Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
File: FD6881C4438111ECBC63AC7BC4F9AE02.roa (raw, json)
Hash identifier: FbloQUaozstoEP7DC26nUE03h9TJdNaweM1wTO5rZdA=
Subject key identifier: 44:39:F9:22:7A:FD:04:45:E3:F0:29:D2:6D:07:64:03:49:7E:BC:D1
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 08D1
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
Signing time: Tue 28 Jul 2026 22:43:59 +0000
ROA not before: Tue 28 Jul 2026 22:43:59 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 62610
IP address blocks: 129.227.127.0/24 maxlen: 24
129.227.139.0/24 maxlen: 24
129.227.143.0/24 maxlen: 24
156.59.73.0/24 maxlen: 24
156.59.123.0/24 maxlen: 24
156.59.146.0/24 maxlen: 24
156.59.184.0/24 maxlen: 24
162.128.82.0/24 maxlen: 24
162.128.83.0/24 maxlen: 24
162.128.84.0/24 maxlen: 24
162.128.85.0/24 maxlen: 24
162.128.86.0/24 maxlen: 24
162.128.87.0/24 maxlen: 24
162.128.88.0/24 maxlen: 24
162.128.89.0/24 maxlen: 24
162.128.90.0/24 maxlen: 24
162.128.91.0/24 maxlen: 24
162.128.92.0/24 maxlen: 24
162.128.93.0/24 maxlen: 24
162.128.94.0/24 maxlen: 24
162.128.95.0/24 maxlen: 24
162.128.101.0/24 maxlen: 24
162.128.113.0/24 maxlen: 24
162.128.132.0/24 maxlen: 24
162.128.146.0/24 maxlen: 24
162.128.215.0/24 maxlen: 24
162.128.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2257 (0x8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Jul 28 22:43:59 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6930ae-cdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:6a:6c:3e:69:a5:3a:e0:fd:9e:1a:43:d2:
d8:dc:57:a9:05:6a:58:86:e4:40:49:aa:24:c6:e1:
0d:8c:ef:4d:19:7e:71:d9:cd:b2:a2:95:a9:22:b0:
12:ec:2d:bd:de:ec:29:a9:0b:60:f4:2a:2a:64:b3:
3d:46:fd:73:3b:d4:eb:af:c0:ef:14:a1:f0:49:b1:
21:c4:20:25:b5:9b:e0:f2:eb:7d:86:a7:13:67:d2:
ee:06:b8:ff:0e:67:b4:2f:44:e3:b7:54:e5:7c:7f:
57:d7:fe:c6:00:35:76:dc:02:72:f7:af:1e:81:5e:
b1:6c:66:c6:1d:c4:b9:19:62:58:04:4c:da:8b:77:
5d:79:bd:3e:3a:bb:80:55:d4:06:b0:73:ef:c0:d9:
3f:9f:c6:20:62:2b:c4:d8:24:82:a7:cf:00:dc:20:
53:2e:9f:27:db:96:58:fe:56:6e:87:63:45:fe:69:
47:0f:05:b8:5c:70:c2:19:a8:e0:12:a8:b1:5f:2f:
d0:57:e0:34:dd:ca:70:c8:7e:7a:ae:e7:f4:24:0b:
fa:de:6b:af:4b:b4:48:bf:41:bb:32:1a:87:2b:eb:
12:d4:c7:fd:e8:b2:25:43:99:c2:ec:89:c5:d6:7f:
9d:73:f9:32:2b:37:eb:d9:8f:1f:d9:3a:96:96:2f:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:39:F9:22:7A:FD:04:45:E3:F0:29:D2:6D:07:64:03:49:7E:BC:D1
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
129.227.127.0/24
129.227.139.0/24
129.227.143.0/24
156.59.73.0/24
156.59.123.0/24
156.59.146.0/24
156.59.184.0/24
162.128.82.0-162.128.95.255
162.128.101.0/24
162.128.113.0/24
162.128.132.0/24
162.128.146.0/24
162.128.215.0-162.128.216.255
Signature Algorithm: sha256WithRSAEncryption
59:39:e4:73:c3:1a:1f:87:8d:4c:94:3b:f7:c4:f2:64:73:1d:
e8:3c:63:f7:a8:98:03:15:e6:c4:8c:14:d3:f7:74:ab:b5:07:
61:8a:68:e4:24:33:af:f4:de:15:8f:4d:c7:eb:96:8e:da:f0:
7d:c8:ee:c6:27:14:17:45:1c:ae:ff:eb:42:b5:36:28:b9:83:
51:27:3e:26:ce:49:1d:12:91:f4:c7:ff:5f:14:d7:7c:f1:90:
fc:7f:49:1f:22:9d:5a:d3:06:86:c4:8c:06:d6:db:76:d7:1d:
7f:66:63:a8:1f:cc:15:b4:98:73:b1:9a:3f:04:24:45:8e:2f:
b9:b6:84:80:1b:2b:7a:1a:20:0d:db:1d:5b:a6:9a:a6:db:fd:
72:94:27:3a:07:9b:c6:dd:2f:3a:57:ee:0c:27:65:85:5b:ad:
e8:23:b2:c2:08:f7:2c:c4:e8:f4:42:37:6a:87:4b:49:f4:6f:
a7:f4:70:c2:c4:71:36:b1:9f:10:67:74:cc:81:d5:52:8a:02:
23:41:82:90:f3:ea:e1:f5:ae:31:02:50:e6:06:a4:b5:06:20:
6d:1e:53:65:14:74:21:42:26:28:70:22:16:44:32:38:3f:50:
40:46:d2:78:28:f2:f4:97:8d:7d:2c:74:ba:84:b9:0f:5f:40:
6e:b9:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:45:20 2026 by rpki-client