Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/677C9A56DFD611F0B4BB7BAF516F56BC.roa
File: 677C9A56DFD611F0B4BB7BAF516F56BC.roa (raw, json)
Hash identifier: HUD0Y4D+WGB6xkE9fiCxdvhyQehOoOpXtKkyEKaEOO4=
Subject key identifier: C7:EA:74:A1:6E:E2:BC:1B:81:7B:6A:05:25:19:CA:F2:72:2A:65:7A
Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial: 35F6
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/677C9A56DFD611F0B4BB7BAF516F56BC.roa
Signing time: Mon 02 Mar 2026 04:43:08 +0000
ROA not before: Tue 23 Dec 2025 08:10:55 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 38264
IP address blocks: 58.27.128.0/17 maxlen: 17
58.27.128.0/24 maxlen: 24
58.27.129.0/24 maxlen: 24
58.27.130.0/24 maxlen: 24
58.27.131.0/24 maxlen: 24
58.27.132.0/22 maxlen: 22
58.27.132.0/24 maxlen: 24
58.27.133.0/24 maxlen: 24
58.27.134.0/24 maxlen: 24
58.27.135.0/24 maxlen: 24
58.27.136.0/22 maxlen: 22
58.27.140.0/24 maxlen: 24
58.27.141.0/24 maxlen: 24
58.27.142.0/24 maxlen: 24
58.27.144.0/22 maxlen: 22
58.27.144.0/23 maxlen: 24
58.27.146.0/24 maxlen: 24
58.27.147.0/24 maxlen: 24
58.27.148.0/22 maxlen: 22
58.27.148.0/24 maxlen: 24
58.27.149.0/24 maxlen: 24
58.27.150.0/23 maxlen: 23
58.27.152.0/21 maxlen: 22
58.27.152.0/22 maxlen: 23
58.27.156.0/24 maxlen: 24
58.27.157.0/24 maxlen: 24
58.27.158.0/24 maxlen: 24
58.27.159.0/24 maxlen: 24
58.27.160.0/21 maxlen: 22
58.27.160.0/24 maxlen: 24
58.27.164.0/24 maxlen: 24
58.27.168.0/21 maxlen: 22
58.27.168.0/23 maxlen: 23
58.27.170.0/24 maxlen: 24
58.27.171.0/24 maxlen: 24
58.27.172.0/24 maxlen: 24
58.27.176.0/20 maxlen: 20
58.27.184.0/22 maxlen: 22
58.27.188.0/24 maxlen: 24
58.27.189.0/24 maxlen: 24
58.27.190.0/24 maxlen: 24
58.27.192.0/19 maxlen: 19
58.27.192.0/21 maxlen: 21
58.27.192.0/24 maxlen: 24
58.27.193.0/24 maxlen: 24
58.27.194.0/23 maxlen: 23
58.27.195.0/24 maxlen: 24
58.27.196.0/23 maxlen: 24
58.27.198.0/24 maxlen: 24
58.27.199.0/24 maxlen: 24
58.27.200.0/22 maxlen: 22
58.27.200.0/24 maxlen: 24
58.27.201.0/24 maxlen: 24
58.27.202.0/24 maxlen: 24
58.27.203.0/24 maxlen: 24
58.27.204.0/22 maxlen: 22
58.27.204.0/24 maxlen: 24
58.27.205.0/24 maxlen: 24
58.27.206.0/24 maxlen: 24
58.27.207.0/24 maxlen: 24
58.27.208.0/20 maxlen: 20
58.27.208.0/22 maxlen: 22
58.27.208.0/24 maxlen: 24
58.27.209.0/24 maxlen: 24
58.27.210.0/24 maxlen: 24
58.27.211.0/24 maxlen: 24
58.27.212.0/22 maxlen: 22
58.27.212.0/24 maxlen: 24
58.27.213.0/24 maxlen: 24
58.27.215.0/24 maxlen: 24
58.27.216.0/24 maxlen: 24
58.27.217.0/24 maxlen: 24
58.27.218.0/24 maxlen: 24
58.27.219.0/24 maxlen: 24
58.27.220.0/24 maxlen: 24
58.27.221.0/24 maxlen: 24
58.27.222.0/24 maxlen: 24
58.27.223.0/24 maxlen: 24
58.27.224.0/19 maxlen: 19
58.27.224.0/20 maxlen: 20
58.27.224.0/24 maxlen: 24
58.27.225.0/24 maxlen: 24
58.27.226.0/24 maxlen: 24
58.27.227.0/24 maxlen: 24
58.27.228.0/24 maxlen: 24
58.27.229.0/24 maxlen: 24
58.27.230.0/24 maxlen: 24
58.27.231.0/24 maxlen: 24
58.27.232.0/21 maxlen: 21
58.27.232.0/22 maxlen: 22
58.27.232.0/24 maxlen: 24
58.27.233.0/24 maxlen: 24
58.27.234.0/24 maxlen: 24
58.27.235.0/24 maxlen: 24
58.27.236.0/23 maxlen: 24
58.27.238.0/24 maxlen: 24
58.27.239.0/24 maxlen: 24
58.27.240.0/21 maxlen: 21
58.27.240.0/24 maxlen: 24
58.27.241.0/24 maxlen: 24
58.27.242.0/24 maxlen: 24
58.27.243.0/24 maxlen: 24
58.27.244.0/24 maxlen: 24
58.27.245.0/24 maxlen: 24
58.27.246.0/24 maxlen: 24
58.27.247.0/24 maxlen: 24
58.27.248.0/22 maxlen: 22
58.27.248.0/24 maxlen: 24
58.27.249.0/24 maxlen: 24
58.27.250.0/24 maxlen: 24
58.27.251.0/24 maxlen: 24
58.27.252.0/22 maxlen: 23
58.27.255.0/24 maxlen: 24
110.36.0.0/19 maxlen: 24
110.36.32.0/20 maxlen: 24
110.36.48.0/21 maxlen: 24
110.36.56.0/23 maxlen: 24
110.36.64.0/18 maxlen: 24
110.36.128.0/18 maxlen: 24
110.36.208.0/23 maxlen: 24
110.36.216.0/23 maxlen: 24
110.36.218.0/24 maxlen: 24
110.36.220.0/22 maxlen: 24
110.36.224.0/24 maxlen: 24
110.36.227.0/24 maxlen: 24
110.36.228.0/22 maxlen: 24
110.36.234.0/24 maxlen: 24
110.36.236.0/24 maxlen: 24
110.37.0.0/18 maxlen: 24
110.37.64.0/18 maxlen: 24
110.37.128.0/18 maxlen: 24
110.37.192.0/18 maxlen: 24
110.38.0.0/16 maxlen: 19
110.38.0.0/17 maxlen: 24
110.38.128.0/18 maxlen: 24
110.38.192.0/19 maxlen: 24
110.38.224.0/20 maxlen: 24
110.39.0.0/16 maxlen: 24
2402:fd00::/32 maxlen: 32
2402:fd00:100::/44 maxlen: 44
2402:fd00:110::/48 maxlen: 48
2402:fd00:111::/48 maxlen: 48
2402:fd00:113::/48 maxlen: 48
2402:fd00:114::/48 maxlen: 48
2402:fd00:11f::/48 maxlen: 48
2402:fd00:130::/44 maxlen: 44
2402:fd00:1e0::/44 maxlen: 44
2402:fd00:1f0::/48 maxlen: 48
2402:fd00:300::/40 maxlen: 40
2402:fd00:4000::/40 maxlen: 40
2402:fd00:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13814 (0x35f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Validity
Not Before: Dec 23 08:10:55 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a5155c-5f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:16:c0:92:b7:e8:7e:73:8a:6e:0e:c9:0a:
13:cc:a3:6d:da:cb:c5:85:b9:24:fb:5e:cc:ca:7a:
5b:97:c8:19:aa:f6:69:af:56:8e:11:b6:90:10:dc:
3d:a2:2a:56:ac:60:32:dd:da:42:1a:79:ae:3c:f5:
fa:9f:88:e4:e9:f6:ed:c8:44:5f:09:75:52:6c:78:
57:6f:47:7f:ef:b3:2b:bb:01:53:2e:2a:fb:d8:79:
80:bf:3a:e2:0d:90:22:7a:f8:7a:91:24:e2:91:f4:
4b:e9:2f:47:26:1b:74:aa:e1:10:87:01:5b:cd:98:
cf:08:55:ce:15:06:53:0c:c0:a8:45:b8:a2:3b:fa:
3e:0d:8c:5c:95:ce:51:db:ed:10:e6:67:57:42:94:
76:6d:b2:3b:7a:46:9c:18:ac:71:00:45:b3:24:2c:
c8:aa:85:2c:6b:2e:56:9b:a0:04:64:d0:d8:82:b3:
ee:10:e3:8f:c9:72:1e:13:3e:b9:b9:0f:c9:13:a9:
66:bc:61:15:d3:0a:74:bb:2d:4f:13:41:1c:9c:12:
7b:7d:e8:22:b2:6c:96:c3:dc:df:d2:9f:04:57:0a:
c9:28:fe:a7:1a:a2:fb:89:f5:61:ed:38:e2:b8:1a:
84:93:14:d9:59:91:4b:4e:e8:86:a3:17:74:16:0e:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:74:A1:6E:E2:BC:1B:81:7B:6A:05:25:19:CA:F2:72:2A:65:7A
X509v3 Authority Key Identifier:
keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/677C9A56DFD611F0B4BB7BAF516F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
58.27.128.0/17
110.36.0.0-110.36.57.255
110.36.64.0-110.36.191.255
110.36.208.0/23
110.36.216.0-110.36.218.255
110.36.220.0-110.36.224.255
110.36.227.0-110.36.231.255
110.36.234.0/24
110.36.236.0/24
110.37.0.0-110.39.255.255
IPv6:
2402:fd00::/32
Signature Algorithm: sha256WithRSAEncryption
be:5a:bb:88:99:5b:f1:74:ad:6a:9d:2a:7e:b4:87:66:8d:62:
57:08:13:dc:5c:ab:3e:f5:ff:92:68:6f:a6:c3:c4:95:3d:6c:
06:bd:e3:3b:17:43:de:df:f1:5b:78:09:86:ce:fb:bc:f9:94:
37:dd:54:eb:cd:35:c2:25:a8:dc:ea:1e:33:be:fe:fb:47:4b:
1d:98:3b:72:71:af:2b:2a:c6:00:ff:af:17:05:92:e1:98:ed:
a5:6d:47:e4:da:84:f3:9c:db:5c:f0:54:4a:48:d2:8c:62:0b:
98:d1:a6:ee:84:de:cf:5e:e9:dc:89:51:c7:69:aa:be:8d:b9:
dd:7b:71:ca:57:93:31:f6:5b:9a:49:1f:3c:bc:ac:e5:e6:05:
5a:b5:a0:d3:2f:13:17:fe:0d:61:dc:3f:1c:5d:33:1c:1c:11:
f7:e7:40:6d:57:ce:a4:fb:7c:ba:50:b7:fe:31:f2:f8:83:a8:
b7:eb:99:39:5e:ce:8d:e0:77:b7:98:42:1b:e7:ff:38:e9:8c:
45:4b:6b:34:b5:64:70:c6:4f:d2:c6:bc:6f:54:58:87:46:6d:
4b:14:a5:d3:66:bf:8d:29:df:c8:56:6d:ef:91:e6:45:ce:d9:
ca:28:45:dc:f6:13:79:5a:66:f4:02:3c:14:41:bc:13:6f:5c:
cf:11:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:38:30 2026 by rpki-client