Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
File: CD692AAEF65311EAA7E5A684C4F9AE02.roa (raw, json)
Hash identifier: sW0ZxDMHN3mSVRuPDp2lzncwI3ChVfyX5hfiFYy1oAg=
Subject key identifier: CF:32:85:57:01:D7:E7:A6:37:34:5F:8A:F7:BB:1C:94:51:EC:4F:F1
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 358A
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:36:12 +0000
ROA not before: Fri 18 Apr 2025 15:31:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45671
IP address blocks: 27.50.64.0/19 maxlen: 24
27.111.80.0/24 maxlen: 24
27.111.85.0/24 maxlen: 24
27.111.87.0/24 maxlen: 24
27.111.90.0/23 maxlen: 24
43.242.68.0/22 maxlen: 24
43.250.204.0/22 maxlen: 24
45.65.12.0/24 maxlen: 24
103.2.196.0/22 maxlen: 24
103.11.52.0/22 maxlen: 24
103.12.8.0/23 maxlen: 24
103.12.10.0/24 maxlen: 24
103.13.100.0/22 maxlen: 24
103.13.186.0/23 maxlen: 24
103.24.14.0/24 maxlen: 24
103.227.28.0/23 maxlen: 24
103.227.30.0/23 maxlen: 24
103.235.52.0/22 maxlen: 24
103.248.189.0/24 maxlen: 24
103.248.190.0/24 maxlen: 24
103.248.191.0/24 maxlen: 24
103.255.249.0/24 maxlen: 24
114.141.192.0/24 maxlen: 24
114.141.193.0/24 maxlen: 24
114.141.194.0/24 maxlen: 24
114.141.195.0/24 maxlen: 24
114.141.196.0/22 maxlen: 24
114.141.200.0/22 maxlen: 24
117.20.0.0/20 maxlen: 24
117.120.8.0/21 maxlen: 24
118.127.0.0/18 maxlen: 24
163.53.232.0/22 maxlen: 24
180.92.192.0/21 maxlen: 24
202.60.64.0/20 maxlen: 24
202.60.80.0/20 maxlen: 24
202.125.32.0/20 maxlen: 20
202.130.32.0/22 maxlen: 24
202.131.88.0/24 maxlen: 24
202.131.89.0/24 maxlen: 24
202.131.90.0/24 maxlen: 24
202.131.91.0/24 maxlen: 24
202.131.92.0/24 maxlen: 24
202.131.93.0/24 maxlen: 24
202.131.94.0/24 maxlen: 24
203.26.196.0/22 maxlen: 24
203.28.51.0/24 maxlen: 24
221.121.128.0/19 maxlen: 24
223.252.0.0/18 maxlen: 24
223.252.96.0/20 maxlen: 24
2400:8100::/32 maxlen: 32
2400:8100:6afc::/48 maxlen: 48
2400:d400:1::/48 maxlen: 48
2400:d400:2::/48 maxlen: 48
2400:d400:6::/48 maxlen: 48
2400:d400:18::/48 maxlen: 48
2400:d400:b97::/48 maxlen: 48
2400:d400:d51::/48 maxlen: 48
2400:d400:1008::/48 maxlen: 48
2400:d400:1337::/48 maxlen: 48
2400:d400:5648::/48 maxlen: 48
2400:d400:9897::/48 maxlen: 48
2400:d400:9898::/48 maxlen: 48
2400:d400:b00b::/48 maxlen: 48
2400:d400:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13706 (0x358a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Validity
Not Before: Apr 18 15:31:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a440cc-c0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:e8:bf:05:82:ec:d1:c3:a5:ca:28:32:74:
07:12:0a:75:16:31:ce:a7:6c:fc:00:86:57:73:c6:
ca:14:e7:aa:a1:2a:76:23:b8:e1:75:92:df:00:7e:
4b:aa:22:77:99:33:c8:a7:8f:01:89:50:52:bb:b2:
ca:e2:1f:d2:9a:14:51:25:7c:b4:ab:2c:8c:ec:38:
31:63:f0:98:1d:ea:d2:64:1b:8e:6a:d3:ef:c5:90:
54:8d:54:be:ed:82:13:86:fd:96:35:31:b4:cf:3a:
0c:f7:a7:ac:08:79:34:a3:dc:3f:e7:b4:c0:62:3e:
d2:f5:30:53:f9:5b:cc:b5:5d:47:20:22:0c:64:76:
8e:17:44:2c:63:08:55:be:d4:f1:6f:30:90:0f:ac:
b1:52:38:5f:0c:7d:78:17:6b:af:6e:26:75:5b:af:
bc:a8:8b:93:78:49:c0:6d:40:80:fc:87:93:70:82:
04:3c:54:e3:67:1e:2d:32:1d:e8:69:9f:ac:eb:ba:
e4:b2:b1:96:ec:62:6b:7e:5a:e0:2e:c1:a9:d7:36:
86:65:7d:28:05:4a:b3:36:0b:3c:ab:b2:7e:f5:71:
77:81:45:68:9c:d7:19:70:59:7c:f5:2f:6d:d4:63:
23:ed:0d:20:89:5b:fe:b6:20:dd:ac:65:2b:48:b6:
ff:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:32:85:57:01:D7:E7:A6:37:34:5F:8A:F7:BB:1C:94:51:EC:4F:F1
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.50.64.0/19
27.111.80.0/24
27.111.85.0/24
27.111.87.0/24
27.111.90.0/23
43.242.68.0/22
43.250.204.0/22
45.65.12.0/24
103.2.196.0/22
103.11.52.0/22
103.12.8.0-103.12.10.255
103.13.100.0/22
103.13.186.0/23
103.24.14.0/24
103.227.28.0/22
103.235.52.0/22
103.248.189.0-103.248.191.255
103.255.249.0/24
114.141.192.0-114.141.203.255
117.20.0.0/20
117.120.8.0/21
118.127.0.0/18
163.53.232.0/22
180.92.192.0/21
202.60.64.0/19
202.125.32.0/20
202.130.32.0/22
202.131.88.0-202.131.94.255
203.26.196.0/22
203.28.51.0/24
221.121.128.0/19
223.252.0.0/18
223.252.96.0/20
IPv6:
2400:8100::/32
2400:d400:1::-2400:d400:2:ffff:ffff:ffff:ffff:ffff
2400:d400:6::/48
2400:d400:18::/48
2400:d400:b97::/48
2400:d400:d51::/48
2400:d400:1008::/48
2400:d400:1337::/48
2400:d400:5648::/48
2400:d400:9897::-2400:d400:9898:ffff:ffff:ffff:ffff:ffff
2400:d400:b00b::/48
2400:d400:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
01:a9:91:fc:92:88:eb:de:ee:d2:53:b1:6d:30:b1:eb:5b:a9:
30:7b:f5:3c:0e:e3:c2:95:1a:99:b6:dc:2b:4d:20:52:e6:8e:
47:a3:fc:7a:7f:27:7f:f1:d6:75:da:ee:24:40:40:52:22:8f:
57:41:ef:cd:fd:b7:86:f5:7b:e2:15:6b:ad:93:35:30:2b:61:
44:61:31:8e:93:f5:db:31:9f:4d:bd:d4:67:d0:8e:7f:cc:1e:
5d:4b:fe:9a:08:2a:48:05:ef:51:ee:f1:32:58:b7:0a:30:2b:
14:49:1b:34:cb:58:a9:d3:3a:9a:62:b7:14:c6:c2:a8:53:80:
81:fe:81:e5:9f:d4:a4:80:f7:71:30:f2:97:bd:8b:70:1c:ec:
f5:56:f8:40:59:50:84:1b:a2:06:e1:cd:61:fc:91:51:60:e0:
86:79:a3:d4:ab:be:c5:3e:d7:f0:01:b8:c8:64:c3:0e:d5:22:
34:c3:8c:c7:a5:58:51:e0:74:3d:99:12:af:88:84:e7:cc:0f:
84:12:f5:de:e4:58:f1:ba:37:d5:e4:32:28:ce:6f:3b:20:2f:
2e:a6:2d:60:0a:11:73:36:33:6c:72:e6:95:60:4e:c2:ce:5f:
ac:ae:cc:9e:79:e4:29:f4:74:71:3f:0e:8d:0d:c9:61:0f:66:
e5:28:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:27 2026 by rpki-client