Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FFCFFCFC756411F1BE4724178AA30FBC.roa
File: FFCFFCFC756411F1BE4724178AA30FBC.roa (raw, json)
Hash identifier: DidmzoOn//sZhQXJMVX6Qgpo/xIbPC+vcPbrAfS/9j4=
Subject key identifier: 9E:53:E5:A3:DC:D8:D3:C9:25:41:CB:6A:8B:6F:BC:25:72:59:EF:1D
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 0462
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FFCFFCFC756411F1BE4724178AA30FBC.roa
Signing time: Mon 10 Aug 2026 06:28:22 +0000
ROA not before: Mon 10 Aug 2026 06:28:21 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 209043
IP address blocks: 43.225.80.0/24 maxlen: 24
43.225.81.0/24 maxlen: 24
43.225.82.0/24 maxlen: 24
43.225.83.0/24 maxlen: 24
45.113.96.0/24 maxlen: 24
45.113.97.0/24 maxlen: 24
45.113.98.0/24 maxlen: 24
45.113.99.0/24 maxlen: 24
45.120.48.0/24 maxlen: 24
45.120.49.0/24 maxlen: 24
45.120.50.0/24 maxlen: 24
45.120.51.0/24 maxlen: 24
103.44.212.0/24 maxlen: 24
103.44.213.0/24 maxlen: 24
103.44.214.0/24 maxlen: 24
103.44.215.0/24 maxlen: 24
103.50.28.0/24 maxlen: 24
103.50.29.0/24 maxlen: 24
103.50.30.0/24 maxlen: 24
103.50.31.0/24 maxlen: 24
103.52.248.0/22 maxlen: 22
103.108.0.0/24 maxlen: 24
103.108.1.0/24 maxlen: 24
103.109.74.0/24 maxlen: 24
103.109.75.0/24 maxlen: 24
103.110.144.0/22 maxlen: 22
103.114.56.0/24 maxlen: 24
103.114.57.0/24 maxlen: 24
103.119.244.0/24 maxlen: 24
103.119.247.0/24 maxlen: 24
103.221.233.0/24 maxlen: 24
139.5.88.0/22 maxlen: 22
160.20.8.0/24 maxlen: 24
160.20.9.0/24 maxlen: 24
160.20.10.0/24 maxlen: 24
160.20.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 01:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1122 (0x462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Aug 10 06:28:21 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a796f85-48fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:42:49:7f:3e:09:11:dd:36:7d:b2:39:e6:
94:2e:a4:21:db:b7:bc:a2:08:e2:ed:93:1a:55:33:
f6:0a:54:ab:68:5e:65:d1:bf:ff:ff:c6:39:e8:1b:
4d:53:5c:54:62:80:0e:6b:f9:25:da:9d:f0:91:02:
47:36:b3:be:c6:eb:bc:78:17:47:31:43:6d:55:e0:
92:75:64:13:e2:3a:da:7c:23:ae:10:09:0d:cd:9f:
66:5c:87:8d:91:a2:3d:38:64:50:69:cb:6a:0c:dc:
a0:0e:70:33:54:a5:ae:05:cd:16:71:e6:4e:8a:82:
e0:1f:8f:a8:a0:f1:1b:8c:17:07:da:09:36:90:14:
19:ff:aa:7d:d5:85:d5:d9:a8:bf:f1:1b:82:55:04:
bc:7b:40:6e:5c:45:b7:a7:06:38:4a:a3:59:e2:ca:
5d:96:98:3e:72:50:51:94:e7:a8:9d:88:d9:39:b2:
db:5d:6a:80:e1:62:0b:bb:04:b4:ff:b8:d1:79:28:
db:b3:15:5c:45:cd:1a:9a:92:8c:0d:0b:bf:de:f7:
d9:16:d3:db:98:f0:25:99:a5:f8:56:70:e4:bd:d9:
2e:b0:98:cf:ad:fa:cf:30:18:89:2d:54:73:e6:d7:
8c:f9:de:9e:7e:18:1b:1e:70:f1:c3:09:a4:de:25:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:53:E5:A3:DC:D8:D3:C9:25:41:CB:6A:8B:6F:BC:25:72:59:EF:1D
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FFCFFCFC756411F1BE4724178AA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.80.0/22
45.113.96.0/22
45.120.48.0/22
103.44.212.0/22
103.50.28.0/22
103.52.248.0/22
103.108.0.0/23
103.109.74.0/23
103.110.144.0/22
103.114.56.0/23
103.119.244.0/24
103.119.247.0/24
103.221.233.0/24
139.5.88.0/22
160.20.8.0/22
Signature Algorithm: sha256WithRSAEncryption
48:00:42:9b:dd:56:16:66:c7:6f:da:c0:c1:5d:84:9b:cd:82:
2a:70:21:32:14:bc:98:de:88:21:b1:d7:9a:59:db:4b:36:ca:
27:a7:35:08:1b:38:2f:fc:30:b0:05:37:52:02:58:8a:20:ae:
b9:09:42:09:2f:6a:42:33:47:d5:ca:09:20:16:da:c8:78:ac:
d8:01:81:24:e5:df:8f:7f:a2:ea:99:4a:bb:b4:af:ea:6e:11:
bd:04:47:fb:d2:d4:f1:4e:be:43:92:42:35:3a:18:76:a1:16:
2c:68:f0:02:c0:3c:fe:1f:f9:13:b4:f8:ce:c3:b9:04:86:9d:
48:d1:57:01:c4:95:57:b0:94:14:39:85:e0:1d:40:f1:4d:8e:
fd:6f:63:db:b0:b4:06:cd:a7:67:c1:9f:4a:f9:e6:f2:a2:1f:
e8:19:9d:b8:d4:b0:6d:dc:d2:9a:50:b5:03:4a:ae:69:42:0d:
d9:d2:b5:1e:19:66:8e:4c:d6:5a:dd:ff:c6:cc:96:f9:7e:fd:
70:3d:e8:4b:97:ba:4f:22:81:bd:b8:30:6d:5d:56:4a:b5:ce:
ad:b0:94:59:a8:f4:2d:c1:71:ca:69:bc:0e:11:41:de:2e:93:
86:01:d9:d1:25:bb:43:29:26:28:91:4c:f0:e9:8c:63:76:0c:
32:b0:6d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:31:07 2026 by rpki-client