Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FFCFFCFC756411F1BE4724178AA30FBC.roa
File: FFCFFCFC756411F1BE4724178AA30FBC.roa (raw, json)
Hash identifier: UKyM2NDw4Dv9pt31Uytgy4jJBdfqpHkrySg9AeufDvE=
Subject key identifier: 23:2A:23:7A:89:57:5B:71:4D:B1:EF:AF:C6:EA:1B:B8:02:C3:B6:34
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 044C
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FFCFFCFC756411F1BE4724178AA30FBC.roa
Signing time: Wed 08 Jul 2026 18:16:47 +0000
ROA not before: Wed 08 Jul 2026 18:16:47 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 209043
IP address blocks: 43.225.80.0/24 maxlen: 24
43.225.81.0/24 maxlen: 24
43.225.82.0/24 maxlen: 24
43.225.83.0/24 maxlen: 24
45.113.96.0/24 maxlen: 24
45.113.97.0/24 maxlen: 24
45.113.98.0/24 maxlen: 24
45.113.99.0/24 maxlen: 24
45.120.48.0/24 maxlen: 24
45.120.49.0/24 maxlen: 24
45.120.50.0/24 maxlen: 24
45.120.51.0/24 maxlen: 24
103.44.212.0/24 maxlen: 24
103.44.213.0/24 maxlen: 24
103.44.214.0/24 maxlen: 24
103.44.215.0/24 maxlen: 24
103.50.28.0/24 maxlen: 24
103.50.29.0/24 maxlen: 24
103.50.30.0/24 maxlen: 24
103.50.31.0/24 maxlen: 24
103.52.248.0/22 maxlen: 22
103.108.0.0/24 maxlen: 24
103.108.1.0/24 maxlen: 24
103.109.74.0/24 maxlen: 24
103.109.75.0/24 maxlen: 24
103.110.144.0/22 maxlen: 22
103.114.56.0/24 maxlen: 24
103.114.57.0/24 maxlen: 24
103.119.244.0/24 maxlen: 24
103.119.247.0/24 maxlen: 24
103.221.233.0/24 maxlen: 24
139.5.88.0/22 maxlen: 22
160.20.8.0/24 maxlen: 24
160.20.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 02:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100 (0x44c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Jul 8 18:16:47 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a4e940f-3982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:5f:ac:91:71:64:ee:a0:9c:63:9d:f5:74:
bf:0c:08:26:2b:d5:cf:f5:9f:ce:f6:5e:35:e6:23:
ef:0d:be:6f:37:cc:02:6d:87:8a:f4:c8:26:5e:dd:
08:e0:34:1c:4b:7f:bf:5b:b9:d7:54:09:3e:8b:18:
71:7c:15:e2:d7:a4:17:5e:5b:f4:59:7c:96:4b:7a:
97:2a:39:fb:b3:81:61:c7:d8:00:df:5e:45:cc:d2:
6b:df:e9:82:22:a1:b7:cc:cd:9f:88:71:72:c0:51:
da:3b:6a:a7:1e:cd:55:16:cd:7e:e4:d0:5d:63:e5:
df:62:57:0d:87:b7:f9:53:e5:b8:0a:3f:30:a3:21:
e2:5b:39:32:00:d5:67:4b:34:66:dd:f9:4a:f5:e4:
b1:83:3b:71:ea:21:b6:4b:1b:de:8a:cd:87:1e:e2:
d7:c6:9d:08:d0:92:12:e1:8f:e1:a4:cc:cd:80:b6:
86:82:00:24:b2:ff:b6:2c:03:39:9f:8f:c5:78:dd:
e9:2f:8d:b2:9a:67:97:02:b9:b3:18:85:60:6f:73:
27:4a:b8:62:cf:3a:72:2b:84:79:38:13:03:26:81:
87:30:5c:9c:04:cf:9c:cd:5d:55:37:2f:9e:5f:c6:
a5:29:de:fb:04:81:a8:a3:9e:08:09:1e:2c:22:26:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2A:23:7A:89:57:5B:71:4D:B1:EF:AF:C6:EA:1B:B8:02:C3:B6:34
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FFCFFCFC756411F1BE4724178AA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.80.0/22
45.113.96.0/22
45.120.48.0/22
103.44.212.0/22
103.50.28.0/22
103.52.248.0/22
103.108.0.0/23
103.109.74.0/23
103.110.144.0/22
103.114.56.0/23
103.119.244.0/24
103.119.247.0/24
103.221.233.0/24
139.5.88.0/22
160.20.8.0/24
160.20.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:3b:d9:33:79:b9:47:c1:5f:73:b7:4d:c4:e8:de:76:76:b9:
af:e8:1f:17:87:17:84:9b:7b:66:e2:c4:ba:69:08:6b:5b:3c:
f3:03:42:83:ec:87:be:b1:80:23:98:ef:42:d0:b0:19:70:1f:
4a:c0:4c:ad:e2:7f:72:a2:64:9a:11:51:6a:c1:92:af:15:0c:
23:08:d8:f9:80:9a:29:e6:a5:f7:e3:ad:ab:8f:b7:b3:22:cf:
bf:f4:4c:ee:80:d6:21:13:a7:09:7f:30:79:34:bd:6c:04:ca:
52:6e:d7:a4:e3:29:f6:0b:e0:2a:da:f8:da:95:94:60:04:d5:
ab:d8:b1:62:13:3e:d3:2c:90:8d:b9:42:2e:90:33:c8:2a:3d:
8b:cc:f1:dc:ee:70:11:c0:25:4f:71:8e:0d:66:31:63:87:46:
f8:49:37:9d:36:f5:81:af:83:b0:b7:98:95:65:89:45:ea:67:
25:9b:93:11:04:59:95:4f:5e:bd:75:b7:fe:36:bf:6b:d7:3f:
aa:cf:d3:0c:92:7d:c9:37:20:b1:30:19:c9:a1:39:b6:b6:bb:
46:c5:79:ab:54:83:c6:43:ce:94:33:af:3b:17:e7:8a:36:4f:
b6:16:8c:2e:00:3d:ac:e9:61:fe:ab:91:3a:05:8a:be:1b:71:
3b:a5:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:30:41 2026 by rpki-client