32 maxlen: 48
240b:4014::/32 maxlen: 48
240b:4015::/32 maxlen: 48
240b:4016::/32 maxlen: 48
240b:4017::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8063 (0x1f7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Feb 28 05:49:37 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a281f1-2bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:d9:2c:ac:1b:81:80:68:0d:87:ae:38:98:
d2:8f:6a:45:49:ec:a2:a7:11:7c:ca:28:9d:37:4c:
04:c5:64:49:37:45:18:d4:93:81:92:c4:76:e9:92:
91:ef:2b:1e:d8:1d:87:b3:31:a5:e7:b6:4e:91:77:
2f:97:d7:4c:6c:c1:3c:72:da:84:36:96:28:14:c2:
32:8a:f7:d8:25:ba:da:5e:ba:44:d2:c6:76:84:08:
0a:e2:42:70:54:81:fd:a1:89:d9:fb:fa:28:d1:52:
ed:1a:04:a3:61:97:5b:98:14:1f:b8:93:fd:cb:61:
77:41:f8:f7:f4:8e:0d:aa:6d:65:dd:0a:77:29:06:
6f:d6:89:a1:4e:3e:97:4b:b6:56:12:35:d3:56:13:
f8:d6:dd:c8:79:66:f0:dd:89:02:7c:f8:ec:41:20:
da:f2:d9:56:e2:3c:3f:99:d0:48:38:25:ec:e0:3a:
6c:98:a8:b8:3e:fa:89:fd:44:91:20:9a:b6:a2:77:
79:fa:2f:d8:7d:35:7d:9b:d4:43:0d:f1:aa:92:de:
bc:d9:05:8a:5a:ef:65:55:18:22:db:f6:16:f5:e6:
61:88:a1:35:eb:fb:c0:ef:01:87:fc:9d:39:a5:ff:
06:90:41:01:7c:18:07:0e:28:b9:ea:71:84:59:82:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:76:D5:87:9D:78:F6:6C:58:14:DE:94:E1:3C:A4:F1:62:F7:6C:1D
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/EE375CF036BD11E7B9B7251EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.1.112.0/22
43.96.0.0/11
103.206.40.0/22
IPv6:
240b:4000::-240b:4017:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:39:55:35:73:fe:2a:68:23:43:f1:3c:21:fd:e4:b9:f5:f9:
e7:90:d2:5e:f4:46:e7:d4:69:3b:f3:8d:27:ed:6f:95:12:a4:
62:f9:7d:0f:a1:a7:32:23:f1:52:77:e0:2b:39:d5:d1:7f:a4:
ea:c4:16:de:6c:af:51:11:d7:eb:eb:40:36:6c:03:1e:cf:4d:
0b:55:87:83:90:d9:d9:c0:4c:c0:4b:97:50:ef:71:34:7b:e9:
f8:7c:4c:0c:e4:f4:c1:2f:8e:d0:42:85:c0:7a:1b:79:9d:24:
56:5f:60:ff:87:8f:b1:f8:e1:93:d8:00:48:f0:96:45:9c:08:
37:0b:2c:75:05:0f:bd:42:ba:a3:bc:c9:65:b5:fd:0e:52:93:
15:aa:bb:a0:d3:70:97:38:ac:53:4c:e8:e0:7c:12:f0:4c:87:
6a:a7:f9:4a:97:7b:45:7e:fe:93:a5:88:b8:fd:ff:8c:f6:ac:
e3:f3:3a:13:71:99:ea:9e:4e:f2:46:d2:53:1a:c2:76:4e:1a:
f5:71:0a:e7:d5:7b:8d:f4:5a:77:f3:fe:3d:d5:31:ab:2a:90:
70:06:ae:fb:09:2b:2b:b4:be:18:ec:65:7a:a4:db:15:80:0a:
fd:d3:52:bd:cf:82:84:f1:3a:71:b8:74:af:4b:95:c6:a7:a7:
21:46:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:16:11 2026 by rpki-client