Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/56A844E8AC1611F1AA5AD2963211F970.roa
File: 56A844E8AC1611F1AA5AD2963211F970.roa (raw, json)
Hash identifier: v980uvWuLQy9lKYhi9+4L/P7xT5fQQvKPW40O/eoMus=
Subject key identifier: A8:1F:45:CC:57:1F:A9:8C:88:CA:0A:E0:B8:49:93:19:0C:90:68:6B
Certificate issuer: /CN=A914D29B/serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Certificate serial: 54
Authority key identifier: 4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/56A844E8AC1611F1AA5AD2963211F970.roa
Signing time: Wed 09 Sep 2026 08:46:43 +0000
ROA not before: Wed 09 Sep 2026 08:46:43 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 149194
IP address blocks: 45.112.56.0/22 maxlen: 22
45.112.56.0/23 maxlen: 24
45.112.58.0/23 maxlen: 24
45.127.200.0/22 maxlen: 22
45.127.200.0/23 maxlen: 24
45.127.202.0/23 maxlen: 24
103.2.237.0/24 maxlen: 24
103.2.238.0/24 maxlen: 24
103.106.102.0/24 maxlen: 24
103.133.38.0/24 maxlen: 24
103.178.50.0/24 maxlen: 24
103.178.51.0/24 maxlen: 24
103.196.132.0/22 maxlen: 22
103.196.132.0/23 maxlen: 24
103.196.134.0/23 maxlen: 24
103.239.168.0/22 maxlen: 22
103.239.168.0/23 maxlen: 24
103.239.170.0/23 maxlen: 24
119.10.128.0/22 maxlen: 24
223.29.220.0/22 maxlen: 24
2400:44a0::/48 maxlen: 48
2400:44a0:1::/48 maxlen: 48
2400:44a0:2::/48 maxlen: 48
2400:44a0:2::/118 maxlen: 118
2400:44a0:2::400/118 maxlen: 118
2400:44a0:2::800/118 maxlen: 118
2400:44a0:2::c00/118 maxlen: 118
2400:44a0:2::1000/120 maxlen: 120
2400:44a0:2::1100/120 maxlen: 120
2400:44a0:2::1200/120 maxlen: 120
2400:44a0:2::1300/120 maxlen: 120
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 08:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D29B, serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Validity
Not Before: Sep 9 08:46:43 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6aa11cf3-8ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:14:5e:20:11:e1:91:94:ee:1b:0c:e3:8b:
00:27:d4:8d:bb:6a:74:b0:f3:21:2d:7f:81:82:a6:
65:9f:8b:aa:e3:6a:2d:f5:9d:45:17:81:a3:bf:4c:
fe:ca:ed:8f:95:b8:d1:67:74:57:94:9a:7b:8b:ae:
d2:9a:23:9c:3f:b4:6e:57:9e:7c:59:69:c5:cb:23:
9a:89:71:4a:36:86:d9:c3:8f:a5:8c:a5:89:8f:5b:
cf:4a:b4:8c:3f:e6:d3:6b:98:49:da:3b:04:af:00:
79:38:0a:12:41:a9:f6:6a:7a:d4:79:99:ea:4a:a0:
e8:f2:05:be:69:1e:7a:8e:8b:e2:f4:7e:26:8a:1d:
22:3c:b6:45:96:c3:9e:15:ad:08:28:8b:cb:01:b4:
3e:40:c8:f9:f7:db:d9:a1:35:86:03:a4:8b:cd:c4:
77:c5:f6:67:cb:55:b5:15:98:bf:da:8b:07:3d:cb:
ab:76:4c:4e:43:e6:57:92:d1:04:58:de:f3:e0:e6:
1f:46:fa:7e:0e:5a:f5:a9:fa:a9:66:bf:ee:3f:9d:
d0:f7:53:7e:ca:d6:0e:28:e9:61:f9:05:39:4d:d4:
6f:1a:72:c8:b4:17:ba:3e:67:29:23:18:14:a4:8c:
1e:57:ed:11:f3:b0:5a:cf:8b:f0:3b:e7:07:e9:af:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1F:45:CC:57:1F:A9:8C:88:CA:0A:E0:B8:49:93:19:0C:90:68:6B
X509v3 Authority Key Identifier:
keyid:4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/56A844E8AC1611F1AA5AD2963211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.56.0/22
45.127.200.0/22
103.2.237.0-103.2.238.255
103.106.102.0/24
103.133.38.0/24
103.178.50.0/23
103.196.132.0/22
103.239.168.0/22
119.10.128.0/22
223.29.220.0/22
IPv6:
2400:44a0::-2400:44a0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:73:21:01:93:f1:a5:f4:e0:9d:e8:f4:4f:a1:20:48:e2:a1:
d1:4a:f1:e2:f5:8c:b8:9d:27:c3:09:3d:60:c5:ee:46:01:26:
d8:6c:b0:f9:9a:fe:5e:f0:78:4c:ef:a5:c7:6e:01:9b:22:46:
d6:50:b0:8e:f7:ba:76:d8:bb:20:58:93:41:46:a9:8e:3d:54:
68:7f:26:08:ee:ea:64:cb:39:6e:05:bb:0d:ea:33:9f:4e:9a:
cd:6e:b3:57:ed:a3:02:c8:35:55:06:00:a4:30:4d:44:75:13:
df:46:3e:81:29:a0:8e:d7:3a:28:f5:3c:de:17:12:00:25:dc:
67:a0:64:bc:b3:de:8c:a6:2d:3d:74:9a:5e:36:21:11:44:b5:
c1:62:00:31:5b:9c:6d:c3:6c:b2:86:84:3e:2e:4e:71:d3:1d:
fb:8e:2f:89:eb:3a:21:2a:ff:97:b2:e8:c6:67:7e:a2:0c:07:
5f:73:dc:3c:95:d3:74:8b:80:8c:3a:64:40:81:1c:c7:e6:94:
7d:7d:8f:33:3c:f0:f0:64:89:35:37:07:98:7e:75:93:90:2b:
79:6b:30:22:69:c0:05:ff:af:09:fd:ee:58:e1:70:42:52:69:
db:a3:c6:31:eb:78:e5:57:ef:a6:73:21:13:d2:93:3c:74:ef:
6e:d1:4c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:40:33 2026 by rpki-client