Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/42DB2A2A4E6511ECA2CED527C4F9AE02.roa
File: 42DB2A2A4E6511ECA2CED527C4F9AE02.roa (raw, json)
Hash identifier: 1/tRTUiJz/lja4PciZgywFXRIMKc1Bjw76q8Z2ZAq7g=
Subject key identifier: 74:86:70:66:F9:79:C2:CD:E0:41:3A:17:C9:C5:6E:E4:03:00:F1:25
Certificate issuer: /CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Certificate serial: 061A
Authority key identifier: B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/42DB2A2A4E6511ECA2CED527C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:58:18 +0000
ROA not before: Thu 07 Aug 2025 00:05:28 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 10132
IP address blocks: 61.4.0.0/18 maxlen: 18
61.4.9.0/24 maxlen: 24
61.4.10.0/24 maxlen: 24
61.4.11.0/24 maxlen: 24
61.4.12.0/24 maxlen: 24
61.4.13.0/24 maxlen: 24
61.4.14.0/24 maxlen: 24
61.4.15.0/24 maxlen: 24
61.4.16.0/24 maxlen: 24
61.4.23.0/24 maxlen: 24
61.4.24.0/24 maxlen: 24
61.4.25.0/24 maxlen: 24
61.4.26.0/24 maxlen: 24
61.4.27.0/24 maxlen: 24
61.4.28.0/24 maxlen: 24
61.4.29.0/24 maxlen: 24
61.4.30.0/24 maxlen: 24
61.4.31.0/24 maxlen: 24
61.4.32.0/23 maxlen: 23
61.4.36.0/24 maxlen: 24
61.4.37.0/24 maxlen: 24
61.4.39.0/24 maxlen: 24
61.4.40.0/24 maxlen: 24
61.4.42.0/23 maxlen: 23
61.4.44.0/24 maxlen: 24
61.4.48.0/22 maxlen: 22
61.4.52.0/22 maxlen: 22
61.4.56.0/23 maxlen: 23
61.4.58.0/23 maxlen: 23
113.212.192.0/18 maxlen: 18
113.212.196.0/23 maxlen: 23
113.212.198.0/23 maxlen: 23
113.212.200.0/23 maxlen: 23
113.212.202.0/23 maxlen: 23
113.212.208.0/22 maxlen: 22
113.212.212.0/22 maxlen: 22
113.212.216.0/21 maxlen: 21
113.212.216.0/24 maxlen: 24
113.212.217.0/24 maxlen: 24
113.212.219.0/24 maxlen: 24
113.212.220.0/23 maxlen: 23
113.212.222.0/23 maxlen: 23
113.212.224.0/24 maxlen: 24
113.212.225.0/24 maxlen: 24
113.212.229.0/24 maxlen: 24
113.212.230.0/24 maxlen: 24
113.212.231.0/24 maxlen: 24
113.212.232.0/21 maxlen: 21
113.212.232.0/22 maxlen: 22
113.212.232.0/24 maxlen: 24
113.212.233.0/24 maxlen: 24
113.212.234.0/24 maxlen: 24
113.212.235.0/24 maxlen: 24
113.212.236.0/24 maxlen: 24
113.212.237.0/24 maxlen: 24
113.212.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1562 (0x61a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC72, serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Validity
Not Before: Aug 7 00:05:28 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4540a-4995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:61:d3:e4:ec:2d:ab:20:c0:7a:78:72:c0:
84:cc:d2:55:23:71:5d:97:72:b9:bb:5b:92:d7:c8:
eb:65:ac:bf:80:c6:c0:97:80:33:b4:bc:6e:0c:c9:
eb:83:39:9b:e2:74:0e:16:95:78:cf:8e:8e:5a:ae:
43:d9:48:2b:08:1b:2b:df:a9:e1:f9:29:33:b2:4c:
a9:dd:b9:26:e4:ff:c5:bf:36:0f:79:fc:41:77:17:
c7:6b:dd:a3:e9:36:99:f1:d9:7e:62:2f:7c:00:75:
4f:14:e4:af:9c:36:b6:a0:3e:e9:49:20:af:45:de:
f8:bd:f9:5e:29:98:65:64:d4:f9:b5:1d:8b:33:19:
c3:f6:f8:c4:43:e6:24:1a:a2:4d:e1:db:21:a2:5e:
04:f3:db:63:12:43:78:03:2c:e3:71:56:6b:ae:ef:
a2:8a:d8:3a:62:81:03:47:28:74:82:8a:ed:86:49:
1d:ff:bc:96:18:d2:f4:0a:b4:d5:b7:d9:7f:7f:2f:
a8:3e:7c:57:c7:3b:bb:ed:ec:86:8c:dd:89:56:d3:
c3:81:45:52:a1:b5:c4:c8:15:aa:43:a8:f6:3e:07:
db:1e:32:00:ea:69:b0:e1:62:9f:98:c3:d0:6b:22:
b5:9d:16:82:00:29:1b:a4:cb:19:f9:72:49:9c:9d:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:86:70:66:F9:79:C2:CD:E0:41:3A:17:C9:C5:6E:E4:03:00:F1:25
X509v3 Authority Key Identifier:
keyid:B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/42DB2A2A4E6511ECA2CED527C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.4.0.0/18
113.212.192.0/18
Signature Algorithm: sha256WithRSAEncryption
c1:08:fd:34:98:18:97:8d:14:18:17:e8:84:1d:b7:62:26:c1:
cb:30:4b:b8:8d:79:b7:2a:89:ab:da:1a:85:89:80:78:87:35:
f7:52:9a:03:91:db:5b:74:2b:eb:c7:37:ed:35:12:4f:ad:57:
67:bb:2b:0d:ef:1c:df:1e:fe:64:3c:02:79:2f:16:3a:22:27:
0e:ca:0e:27:6f:48:6f:ad:56:09:bc:8c:e5:35:d9:49:63:e7:
d9:ae:d8:97:db:8d:cc:24:9c:69:ad:0a:41:df:d0:71:60:60:
00:9e:55:6b:02:c9:73:fe:b9:b5:14:95:76:bf:00:1e:3b:be:
7d:57:6a:ce:b2:0d:10:30:de:bc:e4:7b:57:02:7f:b6:00:f6:
83:9d:af:12:94:d1:19:08:16:8e:5d:54:6d:22:fd:47:09:f6:
36:00:27:13:be:80:94:d0:ae:80:82:28:2a:09:21:60:2c:c2:
58:af:7b:32:71:ad:a6:4f:1d:f9:d7:39:54:38:88:e9:a6:fa:
ef:6e:1f:34:36:1d:04:ee:cc:a6:43:e4:9d:2f:a0:f1:64:34:
fc:40:54:e2:53:35:ae:b5:f1:ee:91:d6:ea:99:83:9f:ac:00:
93:be:8b:be:74:50:97:ca:e6:9c:65:76:e6:0d:43:8f:16:0e:
4a:f0:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:27 2026 by rpki-client