Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/844E61B635B811EE96EDCC53C4F9AE02.roa
File: 844E61B635B811EE96EDCC53C4F9AE02.roa (raw, json)
Hash identifier: FMM9PWbU/oYp9w4GxmMR0Bnc2OElJZUE63nkK8Lt4YE=
Subject key identifier: 4B:CC:47:74:D1:F5:C3:AB:F1:DD:8E:F2:2B:41:EC:67:A5:77:F8:36
Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial: 23FC
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/844E61B635B811EE96EDCC53C4F9AE02.roa
Signing time: Tue 31 Mar 2026 16:20:37 +0000
ROA not before: Tue 31 Mar 2026 16:20:37 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9299
IP address blocks: 117.58.192.0/19 maxlen: 19
119.111.0.0/16 maxlen: 16
119.111.0.0/19 maxlen: 20
119.111.5.0/24 maxlen: 24
119.111.16.0/24 maxlen: 24
119.111.17.0/24 maxlen: 24
119.111.18.0/24 maxlen: 24
119.111.19.0/24 maxlen: 24
119.111.23.0/24 maxlen: 24
119.111.24.0/24 maxlen: 24
119.111.25.0/24 maxlen: 24
119.111.32.0/19 maxlen: 20
119.111.33.0/24 maxlen: 24
119.111.52.0/24 maxlen: 24
119.111.64.0/19 maxlen: 20
119.111.67.0/24 maxlen: 24
119.111.68.0/24 maxlen: 24
119.111.69.0/24 maxlen: 24
119.111.70.0/24 maxlen: 24
119.111.74.0/24 maxlen: 24
119.111.76.0/24 maxlen: 24
119.111.83.0/24 maxlen: 24
119.111.86.0/24 maxlen: 24
119.111.89.0/24 maxlen: 24
119.111.91.0/24 maxlen: 24
119.111.96.0/19 maxlen: 20
119.111.105.0/24 maxlen: 24
119.111.128.0/19 maxlen: 20
119.111.136.0/24 maxlen: 24
119.111.160.0/19 maxlen: 20
119.111.192.0/19 maxlen: 20
119.111.224.0/19 maxlen: 20
210.1.96.0/19 maxlen: 20
210.1.128.0/20 maxlen: 20
210.1.135.0/24 maxlen: 24
210.1.139.0/24 maxlen: 24
210.23.96.0/19 maxlen: 19
210.23.98.0/24 maxlen: 24
210.23.99.0/24 maxlen: 24
210.23.105.0/24 maxlen: 24
210.23.107.0/24 maxlen: 24
210.23.119.0/24 maxlen: 24
210.23.160.0/19 maxlen: 19
210.23.160.0/20 maxlen: 20
210.23.176.0/20 maxlen: 20
210.23.192.0/18 maxlen: 18
210.23.192.0/19 maxlen: 19
210.23.213.0/24 maxlen: 24
210.23.215.0/24 maxlen: 24
210.23.217.0/24 maxlen: 24
210.23.224.0/19 maxlen: 20
210.23.225.0/24 maxlen: 24
221.121.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 15:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9212 (0x23fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Validity
Not Before: Mar 31 16:20:37 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cbf454-f06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:51:22:3d:1e:89:22:83:32:9b:bd:78:5d:
6d:49:96:36:1a:12:66:1f:f2:3c:e5:7e:f7:ee:4f:
de:9a:0c:47:d2:80:a8:d5:80:8d:1b:17:41:e1:c1:
29:98:f2:43:e3:2b:62:89:e7:2d:d8:e5:78:d4:f1:
07:e3:0e:2c:bc:96:c5:72:70:d5:30:03:75:6c:cf:
dc:24:bb:9e:59:e1:a0:ab:8e:9f:ba:c3:fc:02:7a:
48:d1:30:fe:12:a5:b1:2f:a7:94:d4:aa:7f:36:c3:
d2:7e:a4:e8:7b:58:cd:44:74:12:8d:6f:90:74:d8:
5a:34:30:07:c5:77:ff:a2:07:b7:4f:09:33:c0:11:
dc:70:ee:78:4b:a0:2a:e3:fa:54:41:58:f8:f6:a6:
02:c5:9d:90:fc:4f:59:86:b4:81:06:46:d8:75:ba:
43:d7:9f:ba:dc:58:25:6e:a8:3e:d2:f2:74:8e:3f:
79:82:90:d5:ed:20:93:a6:f1:ad:ac:05:96:17:2d:
54:d4:fd:9e:89:dd:4a:53:bb:0a:d5:34:63:0e:ec:
8a:55:fc:03:1e:66:95:69:73:b1:8b:fb:5d:bf:3e:
00:68:80:fd:c1:57:88:1e:ea:e9:60:a8:29:40:e9:
80:82:6c:4e:ef:c0:d8:54:55:a6:82:5a:04:8b:34:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CC:47:74:D1:F5:C3:AB:F1:DD:8E:F2:2B:41:EC:67:A5:77:F8:36
X509v3 Authority Key Identifier:
keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/844E61B635B811EE96EDCC53C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.58.192.0/19
119.111.0.0/16
210.1.96.0-210.1.143.255
210.23.96.0/19
210.23.160.0-210.23.255.255
221.121.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:4a:da:81:f8:46:54:af:b1:ad:2e:5c:9e:0a:48:1a:ed:1a:
84:1b:d9:d7:95:d4:0f:22:f7:6d:15:77:9c:4a:d1:3e:2f:0d:
8c:36:22:fb:76:bf:71:21:e8:b2:57:2f:d6:ad:6b:ec:62:c8:
25:92:4e:9f:b2:ba:d4:79:f0:b5:5f:a7:b5:5d:0b:b5:9d:f0:
70:8e:10:ec:01:3a:14:66:86:8e:af:b9:f7:b0:3e:72:c8:0e:
44:e8:78:c0:56:d0:3e:58:6f:38:23:31:6f:48:8d:47:f7:4c:
fc:d3:bb:d9:96:a6:f8:1a:e7:40:ed:44:2d:98:03:e6:3e:d4:
75:f6:e7:d4:23:b2:b2:eb:9e:71:a0:c6:c0:67:10:7e:f9:20:
31:19:39:ed:96:71:5b:2d:2e:b1:ad:3f:48:65:09:26:f7:65:
9d:e0:a9:44:81:2e:e0:10:54:71:13:bd:76:cb:8e:55:af:2d:
ca:97:a1:ad:34:5e:6c:2c:e4:15:d7:aa:c7:dc:bf:9b:0e:5a:
6d:98:eb:3d:99:f6:94:82:7b:bc:eb:46:4c:c7:16:d4:37:80:
df:38:cf:05:9a:7f:28:c4:9d:25:48:89:46:e3:6b:c5:7a:01:
54:56:cc:4a:69:bb:93:ec:88:21:a2:64:80:da:98:fd:20:f8:
92:6d:d6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:51 2026 by rpki-client