Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
File: 570B25FA305111F0BED81784C4F9AE02.roa (raw, json)
Hash identifier: eZhzZi3CwVEnS9NlTLeYR4evm5a/vAmuDsYCinkgRxE=
Subject key identifier: B9:C9:63:2F:07:27:DF:8C:03:90:04:C0:CE:EA:A8:B9:40:99:83:9C
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 09EE
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:44:51 +0000
ROA not before: Mon 02 Mar 2026 05:44:51 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 41095
IP address blocks: 45.248.200.0/24 maxlen: 24
45.248.201.0/24 maxlen: 24
45.248.202.0/23 maxlen: 24
103.6.128.0/22 maxlen: 23
103.6.130.0/23 maxlen: 24
103.23.168.0/22 maxlen: 22
103.23.168.0/24 maxlen: 24
103.23.169.0/24 maxlen: 24
103.23.170.0/24 maxlen: 24
103.23.171.0/24 maxlen: 24
103.217.160.0/22 maxlen: 22
103.217.160.0/24 maxlen: 24
103.217.161.0/24 maxlen: 24
103.217.162.0/24 maxlen: 24
103.217.163.0/24 maxlen: 24
103.242.72.0/22 maxlen: 24
220.158.132.0/23 maxlen: 23
220.158.132.0/24 maxlen: 24
220.158.133.0/24 maxlen: 24
2401:47c0::/32 maxlen: 32
2401:47c0:1000::/36 maxlen: 36
2401:47c0:1000::/40 maxlen: 40
2401:47c0:1100::/40 maxlen: 40
2401:47c0:1200::/40 maxlen: 40
2401:47c0:1300::/40 maxlen: 40
2401:47c0:1400::/40 maxlen: 40
2401:47c0:1500::/40 maxlen: 40
2401:47c0:1600::/40 maxlen: 40
2401:47c0:1700::/40 maxlen: 40
2401:47c0:1800::/40 maxlen: 40
2401:47c0:1a00::/40 maxlen: 40
2401:47c0:1b00::/40 maxlen: 40
2401:47c0:1c00::/40 maxlen: 40
2401:47c0:1d00::/40 maxlen: 40
2401:47c0:1e00::/40 maxlen: 40
2401:47c0:1f00::/40 maxlen: 40
2401:47c0:f000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 19:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2542 (0x9ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Mar 2 05:44:51 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a523d3-c29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:78:bf:aa:a2:61:34:10:53:d3:ef:a9:7a:
b7:ea:87:ad:40:3b:f4:fd:fa:80:c0:74:a5:69:d4:
e6:6c:ee:97:1f:5c:fe:f1:c5:b2:c4:aa:89:33:0c:
60:fa:ad:9c:49:57:ef:fa:fd:be:de:72:b6:96:3a:
42:c2:fd:d7:88:5a:4a:16:2b:f9:9c:57:93:a7:89:
d9:c8:91:4b:88:68:90:ad:5c:33:7f:79:3e:d8:00:
db:ea:89:18:73:57:ac:80:87:e7:ea:94:31:8e:26:
6d:21:cb:8e:a7:96:c1:d8:37:dc:03:01:49:19:69:
20:c9:26:35:35:59:a0:d0:ba:3e:52:78:04:8c:0f:
aa:56:60:6b:85:77:e7:e7:75:92:36:7b:97:12:67:
bb:3e:7c:d9:42:62:88:36:b6:98:b0:29:10:6a:9a:
cc:09:c8:84:61:1d:88:99:86:7c:11:55:26:ce:f1:
01:d5:c6:d3:e8:4c:b8:7d:9e:66:8b:12:79:c7:70:
1f:99:f8:a6:92:1b:05:d2:f3:ab:56:dd:5a:6b:02:
49:d4:62:1f:39:d4:28:d0:64:d2:d2:30:ee:4f:bc:
bb:ad:76:c5:20:4b:62:42:f1:f1:65:6f:a5:b9:ff:
43:df:1a:98:89:13:f6:f4:55:61:27:9b:76:a2:f2:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C9:63:2F:07:27:DF:8C:03:90:04:C0:CE:EA:A8:B9:40:99:83:9C
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.248.200.0/22
103.6.128.0/22
103.23.168.0/22
103.217.160.0/22
103.242.72.0/22
220.158.132.0/23
IPv6:
2401:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
61:35:2b:f3:b8:35:5a:27:e8:93:18:d2:5b:c5:06:ad:9a:5a:
17:8e:21:98:32:8f:1f:20:a6:7c:69:e0:1c:bc:d3:68:41:71:
72:6d:7f:3b:81:a8:46:28:b2:85:03:89:79:29:95:f9:78:b6:
15:d3:7d:33:2b:64:6c:d0:e0:a2:4b:87:81:84:b4:3b:f9:cc:
62:63:ff:71:67:56:d3:1c:88:06:7b:f4:ca:1c:7c:04:ac:41:
b0:67:a8:4c:26:42:15:38:17:71:93:85:06:2f:97:98:71:04:
13:43:2f:5f:5d:91:7e:60:de:ea:47:6b:a9:a2:dc:e8:0f:71:
d9:8a:a5:31:b6:c9:ef:24:fb:c4:ad:ea:c2:7f:c3:6c:98:6f:
fa:2e:77:a3:80:58:08:01:bf:92:aa:b9:df:a7:3b:cb:1e:fa:
32:a8:a4:2d:fc:be:41:33:9c:7b:07:f6:80:37:69:4f:6a:5b:
ad:7b:42:ea:e3:d8:31:c9:6d:2d:92:6e:43:af:a0:ba:dc:34:
b8:56:5a:cb:54:b5:88:6c:11:7c:7b:2e:18:1d:51:f0:65:ac:
2e:01:c9:d1:11:b7:ed:49:5f:66:6b:d1:54:28:ea:0f:bb:5f:
ca:89:88:35:92:8f:d9:16:fe:94:fa:28:bb:d8:eb:5f:f5:28:
a4:e5:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 20:57:28 2026 by rpki-client