Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/931551E8CD6B11F185B490F22166CEF9.roa
File: 931551E8CD6B11F185B490F22166CEF9.roa (raw, json)
Hash identifier: 0ZoBLSr08Ot+lPnpafGhc0XqY26wrZy8WSxYtkQ5BP4=
Subject key identifier: 0D:D1:E5:55:E3:B6:85:C3:24:83:7C:8E:07:67:59:D3:3A:54:8F:C2
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 1104
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/931551E8CD6B11F185B490F22166CEF9.roa
Signing time: Wed 21 Oct 2026 16:22:14 +0000
ROA not before: Wed 21 Oct 2026 16:22:14 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 203
IP address blocks: 202.53.197.0/24 maxlen: 24
2401:df00:1::/48 maxlen: 48
2401:df00:2::/48 maxlen: 48
2401:df00:7::/48 maxlen: 48
2401:df00:11::/48 maxlen: 48
2401:df00:12::/48 maxlen: 48
2401:df00:21::/48 maxlen: 48
2401:df00:22::/48 maxlen: 48
2401:df00:27::/48 maxlen: 48
2401:df00:31::/48 maxlen: 48
2401:df00:32::/48 maxlen: 48
2401:df00:41::/48 maxlen: 48
2401:df00:42::/48 maxlen: 48
2401:df00:47::/48 maxlen: 48
2401:df00:51::/48 maxlen: 48
2401:df00:52::/48 maxlen: 48
2401:df00:57::/48 maxlen: 48
2401:df00:61::/48 maxlen: 48
2401:df00:62::/48 maxlen: 48
2401:df00:181::/48 maxlen: 48
2401:df00:182::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 17:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4356 (0x1104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Oct 21 16:22:14 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ad8e6b6-4b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:95:e5:4b:18:da:12:99:0f:f3:6c:c3:2e:
db:72:ac:fd:36:0d:3d:f7:7b:f7:94:9c:db:84:50:
6b:7b:81:10:ff:01:03:28:fb:95:0b:01:3f:df:11:
3f:c3:b4:8b:b5:72:5a:e9:65:c4:a9:95:fa:42:e7:
83:f3:7f:7d:1a:55:39:64:a5:23:70:78:f5:2d:b7:
07:2b:bd:31:bd:78:23:8e:08:fe:f0:da:2e:ea:91:
04:3b:34:9c:34:37:2c:5a:dd:fc:b2:4e:11:08:7a:
73:40:31:a1:f6:b9:d4:ae:78:b6:9d:71:71:21:40:
85:08:ae:95:cb:16:a0:85:91:00:6a:5d:df:a3:87:
4f:14:b4:4f:10:d4:98:b3:69:08:0a:1b:f3:f8:69:
ff:ca:e3:24:7a:68:19:3e:8f:f9:b0:8c:ef:8a:75:
91:27:6a:de:de:7e:88:c9:de:8f:3d:19:52:c8:c4:
b3:e4:34:63:93:45:15:10:8b:7a:4f:53:0f:fa:94:
45:bc:e8:42:98:38:01:e4:27:33:93:4f:2b:8f:32:
ab:fa:8f:44:1e:7d:b5:7d:b0:4a:18:26:19:d5:77:
dc:92:27:d4:1c:81:e0:e4:d2:eb:f3:fd:61:39:3f:
ef:67:67:11:47:82:0b:c9:55:2d:72:b8:1d:e8:5f:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D1:E5:55:E3:B6:85:C3:24:83:7C:8E:07:67:59:D3:3A:54:8F:C2
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/931551E8CD6B11F185B490F22166CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
202.53.197.0/24
IPv6:
2401:df00:1::-2401:df00:2:ffff:ffff:ffff:ffff:ffff
2401:df00:7::/48
2401:df00:11::-2401:df00:12:ffff:ffff:ffff:ffff:ffff
2401:df00:21::-2401:df00:22:ffff:ffff:ffff:ffff:ffff
2401:df00:27::/48
2401:df00:31::-2401:df00:32:ffff:ffff:ffff:ffff:ffff
2401:df00:41::-2401:df00:42:ffff:ffff:ffff:ffff:ffff
2401:df00:47::/48
2401:df00:51::-2401:df00:52:ffff:ffff:ffff:ffff:ffff
2401:df00:57::/48
2401:df00:61::-2401:df00:62:ffff:ffff:ffff:ffff:ffff
2401:df00:181::-2401:df00:182:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
67:c7:4f:b4:09:18:15:d7:33:1e:8a:cd:82:22:af:2c:06:c2:
71:66:2b:a1:c8:a5:d0:90:20:44:aa:08:7d:73:33:e8:5e:53:
b1:78:06:99:58:2c:4c:8f:9d:9d:df:06:43:04:06:89:2b:b6:
6a:ae:16:07:e8:eb:af:0e:f8:b7:22:6b:f6:5f:a7:0a:87:58:
98:f3:c2:4e:49:ee:e9:10:cb:a7:1a:27:ca:09:29:8e:96:b0:
b2:47:34:0b:82:c7:a3:5d:67:4d:69:9f:77:3f:0b:b7:54:c3:
10:55:b9:b1:79:0f:ed:fb:81:7c:22:87:e2:83:1d:aa:0e:61:
f5:33:35:5f:8a:1f:5a:41:fb:a9:cd:8e:35:63:a7:da:1d:39:
24:f8:e9:ae:1f:aa:5a:31:fd:e9:96:61:4d:d1:ea:8a:32:51:
b1:63:8a:1a:62:1b:98:2b:fd:29:a7:16:76:2d:7c:d9:89:23:
5c:60:f9:7a:17:a7:3f:56:30:7d:d6:35:de:2a:c4:d9:a9:05:
4a:b4:e3:50:48:40:4b:f1:ca:01:3e:18:e3:32:d0:32:b6:5f:
ec:80:6d:1e:cd:0e:8a:0e:fa:11:55:db:ef:3a:c6:73:a4:b4:
11:a2:e1:c6:b1:86:e2:ec:22:dd:a7:81:0c:25:55:97:ee:81:
63:bb:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:29:46 2026 by rpki-client