Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/92078AAE0B5411EF957DA628C4F9AE02.roa
File: 92078AAE0B5411EF957DA628C4F9AE02.roa (raw, json)
Hash identifier: tXyl2l+fBCh+bkJjQLTeGvmzoliVQuUD7RDr+UyroJs=
Subject key identifier: EF:C9:64:D6:65:90:BA:A7:0B:B7:58:59:D2:94:42:A2:37:A1:07:B0
Certificate issuer: /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial: 35F8
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/92078AAE0B5411EF957DA628C4F9AE02.roa
Signing time: Thu 30 Jul 2026 15:19:02 +0000
ROA not before: Thu 30 Jul 2026 15:19:02 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 45245
IP address blocks: 27.54.144.0/22 maxlen: 24
43.245.120.0/23 maxlen: 24
43.245.122.0/23 maxlen: 24
43.255.20.0/22 maxlen: 24
59.152.0.0/21 maxlen: 24
103.15.164.0/22 maxlen: 24
103.67.156.0/23 maxlen: 24
103.67.158.0/23 maxlen: 24
103.239.4.0/22 maxlen: 24
103.244.12.0/22 maxlen: 24
103.253.44.0/22 maxlen: 24
116.58.200.0/22 maxlen: 24
116.58.204.0/22 maxlen: 24
150.242.104.0/22 maxlen: 24
202.86.216.0/21 maxlen: 24
203.223.92.0/23 maxlen: 24
203.223.94.0/23 maxlen: 24
2401:1900::/32 maxlen: 36
2401:1900::/42 maxlen: 48
2401:1900:40::/42 maxlen: 42
2401:1900:80::/42 maxlen: 46
2401:1900:c0::/42 maxlen: 46
2401:1900:100::/42 maxlen: 46
2401:1900:140::/42 maxlen: 42
2401:1900:180::/42 maxlen: 42
2401:1900:1c0::/42 maxlen: 42
2401:1900:200::/42 maxlen: 42
2401:1900:1000::/42 maxlen: 48
2401:1900:1040::/42 maxlen: 42
2401:1900:1080::/42 maxlen: 42
2401:1900:1100::/42 maxlen: 42
2401:1900:1140::/42 maxlen: 42
2401:1900:2000::/42 maxlen: 48
2401:1900:2040::/42 maxlen: 42
2401:1900:2080::/42 maxlen: 42
2401:1900:2100::/42 maxlen: 42
2401:1900:2140::/42 maxlen: 42
2401:1900:8000::/42 maxlen: 48
2401:1900:8040::/42 maxlen: 46
2401:1900:8080::/42 maxlen: 46
2401:1900:80c0::/42 maxlen: 46
2401:1900:8100::/42 maxlen: 42
2401:1900:8140::/42 maxlen: 42
2401:1900:8180::/42 maxlen: 42
2401:1900:81c0::/42 maxlen: 42
2401:1900:9000::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13816 (0x35f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Validity
Not Before: Jul 30 15:19:02 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6b6b66-678e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:e9:e1:f1:22:58:b1:26:f1:a3:e4:ca:00:
a6:f6:90:c9:cf:89:cf:be:fc:09:1f:a2:4e:79:5d:
cd:4d:b8:dd:ac:2e:e0:a6:8e:6c:d0:33:93:8e:d9:
c1:81:a0:e1:87:3b:02:af:26:15:39:f6:7d:bc:9d:
5c:8a:f6:32:bc:26:4c:fb:77:a3:11:91:cb:f1:fa:
3a:bc:51:fe:0c:83:ff:57:9c:d3:f5:d3:9b:dc:20:
6e:ad:72:eb:5c:14:cc:3b:66:db:06:05:34:1b:74:
cc:85:e8:d0:da:e5:1d:4d:4b:5f:cb:c8:6f:b9:9f:
6e:35:48:10:85:ea:8a:32:24:ab:4a:c5:70:4e:95:
cf:0d:cf:89:45:68:41:c5:a6:c5:d8:23:c0:a3:e9:
dc:72:e7:b7:85:14:09:c3:40:1e:cd:f5:c9:85:b2:
bb:75:71:8e:bd:98:c2:27:66:e5:ee:d1:26:77:ed:
11:07:30:c8:37:6a:11:ec:72:39:96:5e:e7:00:9e:
ab:d9:6e:ad:10:42:61:a5:09:b5:5d:3b:d4:02:81:
33:da:64:24:42:ea:99:97:73:ab:48:bd:7b:c1:6a:
73:3a:72:7d:9e:f8:9b:2e:3c:01:ee:1a:94:42:6d:
db:5e:87:d2:66:fe:06:c1:f7:c6:44:67:0b:f1:70:
bc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C9:64:D6:65:90:BA:A7:0B:B7:58:59:D2:94:42:A2:37:A1:07:B0
X509v3 Authority Key Identifier:
keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/92078AAE0B5411EF957DA628C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.54.144.0/22
43.245.120.0/22
43.255.20.0/22
59.152.0.0/21
103.15.164.0/22
103.67.156.0/22
103.239.4.0/22
103.244.12.0/22
103.253.44.0/22
116.58.200.0/21
150.242.104.0/22
202.86.216.0/21
203.223.92.0/22
IPv6:
2401:1900::/32
Signature Algorithm: sha256WithRSAEncryption
56:8d:28:69:18:55:99:2c:a0:4a:1e:48:e6:2a:45:46:c0:3d:
37:ea:dd:fc:47:15:c3:3e:d9:9d:70:42:fd:c3:c0:af:6e:48:
10:c8:05:00:7b:e5:51:96:ba:06:28:f6:5f:5f:4e:f1:46:52:
95:40:59:93:c4:74:05:a7:86:40:3e:94:63:ca:26:d7:45:3b:
44:5c:30:b4:3c:1a:01:4c:2b:e8:f8:15:fb:5e:1a:e8:a1:0f:
55:ee:14:1b:c0:61:de:85:f0:a6:11:01:55:de:70:1c:d4:8f:
bd:8b:c8:ca:c7:1f:b8:0e:69:4c:64:6d:8b:3a:f6:95:05:84:
46:c8:1d:ac:6f:03:e4:09:23:12:a3:5e:00:a7:53:f6:6e:59:
cc:27:4c:b6:13:bb:40:d2:5a:68:0a:9f:c1:92:12:b2:80:f6:
74:e4:cf:7a:9b:6d:22:68:66:7a:64:1d:8a:0a:e1:9a:e4:2d:
5f:1f:e9:78:3a:d3:de:4f:8e:fa:06:5b:18:ca:d6:5d:00:e8:
0f:49:33:9a:ad:36:39:97:3f:ef:a5:d5:45:f3:94:5f:a5:2d:
ce:f9:37:17:4f:e3:e1:29:08:08:23:a5:71:27:e6:c1:23:18:
03:9f:57:d5:19:52:42:b5:57:30:22:f2:a6:e6:46:e9:33:fe:
f0:f3:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:31:16 2026 by rpki-client