Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C277F1007F3911F193096D0490A30FBC.roa
File: C277F1007F3911F193096D0490A30FBC.roa (raw, json)
Hash identifier: X3ay339LEsGIap4GVwSIHHZayifXCi6lrQrG9gE8B/w=
Subject key identifier: AA:B2:EE:9B:D6:06:C4:88:D0:C8:42:C0:B9:90:9C:75:AB:83:C0:DB
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CDF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C277F1007F3911F193096D0490A30FBC.roa
Signing time: Tue 14 Jul 2026 04:09:08 +0000
ROA not before: Tue 14 Jul 2026 04:09:08 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135918
IP address blocks: 42.96.0.0/22 maxlen: 22
45.117.164.0/24 maxlen: 24
45.117.165.0/24 maxlen: 24
45.117.166.0/24 maxlen: 24
49.236.208.0/22 maxlen: 22
103.14.224.0/23 maxlen: 23
103.28.32.0/22 maxlen: 22
103.65.234.0/23 maxlen: 23
103.67.196.0/23 maxlen: 23
103.67.198.0/23 maxlen: 23
103.68.84.0/23 maxlen: 23
103.69.86.0/23 maxlen: 23
103.69.96.0/23 maxlen: 23
103.74.100.0/22 maxlen: 24
103.95.196.0/22 maxlen: 22
103.110.32.0/23 maxlen: 23
103.129.126.0/23 maxlen: 23
103.139.154.0/23 maxlen: 23
103.149.252.0/23 maxlen: 23
103.151.52.0/23 maxlen: 23
103.151.238.0/23 maxlen: 23
103.153.64.0/23 maxlen: 23
103.157.204.0/23 maxlen: 23
103.160.2.0/23 maxlen: 23
103.161.96.0/23 maxlen: 23
103.161.112.0/23 maxlen: 23
103.161.118.0/23 maxlen: 23
103.161.170.0/23 maxlen: 23
103.161.173.0/24 maxlen: 24
103.161.180.0/23 maxlen: 23
103.162.24.0/23 maxlen: 24
103.176.22.0/23 maxlen: 23
103.176.24.0/23 maxlen: 23
103.176.250.0/23 maxlen: 24
103.177.34.0/23 maxlen: 23
103.178.230.0/23 maxlen: 23
103.178.232.0/23 maxlen: 23
103.179.174.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.183.120.0/23 maxlen: 23
103.188.82.0/23 maxlen: 23
103.188.242.0/23 maxlen: 23
103.190.120.0/23 maxlen: 23
103.211.200.0/23 maxlen: 23
103.211.206.0/23 maxlen: 23
103.218.122.0/23 maxlen: 23
103.228.36.0/23 maxlen: 23
103.228.74.0/23 maxlen: 23
103.229.52.0/23 maxlen: 23
103.231.248.0/23 maxlen: 23
103.239.66.0/23 maxlen: 23
103.252.92.0/23 maxlen: 23
103.252.94.0/23 maxlen: 23
110.172.28.0/23 maxlen: 23
125.253.114.0/24 maxlen: 24
163.61.110.0/23 maxlen: 23
163.61.182.0/23 maxlen: 23
163.223.8.0/23 maxlen: 23
163.223.224.0/23 maxlen: 23
202.158.244.0/22 maxlen: 22
2001:df5:e6c0::/48 maxlen: 48
2401:5ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27871 (0x6cdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 14 04:09:08 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a55b664-8d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:d5:84:de:3d:4f:c6:b6:a7:28:3c:ac:08:
c9:f1:0c:0e:91:0d:e4:2c:59:1f:ad:16:fd:17:ca:
b3:cc:5c:36:f9:91:0c:1c:5b:43:05:e4:47:cf:0e:
b1:44:f9:81:2e:23:68:9d:9f:be:4e:ec:4b:b1:01:
0e:9e:f5:f0:26:df:81:0f:3e:06:19:fc:8b:9a:ab:
f7:20:87:bc:7d:f9:8f:b0:d4:2d:f1:5b:1e:34:49:
7d:7e:ad:b5:48:10:2c:c3:6d:17:87:7a:60:3e:08:
99:89:1d:d8:84:ca:67:7e:4d:49:1a:b0:94:85:ce:
e6:3d:00:ac:50:e3:df:4b:db:eb:a3:9b:d8:ff:85:
40:e5:f7:35:b4:e7:3d:00:2f:8b:af:82:b1:4d:3c:
f9:19:2d:16:93:37:29:a5:d6:68:6f:ae:97:f5:a1:
b2:db:e2:46:4e:bc:c2:39:89:c7:83:30:ae:52:3d:
65:a1:06:0f:fc:0f:8f:6d:24:33:cb:8d:a7:52:d9:
ea:a5:14:c6:47:72:b3:9c:2a:e9:4c:0d:b4:62:47:
8e:79:1c:97:fe:5f:e9:10:95:8d:2e:7b:4e:05:ab:
35:89:1a:66:ee:40:7e:87:3c:99:77:9f:1e:48:8c:
45:f5:08:2a:d5:97:87:94:0b:f5:5e:bd:00:46:0f:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B2:EE:9B:D6:06:C4:88:D0:C8:42:C0:B9:90:9C:75:AB:83:C0:DB
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C277F1007F3911F193096D0490A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.0.0/22
45.117.164.0-45.117.166.255
49.236.208.0/22
103.14.224.0/23
103.28.32.0/22
103.65.234.0/23
103.67.196.0/22
103.68.84.0/23
103.69.86.0/23
103.69.96.0/23
103.74.100.0/22
103.95.196.0/22
103.110.32.0/23
103.129.126.0/23
103.139.154.0/23
103.149.252.0/23
103.151.52.0/23
103.151.238.0/23
103.153.64.0/23
103.157.204.0/23
103.160.2.0/23
103.161.96.0/23
103.161.112.0/23
103.161.118.0/23
103.161.170.0/23
103.161.173.0/24
103.161.180.0/23
103.162.24.0/23
103.176.22.0-103.176.25.255
103.176.250.0/23
103.177.34.0/23
103.178.230.0-103.178.233.255
103.179.174.0/23
103.180.138.0/23
103.183.120.0/23
103.188.82.0/23
103.188.242.0/23
103.190.120.0/23
103.211.200.0/23
103.211.206.0/23
103.218.122.0/23
103.228.36.0/23
103.228.74.0/23
103.229.52.0/23
103.231.248.0/23
103.239.66.0/23
103.252.92.0/22
110.172.28.0/23
125.253.114.0/24
163.61.110.0/23
163.61.182.0/23
163.223.8.0/23
163.223.224.0/23
202.158.244.0/22
IPv6:
2001:df5:e6c0::/48
2401:5ec0::/48
Signature Algorithm: sha256WithRSAEncryption
15:66:cf:0b:d4:8e:6b:12:82:88:b8:1c:f5:ec:86:c6:f0:74:
b5:a7:40:24:3f:e6:2e:4d:12:b9:15:58:e2:14:42:49:80:ae:
91:4a:23:59:03:46:e4:56:67:06:e1:78:1d:07:00:88:35:f5:
2a:18:ff:d1:ee:b7:55:dc:f6:99:56:4b:71:f9:1b:a4:0e:da:
1b:69:de:39:7f:57:d1:83:c8:3c:d7:d3:66:94:b9:ff:96:11:
83:0a:0a:e3:52:1a:aa:98:9d:4e:73:41:da:f8:1b:db:9d:b8:
e6:1d:07:f6:27:2b:c3:c8:b8:a2:11:75:00:80:a3:dc:3c:0f:
42:3a:81:6c:ab:47:f7:5a:be:1f:e2:c6:39:f5:28:bb:77:2a:
1c:f5:aa:ec:f8:f3:c2:99:b3:53:25:21:12:74:0f:3d:99:45:
2f:6f:63:88:1d:86:56:f0:f5:25:1e:70:31:6b:53:3d:db:e7:
bc:92:a5:85:38:e0:07:04:e3:a4:83:bd:04:cc:da:d9:f4:76:
64:67:4c:38:ba:33:74:dc:05:85:76:b5:0f:e0:5e:a7:4c:19:
fd:d8:dd:3f:86:e2:8f:cc:74:41:b9:1b:da:13:a2:16:b9:e8:
da:f1:46:52:17:fe:43:cb:c7:e2:17:a7:39:ad:07:78:bf:03:
44:39:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:45 2026 by rpki-client