Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/90C8D27021C211E786829418C4F9AE02.roa
File: 90C8D27021C211E786829418C4F9AE02.roa (raw, json)
Hash identifier: BIi83IQ7eYgpac+6JC2FcGYhkLEvBbvlv/VGfN/XOPA=
Subject key identifier: A7:07:D0:58:CA:B6:5A:27:D5:20:08:90:BA:E3:1F:87:F5:AF:78:D4
Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Certificate serial: 1BB3
Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/90C8D27021C211E786829418C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:15:05 +0000
ROA not before: Sun 18 May 2025 16:46:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45766
IP address blocks: 45.127.48.0/22 maxlen: 22
45.127.48.0/22 maxlen: 24
45.127.48.0/23 maxlen: 23
45.127.48.0/24 maxlen: 24
45.127.49.0/24 maxlen: 24
45.127.50.0/23 maxlen: 23
45.127.50.0/24 maxlen: 24
45.127.51.0/24 maxlen: 24
103.40.226.0/23 maxlen: 23
103.40.226.0/23 maxlen: 24
103.40.226.0/24 maxlen: 24
103.40.227.0/24 maxlen: 24
103.51.2.0/23 maxlen: 23
103.51.2.0/23 maxlen: 24
103.51.2.0/24 maxlen: 24
103.51.3.0/24 maxlen: 24
113.21.228.0/22 maxlen: 22
113.21.228.0/22 maxlen: 24
113.21.228.0/23 maxlen: 23
113.21.228.0/24 maxlen: 24
113.21.229.0/24 maxlen: 24
113.21.230.0/23 maxlen: 23
113.21.230.0/24 maxlen: 24
113.21.231.0/24 maxlen: 24
2400:f940::/32 maxlen: 32
2400:f940::/32 maxlen: 34
2400:f940::/33 maxlen: 33
2400:f940::/34 maxlen: 34
2400:f940::/48 maxlen: 48
2400:f940:10::/48 maxlen: 48
2400:f940:11::/48 maxlen: 48
2400:f940:12::/48 maxlen: 48
2400:f940:4000::/34 maxlen: 34
2400:f940:8000::/33 maxlen: 33
2400:f940:8000::/34 maxlen: 34
2400:f940:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:19:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7091 (0x1bb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Validity
Not Before: May 18 16:46:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40398-eff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:bd:1e:92:f6:4e:e8:5f:77:33:0e:c4:07:
08:5f:63:21:27:08:5e:3c:4b:86:45:b7:92:15:97:
cf:03:f1:3d:df:ed:f1:53:dc:69:f2:86:68:e7:ba:
17:a0:90:c3:33:de:7d:07:59:6b:e0:fd:53:7f:ae:
98:90:3f:36:42:74:ba:4b:b3:5c:14:99:2a:c6:6d:
b2:cb:a2:1b:3b:44:eb:b4:f0:5c:50:d5:48:ce:25:
e9:07:95:61:24:4c:aa:70:8f:89:f8:1f:50:89:10:
f6:4a:9e:4c:62:1f:78:7a:53:58:39:3c:72:9f:f0:
dd:90:62:9f:c8:d7:e9:80:73:bc:f8:0b:b0:61:85:
a0:6e:02:76:df:55:22:dd:1d:eb:df:bb:28:ea:3a:
ed:3c:39:8b:ce:bf:7a:08:8f:a0:85:7f:03:43:ca:
81:cf:5a:f1:1a:dd:cb:38:2f:f8:58:f7:f2:80:e3:
72:23:54:af:34:b3:a9:97:0a:52:ef:9b:f0:c4:15:
39:71:66:3a:04:5f:79:5b:53:78:af:ae:03:66:29:
64:61:03:b6:14:23:85:4e:9f:19:17:a2:22:5b:ed:
a0:10:f8:fa:a4:96:e8:12:1b:ca:3b:be:c4:37:44:
93:32:12:d5:66:e9:43:5f:28:6f:19:6b:09:9a:f3:
7d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:07:D0:58:CA:B6:5A:27:D5:20:08:90:BA:E3:1F:87:F5:AF:78:D4
X509v3 Authority Key Identifier:
keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/90C8D27021C211E786829418C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.127.48.0/22
103.40.226.0/23
103.51.2.0/23
113.21.228.0/22
IPv6:
2400:f940::/32
Signature Algorithm: sha256WithRSAEncryption
40:ae:ca:40:1d:3f:29:b1:b0:c8:04:d7:df:3d:b5:03:6d:e3:
20:ce:27:f7:21:0e:29:89:eb:37:63:88:c6:fb:7a:5a:6a:18:
cb:11:53:7f:33:cc:ac:1a:9a:36:ec:1c:76:18:49:81:d9:4e:
f1:7b:24:e5:3d:47:09:08:38:6f:bb:0e:cf:a0:ac:33:7d:63:
71:ba:89:f4:bf:e4:6a:12:21:07:bc:11:9f:db:39:fd:6b:16:
7a:4a:21:28:71:a2:03:52:1d:7b:fb:d1:a1:8e:73:70:12:40:
2e:d9:db:f6:7a:9d:3d:45:ea:87:3d:85:ea:fd:c0:5d:d4:52:
0e:1c:f6:5d:35:b3:ed:b8:60:6a:27:4f:a7:34:77:68:fc:c8:
00:8e:17:d8:e2:d0:7b:b7:ef:45:3b:04:85:6c:6e:0b:80:06:
6d:4e:15:67:20:be:dd:0e:cf:e9:b3:cf:b0:01:76:7a:b1:9f:
56:b5:96:91:69:4f:b8:f6:94:c8:7f:5b:ff:9e:71:64:55:14:
0c:b3:5f:d5:60:c8:25:64:d7:42:d8:83:a7:89:8d:c4:ba:08:
3d:02:b5:34:5c:7e:ab:2d:93:18:9e:f5:c9:e3:76:e3:ef:0f:
32:d1:4f:30:2b:84:aa:6d:e8:12:42:9b:21:2c:74:56:a7:63:
52:ef:7b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:19 2026 by rpki-client