Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/BC6CE974A76011F19E77BBC67BEE528E.roa
File: BC6CE974A76011F19E77BBC67BEE528E.roa (raw, json)
Hash identifier: WBg74k3aA0swlePdFjLpH7JHUBKooZ7R34qJXjEBIwA=
Subject key identifier: F5:DD:EF:A7:AD:3D:19:65:58:F8:52:67:FC:42:87:78:6E:AF:00:DC
Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial: 2092
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/BC6CE974A76011F19E77BBC67BEE528E.roa
Signing time: Thu 03 Sep 2026 06:28:54 +0000
ROA not before: Thu 03 Sep 2026 06:28:54 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 17501
IP address blocks: 27.34.0.0/17 maxlen: 24
103.211.148.0/23 maxlen: 24
103.254.184.0/22 maxlen: 22
103.254.184.0/24 maxlen: 24
103.254.185.0/24 maxlen: 24
103.254.186.0/24 maxlen: 24
103.254.187.0/24 maxlen: 24
124.41.192.0/18 maxlen: 24
139.5.68.0/22 maxlen: 24
139.5.72.0/22 maxlen: 24
202.79.32.0/19 maxlen: 24
202.129.248.0/22 maxlen: 24
202.166.192.0/19 maxlen: 24
2400:1a00::/32 maxlen: 32
2400:1a00::/36 maxlen: 36
2400:1a00::/48 maxlen: 48
2400:1a00:4::/48 maxlen: 48
2400:1a00:1000::/36 maxlen: 36
2400:1a00:2000::/36 maxlen: 36
2400:1a00:3000::/36 maxlen: 36
2400:1a00:4000::/36 maxlen: 36
2400:1a00:5000::/36 maxlen: 36
2400:1a00:6000::/36 maxlen: 36
2400:1a00:7000::/36 maxlen: 36
2400:1a00:8000::/36 maxlen: 36
2400:1a00:8000::/48 maxlen: 48
2400:1a00:9000::/36 maxlen: 36
2400:1a00:a000::/36 maxlen: 36
2400:1a00:b000::/36 maxlen: 36
2400:1a00:b000::/40 maxlen: 40
2400:1a00:b100::/40 maxlen: 40
2400:1a00:ba00::/40 maxlen: 40
2400:1a00:bb00::/40 maxlen: 40
2400:1a00:bc00::/40 maxlen: 40
2400:1a00:bd00::/40 maxlen: 40
2400:1a00:c000::/36 maxlen: 36
2400:1a00:d000::/36 maxlen: 36
2400:1a00:d000::/40 maxlen: 40
2400:1a00:d100::/40 maxlen: 40
2400:1a00:d200::/40 maxlen: 40
2400:1a00:d300::/40 maxlen: 40
2400:1a00:d400::/40 maxlen: 40
2400:1a00:d500::/40 maxlen: 40
2400:1a00:d600::/40 maxlen: 40
2400:1a00:e000::/36 maxlen: 36
2400:1a00:efff::/48 maxlen: 48
2400:1a00:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8338 (0x2092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Validity
Not Before: Sep 3 06:28:54 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9913a6-e330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:e2:31:96:70:f6:1c:36:35:04:5a:3d:1b:
3b:ba:ad:a6:c6:e1:cc:20:68:8e:c6:06:98:b6:a2:
40:fa:e8:37:fd:51:76:af:fb:34:75:63:1b:c4:26:
1c:9d:08:79:5f:61:08:fb:b4:b1:9c:d3:95:3c:c9:
d7:dd:20:b0:ab:65:c0:cd:82:ab:06:7b:4c:4f:61:
8d:a5:0f:30:57:3f:d7:fd:83:71:96:61:68:74:0d:
d2:47:83:bb:c4:a6:8c:a7:8d:47:d7:da:ae:a3:45:
dc:72:f3:55:c6:63:e0:df:ad:bb:04:d2:d5:0a:ec:
0a:e2:a4:06:af:7a:9e:92:13:2a:bf:d7:8c:e2:1e:
3f:d8:d2:cd:98:a7:6a:6d:cc:ff:99:86:c5:2d:e1:
ac:d6:ab:45:b9:59:56:76:7b:e8:c7:ff:bc:72:8d:
ad:c8:7a:3c:23:0d:61:37:11:d5:b7:f4:90:70:cf:
d0:09:c8:59:6a:63:c1:3b:cd:f6:5d:4a:b1:35:4c:
df:61:f5:ae:19:6c:d0:6f:d7:b4:41:55:d5:e0:8b:
c0:05:50:5c:21:fe:de:0f:bc:ab:bb:00:16:c7:cb:
a8:f0:d4:8e:9a:f6:2f:38:dc:5c:a3:31:ce:29:42:
90:3f:1d:87:77:d4:b6:5a:fd:c9:5e:8a:de:76:ef:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DD:EF:A7:AD:3D:19:65:58:F8:52:67:FC:42:87:78:6E:AF:00:DC
X509v3 Authority Key Identifier:
keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/BC6CE974A76011F19E77BBC67BEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
27.34.0.0/17
103.211.148.0/23
103.254.184.0/22
124.41.192.0/18
139.5.68.0-139.5.75.255
202.79.32.0/19
202.129.248.0/22
202.166.192.0/19
IPv6:
2400:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
6b:98:3c:67:61:12:ca:69:d5:0d:e7:f0:18:da:cd:13:57:56:
6e:2a:dc:78:87:b9:cd:8e:40:7f:4e:a5:8f:a4:2d:da:f8:90:
f2:93:f3:b9:08:2b:bf:e8:bc:06:b0:7d:e5:56:96:45:4c:71:
da:85:81:d5:c6:da:df:ac:65:16:cf:e0:be:24:40:28:3a:16:
d8:1f:ee:03:cd:a1:b3:f2:71:4a:6f:bf:91:47:64:9a:de:0e:
3f:ed:bc:1c:d6:b2:42:d1:09:fd:1b:06:a9:0a:d5:a4:be:5e:
a4:d9:4b:73:72:84:9a:ee:1c:50:57:52:db:71:1e:a1:1d:34:
02:18:70:29:9d:ac:da:8f:e5:b2:ac:cc:1b:86:b8:f1:75:c0:
53:2d:63:95:52:ec:f7:3a:21:4c:db:38:fe:5b:2a:53:ba:2a:
fa:3c:8f:21:84:cb:db:95:00:d1:3f:fd:38:bc:21:2f:c0:5f:
a7:83:40:b1:0d:09:8e:68:b4:42:98:a7:d9:c9:3c:db:22:4a:
4b:d0:e1:8a:4c:11:0b:b6:36:93:84:f4:a5:49:8a:a0:8b:95:
a0:c9:0b:75:ae:18:e1:99:66:66:02:f8:7b:7f:4d:7b:96:67:
3d:26:01:6f:80:e9:62:e4:33:72:6e:86:93:01:ac:26:69:d8:
81:68:7d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:03:17 2026 by rpki-client