Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
File: 570B25FA305111F0BED81784C4F9AE02.roa (raw, json)
Hash identifier: qA6m0DYMiRUmJ031ZSlgBYMv/3TYzZQxA8v1f3tCGXk=
Subject key identifier: 29:02:ED:27:EC:13:2D:9E:F3:93:97:AC:32:A5:AD:A3:DC:80:E6:47
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 0A47
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
Signing time: Thu 06 Aug 2026 02:14:24 +0000
ROA not before: Thu 06 Aug 2026 02:14:24 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 41095
IP address blocks: 45.248.200.0/24 maxlen: 24
45.248.201.0/24 maxlen: 24
45.248.202.0/23 maxlen: 24
103.6.128.0/22 maxlen: 23
103.6.130.0/23 maxlen: 24
103.23.168.0/22 maxlen: 22
103.23.168.0/24 maxlen: 24
103.23.169.0/24 maxlen: 24
103.23.170.0/24 maxlen: 24
103.23.171.0/24 maxlen: 24
103.168.230.0/23 maxlen: 23
103.217.160.0/22 maxlen: 22
103.217.160.0/24 maxlen: 24
103.217.161.0/24 maxlen: 24
103.217.162.0/24 maxlen: 24
103.217.163.0/24 maxlen: 24
103.242.72.0/22 maxlen: 24
220.158.132.0/23 maxlen: 23
220.158.132.0/24 maxlen: 24
220.158.133.0/24 maxlen: 24
2401:47c0::/32 maxlen: 32
2401:47c0:1000::/36 maxlen: 36
2401:47c0:1000::/40 maxlen: 40
2401:47c0:1100::/40 maxlen: 40
2401:47c0:1200::/40 maxlen: 40
2401:47c0:1300::/40 maxlen: 40
2401:47c0:1400::/40 maxlen: 40
2401:47c0:1500::/40 maxlen: 40
2401:47c0:1600::/40 maxlen: 40
2401:47c0:1700::/40 maxlen: 40
2401:47c0:1800::/40 maxlen: 40
2401:47c0:1a00::/40 maxlen: 40
2401:47c0:1b00::/40 maxlen: 40
2401:47c0:1c00::/40 maxlen: 40
2401:47c0:1d00::/40 maxlen: 40
2401:47c0:1e00::/40 maxlen: 40
2401:47c0:1f00::/40 maxlen: 40
2401:47c0:f000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2631 (0xa47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Aug 6 02:14:24 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a73ee00-ee59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:8c:6c:54:60:90:b3:8f:b9:b9:04:27:62:
7b:c9:11:25:29:c3:ef:38:3b:d1:4a:c4:d7:41:1f:
47:94:b7:39:f4:5a:6c:07:7c:34:04:04:91:80:9d:
0a:8b:cc:cc:b5:6f:9a:1e:04:44:df:4c:ea:d7:08:
2b:fd:a0:a5:dd:27:b8:b6:3e:8b:20:98:f9:69:00:
7b:32:13:f8:ba:53:58:48:c4:6d:22:53:d8:36:d4:
e6:5b:91:67:76:21:c3:92:69:66:9f:53:31:7d:cf:
11:97:90:b9:44:2f:8b:ba:e7:35:b8:28:25:9b:c9:
cc:d1:a1:14:49:16:6d:b1:04:65:c3:75:81:e6:0c:
3e:02:e6:a0:ae:18:16:88:19:0a:67:dc:e3:1f:50:
90:19:ed:31:4b:4b:c3:61:7b:bc:f2:16:be:cf:ef:
b7:85:16:1a:67:3b:1b:73:8b:d2:b8:2f:8f:82:4b:
ec:f8:40:58:f7:20:4c:67:83:20:99:ce:33:0d:a4:
48:fa:07:33:2f:8f:2d:d4:9a:02:74:6c:a3:10:7a:
76:23:83:b4:f0:49:d1:6a:c3:71:de:d8:88:aa:90:
bf:f7:cf:32:3f:c1:72:86:ba:42:14:9c:bd:37:4d:
22:12:cd:3d:0d:7f:6b:a9:92:9d:3e:9b:5b:bc:e5:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:02:ED:27:EC:13:2D:9E:F3:93:97:AC:32:A5:AD:A3:DC:80:E6:47
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.248.200.0/22
103.6.128.0/22
103.23.168.0/22
103.168.230.0/23
103.217.160.0/22
103.242.72.0/22
220.158.132.0/23
IPv6:
2401:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
8d:b1:8f:db:90:1a:69:00:46:b6:be:c4:f6:e9:d1:40:1b:74:
35:8b:c4:d4:24:8e:05:6e:38:ea:2c:bc:89:3d:21:17:de:72:
31:e6:ad:25:2b:67:af:34:52:8f:29:2b:74:2a:ee:8e:7c:b4:
be:b4:ac:c3:1d:64:ef:90:5d:bf:26:5a:df:0f:ca:14:8b:09:
c7:2a:5f:c3:51:45:78:e4:ba:3e:61:72:4d:73:21:03:41:4f:
85:7c:86:d6:1c:e9:d7:d7:5e:92:9b:fb:31:8e:53:5f:78:53:
b0:58:1e:02:b8:38:10:a8:53:44:93:30:9f:e7:90:d5:82:f7:
53:a6:8c:d2:63:26:97:b9:d1:5d:a8:9e:64:67:12:31:53:d2:
ff:8b:b6:5f:21:20:f6:08:d8:46:28:fe:46:49:6f:04:56:b5:
78:8f:eb:31:30:d9:0a:eb:1a:ae:92:6b:8a:5c:3b:e2:78:68:
24:77:dd:ad:83:81:c9:8a:fe:b7:59:92:6b:91:5f:4e:a3:02:
f4:72:3f:61:13:a4:47:18:e8:09:1c:c3:51:91:d4:d5:13:63:
1a:d3:c4:89:7b:bc:68:0c:91:f0:85:27:c1:ab:6e:ba:a5:c3:
14:49:7c:d1:15:e7:09:52:63:bf:af:1c:07:41:c8:f5:15:06:
4d:66:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:26:16 2026 by rpki-client