Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/087D2D80C4A711EB917EC55EC4F9AE02.roa
File: 087D2D80C4A711EB917EC55EC4F9AE02.roa (raw, json)
Hash identifier: gizRGNyjVxtD396ZuMPBpoakn5DyZ6MLwXVCgGGQgD4=
Subject key identifier: 59:1A:AB:8E:B1:AB:6C:D6:8A:86:FE:77:DA:C9:9A:15:E6:DE:B9:5F
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 1449
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/087D2D80C4A711EB917EC55EC4F9AE02.roa
Signing time: Thu 06 Aug 2026 17:33:56 +0000
ROA not before: Thu 06 Aug 2026 17:33:56 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4657
IP address blocks: 27.54.0.0/18 maxlen: 24
27.125.128.0/18 maxlen: 24
39.109.128.0/17 maxlen: 24
43.227.228.0/23 maxlen: 23
45.65.0.0/22 maxlen: 24
58.96.192.0/18 maxlen: 24
61.8.192.0/19 maxlen: 24
61.8.224.0/19 maxlen: 24
101.127.0.0/16 maxlen: 24
103.17.144.0/22 maxlen: 24
103.28.208.0/22 maxlen: 22
103.254.252.0/23 maxlen: 23
103.254.254.0/24 maxlen: 24
111.223.64.0/18 maxlen: 18
111.223.64.0/19 maxlen: 24
111.223.96.0/19 maxlen: 24
113.10.64.0/18 maxlen: 24
117.20.128.0/18 maxlen: 24
122.11.128.0/17 maxlen: 24
124.155.192.0/19 maxlen: 24
171.0.0.0/15 maxlen: 15
171.0.0.0/16 maxlen: 24
171.1.0.0/16 maxlen: 24
171.207.0.0/16 maxlen: 24
182.19.128.0/17 maxlen: 24
182.55.0.0/16 maxlen: 24
183.90.0.0/17 maxlen: 24
203.116.0.0/16 maxlen: 24
203.117.0.0/16 maxlen: 24
203.118.0.0/18 maxlen: 24
2406:3000::/30 maxlen: 32
2406:3000::/40 maxlen: 48
2406:3000:2::/56 maxlen: 64
2406:3000:2:100::/56 maxlen: 64
2406:3000:3::/56 maxlen: 64
2406:3000:a::/56 maxlen: 64
2406:3000:c::/56 maxlen: 56
2406:3000:c:100::/56 maxlen: 56
2406:3000:11::/56 maxlen: 64
2406:3000:11:1000::/56 maxlen: 64
2406:3000:11:2000::/56 maxlen: 64
2406:3000:12::/48 maxlen: 56
2406:3000:12::/56 maxlen: 64
2406:3000:12:100::/56 maxlen: 64
2406:3000:20::/56 maxlen: 64
2406:3000:22::/56 maxlen: 64
2406:3000:35::/56 maxlen: 64
2406:3000:36::/56 maxlen: 64
2406:3000:36:100::/56 maxlen: 64
2406:3000:38::/56 maxlen: 64
2406:3000:4f::/56 maxlen: 64
2406:3000:4f:100::/56 maxlen: 64
2406:3000:1000::/56 maxlen: 64
2406:3000:1000:100::/56 maxlen: 56
2406:3000:ad53::/49 maxlen: 49
2406:3001:20::/56 maxlen: 64
2406:3001:22::/56 maxlen: 64
2406:3001:23::/56 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5193 (0x1449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Aug 6 17:33:56 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74c584-f838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:8d:12:92:46:e7:5f:10:97:5e:20:17:ab:
5b:8e:33:28:15:de:65:cf:7c:39:fd:60:d4:75:9a:
a4:c5:af:f2:7a:ab:1a:a5:24:66:c7:67:49:cb:cc:
5c:72:04:0a:89:cf:19:82:f1:9a:a9:bc:dd:6a:c3:
c2:6e:12:79:84:c3:fd:e4:df:39:8d:1f:23:f9:9c:
33:89:46:17:1f:4e:74:f3:4d:8f:17:bd:d2:3d:eb:
13:cb:a7:9d:7a:bf:2b:c6:73:59:d0:4b:37:0e:59:
b1:3f:21:88:db:7c:1d:fd:24:d1:73:5a:37:4e:bc:
3e:20:60:e8:f6:47:29:d4:d2:81:ba:ad:f3:c5:14:
fb:db:49:d9:47:70:f8:b2:5b:b2:bc:0c:44:cd:6c:
95:65:08:40:e6:45:59:27:38:aa:8d:67:7e:5b:04:
de:0b:d9:09:45:a3:38:a3:01:16:27:fc:3f:93:ed:
d3:75:1d:c1:48:df:a1:1b:bb:08:16:f2:1f:d2:f5:
62:ae:42:f6:31:08:7e:f6:a9:da:96:78:85:cd:a2:
24:70:5e:83:74:b3:80:ef:aa:84:db:19:f7:66:96:
81:d8:3f:f1:64:0b:9d:a5:f0:bf:54:e4:a9:ed:a5:
0f:da:f1:70:7a:8b:25:cb:56:38:0e:81:ed:89:a2:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1A:AB:8E:B1:AB:6C:D6:8A:86:FE:77:DA:C9:9A:15:E6:DE:B9:5F
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/087D2D80C4A711EB917EC55EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.54.0.0/18
27.125.128.0/18
39.109.128.0/17
43.227.228.0/23
45.65.0.0/22
58.96.192.0/18
61.8.192.0/18
101.127.0.0/16
103.17.144.0/22
103.28.208.0/22
103.254.252.0-103.254.254.255
111.223.64.0/18
113.10.64.0/18
117.20.128.0/18
122.11.128.0/17
124.155.192.0/19
171.0.0.0/15
171.207.0.0/16
182.19.128.0/17
182.55.0.0/16
183.90.0.0/17
203.116.0.0-203.118.63.255
IPv6:
2406:3000::/30
Signature Algorithm: sha256WithRSAEncryption
3f:3e:89:fb:f3:c1:54:85:bf:52:1e:06:ff:aa:77:bf:62:07:
a3:22:9c:c4:98:98:7e:2e:57:8f:e3:44:74:1d:2d:77:aa:c2:
b0:6b:a4:a6:c1:0a:bc:c2:bc:1c:33:30:67:7f:69:c1:b8:7a:
0e:85:ec:c6:e6:61:f0:4c:5e:f7:74:3d:3b:a5:c6:c0:cb:7c:
fb:77:8e:94:cf:e2:23:31:b7:78:71:4b:7d:72:dd:87:40:31:
36:e0:89:73:36:f9:81:d4:09:3d:c3:b4:ee:18:1b:9f:c0:c9:
21:27:a9:e7:60:f1:8c:23:81:a7:8f:15:d7:8e:27:cc:3c:81:
dd:ba:ed:71:a7:9f:1e:ec:1f:1e:94:c3:e4:9b:77:33:bb:39:
c4:c3:9c:bd:eb:0f:6f:1b:7c:7e:17:5c:85:e4:a2:fb:6e:2b:
8b:49:f0:4f:d0:15:03:7b:ce:93:18:a5:36:65:eb:31:f1:99:
70:d5:b7:f3:b1:56:3c:84:32:86:10:e8:ab:5f:92:1d:f8:b8:
56:9b:db:2f:d5:55:63:3c:b5:1f:9f:35:b1:b9:c4:bd:d6:b6:
ee:a4:ce:2b:7d:5d:5d:f0:0e:e4:5b:a4:50:05:48:db:e3:ed:
49:c9:ed:26:37:75:17:c7:84:ee:0c:d8:65:ba:99:6d:02:44:
4d:4d:ed:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:48:33 2026 by rpki-client