Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/427BAA66E23211E8BD132210C4F9AE02.roa
File: 427BAA66E23211E8BD132210C4F9AE02.roa (raw, json)
Hash identifier: qvyFhV5nfC47Pz/c2vFFgaDNyFH03/suCvs+Lzbb6l8=
Subject key identifier: 79:A6:88:42:E6:8A:AE:2E:96:CD:DE:1A:41:F4:CE:D8:FE:20:2D:8E
Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial: 3697
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/427BAA66E23211E8BD132210C4F9AE02.roa
Signing time: Sun 30 Aug 2026 15:14:03 +0000
ROA not before: Sun 30 Aug 2026 15:14:03 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 134166
IP address blocks: 1.179.246.0/24 maxlen: 24
1.179.247.0/24 maxlen: 24
113.53.228.0/24 maxlen: 24
118.174.8.0/24 maxlen: 24
118.174.9.0/24 maxlen: 24
118.174.10.0/24 maxlen: 24
118.174.11.0/24 maxlen: 24
118.175.1.0/24 maxlen: 24
118.175.24.0/22 maxlen: 24
118.175.28.0/24 maxlen: 24
118.175.94.0/24 maxlen: 24
180.180.242.0/24 maxlen: 24
180.180.243.0/24 maxlen: 24
180.180.244.0/24 maxlen: 24
180.180.245.0/24 maxlen: 24
180.180.247.0/24 maxlen: 24
203.113.4.0/24 maxlen: 24
203.113.6.0/24 maxlen: 24
203.113.8.0/22 maxlen: 22
203.113.8.0/24 maxlen: 24
203.113.10.0/24 maxlen: 24
203.113.14.0/24 maxlen: 24
203.113.25.0/24 maxlen: 24
203.113.70.0/24 maxlen: 24
203.113.71.0/24 maxlen: 24
203.113.95.0/24 maxlen: 24
203.113.126.0/24 maxlen: 24
203.114.97.0/24 maxlen: 24
203.114.98.0/24 maxlen: 24
203.114.102.0/24 maxlen: 24
2001:ec0:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13975 (0x3697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Validity
Not Before: Aug 30 15:14:03 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9448bb-27c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:b8:6e:42:1b:d0:19:e0:10:d1:e3:59:a7:
fa:6f:b2:7f:9f:96:c0:c1:1c:8c:a4:d6:c1:2a:d5:
17:81:d1:70:e4:e0:e0:88:d0:ba:65:2b:ae:09:a4:
4b:6b:4f:35:da:4b:48:51:33:66:6c:36:d2:9a:bf:
94:91:c2:93:87:89:98:97:bc:57:d8:09:11:98:cb:
0a:99:c6:a0:a6:db:44:0a:75:35:28:a8:85:b8:f1:
e0:1f:3d:a3:c7:e4:44:48:18:c4:70:e4:8a:1b:8d:
1c:b6:c3:9b:3c:37:0a:12:6b:ef:bd:be:ee:52:5f:
0a:84:c0:94:92:47:97:72:5c:56:3e:3d:c8:ef:dd:
56:e7:99:3d:37:85:65:b3:b7:8b:99:84:b4:f7:48:
97:72:48:05:e4:e8:33:c5:a8:e3:cc:d6:32:08:ed:
38:c2:02:88:d2:45:7b:76:f5:94:f6:1b:e3:79:73:
03:46:e0:e5:0a:6c:9b:52:21:da:6b:ba:3a:79:c9:
14:84:4c:54:b9:ba:1e:b4:40:8d:f3:d4:a7:62:27:
c0:70:b3:cb:e2:bc:c2:9f:27:d6:c5:65:16:b3:37:
7d:7f:de:46:4a:8a:4a:da:1b:3a:c1:a2:8b:f0:a2:
2f:5a:09:46:a8:7a:ff:ca:31:0e:5f:8b:ee:3c:ce:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A6:88:42:E6:8A:AE:2E:96:CD:DE:1A:41:F4:CE:D8:FE:20:2D:8E
X509v3 Authority Key Identifier:
keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/427BAA66E23211E8BD132210C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.179.246.0/23
113.53.228.0/24
118.174.8.0/22
118.175.1.0/24
118.175.24.0-118.175.28.255
118.175.94.0/24
180.180.242.0-180.180.245.255
180.180.247.0/24
203.113.4.0/24
203.113.6.0/24
203.113.8.0/22
203.113.14.0/24
203.113.25.0/24
203.113.70.0/23
203.113.95.0/24
203.113.126.0/24
203.114.97.0-203.114.98.255
203.114.102.0/24
IPv6:
2001:ec0:100::/40
Signature Algorithm: sha256WithRSAEncryption
bf:3d:36:39:3f:fe:7d:3b:b7:39:b9:56:01:b5:88:fb:78:6d:
5b:95:5a:39:0c:e5:39:a3:a6:12:48:0f:b3:23:75:f8:56:ec:
c3:dc:73:e2:ca:0d:d0:7e:f0:2e:55:64:04:e5:42:3f:0c:87:
e2:69:92:d3:f8:bd:b8:e1:7d:71:a2:b9:25:ed:0d:17:77:81:
2a:a1:3a:fd:50:34:57:33:97:bd:68:db:57:b1:e3:00:89:29:
94:31:52:a9:ff:4d:60:54:1d:20:1b:60:e2:b7:03:b5:a7:f8:
ba:85:ae:b8:ec:3a:8c:8a:ab:92:55:97:5a:36:73:01:e1:5c:
76:8a:06:30:b4:31:d9:95:96:cc:70:c9:01:f6:8b:1b:c3:5c:
b7:6b:b1:aa:1d:bc:f3:55:27:d3:95:b1:13:2e:2c:f0:7d:a5:
22:61:bb:ab:f3:9b:bd:0a:41:44:d9:08:09:13:a5:8f:0e:6e:
78:4e:c3:a0:00:b9:07:11:0e:cc:a7:6a:a9:b7:29:46:bf:1b:
d1:1b:f6:80:f5:04:1b:73:7d:d1:9b:82:3a:bd:8e:8f:46:4a:
c9:67:ec:24:8d:af:f6:d9:f0:22:e1:cc:45:ab:0b:ec:cf:6f:
07:e6:24:f3:a4:2b:f6:6b:c0:57:7b:73:7d:bc:99:71:e1:46:
d5:b8:d2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:28:35 2026 by rpki-client