Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
File: FD6881C4438111ECBC63AC7BC4F9AE02.roa (raw, json)
Hash identifier: TWsM9G6XxnlHCDYwIZCl9HTZV+PcXLylk9RL4UYA+lA=
Subject key identifier: BE:5F:68:98:E8:2E:24:B0:42:05:EF:6C:22:67:A3:F3:57:5F:D3:C3
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 0917
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
Signing time: Tue 20 Oct 2026 09:43:43 +0000
ROA not before: Tue 20 Oct 2026 09:43:43 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 62610
IP address blocks: 129.227.98.0/24 maxlen: 24
129.227.100.0/24 maxlen: 24
129.227.101.0/24 maxlen: 24
129.227.127.0/24 maxlen: 24
129.227.139.0/24 maxlen: 24
129.227.143.0/24 maxlen: 24
156.59.73.0/24 maxlen: 24
156.59.123.0/24 maxlen: 24
156.59.146.0/24 maxlen: 24
156.59.184.0/24 maxlen: 24
162.128.8.0/24 maxlen: 24
162.128.21.0/24 maxlen: 24
162.128.45.0/24 maxlen: 24
162.128.82.0/24 maxlen: 24
162.128.83.0/24 maxlen: 24
162.128.84.0/24 maxlen: 24
162.128.85.0/24 maxlen: 24
162.128.86.0/24 maxlen: 24
162.128.87.0/24 maxlen: 24
162.128.88.0/24 maxlen: 24
162.128.89.0/24 maxlen: 24
162.128.90.0/24 maxlen: 24
162.128.91.0/24 maxlen: 24
162.128.92.0/24 maxlen: 24
162.128.93.0/24 maxlen: 24
162.128.94.0/24 maxlen: 24
162.128.95.0/24 maxlen: 24
162.128.101.0/24 maxlen: 24
162.128.113.0/24 maxlen: 24
162.128.132.0/24 maxlen: 24
162.128.146.0/24 maxlen: 24
162.128.215.0/24 maxlen: 24
162.128.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 21:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Oct 20 09:43:43 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ad737cf-d674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:cc:a4:5e:49:66:cf:d9:96:73:2f:2b:dd:
bb:44:67:17:0d:46:07:54:ae:5c:2d:3e:50:1e:d0:
f9:97:12:46:76:6a:c3:84:d6:e9:b5:c2:f4:f8:32:
97:86:27:b2:33:d6:33:e2:a3:38:c1:31:a3:51:af:
bc:e5:42:df:b5:e1:20:50:ca:0c:5a:bd:a0:7c:7c:
4b:17:8e:62:c0:b8:f0:1f:d1:28:58:df:c7:1e:cf:
e0:c2:97:71:51:c9:82:41:d9:c9:06:a1:53:ad:5f:
a6:fc:3b:40:9a:a6:43:dc:bd:f5:3d:01:ce:7b:12:
1a:35:29:11:12:58:0d:20:1f:a9:2f:b7:86:9d:4e:
b6:6e:d7:28:bc:c8:48:71:01:6c:6f:74:c0:5d:a5:
ad:e6:c5:5c:e4:19:3b:2d:5b:00:cf:14:5b:fd:de:
98:96:94:d8:23:e8:65:ff:74:d6:17:a3:cb:a6:af:
2c:4f:f8:29:f9:f5:94:2e:7a:77:60:cf:7d:e6:68:
91:99:b2:dd:30:f0:04:fc:63:23:e1:eb:3f:c7:4a:
d8:1a:2c:7f:0a:d5:d8:4b:64:fa:9a:a4:4e:42:1f:
1d:d1:c1:9d:86:d1:e2:f8:87:bf:e9:48:f7:08:4c:
59:4f:95:05:c9:f4:97:7d:43:4a:f5:02:0d:a8:69:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5F:68:98:E8:2E:24:B0:42:05:EF:6C:22:67:A3:F3:57:5F:D3:C3
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
129.227.98.0/24
129.227.100.0/23
129.227.127.0/24
129.227.139.0/24
129.227.143.0/24
156.59.73.0/24
156.59.123.0/24
156.59.146.0/24
156.59.184.0/24
162.128.8.0/24
162.128.21.0/24
162.128.45.0/24
162.128.82.0-162.128.95.255
162.128.101.0/24
162.128.113.0/24
162.128.132.0/24
162.128.146.0/24
162.128.215.0-162.128.216.255
Signature Algorithm: sha256WithRSAEncryption
98:81:1c:9d:a7:b8:28:9f:a6:b2:2a:84:38:6d:c1:7d:e0:db:
ea:a7:12:45:3a:80:44:d7:f8:0a:0b:8f:50:39:ea:c3:5d:2c:
8f:3c:6e:2e:66:5e:45:ae:db:fd:d1:3d:7c:b1:1c:2c:58:a7:
2d:57:29:66:92:fe:a3:21:d7:83:d5:33:76:c0:66:22:c2:09:
f3:84:57:5b:b5:0e:ca:31:41:1c:a9:ff:24:88:6d:f2:7a:b4:
f6:c4:82:af:59:94:17:1a:d3:de:fd:1a:48:4a:a5:90:a1:51:
ef:db:b0:59:e8:8c:1d:c9:5e:d3:79:88:f4:df:c9:cc:18:d5:
b4:a6:f7:48:f1:b9:83:e3:f1:96:d2:a5:dc:8b:d3:87:71:86:
59:b8:5f:aa:94:13:c8:00:29:31:ae:a2:46:80:2b:62:07:10:
19:6d:d9:a9:a4:1d:6e:57:1b:3a:ac:0f:0e:7e:91:7f:60:78:
1b:59:fc:df:c7:13:65:43:9c:97:10:c7:5e:84:51:d5:e3:2a:
8f:11:a1:ca:cc:38:9b:34:4e:b4:82:a7:8f:14:97:32:a1:50:
9e:47:fa:af:0d:da:91:05:3d:f2:b0:f0:d9:a2:60:66:a1:17:
60:0e:b1:98:8c:d8:ad:8c:4b:5f:a9:89:16:d4:dc:ac:7e:1b:
f2:46:d9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:36:56 2026 by rpki-client