Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/7E0AB01C782C11EBB0B71971C4F9AE02.roa
File: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (raw, json)
Hash identifier: xDjWjnMx2nUwxy81qAYlS3eB+kKkaHlmvwFlRjdxkJM=
Subject key identifier: 1F:6C:AC:B1:95:1F:57:8F:CA:8B:D1:29:B7:28:CC:C7:7A:43:03:CA
Certificate issuer: /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Certificate serial: 07DE
Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/7E0AB01C782C11EBB0B71971C4F9AE02.roa
Signing time: Thu 10 Sep 2026 08:28:41 +0000
ROA not before: Thu 10 Sep 2026 08:28:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56201
IP address blocks: 74.188.224.0/23 maxlen: 23
74.188.224.0/24 maxlen: 24
74.188.225.0/24 maxlen: 24
74.188.226.0/23 maxlen: 23
74.188.226.0/24 maxlen: 24
74.188.227.0/24 maxlen: 24
74.188.228.0/23 maxlen: 23
74.188.228.0/24 maxlen: 24
74.188.229.0/24 maxlen: 24
74.188.230.0/23 maxlen: 23
74.188.230.0/24 maxlen: 24
74.188.231.0/24 maxlen: 24
74.188.232.0/23 maxlen: 23
74.188.234.0/23 maxlen: 23
74.188.236.0/23 maxlen: 23
74.188.238.0/23 maxlen: 23
169.148.132.0/24 maxlen: 24
169.148.133.0/24 maxlen: 24
169.148.134.0/23 maxlen: 23
169.148.134.0/24 maxlen: 24
169.148.135.0/24 maxlen: 24
169.148.136.0/23 maxlen: 23
169.148.136.0/24 maxlen: 24
169.148.137.0/24 maxlen: 24
169.148.138.0/23 maxlen: 24
169.148.140.0/23 maxlen: 24
169.148.142.0/23 maxlen: 23
169.148.142.0/24 maxlen: 24
169.148.143.0/24 maxlen: 24
169.148.144.0/23 maxlen: 23
169.148.144.0/24 maxlen: 24
169.148.145.0/24 maxlen: 24
169.148.146.0/23 maxlen: 23
169.148.146.0/24 maxlen: 24
169.148.147.0/24 maxlen: 24
169.148.148.0/23 maxlen: 23
169.148.148.0/24 maxlen: 24
169.148.149.0/24 maxlen: 24
169.148.150.0/24 maxlen: 24
169.148.172.0/23 maxlen: 24
169.148.174.0/23 maxlen: 24
169.148.176.0/23 maxlen: 24
169.148.180.0/24 maxlen: 24
199.67.76.0/23 maxlen: 23
199.67.76.0/24 maxlen: 24
199.67.77.0/24 maxlen: 24
199.67.78.0/23 maxlen: 23
199.67.78.0/24 maxlen: 24
199.67.79.0/24 maxlen: 24
199.67.94.0/23 maxlen: 23
199.67.94.0/24 maxlen: 24
199.67.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2014 (0x7de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57
Validity
Not Before: Sep 10 08:28:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa26a39-9dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d6:b9:57:56:32:57:b7:73:74:2f:1c:31:bd:
da:87:15:1e:00:a9:f0:e0:6a:3c:96:3d:ed:d1:ad:
bd:17:8b:1e:bd:6b:8a:6c:a1:5c:56:20:34:16:af:
2a:8b:3e:cd:65:9c:bb:7d:15:0c:31:c6:a7:2a:6c:
1b:71:62:8b:11:14:40:7c:98:70:c9:0b:c5:39:d6:
12:44:a8:1e:c5:8e:6c:c6:91:d9:d9:e1:36:7e:11:
81:60:32:ae:1b:86:5b:d3:e6:9f:17:a9:2b:c4:96:
df:ea:a9:f6:3b:6b:49:b2:78:2d:54:ca:f2:46:43:
2b:f2:f0:d1:33:ed:c1:53:6c:ac:ab:55:3e:7b:e5:
36:6e:60:8d:75:8e:52:fd:2f:62:7f:fb:33:00:85:
45:f2:a5:df:e2:a2:42:f0:62:a0:d1:53:63:da:52:
ed:70:c1:24:78:23:17:d3:fa:23:6f:a2:bb:67:86:
31:fe:85:88:a3:4e:e7:7d:a7:15:ea:06:9e:f2:63:
2e:47:f8:3b:ea:0f:cc:4c:82:9a:8a:ba:d7:a6:db:
66:49:dc:bd:0b:7c:bf:0f:1c:78:04:43:62:f0:e8:
0b:0a:30:a6:9d:63:62:24:76:5c:a9:20:47:39:52:
c7:92:55:8b:7c:86:c0:10:f2:d9:90:2c:ec:1a:bd:
fb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:AC:B1:95:1F:57:8F:CA:8B:D1:29:B7:28:CC:C7:7A:43:03:CA
X509v3 Authority Key Identifier:
keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/7E0AB01C782C11EBB0B71971C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
74.188.224.0/20
169.148.132.0-169.148.150.255
169.148.172.0-169.148.177.255
169.148.180.0/24
199.67.76.0/22
199.67.94.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:53:d2:45:ca:f1:20:06:27:1b:5a:67:f7:7a:6e:ef:ca:8b:
c0:9e:fc:06:6f:fb:37:74:a6:9c:1d:40:b4:48:45:cd:87:c3:
ff:a3:34:88:8e:c4:cd:8b:5e:d0:01:3a:1c:a7:01:58:db:95:
7f:30:1b:56:98:34:ee:49:ba:13:58:89:3a:e0:e9:bd:73:1f:
67:1d:a6:f6:e9:39:b4:29:78:e8:c1:ee:8b:13:e4:8a:dc:eb:
93:52:db:bc:55:fa:70:23:e1:7c:c2:79:12:c0:88:fc:44:83:
1a:19:3a:64:5f:4c:88:9d:a1:8a:bc:5a:e0:95:98:44:09:e9:
c5:cc:8c:68:03:b2:e7:80:44:2c:13:61:16:16:56:a7:b8:bb:
7b:e5:c1:09:25:9d:c3:7a:22:f3:ef:cc:9a:bf:6e:16:ba:45:
90:44:89:67:31:cc:c5:4a:67:28:59:c1:05:18:55:7c:d1:50:
36:9f:82:f4:8a:b5:b2:bb:8e:eb:84:ff:cb:ec:92:e5:d7:45:
80:8a:fb:70:47:cf:ac:de:12:d8:01:1b:8a:c6:d6:7e:2b:10:
f4:0a:cb:7b:20:ac:b5:a1:e7:ae:b8:3e:44:de:67:bb:89:fd:
7f:b0:b1:52:a0:d3:2b:21:0c:7e:4f:a4:eb:b1:ee:63:5f:25:
c5:9f:e4:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 28 18:37:14 2026 by rpki-client