Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C8CB1EC854D11EF8B462113C4F9AE02.roa
File: 5C8CB1EC854D11EF8B462113C4F9AE02.roa (raw, json)
Hash identifier: AvmH7F5rX9I8z9OKd6/r8cGZF6dqtYN6tlOcEmPxRpg=
Subject key identifier: E5:12:9F:72:5C:49:60:48:CB:BA:18:87:57:46:62:D8:D2:86:4D:E0
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F1B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C8CB1EC854D11EF8B462113C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:36:17 +0000
ROA not before: Fri 02 Oct 2026 15:36:17 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45903
IP address blocks: 42.96.32.0/19 maxlen: 19
42.96.38.0/23 maxlen: 24
42.96.40.0/21 maxlen: 24
42.96.48.0/21 maxlen: 24
42.96.56.0/22 maxlen: 24
42.96.60.0/23 maxlen: 23
42.96.60.0/24 maxlen: 24
42.96.61.0/24 maxlen: 24
45.122.232.0/22 maxlen: 24
45.122.236.0/22 maxlen: 24
45.122.240.0/22 maxlen: 24
45.122.244.0/22 maxlen: 23
45.122.245.0/24 maxlen: 24
45.122.246.0/23 maxlen: 24
45.122.248.0/22 maxlen: 24
45.122.252.0/24 maxlen: 24
45.122.254.0/23 maxlen: 24
101.99.0.0/21 maxlen: 21
101.99.0.0/23 maxlen: 24
101.99.2.0/23 maxlen: 23
101.99.2.0/24 maxlen: 24
101.99.4.0/22 maxlen: 24
101.99.8.0/21 maxlen: 24
101.99.16.0/20 maxlen: 24
101.99.32.0/19 maxlen: 24
103.9.196.0/22 maxlen: 24
103.63.104.0/22 maxlen: 24
103.63.108.0/22 maxlen: 22
103.63.110.0/23 maxlen: 24
103.63.112.0/22 maxlen: 24
103.63.116.0/22 maxlen: 24
103.63.120.0/22 maxlen: 24
103.108.132.0/22 maxlen: 24
103.224.168.0/22 maxlen: 24
103.229.40.0/22 maxlen: 24
103.246.220.0/22 maxlen: 24
113.20.96.0/19 maxlen: 24
115.165.160.0/21 maxlen: 21
115.165.160.0/24 maxlen: 24
115.165.166.0/24 maxlen: 24
119.82.128.0/20 maxlen: 23
119.82.128.0/22 maxlen: 24
119.82.132.0/24 maxlen: 24
119.82.134.0/23 maxlen: 24
119.82.136.0/21 maxlen: 24
124.158.14.0/24 maxlen: 24
144.48.24.0/22 maxlen: 24
163.52.14.0/23 maxlen: 24
183.91.0.0/20 maxlen: 20
183.91.0.0/21 maxlen: 24
183.91.8.0/21 maxlen: 21
183.91.8.0/22 maxlen: 24
183.91.12.0/23 maxlen: 24
183.91.15.0/24 maxlen: 24
183.91.16.0/20 maxlen: 24
202.134.16.0/21 maxlen: 24
203.171.16.0/20 maxlen: 24
203.205.0.0/21 maxlen: 24
203.205.8.0/21 maxlen: 21
203.205.8.0/22 maxlen: 22
203.205.8.0/24 maxlen: 24
203.205.9.0/24 maxlen: 24
203.205.10.0/23 maxlen: 24
203.205.12.0/22 maxlen: 24
203.205.16.0/20 maxlen: 24
203.205.32.0/19 maxlen: 24
2001:df6:f540::/48 maxlen: 48
2001:df7:6640::/48 maxlen: 48
2402:5300::/35 maxlen: 35
2402:5300::/40 maxlen: 48
2402:5300:400::/42 maxlen: 42
2402:5300:400::/46 maxlen: 48
2402:5300:404::/48 maxlen: 48
2402:5300:405::/48 maxlen: 48
2402:5300:406::/48 maxlen: 48
2402:5300:408::/46 maxlen: 48
2402:5300:40c::/46 maxlen: 48
2402:5300:410::/44 maxlen: 48
2402:5300:420::/44 maxlen: 48
2402:5300:430::/44 maxlen: 48
2402:5300:440::/42 maxlen: 48
2402:5300:480::/42 maxlen: 48
2402:5300:4c0::/42 maxlen: 48
2402:5300:500::/40 maxlen: 48
2402:5300:600::/40 maxlen: 48
2402:5300:700::/40 maxlen: 48
2402:5300:800::/40 maxlen: 48
2402:5300:900::/40 maxlen: 48
2402:5300:1000::/36 maxlen: 48
2402:5300:2000::/35 maxlen: 35
2402:5300:2000::/36 maxlen: 48
2402:5300:4000::/35 maxlen: 35
2402:5300:4000::/42 maxlen: 42
2402:5300:4000::/44 maxlen: 48
2402:5300:4010::/44 maxlen: 48
2402:5300:4022::/48 maxlen: 48
2402:5300:4023::/48 maxlen: 48
2402:5300:4024::/46 maxlen: 48
2402:5300:4028::/46 maxlen: 48
2402:5300:402c::/46 maxlen: 48
2402:5300:4030::/44 maxlen: 48
2402:5300:4040::/42 maxlen: 48
2402:5300:4080::/42 maxlen: 48
2402:5300:40c0::/42 maxlen: 48
2402:5300:4100::/40 maxlen: 48
2402:5300:4200::/40 maxlen: 48
2402:5300:4300::/40 maxlen: 48
2402:5300:4400::/40 maxlen: 48
2402:5300:4500::/40 maxlen: 48
2402:5300:4600::/40 maxlen: 48
2402:5300:4700::/40 maxlen: 48
2402:5300:5000::/36 maxlen: 48
2402:5300:6000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28443 (0x6f1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:36:17 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf71-cd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:7e:1b:45:d6:f6:ff:fe:e4:77:00:7d:da:
8a:d5:6f:2f:41:d6:3d:9c:27:f5:28:fd:6a:d3:64:
76:2e:84:8e:a6:1d:eb:1c:8a:65:dc:a3:43:7c:58:
21:f5:8d:e6:ee:75:a3:71:53:50:cb:f7:8b:30:f8:
1f:a5:bd:ab:1c:4d:80:68:f4:1d:26:51:9e:fd:65:
5f:04:94:0d:6b:6a:c3:06:57:df:55:2b:7a:fd:08:
bf:4b:6d:ac:5b:22:5b:06:0b:fc:bd:51:a3:bf:3c:
4f:1e:b4:b3:e6:44:ff:08:26:7b:ec:18:46:b6:10:
ee:7b:d9:12:54:31:8e:36:ff:9d:a0:d0:0a:fa:f5:
25:1c:e8:21:2f:f6:50:bd:7f:58:d8:1d:c4:94:46:
be:cb:51:f0:b6:cd:c5:d2:97:21:5e:83:17:f5:fe:
4b:e3:46:72:77:bc:71:3b:78:5c:84:c7:d4:0b:6a:
c2:9d:90:ae:81:d3:40:90:35:6b:a3:be:8a:68:85:
a2:87:a8:af:bd:96:09:19:c0:5c:11:f6:0b:f4:62:
a8:40:32:f7:4c:29:1c:e4:cd:8a:29:07:59:ea:68:
60:88:1f:0f:5d:9d:27:b4:e2:84:02:ab:c2:11:aa:
26:6f:d2:bd:14:69:9e:3d:78:e2:a7:0e:8c:45:19:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:9F:72:5C:49:60:48:CB:BA:18:87:57:46:62:D8:D2:86:4D:E0
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C8CB1EC854D11EF8B462113C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.32.0/19
45.122.232.0-45.122.252.255
45.122.254.0/23
101.99.0.0/18
103.9.196.0/22
103.63.104.0-103.63.123.255
103.108.132.0/22
103.224.168.0/22
103.229.40.0/22
103.246.220.0/22
113.20.96.0/19
115.165.160.0/21
119.82.128.0/20
124.158.14.0/24
144.48.24.0/22
163.52.14.0/23
183.91.0.0/19
202.134.16.0/21
203.171.16.0/20
203.205.0.0/18
IPv6:
2001:df6:f540::/48
2001:df7:6640::/48
2402:5300::-2402:5300:600f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:70:89:d7:00:3e:f9:92:47:66:9c:c6:90:11:8f:7a:a4:02:
60:ef:ff:79:47:07:52:26:0f:b0:5e:22:e5:ee:a1:6e:6b:3a:
64:81:07:f1:98:82:b2:3c:fb:3e:b2:f9:a3:4e:35:d6:c8:d1:
ca:77:88:e0:0b:2a:09:d5:90:52:ff:28:bc:5c:79:7c:86:aa:
2e:cf:db:24:8a:cd:92:d6:f5:c7:54:b4:a5:da:a4:5e:b8:cb:
f3:8f:c0:c1:dc:a0:1d:13:c0:dd:cd:5e:8d:ce:2c:cb:05:45:
ff:ea:91:35:26:44:bb:ba:b4:77:10:61:cd:aa:77:65:eb:4c:
04:74:1c:4f:40:55:54:d8:66:1c:82:d9:6c:76:5e:30:fb:ee:
3b:43:de:46:5e:96:87:14:9c:85:01:37:d4:ac:44:23:c6:5e:
af:36:c0:01:8c:45:40:77:03:65:d9:05:dd:b3:cb:e9:d7:f5:
1d:ee:d4:b0:9b:2b:69:10:ca:e0:84:cf:06:1b:67:d6:17:e3:
98:69:1e:89:af:2b:41:5b:e3:a3:5d:ee:39:bf:56:a1:03:4b:
4e:80:34:eb:3e:ae:2f:4a:3d:5a:39:a0:ee:c6:b9:24:45:04:
b4:8b:33:5a:d5:8c:7b:f9:1a:1a:b1:e1:fb:7b:0b:9b:e2:54:
3b:3f:6d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:26 2026 by rpki-client