Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
File: C264EF40348611F1AD86C498AC833773.roa (raw, json)
Hash identifier: 66uP3tYUHirGUL7IpMNKC13eU3IzhdVACv/RxfZkaWk=
Subject key identifier: 4F:5C:61:C9:64:FA:C5:AE:89:BD:EC:A8:7A:D0:C1:2D:D8:9E:7B:05
Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial: 357A
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
Signing time: Mon 17 Aug 2026 08:36:01 +0000
ROA not before: Mon 17 Aug 2026 08:36:01 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 23884
IP address blocks: 45.112.64.0/24 maxlen: 24
45.112.65.0/24 maxlen: 24
45.112.66.0/24 maxlen: 24
45.112.67.0/24 maxlen: 24
49.50.232.0/22 maxlen: 22
49.50.232.0/24 maxlen: 24
49.50.233.0/24 maxlen: 24
49.50.234.0/24 maxlen: 24
49.50.235.0/24 maxlen: 24
103.246.188.0/22 maxlen: 22
103.246.188.0/24 maxlen: 24
103.246.189.0/24 maxlen: 24
103.246.191.0/24 maxlen: 24
111.223.32.0/21 maxlen: 21
111.223.32.0/24 maxlen: 24
111.223.33.0/24 maxlen: 24
111.223.34.0/24 maxlen: 24
111.223.35.0/24 maxlen: 24
111.223.36.0/24 maxlen: 24
111.223.37.0/24 maxlen: 24
111.223.38.0/24 maxlen: 24
111.223.39.0/24 maxlen: 24
111.223.40.0/23 maxlen: 24
111.223.42.0/24 maxlen: 24
111.223.43.0/24 maxlen: 24
111.223.44.0/22 maxlen: 22
111.223.44.0/24 maxlen: 24
111.223.45.0/24 maxlen: 24
111.223.46.0/24 maxlen: 24
111.223.47.0/24 maxlen: 24
111.223.48.0/20 maxlen: 20
111.223.48.0/21 maxlen: 21
111.223.49.0/24 maxlen: 24
111.223.50.0/24 maxlen: 24
111.223.51.0/24 maxlen: 24
111.223.52.0/24 maxlen: 24
111.223.53.0/24 maxlen: 24
111.223.55.0/24 maxlen: 24
111.223.57.0/24 maxlen: 24
111.223.58.0/23 maxlen: 24
111.223.60.0/22 maxlen: 22
111.223.60.0/24 maxlen: 24
111.223.61.0/24 maxlen: 24
111.223.62.0/24 maxlen: 24
111.223.63.0/24 maxlen: 24
112.121.128.0/21 maxlen: 21
112.121.129.0/24 maxlen: 24
112.121.130.0/24 maxlen: 24
112.121.131.0/24 maxlen: 24
112.121.132.0/24 maxlen: 24
112.121.133.0/24 maxlen: 24
112.121.134.0/24 maxlen: 24
112.121.135.0/24 maxlen: 24
112.121.136.0/22 maxlen: 23
112.121.138.0/23 maxlen: 24
112.121.140.0/23 maxlen: 23
112.121.140.0/24 maxlen: 24
112.121.141.0/24 maxlen: 24
112.121.142.0/23 maxlen: 24
112.121.144.0/20 maxlen: 20
112.121.144.0/24 maxlen: 24
112.121.145.0/24 maxlen: 24
112.121.147.0/24 maxlen: 24
112.121.148.0/24 maxlen: 24
112.121.149.0/24 maxlen: 24
112.121.150.0/24 maxlen: 24
112.121.151.0/24 maxlen: 24
112.121.152.0/24 maxlen: 24
112.121.155.0/24 maxlen: 24
112.121.156.0/24 maxlen: 24
112.121.157.0/24 maxlen: 24
112.121.158.0/24 maxlen: 24
112.121.159.0/24 maxlen: 24
202.8.84.0/22 maxlen: 22
202.8.84.0/24 maxlen: 24
202.8.85.0/24 maxlen: 24
202.151.176.0/23 maxlen: 23
202.151.178.0/24 maxlen: 24
202.151.179.0/24 maxlen: 24
202.151.180.0/24 maxlen: 24
202.151.181.0/24 maxlen: 24
202.151.182.0/24 maxlen: 24
202.151.183.0/24 maxlen: 24
202.151.184.0/24 maxlen: 24
202.151.185.0/24 maxlen: 24
202.151.186.0/24 maxlen: 24
202.151.188.0/24 maxlen: 24
202.151.189.0/24 maxlen: 24
202.151.190.0/24 maxlen: 24
202.151.191.0/24 maxlen: 24
202.162.76.0/22 maxlen: 22
202.162.76.0/24 maxlen: 24
202.162.77.0/24 maxlen: 24
202.162.78.0/24 maxlen: 24
202.162.79.0/24 maxlen: 24
202.170.112.0/20 maxlen: 20
202.170.112.0/24 maxlen: 24
202.170.113.0/24 maxlen: 24
202.170.114.0/23 maxlen: 23
202.170.116.0/23 maxlen: 23
202.170.117.0/24 maxlen: 24
202.170.118.0/23 maxlen: 24
202.170.120.0/23 maxlen: 23
202.170.122.0/23 maxlen: 23
202.170.124.0/24 maxlen: 24
202.170.125.0/24 maxlen: 24
202.170.126.0/23 maxlen: 23
202.170.127.0/24 maxlen: 24
2400:ea00::/48 maxlen: 48
2400:ea00:3560::/48 maxlen: 48
2400:ea00:3561::/48 maxlen: 48
2400:ea00:c010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13690 (0x357a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Validity
Not Before: Aug 17 08:36:01 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a82c7f1-cd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:fb:4b:24:dd:96:ee:31:e6:ae:a8:1a:57:
61:40:a8:dc:86:32:3b:01:84:5b:6a:d3:61:d3:20:
b0:ac:28:f8:0f:cc:39:15:34:fe:ee:f7:16:5d:1b:
79:ec:b7:7e:69:cf:5b:60:01:51:ea:4c:35:0f:60:
e6:98:82:39:b1:cb:3b:40:10:46:7f:c9:c9:c9:ff:
c6:63:f9:e6:0e:c8:a1:60:95:23:9b:59:d5:42:68:
31:5d:d6:40:21:72:24:de:6c:8e:a4:76:d2:f8:c1:
61:bf:21:a3:90:ef:44:97:08:30:0c:04:c5:1d:a0:
9e:3f:ff:fd:14:28:da:f0:8e:fd:18:90:04:27:99:
74:46:92:b2:3b:79:a5:ea:d6:54:e6:e0:0d:fe:f9:
18:a6:26:9c:6b:f7:88:b5:d0:e7:bd:95:00:47:a5:
00:ff:1f:41:06:88:7d:89:1e:ba:58:ab:29:74:65:
b5:bc:6a:c5:f8:e3:b1:24:22:3d:af:47:3d:60:c1:
fd:e6:f4:99:09:1d:7b:5f:79:26:8c:32:51:0d:47:
51:36:77:f5:1b:7e:d0:bf:7a:64:a2:e8:96:59:64:
43:a0:21:7b:b7:20:2b:7f:83:27:d6:20:e0:61:a1:
86:cb:e2:17:73:bb:07:76:5d:04:b7:5e:6e:78:64:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5C:61:C9:64:FA:C5:AE:89:BD:EC:A8:7A:D0:C1:2D:D8:9E:7B:05
X509v3 Authority Key Identifier:
keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.64.0/22
49.50.232.0/22
103.246.188.0/22
111.223.32.0/19
112.121.128.0/19
202.8.84.0/22
202.151.176.0-202.151.186.255
202.151.188.0/22
202.162.76.0/22
202.170.112.0/20
IPv6:
2400:ea00::/48
2400:ea00:3560::/47
2400:ea00:c010::/48
Signature Algorithm: sha256WithRSAEncryption
20:b3:59:ca:c4:50:5c:2d:66:03:a5:ca:3d:cc:d0:66:63:57:
72:37:a3:9c:2b:25:c8:2c:04:c0:c2:a7:80:5b:94:c1:fb:0d:
25:9a:3a:c1:f4:ee:41:68:ff:79:9e:d2:00:56:b4:d5:6a:0f:
9e:f1:85:56:2d:3d:8f:7b:4a:d4:77:2e:2e:3a:f1:7d:67:ec:
4d:f7:0b:ea:7f:46:11:32:81:27:1f:c4:e6:a0:05:ca:2e:88:
d2:52:f3:5c:a8:84:3b:04:71:68:e4:a2:f5:b1:34:52:f0:93:
f5:c8:78:bb:60:4c:91:70:2a:d8:e3:a9:c5:ae:2b:95:4f:32:
70:1c:9e:6b:03:36:5e:80:2b:76:69:b2:61:53:ba:a7:a8:7e:
43:78:b4:82:d6:b4:b0:b4:e2:4c:8b:f1:aa:a1:d8:cf:db:fb:
f5:5a:71:f3:b6:c8:9a:a6:cc:ff:f0:d7:c1:2f:e4:b4:d3:5e:
6c:6a:2f:d1:9d:45:bb:4f:cd:b1:f6:c5:eb:11:fd:2e:5b:30:
02:b9:8b:93:54:bf:54:06:f5:fd:ec:99:2a:fe:4b:10:8a:95:
ba:90:e9:cd:28:76:47:dc:68:51:c6:78:5c:9f:c5:6b:f7:d3:
08:01:00:09:ca:67:0b:37:ab:e7:4c:7b:08:32:71:3e:f5:1a:
76:35:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:45 2026 by rpki-client