Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/D2AD822AF2A711F0B86D5E54726F56BC.roa
File: D2AD822AF2A711F0B86D5E54726F56BC.roa (raw, json)
Hash identifier: kPZF1f+IsmegMSPGWaL3KI6K4oWydR2UHiKi0R7o0u0=
Subject key identifier: 0E:F1:C0:5B:94:F3:15:70:6A:4C:45:D7:57:0D:32:9B:E9:46:BE:C3
Certificate issuer: /CN=A91D1691/serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Certificate serial: 253D
Authority key identifier: 7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/D2AD822AF2A711F0B86D5E54726F56BC.roa
Signing time: Sat 08 Aug 2026 16:23:24 +0000
ROA not before: Sat 08 Aug 2026 16:23:24 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 45352
IP address blocks: 14.102.144.0/21 maxlen: 24
14.192.64.0/24 maxlen: 24
14.192.65.0/24 maxlen: 24
14.192.66.0/24 maxlen: 24
14.192.70.0/23 maxlen: 24
43.252.152.0/22 maxlen: 24
45.64.168.0/22 maxlen: 24
58.84.8.0/22 maxlen: 22
58.84.8.0/24 maxlen: 24
58.84.9.0/24 maxlen: 24
58.84.10.0/24 maxlen: 24
58.84.11.0/24 maxlen: 24
103.3.172.0/24 maxlen: 24
103.3.173.0/24 maxlen: 24
103.3.174.0/23 maxlen: 24
103.10.156.0/23 maxlen: 24
103.10.158.0/23 maxlen: 24
103.23.45.0/24 maxlen: 24
103.40.204.0/22 maxlen: 24
118.107.200.0/21 maxlen: 24
118.107.208.0/24 maxlen: 24
118.107.209.0/24 maxlen: 24
118.107.210.0/24 maxlen: 24
118.107.211.0/24 maxlen: 24
118.107.232.0/24 maxlen: 24
118.107.233.0/24 maxlen: 24
118.107.234.0/23 maxlen: 23
118.107.235.0/24 maxlen: 24
118.107.236.0/24 maxlen: 24
118.107.237.0/24 maxlen: 24
118.107.238.0/24 maxlen: 24
118.107.239.0/24 maxlen: 24
118.107.240.0/24 maxlen: 24
118.107.241.0/24 maxlen: 24
118.107.242.0/24 maxlen: 24
118.107.243.0/24 maxlen: 24
183.81.160.0/21 maxlen: 24
192.82.56.0/21 maxlen: 21
192.82.56.0/24 maxlen: 24
192.82.57.0/24 maxlen: 24
192.82.58.0/24 maxlen: 24
192.82.59.0/24 maxlen: 24
192.82.60.0/24 maxlen: 24
192.82.61.0/24 maxlen: 24
192.82.62.0/24 maxlen: 24
192.82.63.0/24 maxlen: 24
210.5.40.0/22 maxlen: 24
210.5.44.0/22 maxlen: 24
2401:3400::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9533 (0x253d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=7AC0C00F0FCA479EE465E4F7F545E8C94993D61C
Validity
Not Before: Aug 8 16:23:24 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7757fc-1d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:80:f5:f4:5a:c0:b9:58:1a:2e:5b:f6:9b:
7a:8a:6b:07:64:ce:80:80:73:03:8e:af:9d:01:04:
c4:dd:b1:f0:57:5a:59:20:0d:3f:81:28:e9:06:b9:
6e:3a:c8:0a:9d:c1:63:b2:8d:a5:ac:f5:ea:a9:90:
92:a2:e2:30:17:5a:62:b5:1f:6a:99:6c:d4:1a:a7:
d1:b9:0c:b7:20:c9:f2:3a:d8:ea:72:e2:83:f0:d4:
c1:cb:7d:2f:71:87:b6:6b:8c:3b:1a:4f:f4:aa:39:
0f:97:59:57:62:ae:7e:01:2e:f0:6a:e7:63:9a:e5:
ee:10:3d:36:4f:df:af:8e:7b:dc:23:82:cc:19:70:
76:66:fe:9a:4b:77:1b:0d:3a:89:b6:9b:57:ea:74:
58:7d:94:75:8a:e0:43:67:f1:3b:5c:d1:8f:ab:c4:
a6:57:41:30:c1:97:7a:48:2d:b5:ea:a6:84:ec:e8:
93:f8:df:d9:45:0b:5e:1c:f9:36:42:1b:62:41:93:
f2:bb:9a:63:9e:44:5d:f5:49:d7:e8:b6:b0:56:2e:
f9:36:be:2b:57:40:31:0a:c8:fb:7a:a8:63:8b:ea:
6a:ea:34:e2:61:59:2d:a6:94:ec:e1:4c:55:1c:7c:
66:dc:43:31:6c:97:e2:36:b6:5a:80:69:19:07:cb:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F1:C0:5B:94:F3:15:70:6A:4C:45:D7:57:0D:32:9B:E9:46:BE:C3
X509v3 Authority Key Identifier:
keyid:7A:C0:C0:0F:0F:CA:47:9E:E4:65:E4:F7:F5:45:E8:C9:49:93:D6:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/esDADw_KR57kZeT39UXoyUmT1hw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esDADw_KR57kZeT39UXoyUmT1hw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/5AFC2692652B11E597A86881C4F9AE02/D2AD822AF2A711F0B86D5E54726F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
14.102.144.0/21
14.192.64.0-14.192.66.255
14.192.70.0/23
43.252.152.0/22
45.64.168.0/22
58.84.8.0/22
103.3.172.0/22
103.10.156.0/22
103.23.45.0/24
103.40.204.0/22
118.107.200.0-118.107.211.255
118.107.232.0-118.107.243.255
183.81.160.0/21
192.82.56.0/21
210.5.40.0/21
IPv6:
2401:3400::/32
Signature Algorithm: sha256WithRSAEncryption
b2:d0:04:e9:bf:f6:7a:1a:4d:8b:68:8a:e6:b7:d4:7a:ec:e8:
13:c2:f6:a6:9d:a7:4f:69:0a:f3:75:e7:4d:29:c3:51:df:0a:
25:79:4d:3a:d2:fc:a6:cd:dd:dd:dd:d3:c3:ac:91:58:66:eb:
2f:59:16:82:57:8b:95:aa:9d:ce:af:5f:f0:28:8b:f4:77:68:
c0:bb:dd:2a:c4:ff:29:c9:c5:8a:59:6b:f2:e6:d4:87:00:42:
c0:18:b3:ab:d5:b5:7b:82:ce:eb:7c:14:c5:90:4d:d3:bf:0d:
4c:c8:5e:f2:1f:16:16:5b:51:33:2a:26:79:87:09:f0:7f:58:
6c:52:f4:47:a3:b7:ab:57:2b:43:6d:b1:1d:ec:37:2f:e5:f0:
1c:86:ec:6e:d4:c9:50:2a:d6:d5:7d:3e:3b:55:d4:18:28:c3:
79:75:0d:ee:92:11:d3:3e:d8:88:af:e4:b1:f1:ac:c6:4a:9a:
95:54:89:28:b6:8b:f1:4c:a7:41:82:1a:dc:88:b1:a4:20:b9:
0c:35:3c:a7:43:4d:22:dd:e7:e7:8e:32:51:57:24:5c:c9:70:
b7:0a:53:77:f5:c4:96:85:6d:ce:bd:f9:9f:56:11:c5:2b:13:
7a:86:22:14:e8:02:1a:7d:5c:c3:c5:dc:b3:ee:8a:50:5d:a6:
48:a4:30:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:54:37 2026 by rpki-client