Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
File: CD692AAEF65311EAA7E5A684C4F9AE02.roa (raw, json)
Hash identifier: HFHk/hNjIZnEhj8GBFjikKlxt61+w/Nh1n84ChzN2oY=
Subject key identifier: 31:67:ED:79:9A:44:7F:B9:21:FB:20:37:1D:6C:BD:BA:B8:8F:A1:00
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 35A6
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
Signing time: Fri 10 Apr 2026 15:13:37 +0000
ROA not before: Fri 10 Apr 2026 15:13:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45671
IP address blocks: 27.50.64.0/19 maxlen: 24
27.111.80.0/24 maxlen: 24
27.111.85.0/24 maxlen: 24
27.111.87.0/24 maxlen: 24
27.111.90.0/23 maxlen: 24
43.242.68.0/22 maxlen: 24
43.250.204.0/22 maxlen: 24
45.65.12.0/24 maxlen: 24
103.2.196.0/22 maxlen: 24
103.11.52.0/22 maxlen: 24
103.12.8.0/23 maxlen: 24
103.12.10.0/24 maxlen: 24
103.13.100.0/22 maxlen: 24
103.13.186.0/23 maxlen: 24
103.24.14.0/24 maxlen: 24
103.227.28.0/23 maxlen: 24
103.227.30.0/23 maxlen: 24
103.235.52.0/22 maxlen: 24
103.248.189.0/24 maxlen: 24
103.248.190.0/24 maxlen: 24
103.248.191.0/24 maxlen: 24
103.255.249.0/24 maxlen: 24
114.141.192.0/24 maxlen: 24
114.141.193.0/24 maxlen: 24
114.141.194.0/24 maxlen: 24
114.141.195.0/24 maxlen: 24
114.141.196.0/22 maxlen: 24
114.141.200.0/22 maxlen: 24
117.20.0.0/20 maxlen: 24
117.120.8.0/21 maxlen: 24
118.127.0.0/18 maxlen: 24
163.53.232.0/22 maxlen: 24
180.92.192.0/21 maxlen: 24
202.60.64.0/20 maxlen: 24
202.60.80.0/20 maxlen: 24
202.125.32.0/20 maxlen: 20
202.130.32.0/22 maxlen: 24
202.131.88.0/24 maxlen: 24
202.131.89.0/24 maxlen: 24
202.131.90.0/24 maxlen: 24
202.131.91.0/24 maxlen: 24
202.131.92.0/24 maxlen: 24
202.131.93.0/24 maxlen: 24
202.131.94.0/24 maxlen: 24
203.26.196.0/22 maxlen: 24
203.28.51.0/24 maxlen: 24
221.121.128.0/19 maxlen: 24
223.252.0.0/18 maxlen: 24
223.252.96.0/20 maxlen: 24
2400:8100::/32 maxlen: 32
2400:8100:6afc::/48 maxlen: 48
2400:d400:1::/48 maxlen: 48
2400:d400:2::/48 maxlen: 48
2400:d400:6::/48 maxlen: 48
2400:d400:18::/48 maxlen: 48
2400:d400:b97::/48 maxlen: 48
2400:d400:d51::/48 maxlen: 48
2400:d400:1008::/48 maxlen: 48
2400:d400:1337::/48 maxlen: 48
2400:d400:5648::/48 maxlen: 48
2400:d400:9897::/48 maxlen: 48
2400:d400:9898::/48 maxlen: 48
2400:d400:b00b::/48 maxlen: 48
2400:d400:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:57:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13734 (0x35a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Validity
Not Before: Apr 10 15:13:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d913a1-36a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2e:11:d8:2d:64:37:47:6c:49:73:45:48:a2:
20:65:2c:c8:7d:36:b5:05:5b:82:e3:dd:e1:00:5c:
9e:b1:c6:d9:e4:b8:99:f4:80:1a:04:37:1a:9f:51:
4c:da:fc:cc:81:5b:fb:4d:e9:a4:e9:7b:c7:19:0f:
04:c0:3e:90:18:03:18:58:56:38:8b:f7:18:63:8f:
be:2c:c1:8f:89:29:13:7b:fc:d0:36:ae:f6:e7:51:
4c:de:c3:a1:a2:b9:59:6b:08:a7:03:ee:6c:d8:78:
69:59:88:16:b9:85:b1:a9:ac:a3:07:85:47:0b:02:
58:26:60:14:5a:fd:81:40:2a:4f:7c:c4:c1:56:e1:
86:8e:24:b6:79:91:0a:7e:b2:a7:39:85:8b:ec:b0:
1c:14:60:a5:63:d7:2c:7b:14:3e:4a:9e:1a:9d:de:
ef:af:73:c2:33:91:13:9c:21:78:c2:b4:f2:ed:ba:
e5:fe:3e:f5:66:a9:ae:dc:df:1e:da:40:d2:73:1f:
e8:86:22:d7:f0:76:19:19:5b:e1:b7:75:a6:14:f1:
07:cb:f3:d5:9a:87:74:f2:f3:16:5b:92:a1:de:cc:
c1:f7:bb:ca:b3:d1:68:b8:53:89:e1:a6:7c:58:fb:
d7:55:07:5d:48:58:8f:e2:86:a7:77:06:4f:5b:a7:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:ED:79:9A:44:7F:B9:21:FB:20:37:1D:6C:BD:BA:B8:8F:A1:00
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.50.64.0/19
27.111.80.0/24
27.111.85.0/24
27.111.87.0/24
27.111.90.0/23
43.242.68.0/22
43.250.204.0/22
45.65.12.0/24
103.2.196.0/22
103.11.52.0/22
103.12.8.0-103.12.10.255
103.13.100.0/22
103.13.186.0/23
103.24.14.0/24
103.227.28.0/22
103.235.52.0/22
103.248.189.0-103.248.191.255
103.255.249.0/24
114.141.192.0-114.141.203.255
117.20.0.0/20
117.120.8.0/21
118.127.0.0/18
163.53.232.0/22
180.92.192.0/21
202.60.64.0/19
202.125.32.0/20
202.130.32.0/22
202.131.88.0-202.131.94.255
203.26.196.0/22
203.28.51.0/24
221.121.128.0/19
223.252.0.0/18
223.252.96.0/20
IPv6:
2400:8100::/32
2400:d400:1::-2400:d400:2:ffff:ffff:ffff:ffff:ffff
2400:d400:6::/48
2400:d400:18::/48
2400:d400:b97::/48
2400:d400:d51::/48
2400:d400:1008::/48
2400:d400:1337::/48
2400:d400:5648::/48
2400:d400:9897::-2400:d400:9898:ffff:ffff:ffff:ffff:ffff
2400:d400:b00b::/48
2400:d400:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
58:39:4c:f5:54:fa:55:e3:12:96:84:2b:14:52:b2:02:b9:a7:
86:6e:e3:3d:d4:0c:2d:90:9b:f4:52:29:a9:0a:e3:5c:cf:17:
ad:ee:8c:8c:6c:08:96:91:e5:08:c8:3f:18:b5:bf:96:c9:fb:
4f:6e:73:bc:4f:8d:83:fe:51:a6:9e:18:96:c3:c0:70:fd:86:
09:47:55:6b:1e:2a:aa:95:68:11:b7:ab:00:5a:b0:31:9a:df:
bb:88:5a:a4:df:2a:44:f9:d7:e0:85:98:ea:13:9a:af:b0:18:
1e:d3:ab:c3:b9:3c:98:55:a5:f9:da:c1:83:86:ca:32:e4:79:
00:eb:02:41:d2:66:b7:e0:19:1e:15:02:02:b7:97:4f:64:12:
67:87:c4:e2:f4:6c:ac:43:d6:71:0a:c9:a9:a4:54:1c:cb:97:
d4:27:b9:06:23:0c:96:cc:1c:52:98:a0:39:01:48:8b:5a:6e:
94:20:07:11:b8:7b:8d:b0:4b:23:1f:16:a0:9a:48:e3:66:4b:
c4:8a:d0:6d:d8:9e:db:33:3f:a8:3b:92:83:16:b2:9c:4f:c0:
dc:45:f0:9e:59:a4:c1:e8:95:75:4c:cd:af:d9:e2:33:44:7f:
31:59:2c:78:fb:86:bf:38:1c:31:a6:41:50:ae:58:dd:4e:a7:
66:77:03:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:54:52 2026 by rpki-client