Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0E7E64E4CEF411F1A45446D31B66CEF9.roa
File: 0E7E64E4CEF411F1A45446D31B66CEF9.roa (raw, json)
Hash identifier: ngpIS1HY3GMa+30VlgoDnmJaKQk13dFWS7PflijWLc4=
Subject key identifier: 77:F0:92:AB:2B:10:D7:8C:8A:D7:0E:BF:E1:F1:05:AA:5A:34:5F:14
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 091B
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0E7E64E4CEF411F1A45446D31B66CEF9.roa
Signing time: Fri 23 Oct 2026 15:11:44 +0000
ROA not before: Fri 23 Oct 2026 15:11:44 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 21859
IP address blocks: 129.227.17.0/24 maxlen: 24
129.227.18.0/24 maxlen: 24
129.227.19.0/24 maxlen: 24
129.227.29.0/24 maxlen: 24
129.227.30.0/24 maxlen: 24
129.227.31.0/24 maxlen: 24
129.227.63.0/24 maxlen: 24
129.227.124.0/24 maxlen: 24
129.227.125.0/24 maxlen: 24
129.227.176.0/23 maxlen: 24
129.227.192.0/24 maxlen: 24
129.227.193.0/24 maxlen: 24
129.227.194.0/23 maxlen: 24
156.59.16.0/22 maxlen: 24
156.59.37.0/24 maxlen: 24
156.59.48.0/23 maxlen: 24
156.59.50.0/23 maxlen: 24
156.59.52.0/22 maxlen: 24
156.59.73.0/24 maxlen: 24
156.59.80.0/21 maxlen: 24
156.59.94.0/23 maxlen: 24
156.59.108.0/24 maxlen: 24
156.59.123.0/24 maxlen: 24
156.59.128.0/21 maxlen: 24
156.59.136.0/21 maxlen: 24
156.59.146.0/24 maxlen: 24
156.59.179.0/24 maxlen: 24
156.59.216.0/24 maxlen: 24
156.59.224.0/24 maxlen: 24
156.59.225.0/24 maxlen: 24
156.59.241.0/24 maxlen: 24
156.59.246.0/23 maxlen: 24
156.59.255.0/24 maxlen: 24
162.128.10.0/24 maxlen: 24
162.128.11.0/24 maxlen: 24
162.128.12.0/24 maxlen: 24
162.128.43.0/24 maxlen: 24
162.128.44.0/24 maxlen: 24
162.128.53.0/24 maxlen: 24
162.128.54.0/24 maxlen: 24
162.128.55.0/24 maxlen: 24
162.128.56.0/24 maxlen: 24
162.128.57.0/24 maxlen: 24
162.128.58.0/24 maxlen: 24
162.128.59.0/24 maxlen: 24
162.128.60.0/24 maxlen: 24
162.128.61.0/24 maxlen: 24
162.128.62.0/24 maxlen: 24
162.128.63.0/24 maxlen: 24
162.128.96.0/24 maxlen: 24
162.128.97.0/24 maxlen: 24
162.128.98.0/24 maxlen: 24
162.128.99.0/24 maxlen: 24
162.128.100.0/24 maxlen: 24
162.128.102.0/24 maxlen: 24
162.128.103.0/24 maxlen: 24
162.128.105.0/24 maxlen: 24
162.128.107.0/24 maxlen: 24
162.128.109.0/24 maxlen: 24
162.128.110.0/24 maxlen: 24
162.128.111.0/24 maxlen: 24
162.128.112.0/24 maxlen: 24
162.128.114.0/24 maxlen: 24
162.128.115.0/24 maxlen: 24
162.128.116.0/24 maxlen: 24
162.128.117.0/24 maxlen: 24
162.128.118.0/24 maxlen: 24
162.128.119.0/24 maxlen: 24
162.128.121.0/24 maxlen: 24
162.128.122.0/24 maxlen: 24
162.128.123.0/24 maxlen: 24
162.128.124.0/24 maxlen: 24
162.128.125.0/24 maxlen: 24
162.128.126.0/24 maxlen: 24
162.128.134.0/24 maxlen: 24
162.128.135.0/24 maxlen: 24
162.128.140.0/24 maxlen: 24
162.128.149.0/24 maxlen: 24
162.128.150.0/24 maxlen: 24
162.128.151.0/24 maxlen: 24
162.128.156.0/24 maxlen: 24
162.128.183.0/24 maxlen: 24
162.128.186.0/24 maxlen: 24
162.128.196.0/24 maxlen: 24
162.128.197.0/24 maxlen: 24
162.128.198.0/24 maxlen: 24
162.128.199.0/24 maxlen: 24
162.128.200.0/24 maxlen: 24
162.128.201.0/24 maxlen: 24
162.128.202.0/24 maxlen: 24
162.128.203.0/24 maxlen: 24
162.128.204.0/24 maxlen: 24
162.128.205.0/24 maxlen: 24
162.128.206.0/24 maxlen: 24
162.128.207.0/24 maxlen: 24
162.128.208.0/24 maxlen: 24
162.128.209.0/24 maxlen: 24
162.128.210.0/24 maxlen: 24
162.128.211.0/24 maxlen: 24
162.128.213.0/24 maxlen: 24
162.128.214.0/24 maxlen: 24
162.128.215.0/24 maxlen: 24
162.128.216.0/24 maxlen: 24
162.128.217.0/24 maxlen: 24
162.128.218.0/24 maxlen: 24
162.128.219.0/24 maxlen: 24
162.128.220.0/24 maxlen: 24
162.128.221.0/24 maxlen: 24
162.128.222.0/24 maxlen: 24
162.128.223.0/24 maxlen: 24
162.128.224.0/24 maxlen: 24
162.128.225.0/24 maxlen: 24
162.128.226.0/24 maxlen: 24
162.128.227.0/24 maxlen: 24
162.128.228.0/24 maxlen: 24
162.128.229.0/24 maxlen: 24
162.128.230.0/24 maxlen: 24
162.128.231.0/24 maxlen: 24
162.128.232.0/24 maxlen: 24
162.128.233.0/24 maxlen: 24
162.128.234.0/24 maxlen: 24
162.128.235.0/24 maxlen: 24
162.128.236.0/24 maxlen: 24
162.128.237.0/24 maxlen: 24
162.128.238.0/24 maxlen: 24
162.128.239.0/24 maxlen: 24
162.128.240.0/24 maxlen: 24
162.128.241.0/24 maxlen: 24
162.128.242.0/24 maxlen: 24
162.128.243.0/24 maxlen: 24
162.128.244.0/24 maxlen: 24
162.128.245.0/24 maxlen: 24
162.128.246.0/24 maxlen: 24
162.128.247.0/24 maxlen: 24
162.128.248.0/24 maxlen: 24
162.128.249.0/24 maxlen: 24
162.128.250.0/24 maxlen: 24
162.128.251.0/24 maxlen: 24
162.128.252.0/24 maxlen: 24
162.128.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2331 (0x91b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Oct 23 15:11:44 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6adb792f-8b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:3e:85:a5:a0:4e:49:b6:8c:ea:77:eb:bc:
d5:31:0f:86:3b:7d:77:28:98:e7:3f:b1:23:21:25:
76:da:3a:2e:47:10:3e:bc:6c:28:b8:a3:8f:cc:cc:
d8:00:bd:15:62:d9:3e:e6:5c:e8:93:99:58:c3:7c:
8a:33:5e:9c:6c:5b:76:02:61:fa:15:78:52:66:0a:
48:6b:e3:7a:74:de:99:f5:07:20:3c:9d:09:a5:93:
3c:6f:4f:ac:b1:eb:67:1b:b8:fc:fe:38:4b:5d:d4:
69:30:0f:ca:9e:ce:a5:f9:bd:fe:4a:59:39:ae:a8:
26:e0:64:01:a2:e8:c8:c0:f8:13:ee:3f:36:86:a5:
8f:3b:69:b0:ce:1c:ca:58:63:52:a1:54:19:d9:33:
14:d5:38:25:79:24:90:60:61:71:86:c9:ed:bf:2a:
74:c3:76:34:44:ed:fa:d9:08:c4:fa:d7:a6:43:83:
ab:83:fe:f9:bc:84:58:d7:f2:95:ef:d5:2f:62:b0:
19:82:86:a4:ec:40:5b:c5:79:61:fc:5b:dd:2d:0b:
50:1b:a9:cc:a5:94:74:cb:cf:0d:38:e7:a7:2a:ae:
3d:d7:6d:a2:f7:62:eb:16:a5:57:42:bf:a3:2f:aa:
de:b7:30:76:0a:45:52:14:99:ee:7b:7e:76:09:ee:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F0:92:AB:2B:10:D7:8C:8A:D7:0E:BF:E1:F1:05:AA:5A:34:5F:14
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/0E7E64E4CEF411F1A45446D31B66CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
129.227.17.0-129.227.19.255
129.227.29.0-129.227.31.255
129.227.63.0/24
129.227.124.0/23
129.227.176.0/23
129.227.192.0/22
156.59.16.0/22
156.59.37.0/24
156.59.48.0/21
156.59.73.0/24
156.59.80.0/21
156.59.94.0/23
156.59.108.0/24
156.59.123.0/24
156.59.128.0/20
156.59.146.0/24
156.59.179.0/24
156.59.216.0/24
156.59.224.0/23
156.59.241.0/24
156.59.246.0/23
156.59.255.0/24
162.128.10.0-162.128.12.255
162.128.43.0-162.128.44.255
162.128.53.0-162.128.63.255
162.128.96.0-162.128.100.255
162.128.102.0/23
162.128.105.0/24
162.128.107.0/24
162.128.109.0-162.128.112.255
162.128.114.0-162.128.119.255
162.128.121.0-162.128.126.255
162.128.134.0/23
162.128.140.0/24
162.128.149.0-162.128.151.255
162.128.156.0/24
162.128.183.0/24
162.128.186.0/24
162.128.196.0-162.128.211.255
162.128.213.0-162.128.252.255
162.128.254.0/24
Signature Algorithm: sha256WithRSAEncryption
71:f6:7e:78:76:f4:0f:7e:74:94:77:b3:e6:87:f0:13:7f:f6:
af:0a:b5:db:d1:ed:c5:c0:6a:7d:6e:84:16:7c:01:f1:63:8e:
53:1f:17:68:82:9a:a0:7c:f4:30:ce:b3:a9:54:32:8a:ea:9b:
3d:7b:11:59:d3:3e:29:fb:05:9b:c2:b2:72:12:89:62:53:34:
33:ce:ad:1c:73:64:ed:0f:94:f5:8a:e1:c5:1c:bb:f9:79:2f:
c2:8a:0e:e5:53:d6:9c:95:19:a5:08:b7:40:1e:b1:7c:bf:84:
75:e0:d3:a3:55:51:ca:ae:78:9c:80:ba:ab:13:ca:c6:79:db:
ec:0c:65:fa:8a:bb:13:e8:97:e4:14:51:c4:fc:0b:50:de:17:
df:5d:d4:64:6e:37:4b:0c:46:fb:3d:c9:63:46:b5:82:6a:60:
be:77:63:07:cb:6b:34:d0:ff:17:39:ef:c9:69:ac:65:b4:e6:
cf:11:72:79:f3:34:df:13:60:b3:72:ea:b5:1d:ac:ad:d7:3f:
05:8c:df:eb:c1:35:a4:18:bd:b9:04:91:d5:e8:8f:af:59:6b:
44:25:4f:6b:f6:96:62:ef:de:2e:4e:59:5f:9b:7e:14:d8:76:
7d:8b:6d:f5:37:de:7e:a4:81:45:e4:c2:fa:16:95:50:90:da:
d1:67:49:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:15:10 2026 by rpki-client