Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/40567CA8F25A11F09752333B5F6F56BC.roa
File: 40567CA8F25A11F09752333B5F6F56BC.roa (raw, json)
Hash identifier: 4OEr8GYD/68Q3dhtUrIhuI6SwejTwEeFTSAEWL1/kTk=
Subject key identifier: A4:1B:82:27:4F:CD:D5:CE:F9:4C:CC:3D:A3:CD:8C:8A:DC:FB:10:48
Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Certificate serial: 1454
Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/40567CA8F25A11F09752333B5F6F56BC.roa
Signing time: Mon 06 Jul 2026 00:55:47 +0000
ROA not before: Mon 06 Jul 2026 00:55:47 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 4764
IP address blocks: 61.245.128.0/19 maxlen: 24
103.94.48.0/22 maxlen: 24
103.110.176.0/22 maxlen: 22
119.18.0.0/19 maxlen: 24
119.18.32.0/21 maxlen: 24
119.18.40.0/21 maxlen: 21
120.88.112.0/20 maxlen: 24
121.200.0.0/19 maxlen: 24
123.253.148.0/22 maxlen: 23
123.253.148.0/24 maxlen: 24
123.253.149.0/24 maxlen: 24
123.253.150.0/24 maxlen: 24
180.150.0.0/17 maxlen: 24
180.181.192.0/18 maxlen: 22
202.9.16.0/20 maxlen: 20
202.90.240.0/21 maxlen: 24
202.142.128.0/20 maxlen: 24
203.129.16.0/20 maxlen: 24
2403:5800::/27 maxlen: 27
2403:5800::/32 maxlen: 36
2403:5800:1::/48 maxlen: 48
2403:5800:3::/48 maxlen: 48
2403:5800:5::/48 maxlen: 48
2405:db00::/32 maxlen: 32
2407:600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl
rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 17:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5204 (0x1454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Validity
Not Before: Jul 6 00:55:47 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a4afd13-8190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:29:ce:05:2d:bd:ab:08:e1:a8:ee:a6:ed:
f3:38:22:2b:93:85:b3:60:6a:49:52:98:fa:26:f4:
bd:af:b6:a9:0d:69:42:00:b5:bb:87:c2:7f:4f:dd:
85:fd:c0:45:04:46:3f:ed:3f:51:13:09:74:ba:da:
49:f6:62:91:27:6b:c5:de:d6:35:95:21:d5:cc:5b:
62:83:4b:f4:21:fe:74:21:79:a1:7e:92:97:83:c0:
52:90:7f:c2:28:fb:53:0c:1d:e1:2d:14:09:ec:6b:
1c:2d:78:a1:93:58:5f:55:64:a3:36:b9:58:e3:eb:
7d:3d:1e:c8:e4:80:fc:bc:26:8f:5b:44:e1:7e:2e:
dd:dd:e6:4b:0b:d5:fb:f4:90:91:2f:ef:d5:77:42:
86:ee:47:20:a0:52:79:f0:d6:b5:39:82:cc:dd:91:
ff:1c:32:04:d9:14:41:39:29:98:70:f4:ce:4f:34:
91:b1:42:db:b0:45:c5:0a:8a:ba:3b:fd:41:4b:35:
fb:72:dd:e0:ae:fd:88:79:fa:0e:d7:cf:ac:6d:c4:
bb:01:31:3b:49:6b:05:d6:a2:59:2c:15:41:10:9a:
84:44:0e:45:b0:3b:b3:c7:c5:0f:ca:2c:35:c8:12:
2d:2a:63:7c:86:f1:53:29:ed:62:a9:f7:dc:59:84:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1B:82:27:4F:CD:D5:CE:F9:4C:CC:3D:A3:CD:8C:8A:DC:FB:10:48
X509v3 Authority Key Identifier:
keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/40567CA8F25A11F09752333B5F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
61.245.128.0/19
103.94.48.0/22
103.110.176.0/22
119.18.0.0-119.18.47.255
120.88.112.0/20
121.200.0.0/19
123.253.148.0/22
180.150.0.0/17
180.181.192.0/18
202.9.16.0/20
202.90.240.0/21
202.142.128.0/20
203.129.16.0/20
IPv6:
2403:5800::/27
2405:db00::/32
2407:600::/32
Signature Algorithm: sha256WithRSAEncryption
64:09:4c:07:9a:be:aa:11:13:da:ef:bc:4d:68:ed:8f:73:6a:
2c:36:56:98:7e:d1:a7:1c:6e:df:18:0c:d5:b0:81:ff:23:1a:
87:f8:5d:4e:9e:94:24:04:e4:86:cf:ba:0a:4e:aa:f8:86:ad:
f9:9e:3b:c8:c3:2c:8b:84:c8:fa:1e:3b:b2:04:cd:87:33:b2:
21:e5:63:8e:a6:2f:9d:a0:cf:6a:34:76:33:94:8d:8f:80:a6:
25:52:73:c4:75:57:9e:22:1b:7e:47:d5:4a:e3:f2:4e:a6:39:
90:d0:a2:15:66:8b:50:a4:db:d1:85:79:df:c6:99:47:7d:f5:
54:0d:4e:f3:42:83:19:4c:e3:c0:11:40:85:ad:b0:56:0f:e0:
0e:ea:b9:b4:8c:fd:f0:46:b2:d7:47:f2:9d:5b:22:59:cd:d7:
de:22:cb:0c:d2:c4:52:8b:bd:4f:f1:36:ba:8d:33:03:13:fb:
ac:fb:88:70:6c:08:8f:0b:ed:8a:f3:eb:be:03:ae:de:a8:a7:
7e:b2:3b:11:45:de:82:10:7c:c7:d8:b8:62:e1:be:24:f0:82:
a0:11:41:3e:7f:45:58:d6:9e:ed:28:70:b3:22:7d:92:e5:26:
69:0a:e7:d8:3a:eb:f8:d8:12:8f:5f:5f:68:71:01:c4:69:1b:
3e:ea:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:43:03 2026 by rpki-client