Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/40567CA8F25A11F09752333B5F6F56BC.roa
File: 40567CA8F25A11F09752333B5F6F56BC.roa (raw, json)
Hash identifier: U0GNCfpy1dgEgbpczlcezpy3ewPFlHp4o8M0zeM91oI=
Subject key identifier: 5A:89:A9:F2:2C:C1:30:1C:59:7C:64:0E:1C:6D:20:30:04:7C:D1:15
Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Certificate serial: 1484
Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/40567CA8F25A11F09752333B5F6F56BC.roa
Signing time: Tue 29 Sep 2026 23:34:15 +0000
ROA not before: Tue 29 Sep 2026 23:34:15 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 4764
IP address blocks: 61.245.128.0/19 maxlen: 24
103.94.48.0/22 maxlen: 24
103.110.176.0/22 maxlen: 22
119.18.0.0/19 maxlen: 24
119.18.32.0/21 maxlen: 24
119.18.40.0/21 maxlen: 21
120.88.112.0/20 maxlen: 24
121.200.0.0/19 maxlen: 24
123.253.148.0/22 maxlen: 23
123.253.148.0/24 maxlen: 24
123.253.149.0/24 maxlen: 24
123.253.150.0/24 maxlen: 24
180.150.0.0/17 maxlen: 24
180.181.192.0/18 maxlen: 22
202.9.16.0/20 maxlen: 20
202.90.240.0/21 maxlen: 24
202.142.128.0/20 maxlen: 24
203.129.16.0/20 maxlen: 24
2403:5800::/26 maxlen: 26
2403:5800::/27 maxlen: 27
2403:5800::/32 maxlen: 36
2403:5800:1::/48 maxlen: 48
2403:5800:3::/48 maxlen: 48
2403:5800:5::/48 maxlen: 48
2405:db00::/32 maxlen: 32
2407:600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl
rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 16:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5252 (0x1484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8, serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Validity
Not Before: Sep 29 23:34:15 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6abc4af7-2244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:9c:01:b9:08:15:fc:93:4c:d2:72:77:01:
be:7e:2f:e3:92:32:ff:61:f6:2f:ec:4d:20:9f:00:
37:cf:93:16:e8:5d:a3:c0:84:51:2b:55:b4:c0:9a:
78:0b:5d:6a:89:31:fb:45:e7:19:1f:31:6a:be:2f:
7a:dd:c0:b1:83:b8:e5:f7:71:20:11:19:a0:10:7d:
e8:b1:d7:96:43:65:ac:98:19:ee:35:8a:49:f4:41:
33:c0:e7:ce:b5:c7:ac:3d:be:2c:57:bd:b2:a4:0a:
77:36:16:33:77:03:89:06:a4:f1:dd:ba:3c:a4:0c:
a3:34:06:32:26:31:34:5e:79:04:43:c4:11:48:d4:
57:9c:29:ca:fb:8f:04:a9:22:37:04:76:ad:0c:44:
df:72:1b:3c:55:0c:eb:01:d9:e6:0d:8b:17:21:93:
d1:93:fe:03:c4:c1:52:88:24:51:bc:5b:cd:7e:f0:
14:b1:54:ea:2c:27:a0:66:f7:c6:07:e9:02:82:d4:
ac:76:c9:a0:94:56:23:b0:f5:9a:ad:e9:00:73:3f:
ca:c1:dc:dc:69:37:71:37:ac:4a:a5:44:5d:4d:6d:
f9:e7:06:e2:0d:0d:1b:d2:88:17:44:46:9a:c0:98:
aa:a4:7e:ff:60:55:b9:54:a0:37:d7:6d:cc:a6:23:
70:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:89:A9:F2:2C:C1:30:1C:59:7C:64:0E:1C:6D:20:30:04:7C:D1:15
X509v3 Authority Key Identifier:
keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/40567CA8F25A11F09752333B5F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
61.245.128.0/19
103.94.48.0/22
103.110.176.0/22
119.18.0.0-119.18.47.255
120.88.112.0/20
121.200.0.0/19
123.253.148.0/22
180.150.0.0/17
180.181.192.0/18
202.9.16.0/20
202.90.240.0/21
202.142.128.0/20
203.129.16.0/20
IPv6:
2403:5800::/26
2405:db00::/32
2407:600::/32
Signature Algorithm: sha256WithRSAEncryption
99:19:34:e5:3c:38:e8:99:cd:b7:a4:92:bf:31:f3:0e:f0:bc:
c0:c7:ac:7a:48:56:cc:49:16:75:90:5e:a4:58:4e:11:61:45:
5a:e9:e3:5d:f1:8e:5c:fc:e6:c0:94:96:4a:95:3e:96:d9:3f:
29:60:b6:8b:00:7f:5f:0e:d3:1f:32:fc:fc:3b:4e:e9:5a:56:
1a:fd:e8:14:d8:2f:2b:10:6a:ef:03:0c:19:e4:67:02:bf:0c:
d7:4e:f4:98:8f:db:9b:09:bd:74:d5:81:15:3e:7f:92:40:87:
06:ca:03:14:47:bc:22:d7:7e:e9:1c:47:1a:55:5a:7a:83:87:
2d:30:34:dd:41:fe:40:63:2f:10:31:e6:7e:2a:f5:4a:2c:e3:
9a:48:9a:95:dc:b0:59:44:50:28:29:13:84:05:e0:10:10:bc:
80:d4:9c:6f:83:25:63:a9:e5:d6:38:25:6a:3c:43:0e:81:a4:
22:69:1e:fd:ec:1f:c2:14:d8:5f:b7:74:de:bb:c8:91:95:f7:
65:e7:5d:2c:11:5a:76:e6:0d:06:c8:de:b7:15:87:a1:b9:61:
df:10:ae:3e:8a:6a:fd:2b:f4:95:46:a7:86:c5:a7:53:25:bf:
fd:fa:4b:ec:d6:8f:d2:e3:f8:45:54:1a:8c:3c:73:63:c9:41:
29:e0:c5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:49:14 2026 by rpki-client