Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C8CB1EC854D11EF8B462113C4F9AE02.roa
File: 5C8CB1EC854D11EF8B462113C4F9AE02.roa (raw, json)
Hash identifier: uZc3urtPOb+iBC5SMQT0gTvGGCC7hBAcz4WUpYUUfXk=
Subject key identifier: 02:DE:62:55:80:65:11:2C:11:0D:D1:E9:A5:FB:AA:A6:3E:66:17:39
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6C7F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C8CB1EC854D11EF8B462113C4F9AE02.roa
Signing time: Fri 15 May 2026 07:53:34 +0000
ROA not before: Fri 15 May 2026 07:53:34 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 45903
IP address blocks: 42.96.32.0/19 maxlen: 19
42.96.38.0/23 maxlen: 24
42.96.40.0/21 maxlen: 24
42.96.48.0/21 maxlen: 24
42.96.56.0/22 maxlen: 24
42.96.60.0/23 maxlen: 23
42.96.60.0/24 maxlen: 24
42.96.61.0/24 maxlen: 24
45.122.232.0/22 maxlen: 24
45.122.236.0/22 maxlen: 24
45.122.240.0/22 maxlen: 24
45.122.244.0/22 maxlen: 23
45.122.245.0/24 maxlen: 24
45.122.246.0/23 maxlen: 24
45.122.248.0/22 maxlen: 24
45.122.252.0/24 maxlen: 24
45.122.254.0/23 maxlen: 24
101.99.0.0/21 maxlen: 21
101.99.0.0/23 maxlen: 24
101.99.2.0/23 maxlen: 23
101.99.2.0/24 maxlen: 24
101.99.4.0/22 maxlen: 24
101.99.8.0/21 maxlen: 24
101.99.16.0/20 maxlen: 24
101.99.32.0/19 maxlen: 24
103.9.196.0/22 maxlen: 24
103.63.104.0/22 maxlen: 24
103.63.108.0/22 maxlen: 22
103.63.110.0/23 maxlen: 24
103.63.112.0/22 maxlen: 24
103.63.116.0/22 maxlen: 24
103.63.120.0/22 maxlen: 24
103.108.132.0/22 maxlen: 24
103.224.168.0/22 maxlen: 24
103.229.40.0/22 maxlen: 24
103.246.220.0/22 maxlen: 24
113.20.96.0/19 maxlen: 24
115.165.160.0/21 maxlen: 21
115.165.160.0/24 maxlen: 24
115.165.166.0/24 maxlen: 24
119.82.128.0/20 maxlen: 23
119.82.128.0/22 maxlen: 24
119.82.132.0/24 maxlen: 24
119.82.134.0/23 maxlen: 24
119.82.136.0/21 maxlen: 24
124.158.14.0/24 maxlen: 24
144.48.24.0/22 maxlen: 24
183.91.0.0/20 maxlen: 20
183.91.0.0/21 maxlen: 24
183.91.8.0/21 maxlen: 21
183.91.8.0/22 maxlen: 24
183.91.12.0/23 maxlen: 24
183.91.15.0/24 maxlen: 24
183.91.16.0/20 maxlen: 24
202.134.16.0/21 maxlen: 24
203.171.16.0/20 maxlen: 24
203.205.0.0/21 maxlen: 24
203.205.8.0/21 maxlen: 21
203.205.8.0/22 maxlen: 22
203.205.9.0/24 maxlen: 24
203.205.10.0/23 maxlen: 24
203.205.12.0/22 maxlen: 24
203.205.16.0/20 maxlen: 24
203.205.32.0/19 maxlen: 24
2001:df6:f540::/48 maxlen: 48
2402:5300::/35 maxlen: 35
2402:5300::/40 maxlen: 48
2402:5300:400::/42 maxlen: 42
2402:5300:400::/46 maxlen: 48
2402:5300:404::/48 maxlen: 48
2402:5300:405::/48 maxlen: 48
2402:5300:406::/48 maxlen: 48
2402:5300:408::/46 maxlen: 48
2402:5300:40c::/46 maxlen: 48
2402:5300:410::/44 maxlen: 48
2402:5300:420::/44 maxlen: 48
2402:5300:430::/44 maxlen: 48
2402:5300:440::/42 maxlen: 48
2402:5300:480::/42 maxlen: 48
2402:5300:4c0::/42 maxlen: 48
2402:5300:500::/40 maxlen: 48
2402:5300:600::/40 maxlen: 48
2402:5300:700::/40 maxlen: 48
2402:5300:800::/40 maxlen: 48
2402:5300:900::/40 maxlen: 48
2402:5300:1000::/36 maxlen: 48
2402:5300:2000::/35 maxlen: 35
2402:5300:2000::/36 maxlen: 48
2402:5300:4000::/35 maxlen: 35
2402:5300:4000::/42 maxlen: 42
2402:5300:4000::/44 maxlen: 48
2402:5300:4010::/44 maxlen: 48
2402:5300:4022::/48 maxlen: 48
2402:5300:4023::/48 maxlen: 48
2402:5300:4024::/46 maxlen: 48
2402:5300:4028::/46 maxlen: 48
2402:5300:402c::/46 maxlen: 48
2402:5300:4030::/44 maxlen: 48
2402:5300:4040::/42 maxlen: 48
2402:5300:4080::/42 maxlen: 48
2402:5300:40c0::/42 maxlen: 48
2402:5300:4100::/40 maxlen: 48
2402:5300:4200::/40 maxlen: 48
2402:5300:4300::/40 maxlen: 48
2402:5300:4400::/40 maxlen: 48
2402:5300:4500::/40 maxlen: 48
2402:5300:4600::/40 maxlen: 48
2402:5300:4700::/40 maxlen: 48
2402:5300:5000::/36 maxlen: 48
2402:5300:6000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 06:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27775 (0x6c7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: May 15 07:53:34 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a06d0fe-4403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:b3:e9:33:2c:0b:a8:ef:11:ba:ef:30:f3:
5b:27:eb:8e:d8:a9:f3:3a:e0:89:08:e7:da:4b:34:
3a:76:57:92:e4:bf:d5:c2:9a:3a:28:28:bc:c2:80:
ba:0c:5a:c1:91:ce:21:6d:a3:48:8a:3e:1e:1b:8b:
97:e9:bd:d2:86:7b:48:10:1b:5d:ac:bb:d7:6c:4b:
ce:de:e0:33:61:51:4f:d8:3d:cb:06:af:c3:53:dd:
9b:08:1b:00:48:62:84:f1:82:9a:ec:5c:58:73:22:
56:14:b6:b0:22:eb:ee:0f:67:f2:fe:0e:91:6a:fa:
8c:52:58:f1:52:da:b1:f6:ca:c3:db:3d:47:59:55:
f2:d4:a2:47:03:55:20:44:f2:9c:b5:de:16:43:0b:
46:7d:18:19:24:64:0d:52:1a:a6:d4:c5:b6:00:5f:
44:bd:db:88:a0:3b:db:cd:c6:3e:88:4c:9a:89:a9:
a9:1e:e4:95:f9:60:f8:69:b4:75:b1:8a:e4:db:ee:
2d:9a:0e:a8:2e:31:32:1e:4d:a1:de:28:bf:a4:4f:
58:9f:ad:42:4a:e2:65:2d:44:1a:13:70:c7:88:10:
9a:ce:e3:cc:df:3d:a8:fb:37:d0:15:a0:81:26:ad:
20:78:1d:c1:46:0e:ab:0c:8a:4f:ab:00:7e:49:6f:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DE:62:55:80:65:11:2C:11:0D:D1:E9:A5:FB:AA:A6:3E:66:17:39
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C8CB1EC854D11EF8B462113C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.32.0/19
45.122.232.0-45.122.252.255
45.122.254.0/23
101.99.0.0/18
103.9.196.0/22
103.63.104.0-103.63.123.255
103.108.132.0/22
103.224.168.0/22
103.229.40.0/22
103.246.220.0/22
113.20.96.0/19
115.165.160.0/21
119.82.128.0/20
124.158.14.0/24
144.48.24.0/22
183.91.0.0/19
202.134.16.0/21
203.171.16.0/20
203.205.0.0/18
IPv6:
2001:df6:f540::/48
2402:5300::-2402:5300:600f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8b:bf:93:4b:52:c5:db:86:e2:42:c6:da:8c:0d:f4:05:21:0a:
2e:02:30:a6:1c:a5:f9:b5:3e:db:1f:ab:f1:a6:0b:3d:71:55:
4f:c7:9e:07:ba:1f:40:7a:27:46:d7:83:e6:ed:51:1b:14:8d:
fe:ac:1f:55:f8:cd:b8:b6:48:be:6e:57:77:e4:f3:8a:a3:5e:
54:5b:1c:bc:7a:a8:5a:56:01:83:c0:da:79:91:ad:67:b1:ea:
dc:6d:3a:66:f2:c5:34:c4:3a:7c:3e:b0:5c:6b:77:60:56:84:
d0:3a:c2:d7:30:64:a4:6e:c2:94:ca:c9:b7:9e:af:ef:a0:ea:
74:d9:c1:ad:eb:a1:91:1d:28:62:e3:d9:50:d1:68:38:5c:30:
99:21:a9:3f:47:b9:3b:19:67:20:f4:dd:4a:33:a5:ea:5f:6d:
ff:2e:3f:ba:94:bd:fc:13:35:46:10:3e:dd:94:c0:12:96:31:
e9:07:29:48:0b:94:3b:40:8b:38:c2:73:fc:c5:0e:53:62:cf:
47:a2:ed:02:0c:4a:d6:b9:5c:fc:bc:bb:57:c6:d6:58:a1:75:
ac:53:ed:f7:57:e9:88:e9:76:15:27:ba:76:83:0e:3b:b3:10:
3c:4d:7c:ae:51:93:14:b0:cf:f4:b3:fd:90:f0:29:db:a5:8f:
63:d2:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:23:11 2026 by rpki-client