Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
File: C264EF40348611F1AD86C498AC833773.roa (raw, json)
Hash identifier: UCNqkXsLDv2zmllrc+fMw9VjxTkEQBJi+aRxDGtZ/P4=
Subject key identifier: 74:19:3B:3C:7F:DE:1A:B0:43:F3:E2:06:05:07:DB:F3:F0:E8:74:01
Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial: 3562
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
Signing time: Mon 06 Jul 2026 09:18:46 +0000
ROA not before: Mon 06 Jul 2026 09:18:46 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 23884
IP address blocks: 45.112.64.0/24 maxlen: 24
45.112.65.0/24 maxlen: 24
45.112.66.0/24 maxlen: 24
45.112.67.0/24 maxlen: 24
49.50.232.0/22 maxlen: 22
49.50.232.0/24 maxlen: 24
49.50.233.0/24 maxlen: 24
49.50.234.0/24 maxlen: 24
49.50.235.0/24 maxlen: 24
103.246.188.0/22 maxlen: 22
103.246.188.0/24 maxlen: 24
103.246.189.0/24 maxlen: 24
103.246.191.0/24 maxlen: 24
111.223.32.0/21 maxlen: 21
111.223.32.0/24 maxlen: 24
111.223.33.0/24 maxlen: 24
111.223.34.0/24 maxlen: 24
111.223.35.0/24 maxlen: 24
111.223.36.0/24 maxlen: 24
111.223.37.0/24 maxlen: 24
111.223.38.0/24 maxlen: 24
111.223.39.0/24 maxlen: 24
111.223.40.0/23 maxlen: 24
111.223.42.0/24 maxlen: 24
111.223.43.0/24 maxlen: 24
111.223.44.0/22 maxlen: 22
111.223.44.0/24 maxlen: 24
111.223.45.0/24 maxlen: 24
111.223.46.0/24 maxlen: 24
111.223.47.0/24 maxlen: 24
111.223.48.0/20 maxlen: 20
111.223.48.0/21 maxlen: 21
111.223.49.0/24 maxlen: 24
111.223.50.0/24 maxlen: 24
111.223.51.0/24 maxlen: 24
111.223.52.0/24 maxlen: 24
111.223.53.0/24 maxlen: 24
111.223.55.0/24 maxlen: 24
111.223.57.0/24 maxlen: 24
111.223.58.0/23 maxlen: 24
111.223.60.0/22 maxlen: 22
111.223.60.0/24 maxlen: 24
111.223.61.0/24 maxlen: 24
111.223.62.0/24 maxlen: 24
111.223.63.0/24 maxlen: 24
112.121.128.0/21 maxlen: 21
112.121.129.0/24 maxlen: 24
112.121.130.0/24 maxlen: 24
112.121.131.0/24 maxlen: 24
112.121.132.0/24 maxlen: 24
112.121.133.0/24 maxlen: 24
112.121.134.0/24 maxlen: 24
112.121.135.0/24 maxlen: 24
112.121.136.0/22 maxlen: 23
112.121.138.0/23 maxlen: 24
112.121.140.0/23 maxlen: 23
112.121.140.0/24 maxlen: 24
112.121.141.0/24 maxlen: 24
112.121.142.0/23 maxlen: 24
112.121.144.0/20 maxlen: 20
112.121.144.0/24 maxlen: 24
112.121.145.0/24 maxlen: 24
112.121.147.0/24 maxlen: 24
112.121.148.0/24 maxlen: 24
112.121.149.0/24 maxlen: 24
112.121.150.0/24 maxlen: 24
112.121.151.0/24 maxlen: 24
112.121.152.0/24 maxlen: 24
112.121.155.0/24 maxlen: 24
112.121.156.0/24 maxlen: 24
112.121.157.0/24 maxlen: 24
112.121.158.0/24 maxlen: 24
112.121.159.0/24 maxlen: 24
202.8.84.0/22 maxlen: 22
202.8.84.0/24 maxlen: 24
202.8.85.0/24 maxlen: 24
202.151.176.0/23 maxlen: 23
202.151.178.0/24 maxlen: 24
202.151.179.0/24 maxlen: 24
202.151.180.0/24 maxlen: 24
202.151.181.0/24 maxlen: 24
202.151.182.0/24 maxlen: 24
202.151.183.0/24 maxlen: 24
202.151.184.0/24 maxlen: 24
202.151.185.0/24 maxlen: 24
202.151.188.0/24 maxlen: 24
202.151.189.0/24 maxlen: 24
202.151.190.0/24 maxlen: 24
202.151.191.0/24 maxlen: 24
202.162.76.0/22 maxlen: 22
202.162.76.0/24 maxlen: 24
202.162.77.0/24 maxlen: 24
202.162.78.0/24 maxlen: 24
202.162.79.0/24 maxlen: 24
202.170.112.0/20 maxlen: 20
202.170.112.0/24 maxlen: 24
202.170.113.0/24 maxlen: 24
202.170.114.0/23 maxlen: 23
202.170.116.0/23 maxlen: 23
202.170.117.0/24 maxlen: 24
202.170.118.0/23 maxlen: 24
202.170.120.0/23 maxlen: 23
202.170.122.0/23 maxlen: 23
202.170.124.0/24 maxlen: 24
202.170.125.0/24 maxlen: 24
202.170.126.0/23 maxlen: 23
202.170.127.0/24 maxlen: 24
2400:ea00::/48 maxlen: 48
2400:ea00:3560::/48 maxlen: 48
2400:ea00:3561::/48 maxlen: 48
2400:ea00:c010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13666 (0x3562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Validity
Not Before: Jul 6 09:18:46 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a4b72f6-4909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:23:b9:dc:26:7a:73:10:78:73:cf:65:c1:
0d:c2:b1:bb:bb:3f:41:ec:13:0e:4f:06:bc:ce:16:
17:6e:bc:d7:5f:8d:1c:56:47:22:61:e8:a0:88:22:
e4:08:d8:26:0f:5d:bd:61:18:ae:39:42:13:ac:5f:
ec:84:ab:e5:3b:88:9c:d2:47:05:f3:f2:1d:02:ab:
f1:4e:f5:c3:1c:69:15:12:2e:c8:63:a3:2a:68:0e:
64:30:39:41:fa:8b:71:31:a2:5a:f3:85:7d:97:77:
53:30:01:b6:0c:5c:69:d7:77:88:ee:d7:08:e4:f8:
ba:3f:2e:bc:4b:af:39:c4:df:21:46:98:6c:47:4d:
15:b8:5f:5f:c3:cc:54:7e:0f:38:fd:45:3e:ab:fc:
2b:1a:47:66:fb:ed:d9:71:e2:5f:79:d6:eb:c5:39:
77:b2:11:c7:7e:a2:0d:ec:03:bd:96:4f:73:c5:f7:
4f:62:7d:11:ff:65:39:27:c3:54:d5:b4:cc:74:0a:
83:a4:d5:62:be:b4:84:89:bb:d2:32:ef:22:a2:8b:
6e:ed:ff:f9:2c:bb:2d:2c:57:a1:7e:59:bb:8d:70:
61:02:59:d0:7d:98:e7:8a:6b:0f:06:bd:52:60:a2:
73:fa:93:7d:e2:f8:5b:0c:63:6c:ca:7c:47:0f:34:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:19:3B:3C:7F:DE:1A:B0:43:F3:E2:06:05:07:DB:F3:F0:E8:74:01
X509v3 Authority Key Identifier:
keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.64.0/22
49.50.232.0/22
103.246.188.0/22
111.223.32.0/19
112.121.128.0/19
202.8.84.0/22
202.151.176.0-202.151.185.255
202.151.188.0/22
202.162.76.0/22
202.170.112.0/20
IPv6:
2400:ea00::/48
2400:ea00:3560::/47
2400:ea00:c010::/48
Signature Algorithm: sha256WithRSAEncryption
01:24:26:41:48:57:8d:dc:41:c9:65:41:af:b4:4a:10:4b:ab:
95:b7:c6:e3:f7:58:12:5f:b7:f3:92:3d:23:ea:f5:7d:76:35:
bf:76:07:79:56:16:ec:3c:ed:6b:63:d6:1b:67:e6:19:38:9e:
ed:81:23:27:31:c4:b8:09:b2:7e:65:cd:a7:63:86:65:64:10:
75:56:67:18:64:13:0b:b0:be:08:54:ef:df:d9:a5:8f:10:f2:
20:2b:24:de:2f:e6:c4:70:8f:03:6c:9c:fc:20:4f:0b:68:e4:
02:37:57:1c:fe:cf:c3:19:28:45:b4:ee:b4:01:f8:90:b9:82:
eb:7c:0d:79:b2:06:33:30:84:fe:7c:38:54:ed:1d:fa:78:dc:
0e:a3:d4:72:0e:1d:1b:3e:7e:82:dd:8d:cc:a5:d4:a5:5c:2a:
4e:af:1b:b0:14:ac:1e:ac:79:0e:06:c1:61:6c:bc:96:78:80:
b8:c8:54:45:2f:a3:ea:a2:2f:90:df:1d:23:50:83:c0:b1:dd:
cd:f8:3f:ef:26:11:2a:7d:3a:f1:2e:6e:a1:55:03:85:5e:9a:
e8:e5:64:91:50:f6:de:3e:8b:d3:e1:e4:4d:84:9b:03:c9:47:
0c:05:9f:52:c6:3c:cc:93:77:40:93:1b:1b:35:4c:57:8a:b8:
29:2d:2e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:39:01 2026 by rpki-client