Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/42DB2A2A4E6511ECA2CED527C4F9AE02.roa
File: 42DB2A2A4E6511ECA2CED527C4F9AE02.roa (raw, json)
Hash identifier: 1j1V8ykCi88v39IUrZWqTiCQG7G2/cNfotRU/b0XJd4=
Subject key identifier: A0:53:F4:C8:CC:07:57:10:56:F0:31:72:33:3C:7D:40:A8:1F:7E:E4
Certificate issuer: /CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Certificate serial: 066F
Authority key identifier: B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/42DB2A2A4E6511ECA2CED527C4F9AE02.roa
Signing time: Tue 28 Jul 2026 23:44:41 +0000
ROA not before: Tue 28 Jul 2026 23:44:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 10132
IP address blocks: 61.4.0.0/18 maxlen: 18
61.4.9.0/24 maxlen: 24
61.4.10.0/24 maxlen: 24
61.4.11.0/24 maxlen: 24
61.4.12.0/24 maxlen: 24
61.4.13.0/24 maxlen: 24
61.4.14.0/24 maxlen: 24
61.4.15.0/24 maxlen: 24
61.4.16.0/24 maxlen: 24
61.4.23.0/24 maxlen: 24
61.4.24.0/24 maxlen: 24
61.4.25.0/24 maxlen: 24
61.4.26.0/24 maxlen: 24
61.4.27.0/24 maxlen: 24
61.4.28.0/24 maxlen: 24
61.4.29.0/24 maxlen: 24
61.4.30.0/24 maxlen: 24
61.4.31.0/24 maxlen: 24
61.4.32.0/23 maxlen: 23
61.4.36.0/24 maxlen: 24
61.4.37.0/24 maxlen: 24
61.4.39.0/24 maxlen: 24
61.4.40.0/24 maxlen: 24
61.4.42.0/23 maxlen: 23
61.4.44.0/24 maxlen: 24
61.4.48.0/22 maxlen: 22
61.4.52.0/22 maxlen: 22
61.4.56.0/23 maxlen: 23
61.4.58.0/23 maxlen: 23
113.212.192.0/18 maxlen: 18
113.212.196.0/23 maxlen: 23
113.212.198.0/23 maxlen: 23
113.212.200.0/23 maxlen: 23
113.212.202.0/23 maxlen: 23
113.212.208.0/22 maxlen: 22
113.212.212.0/22 maxlen: 22
113.212.216.0/21 maxlen: 21
113.212.216.0/24 maxlen: 24
113.212.217.0/24 maxlen: 24
113.212.219.0/24 maxlen: 24
113.212.220.0/23 maxlen: 23
113.212.222.0/23 maxlen: 23
113.212.224.0/21 maxlen: 21
113.212.224.0/24 maxlen: 24
113.212.225.0/24 maxlen: 24
113.212.229.0/24 maxlen: 24
113.212.230.0/24 maxlen: 24
113.212.231.0/24 maxlen: 24
113.212.232.0/21 maxlen: 21
113.212.232.0/22 maxlen: 22
113.212.232.0/24 maxlen: 24
113.212.233.0/24 maxlen: 24
113.212.234.0/24 maxlen: 24
113.212.235.0/24 maxlen: 24
113.212.236.0/24 maxlen: 24
113.212.237.0/24 maxlen: 24
113.212.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:44:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1647 (0x66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC72, serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Validity
Not Before: Jul 28 23:44:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a693ee8-2490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:c5:c2:df:37:fe:e3:b6:3a:3c:6c:46:12:
8d:f9:d1:e1:0e:3c:e6:0a:ed:38:dc:34:c4:43:58:
84:71:93:83:b8:5c:35:4b:c9:12:3f:1f:d9:0f:a7:
fe:37:64:91:31:4e:77:e7:ba:fd:0e:05:84:f8:11:
cf:02:00:e2:73:8c:7c:33:5f:17:bd:66:54:55:68:
f1:1a:5f:79:54:62:75:06:2e:a4:ed:c7:b8:12:71:
83:d0:fa:68:ca:b8:55:9d:9e:9c:53:7c:16:56:ca:
64:d1:b2:11:fc:e3:f7:56:fb:1a:04:04:94:9c:6e:
0c:99:43:28:aa:2d:48:91:0e:b6:aa:d3:2e:84:1b:
86:49:fd:12:9b:d5:a8:08:32:f1:91:6b:16:e9:c8:
65:d5:51:be:04:73:49:8b:80:35:aa:3d:07:7b:da:
fc:93:24:5f:87:82:90:8b:da:54:2a:65:82:22:4c:
2a:ff:fb:c2:84:a3:1b:d4:d5:11:e5:1d:8c:a9:6f:
aa:16:66:1b:12:18:d4:f8:19:2a:9f:6d:a6:f8:2c:
eb:14:11:e5:88:89:da:af:79:67:d8:93:aa:c0:9f:
83:43:44:78:bd:d6:28:54:9f:45:30:e7:41:95:78:
54:cc:8f:69:5b:be:8d:d0:76:fa:13:87:d3:38:4e:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:53:F4:C8:CC:07:57:10:56:F0:31:72:33:3C:7D:40:A8:1F:7E:E4
X509v3 Authority Key Identifier:
keyid:B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/42DB2A2A4E6511ECA2CED527C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.4.0.0/18
113.212.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7f:cc:ad:c4:c8:55:a0:bb:aa:a7:6c:cb:26:02:02:20:f5:8b:
43:e2:b4:ca:8b:44:19:d1:f7:92:5d:eb:5c:d5:ec:78:27:59:
e4:20:cd:60:a8:dc:84:ed:39:e9:25:3c:9f:a9:6c:23:02:ef:
1d:89:0c:d9:c1:66:97:64:ec:57:96:89:99:fd:ac:bd:18:2f:
5d:86:87:51:72:96:7e:8c:5a:7c:ed:40:81:20:40:69:e2:e7:
fc:84:d2:51:0c:58:eb:36:14:7d:bc:33:a5:23:04:4e:de:5a:
e8:8c:03:07:e7:6d:04:59:7b:25:98:d0:54:0a:b5:c7:57:92:
58:71:5e:3d:f1:0d:9d:d9:88:90:28:e7:22:08:d4:eb:ec:55:
89:44:15:00:11:c4:9b:d3:1f:f9:ba:fa:33:1f:57:26:a3:74:
52:fd:5e:ba:f1:a5:cc:26:49:00:36:af:60:bb:3e:7b:8e:63:
88:98:7d:5c:64:84:b7:53:9b:02:f8:29:86:69:24:13:3d:95:
37:7a:ae:0b:78:f2:45:6f:76:01:66:41:9a:84:1f:de:28:40:
8e:c4:b0:06:af:37:51:da:89:71:d9:4a:15:63:c3:54:ed:f0:
b0:c5:26:ba:88:99:bb:b5:45:fa:29:74:7c:e0:89:a1:74:45:
f4:68:57:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:49 2026 by rpki-client