Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/E40A8C10C4B211F1BC9E3F4C5D11F970.roa
File: E40A8C10C4B211F1BC9E3F4C5D11F970.roa (raw, json)
Hash identifier: V3ZRP89Hx33/dYbbQnFSRGKly24XYJh4Kp6wskJPrDw=
Subject key identifier: 5D:0A:AA:5E:FB:42:B6:F4:14:95:E8:F8:A8:BE:92:AF:A3:3A:20:B3
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0D37
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/E40A8C10C4B211F1BC9E3F4C5D11F970.roa
Signing time: Sat 10 Oct 2026 14:00:04 +0000
ROA not before: Sat 10 Oct 2026 14:00:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58895
IP address blocks: 36.255.100.0/22 maxlen: 22
36.255.100.0/24 maxlen: 24
36.255.101.0/24 maxlen: 24
36.255.102.0/24 maxlen: 24
36.255.103.0/24 maxlen: 24
43.229.164.0/22 maxlen: 22
43.229.164.0/24 maxlen: 24
43.229.165.0/24 maxlen: 24
43.229.166.0/24 maxlen: 24
43.229.167.0/24 maxlen: 24
43.231.60.0/22 maxlen: 22
43.231.60.0/24 maxlen: 24
43.231.61.0/24 maxlen: 24
43.231.62.0/24 maxlen: 24
43.231.63.0/24 maxlen: 24
43.248.12.0/24 maxlen: 24
43.248.13.0/24 maxlen: 24
43.248.14.0/24 maxlen: 24
45.113.124.0/22 maxlen: 22
45.113.124.0/24 maxlen: 24
45.113.125.0/24 maxlen: 24
45.113.126.0/24 maxlen: 24
45.113.127.0/24 maxlen: 24
45.117.105.0/24 maxlen: 24
45.117.106.0/24 maxlen: 24
45.117.107.0/24 maxlen: 24
103.24.96.0/22 maxlen: 24
103.35.213.0/24 maxlen: 24
103.35.214.0/24 maxlen: 24
103.35.215.0/24 maxlen: 24
103.39.80.0/22 maxlen: 22
103.39.80.0/24 maxlen: 24
103.39.81.0/24 maxlen: 24
103.39.82.0/24 maxlen: 24
103.39.83.0/24 maxlen: 24
103.49.136.0/24 maxlen: 24
103.49.137.0/24 maxlen: 24
103.49.138.0/24 maxlen: 24
103.49.139.0/24 maxlen: 24
103.50.156.0/22 maxlen: 22
103.50.156.0/24 maxlen: 24
103.50.157.0/24 maxlen: 24
103.50.158.0/24 maxlen: 24
103.50.159.0/24 maxlen: 24
103.53.44.0/22 maxlen: 22
103.53.44.0/24 maxlen: 24
103.53.45.0/24 maxlen: 24
103.53.46.0/24 maxlen: 24
103.53.47.0/24 maxlen: 24
103.57.169.0/24 maxlen: 24
103.57.170.0/24 maxlen: 24
103.57.171.0/24 maxlen: 24
103.70.84.0/24 maxlen: 24
103.70.85.0/24 maxlen: 24
103.117.160.0/24 maxlen: 24
103.117.161.0/24 maxlen: 24
103.200.196.0/24 maxlen: 24
103.200.197.0/24 maxlen: 24
103.200.198.0/24 maxlen: 24
103.200.199.0/24 maxlen: 24
103.209.85.0/24 maxlen: 24
103.209.86.0/24 maxlen: 24
103.209.87.0/24 maxlen: 24
117.53.40.0/22 maxlen: 22
117.53.40.0/24 maxlen: 24
117.53.41.0/24 maxlen: 24
117.53.42.0/24 maxlen: 24
117.53.43.0/24 maxlen: 24
150.129.4.0/22 maxlen: 22
150.129.4.0/24 maxlen: 24
150.129.5.0/24 maxlen: 24
150.129.6.0/24 maxlen: 24
150.129.7.0/24 maxlen: 24
2400:1680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 18:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3383 (0xd37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Validity
Not Before: Oct 10 14:00:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aca44e4-8898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:76:46:88:92:47:08:f3:03:c4:c7:fb:4d:
ed:ea:18:ad:03:ea:22:0d:19:f4:e3:06:14:95:3e:
f9:5f:17:54:b9:91:b1:e6:70:7a:c6:cf:8b:c0:ab:
22:f2:27:2a:2c:7c:30:3b:4d:db:eb:83:49:a6:05:
cc:b4:4f:a6:b3:9b:50:0f:c9:a9:99:e7:3c:32:ae:
eb:66:f5:93:f8:55:fa:b0:95:0d:bc:e8:c9:2a:4d:
e9:87:33:77:68:67:b0:2a:bd:44:7a:3b:9d:9f:2e:
ea:c2:cd:7c:b9:4d:db:66:29:f5:9b:a2:24:8e:7a:
a1:f7:b6:2a:24:99:c9:d4:dd:55:d0:b9:33:a8:fd:
fd:31:07:bc:0c:54:f0:39:3d:d8:54:93:2f:18:3d:
6d:08:db:43:2b:97:e5:34:4e:37:82:ad:04:7e:f7:
09:95:f3:d0:fa:0a:95:ed:8e:fd:c8:13:e1:81:80:
89:7b:b3:8e:cf:45:47:ce:40:06:30:82:09:27:b3:
19:a7:60:df:ff:e1:b5:af:3c:89:6d:ae:b1:10:0f:
5b:36:20:fc:2a:ac:a7:c5:fb:f8:70:b4:d2:2b:d7:
46:27:e9:a7:85:f9:66:39:43:62:be:e6:08:53:48:
10:d1:d8:6a:3d:a1:c8:47:ce:18:88:08:24:46:02:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0A:AA:5E:FB:42:B6:F4:14:95:E8:F8:A8:BE:92:AF:A3:3A:20:B3
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/E40A8C10C4B211F1BC9E3F4C5D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.100.0/22
43.229.164.0/22
43.231.60.0/22
43.248.12.0-43.248.14.255
45.113.124.0/22
45.117.105.0-45.117.107.255
103.24.96.0/22
103.35.213.0-103.35.215.255
103.39.80.0/22
103.49.136.0/22
103.50.156.0/22
103.53.44.0/22
103.57.169.0-103.57.171.255
103.70.84.0/23
103.117.160.0/23
103.200.196.0/22
103.209.85.0-103.209.87.255
117.53.40.0/22
150.129.4.0/22
IPv6:
2400:1680::/32
Signature Algorithm: sha256WithRSAEncryption
69:bd:86:87:fe:60:2c:16:4d:ee:8a:32:2e:66:21:14:5a:b5:
c1:65:5c:34:1e:06:0e:c4:9b:3a:41:5f:0d:52:ff:71:6e:88:
37:9a:77:d5:e1:6d:b6:04:d7:98:16:8b:96:ca:8a:67:64:d6:
07:ca:d4:d0:03:b2:90:16:f4:cc:a6:1b:a3:66:14:80:13:7d:
ec:19:77:83:30:b5:f6:c9:39:c7:1b:7f:11:c2:f0:8b:42:5c:
a7:58:12:49:8b:ea:4c:3b:b5:e8:90:a3:d1:9d:0b:4a:d2:51:
19:39:4f:41:06:80:86:ce:6f:20:31:cf:5a:b4:8b:58:78:6c:
ee:50:96:28:43:3e:9e:2a:b9:8c:ac:8a:7a:8a:1f:bb:0e:b9:
98:6f:88:fd:53:6c:d4:c7:ec:01:33:59:a6:0d:7f:e1:4b:78:
69:81:82:41:e6:f7:3e:ac:1d:c9:14:13:01:ba:02:f2:ef:c1:
ee:0c:0e:3d:19:45:ff:22:68:21:f8:83:4e:7a:2e:66:8d:4f:
9a:3c:fa:dd:33:b3:95:77:22:42:b0:54:53:8c:48:99:bb:fc:
51:9a:89:66:87:60:83:6f:63:1c:97:4b:07:28:b0:cf:d6:8e:
93:0f:07:01:ed:5e:48:91:b6:c0:8f:37:1f:ba:25:22:83:34:
5c:ae:e2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:37 2026 by rpki-client