Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/E9C84708F67911F0B1D76CE5736F56BC.roa
File: E9C84708F67911F0B1D76CE5736F56BC.roa (raw, json)
Hash identifier: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=
Subject key identifier: 5E:C2:C8:B6:D8:D8:3A:0B:97:5F:F6:D7:8D:71:D6:83:4A:6F:CD:43
Certificate issuer: /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial: 2F
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/E9C84708F67911F0B1D76CE5736F56BC.roa
Signing time: Sun 01 Mar 2026 05:55:24 +0000
ROA not before: Wed 21 Jan 2026 03:33:12 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 45474
IP address blocks: 27.126.192.0/18 maxlen: 18
27.126.192.0/23 maxlen: 24
27.126.194.0/23 maxlen: 24
27.126.196.0/23 maxlen: 24
27.126.198.0/23 maxlen: 24
27.126.200.0/23 maxlen: 24
27.126.202.0/23 maxlen: 24
27.126.204.0/23 maxlen: 24
27.126.206.0/23 maxlen: 24
27.126.208.0/23 maxlen: 24
27.126.210.0/23 maxlen: 24
27.126.212.0/23 maxlen: 24
27.126.214.0/23 maxlen: 24
27.126.216.0/23 maxlen: 24
27.126.218.0/23 maxlen: 24
27.126.220.0/23 maxlen: 24
27.126.222.0/23 maxlen: 24
27.126.224.0/23 maxlen: 24
27.126.226.0/23 maxlen: 24
27.126.228.0/23 maxlen: 24
27.126.230.0/23 maxlen: 24
27.126.232.0/24 maxlen: 24
27.126.233.0/24 maxlen: 24
27.126.234.0/23 maxlen: 24
27.126.236.0/23 maxlen: 24
27.126.238.0/23 maxlen: 24
27.126.240.0/23 maxlen: 24
27.126.242.0/23 maxlen: 24
27.126.244.0/23 maxlen: 24
27.126.246.0/23 maxlen: 24
27.126.248.0/23 maxlen: 24
27.126.250.0/23 maxlen: 24
27.126.252.0/23 maxlen: 24
27.126.254.0/23 maxlen: 24
45.116.40.0/22 maxlen: 22
45.116.40.0/24 maxlen: 24
45.116.41.0/24 maxlen: 24
45.116.42.0/24 maxlen: 24
45.116.43.0/24 maxlen: 24
103.3.24.0/22 maxlen: 22
103.3.24.0/23 maxlen: 24
103.3.26.0/24 maxlen: 24
103.3.27.0/24 maxlen: 24
113.21.192.0/19 maxlen: 19
113.21.192.0/24 maxlen: 24
113.21.193.0/24 maxlen: 24
113.21.194.0/24 maxlen: 24
113.21.195.0/24 maxlen: 24
113.21.196.0/24 maxlen: 24
113.21.197.0/24 maxlen: 24
113.21.198.0/24 maxlen: 24
113.21.199.0/24 maxlen: 24
113.21.200.0/24 maxlen: 24
113.21.201.0/24 maxlen: 24
113.21.202.0/24 maxlen: 24
113.21.203.0/24 maxlen: 24
113.21.204.0/24 maxlen: 24
113.21.205.0/24 maxlen: 24
113.21.206.0/24 maxlen: 24
113.21.207.0/24 maxlen: 24
113.21.208.0/24 maxlen: 24
113.21.209.0/24 maxlen: 24
113.21.210.0/24 maxlen: 24
113.21.211.0/24 maxlen: 24
113.21.212.0/24 maxlen: 24
113.21.213.0/24 maxlen: 24
113.21.214.0/24 maxlen: 24
113.21.215.0/24 maxlen: 24
113.21.216.0/24 maxlen: 24
113.21.217.0/24 maxlen: 24
113.21.218.0/24 maxlen: 24
113.21.219.0/24 maxlen: 24
113.21.220.0/24 maxlen: 24
113.21.221.0/24 maxlen: 24
113.21.222.0/24 maxlen: 24
113.21.223.0/24 maxlen: 24
180.233.160.0/19 maxlen: 19
180.233.160.0/24 maxlen: 24
180.233.161.0/24 maxlen: 24
180.233.162.0/24 maxlen: 24
180.233.163.0/24 maxlen: 24
180.233.164.0/24 maxlen: 24
180.233.165.0/24 maxlen: 24
180.233.166.0/24 maxlen: 24
180.233.167.0/24 maxlen: 24
180.233.168.0/24 maxlen: 24
180.233.169.0/24 maxlen: 24
180.233.170.0/24 maxlen: 24
180.233.171.0/24 maxlen: 24
180.233.172.0/24 maxlen: 24
180.233.173.0/24 maxlen: 24
180.233.174.0/24 maxlen: 24
180.233.175.0/24 maxlen: 24
180.233.176.0/24 maxlen: 24
180.233.177.0/24 maxlen: 24
180.233.178.0/24 maxlen: 24
180.233.179.0/24 maxlen: 24
180.233.180.0/24 maxlen: 24
180.233.181.0/24 maxlen: 24
180.233.182.0/24 maxlen: 24
180.233.183.0/24 maxlen: 24
180.233.184.0/24 maxlen: 24
180.233.185.0/24 maxlen: 24
180.233.186.0/24 maxlen: 24
180.233.187.0/24 maxlen: 24
180.233.188.0/24 maxlen: 24
180.233.189.0/24 maxlen: 24
180.233.190.0/24 maxlen: 24
180.233.191.0/24 maxlen: 24
2404:ae00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Validity
Not Before: Jan 21 03:33:12 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d4cc-1283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ae:0a:6f:16:41:93:e0:c9:fb:82:d4:d4:10:
a5:b0:75:37:b5:98:70:4b:93:b8:ce:b9:41:fa:fd:
e2:8a:a7:81:c5:07:b5:8b:21:3b:7c:84:e7:70:88:
5f:a4:da:93:8a:5f:8b:a8:03:71:5f:35:6f:d1:6b:
13:fd:ba:22:00:21:d4:1c:a6:85:5b:e6:f4:1d:ba:
24:8c:63:c3:82:0c:28:a1:fa:38:79:9b:5a:b8:7b:
92:55:3d:8c:f1:b6:55:92:d9:7b:1d:2c:a2:ac:49:
d0:9a:13:43:45:13:c6:3f:81:7c:58:b9:bf:97:ac:
13:7f:0e:27:ac:79:5d:9e:c2:50:03:56:ca:95:8b:
22:32:ff:05:37:e5:4b:23:be:af:d1:3c:12:68:3d:
f9:8c:68:06:dd:33:f8:71:02:25:d7:77:8a:13:d3:
e1:3e:4d:f6:9d:45:1b:bd:28:7f:d4:8c:4c:d0:f9:
d7:3d:26:e1:f4:f1:b7:d0:56:a1:77:fe:28:c4:06:
b7:76:65:c7:f8:26:d1:60:6b:2a:b9:df:dc:f1:fa:
57:9b:d3:70:b9:f6:12:73:59:d3:db:ce:04:97:f2:
30:ee:6d:39:a3:90:b0:78:ee:9b:d1:fa:f4:5f:41:
6c:94:3e:6c:68:f4:14:94:7b:3d:a7:50:74:06:15:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C2:C8:B6:D8:D8:3A:0B:97:5F:F6:D7:8D:71:D6:83:4A:6F:CD:43
X509v3 Authority Key Identifier:
keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/E9C84708F67911F0B1D76CE5736F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
27.126.192.0/18
45.116.40.0/22
103.3.24.0/22
113.21.192.0/19
180.233.160.0/19
IPv6:
2404:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
84:75:65:71:88:17:a6:07:44:ca:53:e7:d6:dd:e7:c6:46:c3:
41:44:06:23:22:7f:47:96:b0:0f:9a:e0:ce:07:bd:9a:c5:86:
38:3a:34:6c:17:f8:c8:19:56:19:1f:4a:3d:d2:14:74:60:c2:
a2:70:af:1d:e5:a6:c9:66:5b:19:b6:ff:04:fa:31:30:d3:40:
e7:18:3b:3e:2d:0e:98:3d:2d:99:9a:37:f6:f8:0a:96:d6:d5:
3d:1e:2d:71:94:6b:bf:f9:79:7e:7d:d9:b3:5b:7d:a2:bf:7d:
9a:e9:e1:94:49:71:17:c0:8e:4d:5d:1d:f3:aa:ad:ab:49:aa:
e0:6e:6d:4c:81:17:66:98:be:89:e0:ab:b7:32:40:6c:34:07:
77:e6:3f:91:d3:82:90:1e:24:c8:0f:9a:d7:88:f6:54:f8:c8:
24:ad:1c:33:15:70:53:37:f7:57:a6:c9:46:39:6c:bf:94:48:
79:a9:bf:84:e4:bf:50:35:c0:bc:6e:55:6c:70:b6:01:71:49:
e6:3d:08:59:0e:5e:d7:14:66:22:37:29:1b:9b:01:7d:54:e9:
92:40:4f:8e:1a:57:85:17:73:da:2f:03:a4:e9:bd:26:b6:c7:
dd:9b:78:1b:18:10:e9:c6:3a:ff:ab:a8:ea:96:72:8f:2b:41:
4b:ef:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:58:58 2026 by rpki-client