Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/536F917C803E11F1B7FBCFC66CA30FBC.roa
File: 536F917C803E11F1B7FBCFC66CA30FBC.roa (raw, json)
Hash identifier: tT5GQoFB2krA7T4CcJebB7l0Jgv12ZCceR2zsXlgAyg=
Subject key identifier: B0:7A:44:53:EE:B6:2F:1F:C0:84:EA:9F:DE:E1:A6:33:E9:04:AC:95
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2DF0
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/536F917C803E11F1B7FBCFC66CA30FBC.roa
Signing time: Wed 15 Jul 2026 11:14:47 +0000
ROA not before: Wed 15 Jul 2026 11:14:46 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 58717
IP address blocks: 43.245.140.0/22 maxlen: 22
43.245.140.0/22 maxlen: 24
43.245.140.0/23 maxlen: 23
43.245.140.0/24 maxlen: 24
43.245.141.0/24 maxlen: 24
43.245.142.0/23 maxlen: 23
43.245.142.0/24 maxlen: 24
43.245.143.0/24 maxlen: 24
59.153.202.0/23 maxlen: 24
103.15.244.0/22 maxlen: 24
103.15.246.64/26 maxlen: 26
103.75.238.0/23 maxlen: 24
103.96.68.0/23 maxlen: 24
103.96.70.0/23 maxlen: 24
103.108.144.0/22 maxlen: 24
103.158.2.0/23 maxlen: 24
103.161.66.0/23 maxlen: 24
103.199.84.0/22 maxlen: 24
103.242.216.0/22 maxlen: 24
144.48.148.0/23 maxlen: 24
175.41.44.0/22 maxlen: 24
2405:1500::/30 maxlen: 31
2405:1500::/32 maxlen: 32
2405:1500::/32 maxlen: 48
2405:1500::/48 maxlen: 48
2405:1500:11::/48 maxlen: 48
2405:1500:12::/48 maxlen: 48
2405:1500:13::/48 maxlen: 48
2405:1500:30::/48 maxlen: 48
2405:1500:37::/48 maxlen: 48
2405:1500:40::/48 maxlen: 48
2405:1500:41::/48 maxlen: 48
2405:1500:42::/48 maxlen: 48
2405:1500:45::/48 maxlen: 48
2405:1500:50::/48 maxlen: 48
2405:1500:52::/48 maxlen: 48
2405:1500:55::/48 maxlen: 48
2405:1500:56::/48 maxlen: 48
2405:1500:60::/48 maxlen: 48
2405:1500:70::/48 maxlen: 48
2405:1500:80::/48 maxlen: 48
2405:1500:82::/48 maxlen: 48
2405:1500:90::/48 maxlen: 48
2405:1500:92::/48 maxlen: 48
2405:1500:94::/48 maxlen: 48
2405:1500:97::/48 maxlen: 48
2405:1500:a1::/48 maxlen: 48
2405:1500:b0::/48 maxlen: 48
2405:1500:b1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11760 (0x2df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Jul 15 11:14:46 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a576ba6-3bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:2e:ac:e0:0d:61:51:30:11:be:a8:d8:43:
1c:0f:28:e8:d7:da:8c:4c:06:6c:d8:00:55:f8:d2:
de:64:57:b0:f6:4d:f4:4f:b1:99:bc:cb:f4:e7:94:
89:d9:20:aa:76:1d:c4:dd:8d:82:92:b6:1e:d7:7f:
86:94:9a:6d:aa:94:9d:4d:22:09:ea:8c:57:19:1c:
27:ad:68:1d:76:38:9a:5f:d7:27:70:df:a8:c6:b0:
a8:43:14:3e:03:2e:4c:e3:b8:a8:54:c0:64:68:ab:
9d:12:fc:62:32:2d:fa:a9:7d:8e:b4:df:06:53:bc:
01:58:d1:c5:78:30:fa:3f:7d:d8:e4:66:10:1d:1c:
02:6a:0e:29:16:14:95:56:05:e2:3b:d1:78:00:14:
1f:dc:85:a6:41:f5:42:19:3f:49:c1:42:fb:66:4b:
36:c9:43:e0:ab:3d:1b:50:28:51:56:b3:da:9e:ce:
81:9a:8b:c0:3e:9a:22:cc:ba:cb:9d:41:5f:59:09:
51:8e:1a:d5:85:53:db:cd:96:bd:f5:88:e8:38:b7:
a9:17:59:bb:45:13:05:b1:97:f9:f3:37:34:d9:64:
9e:57:af:20:16:05:6b:c8:22:01:34:e1:42:02:61:
78:eb:ff:d3:86:45:b0:64:56:0d:71:c1:e3:8c:81:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:44:53:EE:B6:2F:1F:C0:84:EA:9F:DE:E1:A6:33:E9:04:AC:95
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/536F917C803E11F1B7FBCFC66CA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.140.0/22
59.153.202.0/23
103.15.244.0/22
103.75.238.0/23
103.96.68.0/22
103.108.144.0/22
103.158.2.0/23
103.161.66.0/23
103.199.84.0/22
103.242.216.0/22
144.48.148.0/23
175.41.44.0/22
IPv6:
2405:1500::/30
Signature Algorithm: sha256WithRSAEncryption
87:fa:5d:8b:ae:e9:10:3b:16:e1:1e:94:6a:78:90:1b:ad:35:
31:8c:e7:82:c9:c8:36:8d:8a:8b:ed:97:2e:5e:da:71:59:8d:
ce:bb:e2:b7:48:7c:bd:c2:d1:6a:ae:5f:0b:7b:3a:fe:a8:54:
eb:4c:4f:8c:0a:ea:68:3f:6a:45:fa:42:0c:10:f6:61:6d:4d:
fa:ef:bf:da:5f:37:82:b7:cd:82:64:a6:b4:32:ca:c5:d3:0f:
73:cc:d7:7e:7d:f5:62:99:95:15:4f:47:61:51:84:96:bc:fc:
db:73:ba:d1:9d:97:42:71:f8:dc:42:43:56:db:fc:74:00:21:
69:7e:9a:74:ee:30:82:78:1e:5e:69:ce:c2:e4:96:5e:9b:9e:
dd:b0:4a:ec:2a:57:2a:ae:11:c6:7f:e8:17:6c:cd:45:69:7b:
be:94:5b:80:63:1f:ba:7c:9b:bf:eb:7f:01:ef:1a:55:0c:65:
f9:ea:e0:c2:81:f1:a9:a8:e6:a5:07:92:ce:8e:aa:db:36:17:
15:93:57:4a:27:10:fb:20:29:b4:ba:a2:22:ad:49:f3:0e:06:
fe:d7:37:68:99:71:30:2a:c5:8c:1d:a9:af:2a:01:86:8a:fb:
04:dc:6a:4a:10:ef:22:d8:60:9e:d2:f6:0b:dc:95:72:3e:07:
cb:92:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:36 2026 by rpki-client