Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/92078AAE0B5411EF957DA628C4F9AE02.roa
File: 92078AAE0B5411EF957DA628C4F9AE02.roa (raw, json)
Hash identifier: 3dwH9a/utiC4SfLWlkTfOUAPg5RQr8BVu3u7eFbig/0=
Subject key identifier: BD:77:47:89:CE:E1:27:61:73:6E:0B:58:A9:99:44:70:62:C1:2C:22
Certificate issuer: /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial: 35A7
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/92078AAE0B5411EF957DA628C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:35:48 +0000
ROA not before: Thu 31 Jul 2025 15:21:03 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 45245
IP address blocks: 27.54.144.0/22 maxlen: 24
43.245.120.0/23 maxlen: 24
43.245.122.0/23 maxlen: 24
43.255.20.0/22 maxlen: 24
59.152.0.0/21 maxlen: 24
103.15.164.0/22 maxlen: 24
103.67.156.0/23 maxlen: 24
103.67.158.0/23 maxlen: 24
103.239.4.0/22 maxlen: 24
103.244.12.0/22 maxlen: 24
103.253.44.0/22 maxlen: 24
116.58.200.0/22 maxlen: 24
116.58.204.0/22 maxlen: 24
150.242.104.0/22 maxlen: 24
202.86.216.0/21 maxlen: 24
203.223.92.0/23 maxlen: 24
203.223.94.0/23 maxlen: 24
2401:1900::/32 maxlen: 36
2401:1900::/42 maxlen: 48
2401:1900:40::/42 maxlen: 42
2401:1900:80::/42 maxlen: 46
2401:1900:c0::/42 maxlen: 46
2401:1900:100::/42 maxlen: 46
2401:1900:140::/42 maxlen: 42
2401:1900:180::/42 maxlen: 42
2401:1900:1c0::/42 maxlen: 42
2401:1900:200::/42 maxlen: 42
2401:1900:1000::/42 maxlen: 48
2401:1900:1040::/42 maxlen: 42
2401:1900:1080::/42 maxlen: 42
2401:1900:1100::/42 maxlen: 42
2401:1900:1140::/42 maxlen: 42
2401:1900:2000::/42 maxlen: 48
2401:1900:2040::/42 maxlen: 42
2401:1900:2080::/42 maxlen: 42
2401:1900:2100::/42 maxlen: 42
2401:1900:2140::/42 maxlen: 42
2401:1900:8000::/42 maxlen: 48
2401:1900:8040::/42 maxlen: 46
2401:1900:8080::/42 maxlen: 46
2401:1900:80c0::/42 maxlen: 46
2401:1900:8100::/42 maxlen: 42
2401:1900:8140::/42 maxlen: 42
2401:1900:8180::/42 maxlen: 42
2401:1900:81c0::/42 maxlen: 42
2401:1900:9000::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:46:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13735 (0x35a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Validity
Not Before: Jul 31 15:21:03 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a440b3-11da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:31:64:3b:74:36:00:26:56:ab:44:c1:39:
81:2e:c6:e3:34:ed:c5:0e:d4:66:7d:d9:46:47:ef:
f3:56:1b:fa:79:06:68:6e:4a:10:1e:c1:74:dc:92:
a1:3b:5d:54:c7:0c:da:2a:12:f8:53:85:e4:bf:aa:
64:36:fc:38:16:b4:e5:ce:67:eb:a2:98:5c:32:00:
00:6b:1e:ef:df:bf:bb:0d:f5:6f:29:7a:fc:90:98:
38:11:be:dc:5a:4b:17:ef:92:c4:48:e1:66:50:4e:
4c:dc:8e:6d:5b:45:71:3f:bc:b2:92:a7:3b:c9:9e:
1a:2e:6f:51:bd:da:9a:53:31:45:58:6f:f2:e7:83:
86:51:8d:1b:64:d1:f4:9f:98:a9:6d:9f:6a:24:5a:
b8:cf:5b:4e:2d:37:b3:9c:dc:31:ae:f8:f9:f5:78:
b8:ee:ae:92:5c:c7:82:5b:25:03:81:18:c5:42:0e:
0e:4b:44:f7:64:3c:e4:0a:cd:b5:d2:16:d7:e9:cb:
dd:9f:c6:18:59:02:46:76:9d:62:2b:9f:50:7e:f5:
a5:71:ea:47:75:dc:8f:1d:e2:50:16:bf:88:50:5b:
dd:64:9e:3d:38:9f:f5:87:e8:ad:34:53:3f:d1:43:
6a:7b:7a:0a:4f:0f:e6:b9:5e:be:63:ce:ff:49:2d:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:77:47:89:CE:E1:27:61:73:6E:0B:58:A9:99:44:70:62:C1:2C:22
X509v3 Authority Key Identifier:
keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/92078AAE0B5411EF957DA628C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.54.144.0/22
43.245.120.0/22
43.255.20.0/22
59.152.0.0/21
103.15.164.0/22
103.67.156.0/22
103.239.4.0/22
103.244.12.0/22
103.253.44.0/22
116.58.200.0/21
150.242.104.0/22
202.86.216.0/21
203.223.92.0/22
IPv6:
2401:1900::/32
Signature Algorithm: sha256WithRSAEncryption
1c:f3:6b:30:7f:df:8b:66:12:9a:a3:1e:3f:d7:c8:40:e4:3c:
1b:25:2e:bb:0b:c5:b8:7d:81:80:fe:59:8c:b1:49:8b:0d:77:
e0:f0:2c:4f:17:07:88:bc:a4:04:5b:67:e8:ac:34:7d:14:2e:
f8:75:74:b1:b2:66:93:5d:ce:4c:78:40:fa:ca:eb:bf:20:ba:
93:e1:6e:d8:a2:2c:aa:3b:03:70:a5:a8:6e:1c:13:91:64:7f:
f5:5f:f2:62:fd:b8:19:45:90:94:af:8f:2d:95:49:f3:ff:4b:
0d:a6:e3:f1:6d:37:58:8e:38:e5:29:76:e1:fa:f4:19:03:7d:
cd:51:a7:13:e2:03:4b:f4:2b:a4:d8:d0:d6:9a:a7:9f:db:b6:
63:91:7b:cc:4f:17:9e:44:88:d1:68:0f:d2:e9:b6:47:f0:2c:
cf:e1:cd:88:33:0e:d6:38:21:2b:27:ea:ed:35:1c:10:39:c4:
1f:ac:01:59:aa:e1:fc:04:be:35:86:dc:b1:15:69:d8:a6:9e:
f9:5c:a8:98:e9:3f:bd:1c:77:36:d5:5a:c4:c7:9b:8b:10:84:
37:b5:40:f1:f0:8d:0a:25:cb:e2:b8:4e:54:de:49:24:52:7a:
9f:5e:cd:50:87:e3:24:95:9b:b1:a2:11:8e:c2:a6:c0:cf:cd:
b6:d9:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:51 2026 by rpki-client