Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/B32F80267BD111EBBB223C84C4F9AE02.roa
File: B32F80267BD111EBBB223C84C4F9AE02.roa (raw, json)
Hash identifier: XZ+BtxJt9+UipYgyFTcl5k2NUEc0RW+1b5TGvyYP0Pc=
Subject key identifier: F5:E8:3B:7E:01:59:BC:FA:27:AF:DC:26:E8:99:AF:98:F9:ED:CC:B2
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 08BD
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/B32F80267BD111EBBB223C84C4F9AE02.roa
Signing time: Tue 21 Jul 2026 08:21:26 +0000
ROA not before: Tue 21 Jul 2026 08:21:25 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 21859
IP address blocks: 129.227.17.0/24 maxlen: 24
129.227.18.0/24 maxlen: 24
129.227.19.0/24 maxlen: 24
129.227.29.0/24 maxlen: 24
129.227.30.0/24 maxlen: 24
129.227.31.0/24 maxlen: 24
129.227.63.0/24 maxlen: 24
129.227.124.0/24 maxlen: 24
129.227.125.0/24 maxlen: 24
129.227.176.0/23 maxlen: 24
129.227.192.0/24 maxlen: 24
129.227.193.0/24 maxlen: 24
129.227.194.0/23 maxlen: 24
156.59.16.0/22 maxlen: 24
156.59.37.0/24 maxlen: 24
156.59.48.0/23 maxlen: 24
156.59.50.0/23 maxlen: 24
156.59.52.0/22 maxlen: 24
156.59.73.0/24 maxlen: 24
156.59.80.0/21 maxlen: 24
156.59.94.0/23 maxlen: 24
156.59.108.0/24 maxlen: 24
156.59.123.0/24 maxlen: 24
156.59.128.0/21 maxlen: 24
156.59.136.0/21 maxlen: 24
156.59.146.0/24 maxlen: 24
156.59.179.0/24 maxlen: 24
156.59.216.0/24 maxlen: 24
156.59.224.0/24 maxlen: 24
156.59.225.0/24 maxlen: 24
156.59.241.0/24 maxlen: 24
156.59.246.0/23 maxlen: 24
156.59.255.0/24 maxlen: 24
162.128.43.0/24 maxlen: 24
162.128.44.0/24 maxlen: 24
162.128.53.0/24 maxlen: 24
162.128.54.0/24 maxlen: 24
162.128.55.0/24 maxlen: 24
162.128.56.0/24 maxlen: 24
162.128.57.0/24 maxlen: 24
162.128.58.0/24 maxlen: 24
162.128.59.0/24 maxlen: 24
162.128.60.0/24 maxlen: 24
162.128.61.0/24 maxlen: 24
162.128.62.0/24 maxlen: 24
162.128.63.0/24 maxlen: 24
162.128.96.0/24 maxlen: 24
162.128.97.0/24 maxlen: 24
162.128.98.0/24 maxlen: 24
162.128.99.0/24 maxlen: 24
162.128.100.0/24 maxlen: 24
162.128.102.0/24 maxlen: 24
162.128.103.0/24 maxlen: 24
162.128.105.0/24 maxlen: 24
162.128.107.0/24 maxlen: 24
162.128.108.0/24 maxlen: 24
162.128.109.0/24 maxlen: 24
162.128.110.0/24 maxlen: 24
162.128.111.0/24 maxlen: 24
162.128.112.0/24 maxlen: 24
162.128.114.0/24 maxlen: 24
162.128.115.0/24 maxlen: 24
162.128.116.0/24 maxlen: 24
162.128.117.0/24 maxlen: 24
162.128.118.0/24 maxlen: 24
162.128.134.0/24 maxlen: 24
162.128.135.0/24 maxlen: 24
162.128.140.0/24 maxlen: 24
162.128.149.0/24 maxlen: 24
162.128.150.0/24 maxlen: 24
162.128.151.0/24 maxlen: 24
162.128.156.0/24 maxlen: 24
162.128.183.0/24 maxlen: 24
162.128.186.0/24 maxlen: 24
162.128.196.0/24 maxlen: 24
162.128.197.0/24 maxlen: 24
162.128.198.0/24 maxlen: 24
162.128.199.0/24 maxlen: 24
162.128.200.0/24 maxlen: 24
162.128.201.0/24 maxlen: 24
162.128.202.0/24 maxlen: 24
162.128.203.0/24 maxlen: 24
162.128.204.0/24 maxlen: 24
162.128.205.0/24 maxlen: 24
162.128.206.0/24 maxlen: 24
162.128.207.0/24 maxlen: 24
162.128.208.0/24 maxlen: 24
162.128.209.0/24 maxlen: 24
162.128.210.0/24 maxlen: 24
162.128.211.0/24 maxlen: 24
162.128.213.0/24 maxlen: 24
162.128.214.0/24 maxlen: 24
162.128.215.0/24 maxlen: 24
162.128.216.0/24 maxlen: 24
162.128.217.0/24 maxlen: 24
162.128.218.0/24 maxlen: 24
162.128.219.0/24 maxlen: 24
162.128.220.0/24 maxlen: 24
162.128.221.0/24 maxlen: 24
162.128.222.0/24 maxlen: 24
162.128.223.0/24 maxlen: 24
162.128.224.0/24 maxlen: 24
162.128.225.0/24 maxlen: 24
162.128.226.0/24 maxlen: 24
162.128.227.0/24 maxlen: 24
162.128.228.0/24 maxlen: 24
162.128.229.0/24 maxlen: 24
162.128.230.0/24 maxlen: 24
162.128.231.0/24 maxlen: 24
162.128.232.0/24 maxlen: 24
162.128.233.0/24 maxlen: 24
162.128.234.0/24 maxlen: 24
162.128.235.0/24 maxlen: 24
162.128.236.0/24 maxlen: 24
162.128.237.0/24 maxlen: 24
162.128.238.0/24 maxlen: 24
162.128.239.0/24 maxlen: 24
162.128.240.0/24 maxlen: 24
162.128.241.0/24 maxlen: 24
162.128.242.0/24 maxlen: 24
162.128.243.0/24 maxlen: 24
162.128.244.0/24 maxlen: 24
162.128.245.0/24 maxlen: 24
162.128.246.0/24 maxlen: 24
162.128.247.0/24 maxlen: 24
162.128.248.0/24 maxlen: 24
162.128.249.0/24 maxlen: 24
162.128.250.0/24 maxlen: 24
162.128.251.0/24 maxlen: 24
162.128.252.0/24 maxlen: 24
162.128.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Jul 21 08:21:25 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a5f2c05-4da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:71:bc:de:58:45:b5:20:11:18:1b:c1:81:
57:59:97:0d:dc:07:33:68:bc:f5:bf:75:42:c7:02:
45:c3:a5:e5:33:30:4c:c2:69:5a:85:b3:dd:59:6d:
2e:a6:e1:af:94:58:85:ab:b0:25:b8:03:f1:15:c1:
39:68:de:5f:5a:aa:5b:9d:37:f2:d8:f9:8c:68:d2:
d9:0b:b3:6e:4a:8e:bb:e4:9e:05:97:3d:1c:01:13:
a3:39:40:a8:44:fc:ba:47:c8:36:82:e4:d3:49:b0:
ae:ad:5e:7a:3b:fa:82:7a:af:67:5b:0c:16:22:c0:
03:b9:48:3c:1b:95:31:3d:da:17:4d:6b:1d:4e:51:
ce:91:80:b3:7f:91:43:7b:23:bc:70:6b:a6:c7:fb:
48:4e:36:17:0d:c6:f5:f2:a5:db:3a:62:39:ff:b9:
15:1a:ec:08:d5:a3:fb:38:03:9e:40:eb:00:97:d9:
d1:b5:db:33:2c:17:b3:29:a5:1e:c8:b0:30:c1:52:
86:61:c9:1c:de:3b:db:95:3f:83:57:2f:38:93:4b:
db:dc:3c:d7:6e:3c:96:ec:21:24:1f:8a:69:f9:fd:
47:62:bd:e2:66:f0:d9:fd:95:93:d5:df:ea:0d:2b:
4c:a2:f5:33:6c:bc:1d:03:64:15:64:4a:19:73:47:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E8:3B:7E:01:59:BC:FA:27:AF:DC:26:E8:99:AF:98:F9:ED:CC:B2
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/B32F80267BD111EBBB223C84C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
129.227.17.0-129.227.19.255
129.227.29.0-129.227.31.255
129.227.63.0/24
129.227.124.0/23
129.227.176.0/23
129.227.192.0/22
156.59.16.0/22
156.59.37.0/24
156.59.48.0/21
156.59.73.0/24
156.59.80.0/21
156.59.94.0/23
156.59.108.0/24
156.59.123.0/24
156.59.128.0/20
156.59.146.0/24
156.59.179.0/24
156.59.216.0/24
156.59.224.0/23
156.59.241.0/24
156.59.246.0/23
156.59.255.0/24
162.128.43.0-162.128.44.255
162.128.53.0-162.128.63.255
162.128.96.0-162.128.100.255
162.128.102.0/23
162.128.105.0/24
162.128.107.0-162.128.112.255
162.128.114.0-162.128.118.255
162.128.134.0/23
162.128.140.0/24
162.128.149.0-162.128.151.255
162.128.156.0/24
162.128.183.0/24
162.128.186.0/24
162.128.196.0-162.128.211.255
162.128.213.0-162.128.252.255
162.128.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ff:0d:35:82:b3:d2:c6:85:b4:ef:b2:c7:b8:29:5b:7a:97:
c8:4b:79:5f:b4:88:41:ed:12:0f:20:37:20:11:75:81:5c:01:
05:75:f7:0c:04:85:17:38:9e:1e:02:03:46:f6:2a:eb:4b:1b:
93:ee:67:1f:04:76:f5:2a:98:a6:b2:bb:27:b4:a5:9d:89:85:
f2:8b:12:53:94:1c:b9:30:34:7a:0d:f9:8a:8a:c4:8d:7a:90:
ea:98:ab:9d:95:44:97:67:27:b4:d9:61:fc:fa:39:28:c3:66:
44:06:c0:f5:b9:ee:92:2e:05:2e:1c:b2:3a:56:96:c8:91:d2:
8f:69:ca:ac:48:ac:5a:21:60:07:ef:79:f9:ac:c1:bf:da:0d:
56:a2:a0:ea:5d:27:61:8e:67:5a:17:b6:55:83:a9:87:93:20:
a1:4c:0e:83:46:28:87:5e:77:a5:0f:28:05:10:06:ac:6f:ce:
a2:82:d4:8a:7e:12:7d:de:1f:58:72:19:10:1c:32:62:65:72:
74:b5:59:99:cd:d2:d7:ce:4d:37:d2:bf:b2:4c:82:51:1d:9e:
85:5b:76:b9:dd:41:1a:67:54:9c:73:05:fc:e6:ee:f1:63:77:
1f:df:e9:80:ce:48:82:af:55:8b:ae:2b:fe:b3:e8:8e:32:a0:
88:a8:4e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:32 2026 by rpki-client