Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/7F12211CB57611EF8568F73EC4F9AE02.roa
File: 7F12211CB57611EF8568F73EC4F9AE02.roa (raw, json)
Hash identifier: D+Ds0qshOL4yiqyd4MVZ711inPSV8F7CASWpGYE32x0=
Subject key identifier: 32:6F:FB:F5:5B:EA:8B:DB:58:20:9F:29:C3:F2:22:E7:94:1C:D3:D5
Certificate issuer: /CN=A91AEB42/serialNumber=56237928548B082F5B13C16EDC3E6A7C2F80FCF1
Certificate serial: 030F
Authority key identifier: 56:23:79:28:54:8B:08:2F:5B:13:C1:6E:DC:3E:6A:7C:2F:80:FC:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/7F12211CB57611EF8568F73EC4F9AE02.roa
Signing time: Mon 05 Oct 2026 01:49:56 +0000
ROA not before: Mon 05 Oct 2026 01:49:56 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 132839
IP address blocks: 43.229.212.0/22 maxlen: 24
43.230.168.0/22 maxlen: 24
43.240.48.0/22 maxlen: 24
43.241.44.0/22 maxlen: 24
43.249.24.0/22 maxlen: 24
43.251.104.0/22 maxlen: 24
45.64.108.0/22 maxlen: 24
45.114.168.0/22 maxlen: 24
45.115.124.0/22 maxlen: 24
45.120.80.0/22 maxlen: 24
45.127.36.0/22 maxlen: 24
45.127.124.0/22 maxlen: 24
45.250.196.0/22 maxlen: 24
103.36.20.0/22 maxlen: 24
103.37.40.0/22 maxlen: 24
103.40.112.0/22 maxlen: 24
103.42.176.0/22 maxlen: 24
103.49.8.0/22 maxlen: 24
103.49.248.0/22 maxlen: 24
103.54.124.0/22 maxlen: 24
103.55.128.0/22 maxlen: 24
103.60.148.0/22 maxlen: 24
103.75.12.0/22 maxlen: 24
103.75.44.0/22 maxlen: 24
103.80.16.0/22 maxlen: 24
103.85.188.0/22 maxlen: 24
103.151.250.0/23 maxlen: 24
103.195.192.0/22 maxlen: 24
103.196.60.0/22 maxlen: 24
103.200.124.0/22 maxlen: 24
103.204.76.0/22 maxlen: 24
103.214.164.0/22 maxlen: 24
103.215.212.0/22 maxlen: 24
103.219.104.0/22 maxlen: 24
103.233.248.0/22 maxlen: 24
116.193.168.0/22 maxlen: 24
117.120.60.0/22 maxlen: 24
120.89.68.0/22 maxlen: 24
121.54.160.0/22 maxlen: 24
144.48.124.0/22 maxlen: 24
157.119.92.0/22 maxlen: 24
182.161.68.0/22 maxlen: 24
202.165.120.0/22 maxlen: 24
2401:f940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl
rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEB42, serialNumber=56237928548B082F5B13C16EDC3E6A7C2F80FCF1
Validity
Not Before: Oct 5 01:49:56 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac30243-c281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5f:33:ac:40:ff:9b:0a:18:1b:f5:74:97:0b:
fc:8a:c5:c8:af:f7:76:9f:fb:6e:58:e6:aa:67:33:
76:37:3c:a2:a8:19:62:66:b0:4a:70:85:c6:f2:a7:
3e:29:8d:60:db:de:71:6b:9b:73:74:a6:ac:c5:23:
8c:04:90:35:cd:e3:03:9c:14:63:86:85:32:3b:ea:
8c:db:06:c7:82:cd:7d:b8:92:47:e3:ba:62:f9:26:
ec:be:e2:5b:77:5d:77:17:68:fd:4a:16:d5:38:59:
54:d2:35:b9:0c:b9:b8:78:c4:86:e8:b4:87:30:f2:
47:c5:e0:56:d3:1d:77:13:be:41:ea:9d:a0:ae:b6:
fb:bb:ef:e5:4e:07:44:08:80:87:11:91:b4:15:03:
ef:98:b6:15:bd:a4:6c:33:f2:35:dd:b8:fd:7d:f3:
85:57:83:df:c8:7a:fa:4f:9a:aa:a1:14:0c:fe:03:
bd:a0:b7:30:b7:d6:20:ce:c9:c8:93:15:35:11:a1:
b7:b4:f2:d6:f4:db:57:10:d3:87:a8:80:27:ff:1f:
69:19:24:c7:ed:e1:64:ee:0a:14:c7:3d:35:50:26:
23:cc:79:5e:ab:4a:30:d9:f4:55:6b:8e:a9:ac:0b:
85:6d:35:04:76:e0:39:ac:be:4f:cf:a2:bf:1e:4d:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6F:FB:F5:5B:EA:8B:DB:58:20:9F:29:C3:F2:22:E7:94:1C:D3:D5
X509v3 Authority Key Identifier:
keyid:56:23:79:28:54:8B:08:2F:5B:13:C1:6E:DC:3E:6A:7C:2F:80:FC:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/7F12211CB57611EF8568F73EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.229.212.0/22
43.230.168.0/22
43.240.48.0/22
43.241.44.0/22
43.249.24.0/22
43.251.104.0/22
45.64.108.0/22
45.114.168.0/22
45.115.124.0/22
45.120.80.0/22
45.127.36.0/22
45.127.124.0/22
45.250.196.0/22
103.36.20.0/22
103.37.40.0/22
103.40.112.0/22
103.42.176.0/22
103.49.8.0/22
103.49.248.0/22
103.54.124.0/22
103.55.128.0/22
103.60.148.0/22
103.75.12.0/22
103.75.44.0/22
103.80.16.0/22
103.85.188.0/22
103.151.250.0/23
103.195.192.0/22
103.196.60.0/22
103.200.124.0/22
103.204.76.0/22
103.214.164.0/22
103.215.212.0/22
103.219.104.0/22
103.233.248.0/22
116.193.168.0/22
117.120.60.0/22
120.89.68.0/22
121.54.160.0/22
144.48.124.0/22
157.119.92.0/22
182.161.68.0/22
202.165.120.0/22
IPv6:
2401:f940::/32
Signature Algorithm: sha256WithRSAEncryption
95:69:6b:86:70:f3:d0:c6:dc:94:ee:3e:52:b6:8d:c1:4e:17:
02:35:95:9a:20:b5:8c:e9:09:3e:5c:5c:f9:ef:ac:16:8d:c3:
0e:aa:0a:89:14:98:ab:63:bc:88:d6:f2:64:29:7d:b6:87:c7:
d7:7b:85:d2:6c:0d:2a:49:35:1e:9c:2c:0a:da:0d:f1:9c:a6:
ec:71:a9:a1:b6:ee:f4:f4:3d:ee:1a:3f:c9:be:13:02:ce:78:
61:41:0a:cb:bb:3f:5d:cb:75:89:5e:98:13:c6:0a:3d:d3:bb:
b8:aa:6c:0c:68:91:b4:f7:55:c7:8a:6d:9a:b9:83:78:e5:bb:
46:fd:95:94:32:e2:63:97:84:db:78:fe:62:58:ce:14:ce:ad:
22:3a:46:b5:64:54:e4:18:55:78:5b:43:8a:cf:64:20:8c:d9:
99:8e:04:cf:b9:36:15:b7:b2:f7:a6:a9:ae:88:eb:a1:3a:8b:
ff:32:0c:10:99:75:82:38:e8:27:f5:00:4b:8a:93:48:fe:f3:
35:2c:7b:e8:18:a9:5e:31:2f:ed:5d:00:5d:2b:66:12:c1:38:
81:14:e0:96:df:7b:30:73:83:e6:66:b7:bc:c3:83:89:c8:c3:
28:00:3a:08:09:c0:61:99:47:14:b4:61:3e:ec:b8:22:b3:9b:
7c:c7:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:27:15 2026 by rpki-client