Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C39D7452B92111F1B2212FD04B11F970.roa
File: C39D7452B92111F1B2212FD04B11F970.roa (raw, json)
Hash identifier: 4OTLv9sgCFu8xJ5Cpf7KN5fc/2P1478JNlkZAq7uj94=
Subject key identifier: E4:C7:26:3D:88:4D:57:63:7E:B0:A2:E9:4B:CB:4A:F4:4E:5D:A2:02
Certificate issuer: /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial: 02BA
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C39D7452B92111F1B2212FD04B11F970.roa
Signing time: Mon 28 Sep 2026 20:26:24 +0000
ROA not before: Mon 28 Sep 2026 20:26:24 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 53813
IP address blocks: 101.2.192.0/24 maxlen: 24
101.2.193.0/24 maxlen: 24
101.2.194.0/24 maxlen: 24
101.2.195.0/24 maxlen: 24
101.2.196.0/24 maxlen: 24
101.2.197.0/24 maxlen: 24
101.2.198.0/24 maxlen: 24
101.2.199.0/24 maxlen: 24
101.2.200.0/24 maxlen: 24
101.2.201.0/24 maxlen: 24
101.2.202.0/23 maxlen: 24
101.2.204.0/23 maxlen: 24
101.2.206.0/24 maxlen: 24
101.2.207.0/24 maxlen: 24
101.2.208.0/24 maxlen: 24
101.2.209.0/24 maxlen: 24
101.2.214.0/24 maxlen: 24
101.2.215.0/24 maxlen: 24
101.2.216.0/23 maxlen: 24
101.2.218.0/23 maxlen: 24
101.2.220.0/23 maxlen: 24
101.2.222.0/23 maxlen: 24
101.2.224.0/23 maxlen: 24
101.2.226.0/23 maxlen: 24
101.2.228.0/23 maxlen: 24
101.2.230.0/23 maxlen: 24
101.2.232.0/23 maxlen: 24
101.2.234.0/23 maxlen: 24
101.2.236.0/23 maxlen: 24
101.2.238.0/23 maxlen: 24
101.2.240.0/24 maxlen: 24
101.2.241.0/24 maxlen: 24
101.2.242.0/23 maxlen: 24
101.2.244.0/23 maxlen: 24
101.2.246.0/24 maxlen: 24
101.2.247.0/24 maxlen: 24
101.2.248.0/23 maxlen: 24
101.2.250.0/24 maxlen: 24
101.2.252.0/23 maxlen: 24
101.2.254.0/23 maxlen: 24
175.107.128.0/23 maxlen: 24
175.107.130.0/23 maxlen: 24
175.107.132.0/23 maxlen: 24
175.107.134.0/24 maxlen: 24
175.107.136.0/23 maxlen: 24
175.107.138.0/23 maxlen: 24
175.107.140.0/23 maxlen: 24
175.107.142.0/23 maxlen: 24
175.107.144.0/23 maxlen: 24
175.107.146.0/23 maxlen: 24
175.107.148.0/23 maxlen: 24
175.107.150.0/23 maxlen: 24
175.107.152.0/23 maxlen: 24
175.107.154.0/23 maxlen: 24
175.107.156.0/23 maxlen: 24
175.107.158.0/23 maxlen: 24
175.107.160.0/23 maxlen: 24
175.107.162.0/23 maxlen: 24
175.107.164.0/23 maxlen: 24
175.107.166.0/23 maxlen: 24
175.107.170.0/23 maxlen: 24
175.107.172.0/23 maxlen: 24
175.107.174.0/23 maxlen: 24
175.107.176.0/23 maxlen: 24
175.107.178.0/23 maxlen: 24
175.107.180.0/23 maxlen: 24
175.107.184.0/23 maxlen: 24
175.107.186.0/23 maxlen: 24
175.107.190.0/24 maxlen: 24
2400:7aa0:1200::/40 maxlen: 48
2400:7aa0:1300::/40 maxlen: 48
2400:7aa0:1400::/40 maxlen: 48
2400:7aa0:1500::/40 maxlen: 48
2400:7aa0:1600::/40 maxlen: 48
2400:7aa0:1700::/40 maxlen: 48
2400:7aa0:1800::/40 maxlen: 48
2400:7aa0:1900::/40 maxlen: 48
2400:7aa0:1a00::/40 maxlen: 48
2400:7aa0:1b00::/40 maxlen: 48
2400:7aa0:1c00::/40 maxlen: 48
2400:7aa0:1d00::/40 maxlen: 40
2400:7aa0:1e00::/40 maxlen: 48
2400:7aa0:1f00::/40 maxlen: 48
2400:7aa0:2200::/40 maxlen: 48
2400:7aa0:2300::/40 maxlen: 48
2400:7aa0:2400::/40 maxlen: 48
2400:7aa0:2500::/40 maxlen: 48
2400:7aa0:2600::/40 maxlen: 48
2400:7aa0:2800::/40 maxlen: 48
2400:7aa0:2900::/40 maxlen: 48
2400:7aa0:2b00::/40 maxlen: 48
2400:7aa0:2c00::/40 maxlen: 48
2400:7aa0:2e00::/40 maxlen: 48
2400:7aa0:2f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 04:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 698 (0x2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Validity
Not Before: Sep 28 20:26:24 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6abacd70-a0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:91:0f:d7:5e:3c:bf:80:9d:60:61:43:7e:
d3:8c:0d:0d:6a:7d:c8:88:ec:52:71:8e:5e:f3:45:
fa:83:a9:34:f7:7c:53:85:ef:97:0c:61:77:75:28:
c9:37:c1:cc:ed:b0:0c:35:6b:e4:29:11:25:ab:48:
15:de:45:bd:c6:92:ff:8b:24:fc:65:6c:12:d6:8c:
40:3a:fd:83:82:62:5a:24:82:ea:3e:81:e9:5a:38:
02:5a:c3:62:f1:87:79:86:24:01:0a:5f:a7:1e:ce:
94:e2:72:99:a4:6b:6c:9b:d3:81:0e:40:22:d3:30:
bd:69:5f:73:15:4a:ba:48:32:27:83:60:ce:c8:0e:
c4:70:57:cb:a3:df:a7:83:a0:c1:7d:e7:e7:5b:f1:
6f:af:dd:8e:09:5e:ec:a0:a3:ec:dc:a5:a6:28:00:
5f:d4:c4:f8:3e:68:90:8a:5d:75:fd:86:63:32:19:
e1:3f:b0:09:db:41:d8:06:ec:99:15:d6:72:5e:21:
82:27:09:d7:7e:5f:9b:2d:72:04:08:b3:da:07:f3:
71:30:b8:b8:a6:3a:fd:a5:ae:47:59:e0:c0:70:c0:
27:8a:4c:20:cc:7e:0d:d7:b4:22:e5:e7:36:71:55:
1e:ba:74:5d:c9:9f:f9:20:e1:e8:1d:8a:eb:dd:96:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C7:26:3D:88:4D:57:63:7E:B0:A2:E9:4B:CB:4A:F4:4E:5D:A2:02
X509v3 Authority Key Identifier:
keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C39D7452B92111F1B2212FD04B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
101.2.192.0-101.2.209.255
101.2.214.0-101.2.250.255
101.2.252.0/22
175.107.128.0-175.107.134.255
175.107.136.0-175.107.167.255
175.107.170.0-175.107.181.255
175.107.184.0/22
175.107.190.0/24
IPv6:
2400:7aa0:1200::-2400:7aa0:1fff:ffff:ffff:ffff:ffff:ffff
2400:7aa0:2200::-2400:7aa0:26ff:ffff:ffff:ffff:ffff:ffff
2400:7aa0:2800::/39
2400:7aa0:2b00::-2400:7aa0:2cff:ffff:ffff:ffff:ffff:ffff
2400:7aa0:2e00::/39
Signature Algorithm: sha256WithRSAEncryption
76:ec:c4:f4:ae:3d:95:6d:45:f8:d8:fa:37:65:e8:38:8a:e5:
6a:42:7d:42:75:51:24:5a:dd:5e:b1:c7:fa:ea:fc:82:c5:f0:
25:c3:85:d1:ee:02:ef:59:30:41:c3:71:61:68:ab:14:b0:fd:
de:b1:6d:34:c9:de:51:1e:c8:f7:80:1f:8d:2d:ae:39:c3:6a:
2a:15:5a:0a:b8:e0:cf:2a:bf:c1:e8:db:c2:84:f7:6e:3f:74:
cf:2c:58:5b:18:23:3b:38:c6:25:4d:87:f0:93:3b:0b:e2:ee:
34:a4:67:68:12:51:4b:a0:4b:a7:4a:1f:d9:9b:60:9b:43:a3:
b8:88:16:b1:63:80:59:28:f3:d8:d7:58:68:7e:a4:cd:6f:dd:
c0:d1:d7:25:b0:7e:7f:07:85:4e:00:24:74:4f:a4:d2:87:2a:
8a:60:67:cf:9f:ec:72:4e:90:c9:74:b5:20:ae:53:0b:be:1b:
0f:21:a0:32:96:40:e7:08:39:9e:07:93:87:e0:da:9e:b4:7c:
d0:ef:04:4b:71:d8:6d:17:24:26:e9:65:79:41:8e:bb:d2:32:
32:ec:be:00:01:b0:60:96:d1:76:5f:e2:71:c6:e3:2f:5b:8d:
e0:7b:49:98:12:90:ee:05:e7:70:9d:b7:02:c6:f5:de:d9:ba:
8f:bf:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:57:15 2026 by rpki-client