Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/C61B734AB0AA11E580DBF725C4F9AE02.roa
File: C61B734AB0AA11E580DBF725C4F9AE02.roa (raw, json)
Hash identifier: Mk6AnOe1LH4KRQ8zvqfyVoD2NqWKhNW56no4PmB5nUA=
Subject key identifier: D0:9C:68:66:4B:80:8A:63:CB:B4:3E:3B:35:C1:E8:D6:06:1F:76:D5
Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial: 262F
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/C61B734AB0AA11E580DBF725C4F9AE02.roa
Signing time: Mon 28 Sep 2026 16:23:55 +0000
ROA not before: Mon 28 Sep 2026 16:23:55 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 17993
IP address blocks: 110.5.112.0/22 maxlen: 22
110.5.112.0/24 maxlen: 24
110.5.113.0/24 maxlen: 24
110.5.114.0/24 maxlen: 24
110.5.115.0/24 maxlen: 24
202.4.32.0/19 maxlen: 19
202.4.32.0/21 maxlen: 21
202.4.32.0/24 maxlen: 24
202.4.33.0/24 maxlen: 24
202.4.34.0/24 maxlen: 24
202.4.35.0/24 maxlen: 24
202.4.36.0/24 maxlen: 24
202.4.37.0/24 maxlen: 24
202.4.38.0/24 maxlen: 24
202.4.39.0/24 maxlen: 24
202.4.40.0/21 maxlen: 21
202.4.40.0/24 maxlen: 24
202.4.41.0/24 maxlen: 24
202.4.42.0/24 maxlen: 24
202.4.43.0/24 maxlen: 24
202.4.44.0/24 maxlen: 24
202.4.45.0/24 maxlen: 24
202.4.46.0/24 maxlen: 24
202.4.47.0/24 maxlen: 24
202.4.48.0/20 maxlen: 20
202.4.48.0/24 maxlen: 24
202.4.49.0/24 maxlen: 24
202.4.50.0/24 maxlen: 24
202.4.51.0/24 maxlen: 24
202.4.52.0/24 maxlen: 24
202.4.53.0/24 maxlen: 24
202.4.54.0/24 maxlen: 24
202.4.55.0/24 maxlen: 24
202.4.56.0/24 maxlen: 24
202.4.57.0/24 maxlen: 24
202.4.58.0/24 maxlen: 24
202.4.59.0/24 maxlen: 24
202.4.60.0/24 maxlen: 24
202.4.61.0/24 maxlen: 24
202.4.62.0/24 maxlen: 24
202.4.63.0/24 maxlen: 24
203.99.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 15:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9775 (0x262f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Validity
Not Before: Sep 28 16:23:55 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6aba949a-9771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:94:e7:d9:0e:8d:71:ef:6d:f8:f6:0b:15:f7:
92:39:7a:e0:90:55:6b:8a:44:2f:55:fc:8f:58:12:
35:84:0a:58:2c:c0:36:4c:43:83:1e:1b:6f:8d:e0:
81:60:33:14:dc:37:ac:d7:81:9e:a4:16:f7:d9:2b:
2a:40:ec:3d:1f:73:6c:0c:7d:03:e2:fa:a7:f4:75:
de:74:9d:d7:5a:bd:6d:9d:87:db:0a:2e:fb:fc:58:
b1:cf:09:e5:14:ac:01:11:77:20:76:e2:ac:c0:4e:
d2:08:24:f8:ae:2f:ff:8d:f3:b5:02:f5:06:fc:a5:
4b:d8:6d:94:61:ad:81:10:06:62:fe:63:68:b1:86:
ba:9e:38:00:13:9e:f4:5f:40:23:2f:10:44:a0:2f:
6c:eb:5d:97:fd:25:06:63:70:f5:4a:a1:bb:93:bb:
13:bf:df:3e:97:e4:4f:64:17:47:48:6f:b4:c9:52:
29:df:0e:ad:3b:9d:db:f9:a8:6c:51:86:29:a0:cf:
c6:18:a9:d5:89:0c:0c:19:04:e3:2a:a2:94:9d:e4:
d6:ad:16:dc:4f:b6:1a:a6:c9:e4:ec:a4:2a:6e:48:
90:ce:1c:0c:fc:be:1e:48:db:45:f6:dc:1c:49:ac:
fd:48:87:b2:2d:bd:44:b2:04:ac:34:84:bd:63:ab:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9C:68:66:4B:80:8A:63:CB:B4:3E:3B:35:C1:E8:D6:06:1F:76:D5
X509v3 Authority Key Identifier:
keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/C61B734AB0AA11E580DBF725C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.5.112.0/22
202.4.32.0/19
203.99.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:7a:4b:c5:2d:f0:b9:18:82:7c:05:19:6e:e6:8d:86:81:4f:
1c:94:98:96:d6:bc:d4:95:57:76:dc:34:10:40:27:4c:59:f1:
d4:89:3b:fa:ce:78:74:21:c0:01:4c:20:88:1d:52:b1:1c:30:
f5:8c:43:f1:25:2a:cf:d5:17:66:b0:22:45:df:88:d6:4b:a8:
83:7f:93:32:2e:32:fa:9f:60:6e:d9:8f:ea:ae:68:37:bc:48:
23:46:4c:1d:9a:1e:7d:da:93:f1:bf:55:e9:7f:a0:ca:ff:7c:
ab:bc:81:c9:68:ba:b4:c2:49:16:a7:9e:be:56:38:29:c4:01:
15:dc:3a:0d:c8:eb:a2:75:e4:4c:d5:57:3a:89:34:6c:bc:69:
d5:54:b3:32:4a:bc:8c:f5:8f:9f:be:d0:14:2a:ef:27:ea:05:
02:48:49:8d:f6:4b:e4:3e:47:8a:f5:9c:a8:4b:75:38:9c:af:
ac:f5:22:5f:ab:1a:25:f3:89:9b:21:49:a0:32:69:0e:da:43:
67:61:00:56:92:8b:3f:06:f5:3a:73:61:54:ac:70:74:38:fd:
50:2d:82:81:27:80:d7:3f:5c:4e:2f:a3:9d:5b:90:b6:78:3a:
cb:b7:ac:3b:a5:a8:a7:c4:bf:d2:19:c3:d6:56:fd:d9:6c:c3:
04:ec:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:02 2026 by rpki-client