Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa
File: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (raw, json)
Hash identifier: a5ETmaqpNy6qeOL+PmbuFg5Hvj7coJZt0e2vYVREM4A=
Subject key identifier: 6C:74:C5:BF:EE:75:46:09:F2:E0:D3:5D:94:6D:C0:EE:01:51:DE:A7
Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial: 0C03
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa
Signing time: Tue 03 Mar 2026 09:32:25 +0000
ROA not before: Tue 03 Mar 2026 09:32:25 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 15830
IP address blocks: 27.111.240.0/20 maxlen: 20
27.111.240.0/21 maxlen: 21
27.111.248.0/22 maxlen: 22
27.111.253.0/24 maxlen: 24
27.111.254.0/23 maxlen: 23
101.97.32.0/23 maxlen: 23
101.97.34.0/23 maxlen: 23
101.97.37.0/24 maxlen: 24
101.97.38.0/23 maxlen: 23
101.97.44.0/23 maxlen: 23
101.97.46.0/23 maxlen: 23
101.97.48.0/22 maxlen: 22
101.97.52.0/23 maxlen: 23
101.97.54.0/23 maxlen: 23
101.97.56.0/22 maxlen: 22
101.97.60.0/22 maxlen: 22
103.13.68.0/22 maxlen: 22
180.189.16.0/22 maxlen: 22
180.189.20.0/22 maxlen: 22
180.189.24.0/21 maxlen: 21
183.177.48.0/22 maxlen: 22
183.177.52.0/22 maxlen: 22
183.177.56.0/22 maxlen: 22
183.177.60.0/24 maxlen: 24
202.177.208.0/22 maxlen: 22
202.177.212.0/22 maxlen: 22
202.177.217.0/24 maxlen: 24
202.177.218.0/23 maxlen: 23
202.177.219.0/24 maxlen: 24
202.177.220.0/23 maxlen: 23
202.177.221.0/24 maxlen: 24
202.177.222.0/23 maxlen: 23
2404:4f00::/32 maxlen: 32
2404:4f00:6010::/48 maxlen: 48
2404:4f01::/32 maxlen: 32
2404:4f02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 18:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3075 (0xc03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Validity
Not Before: Mar 3 09:32:25 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a6aaa9-3a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:4d:8f:3d:41:61:03:3f:be:93:4c:1b:d6:
04:a8:2f:46:e2:e1:36:34:cf:9b:5f:a2:e2:80:c6:
e4:b8:0f:8a:de:a6:c3:3b:f6:67:ed:49:72:c2:f9:
95:93:21:86:d4:f1:1f:4e:e6:67:99:42:5e:7b:7e:
00:ec:79:fc:7a:54:14:e4:23:c1:ec:59:65:52:78:
16:04:61:60:2c:0e:8c:d3:e0:85:d1:1a:2f:13:36:
5c:a2:e2:8e:25:33:4e:df:ac:42:00:81:d5:a9:2f:
c1:d9:88:57:97:96:fe:9e:05:ba:81:b5:9e:de:50:
c0:13:c6:09:45:3a:e7:ab:e8:4a:7e:38:86:00:4d:
1e:9b:05:40:f2:1a:6f:b2:3a:67:68:47:f8:6d:6f:
ca:ea:ef:90:9a:95:c4:05:82:b2:af:d9:43:ca:bb:
c5:3e:81:33:66:7e:d4:91:46:1e:cf:1c:4b:9c:89:
4c:2f:cd:67:93:fa:25:e1:eb:3a:ba:eb:e7:d0:0e:
59:01:28:a2:ee:9c:28:29:fe:6b:bd:f6:a2:0f:97:
76:52:4a:35:f8:1a:30:9c:08:fb:13:0e:f2:c7:20:
7d:09:42:92:0d:7d:ad:b5:7c:4d:92:c0:22:94:67:
6b:be:2c:0e:a7:cd:77:b1:33:3c:68:13:34:32:a6:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:74:C5:BF:EE:75:46:09:F2:E0:D3:5D:94:6D:C0:EE:01:51:DE:A7
X509v3 Authority Key Identifier:
keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.111.240.0/20
101.97.32.0/22
101.97.37.0-101.97.39.255
101.97.44.0-101.97.63.255
103.13.68.0/22
180.189.16.0/20
183.177.48.0-183.177.60.255
202.177.208.0/21
202.177.217.0-202.177.223.255
IPv6:
2404:4f00::-2404:4f02:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
93:58:85:37:a4:95:11:a1:6c:2d:25:c4:30:c8:83:82:b3:05:
f2:9e:3e:08:b3:87:29:05:6e:b3:1c:c7:b2:46:97:bc:6a:b3:
0b:de:f4:f5:5b:91:01:9e:ef:04:9a:9b:4c:16:f1:17:9b:85:
c7:56:14:2d:9f:a8:14:32:7a:b6:c7:a6:74:a3:ed:bb:ea:5a:
36:de:41:f7:34:37:f5:ae:a5:f9:a1:8b:2c:13:2a:c9:49:81:
9c:b5:cf:a4:55:d9:65:1d:3f:78:9d:eb:0d:66:90:76:76:38:
2d:9c:d4:38:7e:31:2d:2c:99:b5:8f:3b:58:d3:85:79:b7:cc:
f3:3b:11:3c:18:b7:db:a6:c9:14:57:82:cb:f5:d0:08:0d:8c:
f7:56:e2:b3:48:0f:24:0e:a1:8c:b7:73:06:15:aa:8c:09:71:
e0:0b:ba:34:27:8b:e6:d0:b3:6a:69:f0:e2:6a:15:b6:69:f5:
1d:dc:3f:66:af:15:af:4e:6a:e9:57:d0:af:76:be:85:ae:db:
e4:25:15:a8:db:ef:81:af:51:63:28:4e:0a:90:4a:fe:3c:16:
24:14:c3:01:12:76:93:a6:e4:9e:47:98:fe:3e:51:ca:18:30:
a3:3a:84:a0:b9:5d:45:f8:4a:71:47:20:0e:41:3d:cb:f8:2a:
58:ee:a2:b5
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw
Rjk3MkZFQUYwHhcNMjYwMzAzMDkzMjI1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2YWFhOS0zYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnDhNjz1BYQM/vpNMG9YEqC9G4uE2NM+bX6LigMbkuA+K3qbDO/Zn7UlywvmV
kyGG1PEfTuZnmUJee34A7Hn8elQU5CPB7FllUngWBGFgLA6M0+CF0RovEzZcouKO
JTNO36xCAIHVqS/B2YhXl5b+ngW6gbWe3lDAE8YJRTrnq+hKfjiGAE0emwVA8hpv
sjpnaEf4bW/K6u+QmpXEBYKyr9lDyrvFPoEzZn7UkUYezxxLnIlML81nk/ol4es6
uuvn0A5ZASii7pwoKf5rvfaiD5d2Uko1+BownAj7Ew7yxyB9CUKSDX2ttXxNksAi
lGdrviwOp813sTM8aBM0MqadmwIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFGx0xb/u
dUYJ8uDTXZRtwO4BUd6nMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz
OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf
cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0U1NTgvM0RGMTRGMDg1Mzk0MTFFQUJGNkI0RjVGQzRGOUFFMDIvRjFFQjQ2RDI3
MTdGMTFFRUIzRkEwQTVFQzRGOUFFMDIucm9hMIGGBggrBgEFBQcBBwEB/wR3MHUw
XAQCAAEwVgMEBBtv8AMEAmVhIDAMAwQAZWElAwQDZWEgMAwDBAJlYSwDBAZlYQAD
BAJnDUQDBAS0vRAwDAMEBLexMAMEALexPAMEA8qx0DAMAwQAyrHZAwQFyrHAMBUE
AgACMA8wDQMEACQETwMFACQETwIwDQYJKoZIhvcNAQELBQADggEBAJNYhTeklRGh
bC0lxDDIg4KzBfKePgizhykFbrMcx7JGl7xqswve9PVbkQGe7wSam0wW8RebhcdW
FC2fqBQyerbHpnSj7bvqWjbeQfc0N/WupfmhiywTKslJgZy1z6RV2WUdP3id6w1m
kHZ2OC2c1Dh+MS0smbWPO1jThXm3zPM7ETwYt9umyRRXgsv10AgNjPdW4rNIDyQO
oYy3cwYVqowJceALujQni+bQs2pp8OJqFbZp9R3cP2avFa9OaulX0K92voWu2+Ql
Fajb74GvUWMoTgqQSv48FiQUwwESdpOm5J5HmP4+UcoYMKM6hKC5XUX4SnFHIA5B
Pcv4KljuorU=
-----END CERTIFICATE-----
Generated at Mon Mar 23 23:44:55 2026 by rpki-client