Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6E274D16DDD611ECA03EBA36C4F9AE02.roa
File: 6E274D16DDD611ECA03EBA36C4F9AE02.roa (raw, json)
Hash identifier: 0jCTNSuWF1Yd3pcg1xh1G5mSk/6N2yxpx2gTbj9wl8c=
Subject key identifier: CB:D1:FD:19:3B:0A:1A:2A:EB:AA:D9:7B:E9:1B:DC:DB:C5:6A:BE:67
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0A43
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6E274D16DDD611ECA03EBA36C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:54:09 +0000
ROA not before: Wed 27 Aug 2025 01:06:24 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 9891
IP address blocks: 27.254.26.0/24 maxlen: 24
27.254.32.0/21 maxlen: 21
27.254.35.0/24 maxlen: 24
27.254.40.0/21 maxlen: 21
27.254.43.0/24 maxlen: 24
27.254.48.0/22 maxlen: 22
27.254.48.0/23 maxlen: 23
27.254.52.0/22 maxlen: 22
27.254.56.0/22 maxlen: 22
27.254.56.0/24 maxlen: 24
27.254.58.0/24 maxlen: 24
27.254.60.0/22 maxlen: 22
27.254.60.0/24 maxlen: 24
27.254.61.0/24 maxlen: 24
27.254.62.0/23 maxlen: 23
27.254.63.0/24 maxlen: 24
27.254.64.0/22 maxlen: 22
27.254.64.0/23 maxlen: 23
27.254.64.0/24 maxlen: 24
27.254.68.0/22 maxlen: 22
27.254.70.0/24 maxlen: 24
27.254.80.0/22 maxlen: 22
27.254.82.0/24 maxlen: 24
27.254.83.0/24 maxlen: 24
27.254.84.0/22 maxlen: 22
27.254.92.0/22 maxlen: 22
27.254.96.0/22 maxlen: 22
27.254.97.0/24 maxlen: 24
27.254.108.0/22 maxlen: 22
27.254.128.0/19 maxlen: 19
27.254.160.0/22 maxlen: 22
27.254.168.0/22 maxlen: 22
27.254.172.0/22 maxlen: 22
27.254.208.0/22 maxlen: 22
27.254.210.0/24 maxlen: 24
27.254.211.0/24 maxlen: 24
27.254.212.0/23 maxlen: 23
27.254.216.0/22 maxlen: 22
27.254.216.0/24 maxlen: 24
27.254.219.0/24 maxlen: 24
202.183.164.0/22 maxlen: 22
202.183.192.0/23 maxlen: 23
202.183.198.0/24 maxlen: 24
202.183.247.0/24 maxlen: 24
203.146.21.0/24 maxlen: 24
203.146.26.0/24 maxlen: 24
203.146.43.0/24 maxlen: 24
203.146.61.0/24 maxlen: 24
203.146.101.0/24 maxlen: 24
203.146.102.0/24 maxlen: 24
203.146.111.0/24 maxlen: 24
203.146.117.0/24 maxlen: 24
203.146.127.0/24 maxlen: 24
203.146.129.0/24 maxlen: 24
203.146.140.0/24 maxlen: 24
203.146.151.0/24 maxlen: 24
203.146.161.0/24 maxlen: 24
203.146.170.0/24 maxlen: 24
203.146.180.0/24 maxlen: 24
203.146.215.0/24 maxlen: 24
203.146.248.0/22 maxlen: 22
203.146.253.0/24 maxlen: 24
203.170.129.0/24 maxlen: 24
203.170.145.0/24 maxlen: 24
203.170.160.0/23 maxlen: 23
203.170.190.0/24 maxlen: 24
203.170.192.0/23 maxlen: 23
203.170.203.0/24 maxlen: 24
203.170.204.0/24 maxlen: 24
203.172.40.0/22 maxlen: 22
210.1.11.0/24 maxlen: 24
210.1.31.0/24 maxlen: 24
210.1.51.0/24 maxlen: 24
210.1.52.0/24 maxlen: 24
210.1.58.0/24 maxlen: 24
210.1.59.0/24 maxlen: 24
210.1.60.0/23 maxlen: 23
2404:b0:2000::/48 maxlen: 48
2404:b0:2001::/48 maxlen: 48
2404:b1::/32 maxlen: 32
2404:b1::/36 maxlen: 36
2404:b1:1000::/36 maxlen: 36
2404:b1:4000::/36 maxlen: 36
2404:b1:8000::/36 maxlen: 36
2404:b1:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 23:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2627 (0xa43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Aug 27 01:06:24 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58871-c991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:e8:03:47:1f:10:e0:b2:03:b4:4e:e4:e4:
e4:d9:03:a8:4d:76:c6:8f:bb:7c:5b:ca:42:99:eb:
6d:07:15:b7:03:ea:85:0a:d9:bc:7f:f0:1d:dd:93:
61:45:39:99:81:95:97:aa:dd:47:46:f5:32:60:c1:
13:24:fa:7a:7e:5d:98:a6:bc:c9:aa:c2:bb:41:e1:
42:42:6a:66:6d:0b:c3:9a:a2:1c:8f:a6:a1:ff:2d:
45:02:2c:a4:1d:ef:cd:cd:43:41:c4:b6:f3:76:16:
1c:31:1b:23:11:3e:9b:cf:8f:5a:28:fa:80:39:50:
0e:e7:6d:21:44:47:32:fd:c4:84:6f:9d:30:5a:48:
6a:14:3f:c1:14:4f:1b:8e:c0:10:00:cf:a9:ef:94:
c2:02:75:f6:5a:17:19:7f:d1:97:f3:01:b7:12:1e:
fd:e8:dd:62:5d:f4:e5:42:e8:a0:8b:61:57:37:17:
bc:70:a8:c9:8e:c5:04:ce:67:81:96:6c:fd:a3:b0:
fc:c7:e3:6b:ac:e2:a0:57:5e:97:ea:e6:ca:42:98:
cf:a9:00:2a:81:d5:53:71:5c:20:77:c2:75:d7:c6:
14:10:90:d5:f3:4b:6a:d7:3d:7a:45:c9:e6:f3:b7:
cc:f6:c6:60:0c:99:10:5e:ca:55:c9:d0:ce:6f:45:
75:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D1:FD:19:3B:0A:1A:2A:EB:AA:D9:7B:E9:1B:DC:DB:C5:6A:BE:67
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6E274D16DDD611ECA03EBA36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.254.26.0/24
27.254.32.0-27.254.71.255
27.254.80.0/21
27.254.92.0-27.254.99.255
27.254.108.0/22
27.254.128.0-27.254.163.255
27.254.168.0/21
27.254.208.0-27.254.213.255
27.254.216.0/22
202.183.164.0/22
202.183.192.0/23
202.183.198.0/24
202.183.247.0/24
203.146.21.0/24
203.146.26.0/24
203.146.43.0/24
203.146.61.0/24
203.146.101.0-203.146.102.255
203.146.111.0/24
203.146.117.0/24
203.146.127.0/24
203.146.129.0/24
203.146.140.0/24
203.146.151.0/24
203.146.161.0/24
203.146.170.0/24
203.146.180.0/24
203.146.215.0/24
203.146.248.0/22
203.146.253.0/24
203.170.129.0/24
203.170.145.0/24
203.170.160.0/23
203.170.190.0/24
203.170.192.0/23
203.170.203.0-203.170.204.255
203.172.40.0/22
210.1.11.0/24
210.1.31.0/24
210.1.51.0-210.1.52.255
210.1.58.0-210.1.61.255
IPv6:
2404:b0:2000::/47
2404:b1::/32
Signature Algorithm: sha256WithRSAEncryption
42:5d:25:4e:50:d5:c9:41:6e:82:3e:d9:27:d1:e8:97:2b:e0:
3e:b4:6d:ce:06:03:76:d6:b2:ba:c3:47:4c:a2:7f:52:a4:1e:
b5:85:1c:4d:ee:0f:6c:6a:4b:5a:2c:c5:12:bb:4e:11:ea:12:
9e:c0:9b:97:68:9f:1a:33:9a:15:93:4c:66:4e:c0:aa:d5:ee:
f2:a5:3e:69:4f:31:13:0e:f7:40:92:0f:77:04:b0:8c:15:9b:
b9:db:65:0b:6c:a6:ce:b2:e5:a1:ea:d4:35:f9:a0:a4:25:a1:
79:e9:86:7f:ca:8a:39:51:e8:b8:8c:8e:af:ae:87:9a:8a:3b:
ee:69:80:1f:d9:bb:e1:02:38:ea:f3:2a:c2:3a:87:11:c6:1f:
16:b6:18:9e:16:a3:4d:9b:5e:e4:d9:4e:3d:37:e4:f1:35:0c:
d5:e1:08:7e:99:ab:fe:2e:19:54:70:04:f3:75:cb:64:ac:33:
5a:a8:05:dd:a1:89:42:34:99:95:73:49:39:3d:a8:f0:ff:c9:
a4:0c:7c:44:50:45:ae:c4:e4:94:5b:d6:eb:f2:00:3e:46:f3:
5e:a1:e0:b3:0a:46:a6:3f:a2:4e:d7:ca:aa:35:a7:cf:56:a2:
e1:b3:8d:25:b9:51:4e:85:5b:ba:68:76:c3:e4:e9:d3:53:9b:
2a:1b:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:19:57 2026 by rpki-client