Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
File: FD6881C4438111ECBC63AC7BC4F9AE02.roa (raw, json)
Hash identifier: FCxtoO3yencB6K6w/bYv1ej9DeKlTU698Gq6dquIMl4=
Subject key identifier: 3F:43:A7:2E:16:A7:9A:B7:E3:E7:4D:0B:6B:6D:5F:04:C9:6E:0B:9D
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 08B4
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
Signing time: Thu 16 Jul 2026 08:02:23 +0000
ROA not before: Thu 16 Jul 2026 08:02:23 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 62610
IP address blocks: 129.227.127.0/24 maxlen: 24
129.227.139.0/24 maxlen: 24
129.227.143.0/24 maxlen: 24
156.59.73.0/24 maxlen: 24
156.59.123.0/24 maxlen: 24
156.59.146.0/24 maxlen: 24
156.59.184.0/24 maxlen: 24
162.128.82.0/24 maxlen: 24
162.128.83.0/24 maxlen: 24
162.128.84.0/24 maxlen: 24
162.128.85.0/24 maxlen: 24
162.128.86.0/24 maxlen: 24
162.128.87.0/24 maxlen: 24
162.128.88.0/24 maxlen: 24
162.128.89.0/24 maxlen: 24
162.128.90.0/24 maxlen: 24
162.128.91.0/24 maxlen: 24
162.128.92.0/24 maxlen: 24
162.128.93.0/24 maxlen: 24
162.128.94.0/24 maxlen: 24
162.128.95.0/24 maxlen: 24
162.128.101.0/24 maxlen: 24
162.128.113.0/24 maxlen: 24
162.128.132.0/24 maxlen: 24
162.128.146.0/24 maxlen: 24
162.128.215.0/24 maxlen: 24
162.128.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2228 (0x8b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Jul 16 08:02:23 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a58900f-0e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5b:4b:1e:5c:6b:c5:0e:b7:81:c6:6e:68:96:
a4:69:6f:c8:32:43:93:9c:b8:47:f4:ab:79:07:24:
37:c1:3b:87:ef:6a:c3:34:5b:31:a6:83:ad:55:07:
93:53:31:2b:19:9f:e2:e1:aa:c0:35:d4:57:37:ea:
b6:3c:2f:13:ff:a0:05:ae:f3:8c:a9:ad:93:43:f5:
74:df:a2:e4:d3:b6:b3:e3:a9:1d:75:29:40:af:a2:
03:88:60:18:06:52:47:6f:4f:09:04:c2:cc:9c:e9:
1e:84:9f:24:84:84:02:88:e6:55:8a:ae:17:53:73:
85:06:9e:1d:ec:57:42:e4:1e:fb:d4:cb:15:3e:5d:
17:0b:f3:b9:02:db:b6:14:6c:47:14:53:a9:58:ec:
ce:53:fa:0d:fa:55:3a:4a:ad:b5:ae:c9:ea:7d:20:
09:f7:bf:79:46:ee:ef:86:71:1e:b3:d0:08:17:23:
75:75:c1:c2:bd:fa:f1:d0:a4:65:f5:87:cf:6f:1e:
b7:db:b0:10:8f:b7:c3:49:57:ed:c7:35:5e:92:27:
64:41:06:9e:a8:a7:83:45:ca:fa:3d:47:f6:68:55:
c5:b9:f1:2c:c1:9d:8d:30:4d:63:ef:03:73:cf:bf:
c2:e5:6b:48:4f:94:95:85:b7:76:04:8b:65:79:b3:
0c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:43:A7:2E:16:A7:9A:B7:E3:E7:4D:0B:6B:6D:5F:04:C9:6E:0B:9D
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
129.227.127.0/24
129.227.139.0/24
129.227.143.0/24
156.59.73.0/24
156.59.123.0/24
156.59.146.0/24
156.59.184.0/24
162.128.82.0-162.128.95.255
162.128.101.0/24
162.128.113.0/24
162.128.132.0/24
162.128.146.0/24
162.128.215.0-162.128.216.255
Signature Algorithm: sha256WithRSAEncryption
8a:6d:04:d7:13:b3:64:cf:8a:b9:0c:16:95:12:f1:3b:4b:98:
fd:01:01:03:1b:85:e7:10:ca:b4:d7:95:e9:58:a2:ae:4e:22:
c7:51:de:11:56:4e:51:94:39:79:40:c6:7a:6d:96:6e:3a:17:
fb:cc:c0:26:09:b6:f3:ae:b8:61:cb:cc:95:eb:ac:5a:0a:3b:
49:2e:73:6d:29:5c:67:5b:31:64:b9:8c:9d:86:1d:43:9a:67:
a0:f8:9c:2d:6c:8e:cd:84:7a:3c:1b:87:ea:ce:8d:38:0e:3a:
7b:32:1c:71:6b:ff:dc:67:a6:cb:fc:eb:0c:50:d0:ae:8a:90:
52:6a:7f:61:67:78:19:bd:da:8d:c5:84:b0:4d:8d:be:36:94:
02:4e:49:73:ca:18:47:26:c6:53:15:46:a5:91:61:98:56:a1:
7d:34:ce:7e:35:66:f7:69:d7:43:3f:f1:33:cb:6c:d2:f5:d0:
27:61:13:b9:1d:c1:58:69:2a:60:ed:13:6e:25:7f:ea:68:e1:
75:07:31:21:87:b4:17:e1:18:28:fc:76:88:e9:55:72:3d:0f:
fd:9a:b2:af:c9:e4:f9:55:c2:82:10:4f:71:74:17:ee:41:e6:
3a:47:f7:23:8a:17:62:25:f3:25:94:48:5b:d1:fd:f3:b6:de:
d3:76:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:09 2026 by rpki-client