Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C56AA228721511EF9D7B9F3DC4F9AE02.roa
File: C56AA228721511EF9D7B9F3DC4F9AE02.roa (raw, json)
Hash identifier: vjs1ydeH6Gf8CnvnIIs6AZjxfkvNuqtBmRpOwnjs/4o=
Subject key identifier: 05:C9:5A:A4:35:6D:ED:D4:33:9D:C9:58:01:46:6C:FB:79:2A:09:62
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 026F
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C56AA228721511EF9D7B9F3DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:17:20 +0000
ROA not before: Wed 31 Dec 2025 04:24:48 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4762
IP address blocks: 202.28.128.0/18 maxlen: 18
202.28.128.0/20 maxlen: 20
202.28.128.0/24 maxlen: 24
202.28.129.0/24 maxlen: 24
202.28.130.0/24 maxlen: 24
202.28.131.0/24 maxlen: 24
202.28.132.0/24 maxlen: 24
202.28.133.0/24 maxlen: 24
202.28.134.0/24 maxlen: 24
202.28.135.0/24 maxlen: 24
202.28.136.0/22 maxlen: 22
202.28.136.0/24 maxlen: 24
202.28.137.0/24 maxlen: 24
202.28.138.0/23 maxlen: 24
202.28.140.0/24 maxlen: 24
202.28.141.0/24 maxlen: 24
202.28.142.0/24 maxlen: 24
202.28.143.0/24 maxlen: 24
202.28.144.0/20 maxlen: 20
202.28.144.0/22 maxlen: 22
202.28.144.0/24 maxlen: 24
202.28.145.0/24 maxlen: 24
202.28.146.0/24 maxlen: 24
202.28.147.0/24 maxlen: 24
202.28.148.0/22 maxlen: 22
202.28.148.0/24 maxlen: 24
202.28.149.0/24 maxlen: 24
202.28.150.0/23 maxlen: 24
202.28.152.0/21 maxlen: 21
202.28.152.0/24 maxlen: 24
202.28.153.0/24 maxlen: 24
202.28.154.0/24 maxlen: 24
202.28.155.0/24 maxlen: 24
202.28.156.0/24 maxlen: 24
202.28.157.0/24 maxlen: 24
202.28.158.0/24 maxlen: 24
202.28.159.0/24 maxlen: 24
202.28.160.0/20 maxlen: 20
202.28.160.0/24 maxlen: 24
202.28.161.0/24 maxlen: 24
202.28.162.0/24 maxlen: 24
202.28.163.0/24 maxlen: 24
202.28.164.0/24 maxlen: 24
202.28.165.0/24 maxlen: 24
202.28.166.0/24 maxlen: 24
202.28.167.0/24 maxlen: 24
202.28.168.0/24 maxlen: 24
202.28.169.0/24 maxlen: 24
202.28.170.0/24 maxlen: 24
202.28.171.0/24 maxlen: 24
202.28.172.0/24 maxlen: 24
202.28.173.0/24 maxlen: 24
202.28.174.0/24 maxlen: 24
202.28.175.0/24 maxlen: 24
202.28.176.0/20 maxlen: 20
202.28.176.0/24 maxlen: 24
202.28.177.0/24 maxlen: 24
202.28.178.0/24 maxlen: 24
202.28.179.0/24 maxlen: 24
202.28.180.0/24 maxlen: 24
202.28.181.0/24 maxlen: 24
202.28.182.0/24 maxlen: 24
202.28.183.0/24 maxlen: 24
202.28.184.0/24 maxlen: 24
202.28.185.0/24 maxlen: 24
202.28.186.0/24 maxlen: 24
202.28.187.0/24 maxlen: 24
202.28.188.0/24 maxlen: 24
202.28.189.0/24 maxlen: 24
202.28.190.0/24 maxlen: 24
202.28.191.0/24 maxlen: 24
2001:3c8:1202::/48 maxlen: 48
2001:3c8:1606::/48 maxlen: 48
2001:3c8:2707::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:48 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490bf-9fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:9c:29:7d:11:d1:ba:1d:11:01:21:e6:0a:
cd:60:3f:56:c3:ad:8f:90:21:ea:eb:11:9c:40:1a:
a0:66:92:e9:2c:de:d6:48:58:6a:8b:b7:d3:07:3d:
36:0d:da:85:d5:e8:cb:b6:8f:af:a7:80:d4:25:dd:
fe:98:41:d6:d8:62:f9:72:68:cd:22:8b:85:7c:13:
3a:4b:2e:cf:d2:28:d5:ad:dc:89:cd:63:27:13:fa:
84:23:8c:4c:d5:f2:8f:d4:60:75:4e:f0:fc:9e:b8:
9e:e9:cd:cf:7d:9b:e1:47:95:9f:a3:6e:43:2c:a7:
e0:d0:4c:ef:15:13:24:e0:2e:05:eb:c8:1b:f6:bf:
db:01:ff:c1:f9:42:b6:c4:3f:cd:01:30:b8:c1:6e:
92:e6:81:ca:53:6c:75:38:ed:54:53:44:d0:38:1e:
1c:a0:1c:7e:3a:f7:65:ce:9b:ff:16:31:fd:3b:42:
c4:ff:91:8c:44:ba:36:2b:ba:60:ab:2c:11:67:b6:
c0:68:92:72:34:c3:94:8c:fc:77:39:0d:bd:26:b3:
fc:b4:84:f0:69:ad:8e:9f:85:a4:cd:cc:5f:9b:86:
06:6c:17:5f:d4:ed:74:35:ee:43:28:63:af:83:06:
c1:f8:ca:ce:d5:ea:cb:45:a7:c0:d6:fe:35:39:bf:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C9:5A:A4:35:6D:ED:D4:33:9D:C9:58:01:46:6C:FB:79:2A:09:62
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C56AA228721511EF9D7B9F3DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.28.128.0/18
IPv6:
2001:3c8:1202::/48
2001:3c8:1606::/48
2001:3c8:2707::/48
Signature Algorithm: sha256WithRSAEncryption
76:1f:0c:ef:1c:fe:3c:35:68:5a:f9:c6:7e:73:ef:9d:ac:bb:
f8:70:e1:9e:c9:89:66:af:42:0b:e7:78:98:22:0a:eb:2e:6d:
68:12:01:28:d6:95:16:5e:dd:2b:a3:4f:48:cd:b1:57:bd:5d:
6d:d0:69:de:62:24:12:10:d1:ab:32:96:a4:2f:28:67:ac:b7:
5f:c9:3b:b8:26:20:ca:89:c0:94:3a:56:83:aa:c1:1c:97:6a:
c4:d7:71:8c:ca:28:c9:50:2c:16:d0:a5:2d:70:34:eb:76:17:
1c:bf:0f:74:ec:8b:33:28:de:d6:1a:e1:39:b1:a9:08:e9:97:
9b:cf:a2:1e:07:6d:38:f4:17:d2:87:3d:4f:4a:5b:e1:30:6b:
27:55:92:0d:29:2d:37:49:df:fb:3a:29:ee:6a:7d:49:6d:c1:
1a:92:f7:55:b3:71:0c:0a:2d:b3:bd:d9:31:b5:2c:37:42:37:
54:73:97:59:18:7c:21:be:8a:af:d7:d2:61:45:33:41:7d:12:
2d:b5:02:a5:f4:43:a2:f4:95:c7:00:ce:24:1f:1f:f0:61:cd:
f3:d5:80:3d:c9:6b:c5:f7:08:93:df:17:9c:1e:07:48:d9:0a:
5a:47:6a:b8:6a:ed:9e:61:83:f6:00:2d:81:ae:bd:79:b1:a5:
20:1b:40:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:50:56 2026 by rpki-client