Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B5B4AB0839DA11EF9ECCF886C4F9AE02.roa
File: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (raw, json)
Hash identifier: tw+Xt1fs2Nt5oSPB34Sm702KoiyBaPz1miOtc5OJXEY=
Subject key identifier: E5:A8:2D:EC:AC:8E:F9:0E:D4:D9:2F:B6:82:99:D8:7F:2E:20:BB:CB
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 143F
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B5B4AB0839DA11EF9ECCF886C4F9AE02.roa
Signing time: Thu 06 Aug 2026 17:33:34 +0000
ROA not before: Thu 06 Aug 2026 17:33:33 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138345
IP address blocks: 27.54.32.0/22 maxlen: 22
27.54.37.0/24 maxlen: 24
101.127.200.0/22 maxlen: 22
101.127.204.0/23 maxlen: 23
113.10.64.0/18 maxlen: 24
117.20.128.0/23 maxlen: 24
117.20.130.0/23 maxlen: 24
117.20.140.0/22 maxlen: 24
117.20.144.0/22 maxlen: 24
117.20.150.0/23 maxlen: 24
117.20.152.0/23 maxlen: 24
117.20.154.0/24 maxlen: 24
117.20.160.0/19 maxlen: 24
122.11.150.0/23 maxlen: 23
122.11.152.0/21 maxlen: 21
122.11.169.0/24 maxlen: 24
122.11.170.0/23 maxlen: 23
122.11.172.0/24 maxlen: 24
122.11.197.0/24 maxlen: 24
122.11.212.0/24 maxlen: 24
122.11.213.0/24 maxlen: 24
122.11.214.0/24 maxlen: 24
122.11.215.0/24 maxlen: 24
122.11.216.0/24 maxlen: 24
122.11.217.0/24 maxlen: 24
122.11.218.0/24 maxlen: 24
122.11.219.0/24 maxlen: 24
122.11.245.0/24 maxlen: 24
122.11.246.0/24 maxlen: 24
171.0.0.0/15 maxlen: 15
171.0.0.0/16 maxlen: 24
171.1.0.0/16 maxlen: 24
171.207.0.0/16 maxlen: 24
203.116.107.0/24 maxlen: 24
203.116.116.0/24 maxlen: 24
203.116.119.0/24 maxlen: 24
203.116.181.0/24 maxlen: 24
203.117.40.0/23 maxlen: 23
203.117.245.0/24 maxlen: 24
203.117.246.0/24 maxlen: 24
203.117.247.0/24 maxlen: 24
203.117.248.0/22 maxlen: 22
203.117.252.0/24 maxlen: 24
203.117.253.0/24 maxlen: 24
2406:3000:5a::/48 maxlen: 56
2406:3000:5b::/48 maxlen: 56
2406:3000:5c::/48 maxlen: 56
2406:3000:5d::/48 maxlen: 56
2406:3000:202::/47 maxlen: 48
2406:3000:204::/46 maxlen: 46
2406:3000:204::/48 maxlen: 48
2406:3000:205::/48 maxlen: 48
2406:3000:206::/48 maxlen: 48
2406:3000:207::/48 maxlen: 48
2406:3000:208::/47 maxlen: 48
2406:3000:20a::/47 maxlen: 48
2406:3000:20c::/46 maxlen: 46
2406:3000:20c::/48 maxlen: 48
2406:3000:20d::/48 maxlen: 48
2406:3000:20e::/48 maxlen: 48
2406:3000:20f::/48 maxlen: 48
2406:3000:210::/47 maxlen: 48
2406:3000:212::/48 maxlen: 48
2406:3000:213::/48 maxlen: 48
2406:3000:213:e000::/51 maxlen: 51
2406:3000:214::/48 maxlen: 48
2406:3002:40::/48 maxlen: 56
2406:3002:41:8000::/50 maxlen: 50
2406:3002:50::/48 maxlen: 56
2406:3002:402:200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 17:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5183 (0x143f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Aug 6 17:33:33 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74c56d-476e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:30:aa:84:47:81:75:0d:bb:88:b3:44:1d:
b8:a6:c7:e9:0e:6b:82:ef:1b:af:12:81:67:12:df:
74:0d:92:19:45:af:60:93:ab:d4:d0:26:ba:ff:11:
34:a8:8f:b1:86:d2:d8:a8:83:8d:5b:72:73:ee:a1:
dc:f2:6f:f4:6d:47:5f:f9:08:36:a0:b5:18:c9:cc:
c7:8f:7c:92:02:33:b5:bc:c3:b0:20:1b:1e:c8:ea:
8d:cd:77:2c:5b:da:d1:2f:cc:c2:87:ec:5f:62:87:
c7:ac:d8:76:ff:0d:cb:a3:1b:ce:5f:e5:f9:08:a1:
0a:a8:1b:1b:e8:29:cf:d6:63:cc:61:bb:8b:86:4d:
fd:78:dc:75:3b:50:9a:e2:6f:4b:b1:1f:93:f5:7c:
40:06:d2:85:9f:15:f0:85:81:54:6d:20:d9:dc:af:
36:df:f5:6f:43:b8:ac:89:65:f8:b8:3e:f2:10:4f:
f2:0e:90:2f:40:89:33:86:35:7f:91:08:92:8f:07:
0f:97:05:2b:cf:67:57:cf:18:00:9a:04:0f:8d:49:
cf:82:f4:2f:4c:1a:08:fb:84:ca:a7:fa:e6:45:46:
32:30:67:8a:cf:8a:4a:8c:a2:7a:f5:9a:fc:b5:c0:
c7:69:84:f4:64:43:6f:54:27:15:04:09:92:6f:f4:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A8:2D:EC:AC:8E:F9:0E:D4:D9:2F:B6:82:99:D8:7F:2E:20:BB:CB
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B5B4AB0839DA11EF9ECCF886C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.54.32.0/22
27.54.37.0/24
101.127.200.0-101.127.205.255
113.10.64.0/18
117.20.128.0/22
117.20.140.0-117.20.147.255
117.20.150.0-117.20.154.255
117.20.160.0/19
122.11.150.0-122.11.159.255
122.11.169.0-122.11.172.255
122.11.197.0/24
122.11.212.0-122.11.219.255
122.11.245.0-122.11.246.255
171.0.0.0/15
171.207.0.0/16
203.116.107.0/24
203.116.116.0/24
203.116.119.0/24
203.116.181.0/24
203.117.40.0/23
203.117.245.0-203.117.253.255
IPv6:
2406:3000:5a::-2406:3000:5d:ffff:ffff:ffff:ffff:ffff
2406:3000:202::-2406:3000:214:ffff:ffff:ffff:ffff:ffff
2406:3002:40::/48
2406:3002:41:8000::/50
2406:3002:50::/48
2406:3002:402:200::/56
Signature Algorithm: sha256WithRSAEncryption
79:7e:5e:14:48:a7:ca:47:0b:93:94:4b:6a:cd:94:bc:87:0f:
9b:ad:ae:34:02:a7:c1:cd:95:51:72:2d:4a:02:37:5c:f5:39:
f8:92:55:92:88:a8:8e:26:f1:a5:6c:1e:9c:80:8d:ac:f3:73:
ae:67:fc:cf:cc:52:73:28:24:d4:96:1b:38:5c:1f:90:74:df:
3e:c9:5b:0a:94:e0:2f:af:55:fb:84:9d:2f:43:f3:26:e6:33:
c4:f7:11:7b:02:8a:e5:7e:15:ab:fb:1e:f8:c7:b4:95:61:cc:
57:01:f8:60:cc:5a:54:ec:7e:9d:96:fe:d2:68:6e:85:59:11:
5e:83:29:fb:a6:dd:b9:61:72:f4:25:b0:1c:17:79:7f:88:d7:
eb:bc:04:00:8c:02:55:fa:34:6c:ee:dd:59:6e:09:48:82:61:
c0:66:24:5e:6a:a0:63:ec:fe:38:a0:5c:7d:7d:71:be:d7:60:
8e:d2:73:50:28:d8:06:20:da:f9:e4:e2:38:a4:db:7a:07:13:
fd:15:a1:4a:e4:76:af:57:82:d4:14:45:c2:d5:2f:6a:d2:1d:
06:63:80:20:d3:99:4a:5b:91:c9:85:bf:ca:da:0c:0c:c8:11:
8a:1d:dc:56:54:02:c0:7b:33:c9:18:16:41:19:0e:63:8f:76:
26:13:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:03:16 2026 by rpki-client