Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B5B4AB0839DA11EF9ECCF886C4F9AE02.roa
File: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (raw, json)
Hash identifier: gZaliWCK4gHCj9WB2iuBl7f29djODeWrvm+6ZvujdYw=
Subject key identifier: 15:B2:75:99:6F:4F:4B:01:49:5A:78:FC:7E:08:06:E5:99:15:F7:20
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 13D8
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B5B4AB0839DA11EF9ECCF886C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:33:48 +0000
ROA not before: Wed 10 Sep 2025 09:10:15 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 138345
IP address blocks: 27.54.32.0/22 maxlen: 22
27.54.37.0/24 maxlen: 24
101.127.200.0/22 maxlen: 22
101.127.204.0/23 maxlen: 23
113.10.64.0/18 maxlen: 24
117.20.128.0/23 maxlen: 24
117.20.130.0/23 maxlen: 24
117.20.140.0/22 maxlen: 24
117.20.144.0/22 maxlen: 24
117.20.150.0/23 maxlen: 24
117.20.152.0/23 maxlen: 24
117.20.154.0/24 maxlen: 24
117.20.160.0/19 maxlen: 24
122.11.150.0/23 maxlen: 23
122.11.152.0/21 maxlen: 21
122.11.169.0/24 maxlen: 24
122.11.170.0/23 maxlen: 23
122.11.172.0/24 maxlen: 24
122.11.197.0/24 maxlen: 24
122.11.212.0/24 maxlen: 24
122.11.213.0/24 maxlen: 24
122.11.214.0/24 maxlen: 24
122.11.215.0/24 maxlen: 24
122.11.216.0/24 maxlen: 24
122.11.217.0/24 maxlen: 24
122.11.218.0/24 maxlen: 24
122.11.219.0/24 maxlen: 24
122.11.245.0/24 maxlen: 24
122.11.246.0/24 maxlen: 24
171.0.0.0/15 maxlen: 15
171.0.0.0/16 maxlen: 24
171.1.0.0/16 maxlen: 24
171.207.0.0/16 maxlen: 24
203.116.107.0/24 maxlen: 24
203.116.116.0/24 maxlen: 24
203.116.119.0/24 maxlen: 24
203.116.181.0/24 maxlen: 24
203.117.40.0/23 maxlen: 23
203.117.245.0/24 maxlen: 24
203.117.246.0/24 maxlen: 24
203.117.247.0/24 maxlen: 24
203.117.248.0/22 maxlen: 22
203.117.252.0/24 maxlen: 24
203.117.253.0/24 maxlen: 24
2406:3000:5a::/48 maxlen: 56
2406:3000:5b::/48 maxlen: 56
2406:3000:5c::/48 maxlen: 56
2406:3000:5d::/48 maxlen: 56
2406:3000:202::/47 maxlen: 48
2406:3000:204::/46 maxlen: 46
2406:3000:204::/48 maxlen: 48
2406:3000:205::/48 maxlen: 48
2406:3000:206::/48 maxlen: 48
2406:3000:207::/48 maxlen: 48
2406:3000:208::/47 maxlen: 48
2406:3000:20a::/47 maxlen: 48
2406:3000:20c::/46 maxlen: 46
2406:3000:20c::/48 maxlen: 48
2406:3000:20d::/48 maxlen: 48
2406:3000:20e::/48 maxlen: 48
2406:3000:20f::/48 maxlen: 48
2406:3000:210::/47 maxlen: 48
2406:3000:212::/48 maxlen: 48
2406:3000:213::/48 maxlen: 48
2406:3000:213:e000::/51 maxlen: 51
2406:3000:214::/48 maxlen: 48
2406:3002:40::/48 maxlen: 56
2406:3002:41:8000::/50 maxlen: 50
2406:3002:50::/48 maxlen: 56
2406:3002:402:200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 16:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5080 (0x13d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Sep 10 09:10:15 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4868b-fc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:3b:5d:63:ec:c0:c2:84:e3:27:7a:8e:08:
34:94:1a:df:33:10:3b:9d:44:d4:dc:ee:de:52:94:
f2:1a:02:77:b2:a7:e8:6f:71:36:b1:a0:4f:fb:7a:
09:81:3e:ee:bf:ab:05:62:3e:be:97:dd:80:08:0f:
07:6b:13:7c:73:6a:2a:2c:c5:09:98:0c:03:f4:2b:
b2:a1:8a:7e:b3:98:a7:f8:cb:1d:a0:03:82:51:d1:
dc:98:e3:cb:dc:c3:a9:d0:a5:7a:f7:c6:18:77:1b:
e8:6f:e1:6e:da:2b:fc:0d:18:d9:35:90:dd:2b:8c:
22:d3:5e:e2:5a:39:3c:4c:fc:77:24:fd:c6:05:c2:
63:68:a0:f4:b7:b4:e8:72:67:f3:41:e2:c0:28:7c:
03:6b:13:ee:35:27:59:b5:ab:ae:fc:1c:0f:50:77:
23:bd:e4:d0:10:7c:ca:32:2e:e3:ae:3b:87:e6:e3:
4e:7d:fa:71:61:94:a4:31:c0:a4:b9:d7:1a:7b:fd:
cf:2f:00:5a:ea:b0:98:95:3b:ea:6f:2c:9a:f3:23:
57:0d:26:55:8d:ad:d4:57:95:f7:18:a7:64:fb:22:
12:0e:ba:9e:0b:9a:7d:cc:d6:76:b3:ff:44:66:c9:
3c:d1:97:a3:df:47:ff:ab:dc:68:06:bc:7d:f1:9c:
d7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:75:99:6F:4F:4B:01:49:5A:78:FC:7E:08:06:E5:99:15:F7:20
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B5B4AB0839DA11EF9ECCF886C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.54.32.0/22
27.54.37.0/24
101.127.200.0-101.127.205.255
113.10.64.0/18
117.20.128.0/22
117.20.140.0-117.20.147.255
117.20.150.0-117.20.154.255
117.20.160.0/19
122.11.150.0-122.11.159.255
122.11.169.0-122.11.172.255
122.11.197.0/24
122.11.212.0-122.11.219.255
122.11.245.0-122.11.246.255
171.0.0.0/15
171.207.0.0/16
203.116.107.0/24
203.116.116.0/24
203.116.119.0/24
203.116.181.0/24
203.117.40.0/23
203.117.245.0-203.117.253.255
IPv6:
2406:3000:5a::-2406:3000:5d:ffff:ffff:ffff:ffff:ffff
2406:3000:202::-2406:3000:214:ffff:ffff:ffff:ffff:ffff
2406:3002:40::/48
2406:3002:41:8000::/50
2406:3002:50::/48
2406:3002:402:200::/56
Signature Algorithm: sha256WithRSAEncryption
0a:5b:fb:c6:97:83:a0:8d:65:07:a2:35:24:50:5f:ab:63:a3:
69:1f:06:cb:94:5f:7b:50:c7:31:e3:1f:30:87:ae:cf:3f:57:
70:e3:a1:2f:fa:5d:50:0f:72:31:bc:7e:4f:45:4b:3a:9d:3e:
ab:43:78:4e:d5:2b:8b:d1:b5:ea:6b:31:fc:e4:ee:06:5a:91:
6e:7a:ec:54:86:74:c0:61:a7:c9:9f:cf:2a:f0:67:31:bd:74:
a3:d1:e1:8f:84:29:d3:73:4b:ee:da:96:e3:71:d9:2c:4c:c7:
31:ec:68:db:d5:6f:ae:97:b9:87:f7:33:95:74:3f:2b:7d:13:
d2:df:7f:ec:09:0f:7e:8e:76:59:35:d9:48:03:7b:c2:b2:b2:
51:5f:0f:9c:d4:64:ad:64:bc:b6:97:41:6f:85:7a:7a:43:ad:
59:36:b7:0d:cc:00:ed:5e:58:0d:0d:50:d4:a5:7d:ba:7e:67:
a6:40:d7:ff:3c:0f:68:cd:9a:8b:5d:23:48:10:d0:44:35:af:
93:f5:8f:ec:93:f1:76:c4:36:90:46:69:6e:40:77:51:62:80:
2c:35:99:69:8a:36:f2:e2:f1:ac:1e:e8:ee:7c:4e:d8:b8:84:
8e:9a:ee:e0:02:fb:81:0c:32:d3:7e:5c:91:71:89:98:cb:e4:
9e:a4:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 13:26:49 2026 by rpki-client