Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/0EF775B2EFCD11EF92BCB66CC4F9AE02.roa
File: 0EF775B2EFCD11EF92BCB66CC4F9AE02.roa (raw, json)
Hash identifier: MrqnrCT/GEumQfDW7mgrn0lgaL07SqhdT37Ggp+SJU4=
Subject key identifier: 6D:77:B1:70:56:18:D0:C9:2A:C7:64:AA:96:26:F5:90:5A:11:79:4E
Certificate issuer: /CN=A91778C2/serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC
Certificate serial: 1854
Authority key identifier: 6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/0EF775B2EFCD11EF92BCB66CC4F9AE02.roa
Signing time: Wed 14 Oct 2026 17:30:03 +0000
ROA not before: Wed 14 Oct 2026 17:30:03 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 132817
IP address blocks: 43.242.0.0/22 maxlen: 22
45.249.104.0/22 maxlen: 22
45.252.56.0/22 maxlen: 23
59.152.84.0/22 maxlen: 22
103.66.64.0/22 maxlen: 22
103.69.156.0/22 maxlen: 22
103.73.52.0/22 maxlen: 22
103.74.132.0/22 maxlen: 22
103.74.176.0/22 maxlen: 22
103.75.220.0/22 maxlen: 22
103.76.236.0/22 maxlen: 22
103.211.144.0/22 maxlen: 22
103.214.92.0/22 maxlen: 22
103.221.56.0/22 maxlen: 22
103.228.224.0/22 maxlen: 22
116.206.48.0/22 maxlen: 22
119.42.36.0/22 maxlen: 22
144.48.96.0/22 maxlen: 22
160.238.16.0/22 maxlen: 22
192.144.88.0/22 maxlen: 22
2402:54c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl
rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 16:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6228 (0x1854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91778C2, serialNumber=6D4AE89FA97A716A2D92661FF2CF5BD3CCDC29FC
Validity
Not Before: Oct 14 17:30:03 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acfbc1b-9b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:8a:88:c7:9e:51:fa:62:f2:ac:06:4a:20:
f4:b6:a4:40:50:a0:a4:21:c2:b4:43:10:e2:70:73:
43:0d:bb:57:d8:8d:bf:86:c2:7b:19:f4:5d:d2:a2:
d9:81:1d:e5:a6:67:f4:c6:9f:2b:ca:d0:b8:2c:57:
30:39:d4:07:89:6e:8a:cb:23:2d:d7:4c:97:17:f2:
d7:cd:18:61:bd:75:fd:95:08:b5:88:03:7e:b1:d1:
64:1a:0c:9f:5b:5b:67:54:f1:e6:ff:c6:52:5c:bf:
80:24:ad:fb:e8:60:ef:b7:b4:e0:58:96:29:52:2f:
f2:33:be:d9:14:8a:cb:f3:46:db:5b:d4:d3:ca:58:
8f:23:ac:5a:82:89:ed:a3:80:ef:37:6c:e2:a8:e2:
fc:68:c6:13:01:fc:10:6b:1c:c8:72:01:c8:25:d1:
cc:1d:3b:b4:a9:32:ef:2c:08:dd:96:c3:cb:a8:a0:
7e:71:82:c1:0b:1e:67:81:d4:9a:00:42:65:5c:96:
b3:31:4a:f8:7d:b3:fb:bc:ab:5f:b5:3b:f9:d4:65:
87:35:7e:ab:5f:78:d5:4a:73:b0:38:58:c8:8c:71:
e0:71:6d:f5:d3:0b:fc:59:d5:a5:2c:cc:2d:9f:8b:
f8:79:68:30:69:9f:f1:59:a8:62:d6:51:5e:f3:63:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:77:B1:70:56:18:D0:C9:2A:C7:64:AA:96:26:F5:90:5A:11:79:4E
X509v3 Authority Key Identifier:
keyid:6D:4A:E8:9F:A9:7A:71:6A:2D:92:66:1F:F2:CF:5B:D3:CC:DC:29:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/bUron6l6cWotkmYf8s9b08zcKfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUron6l6cWotkmYf8s9b08zcKfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91778C2/ED2BBC70F88711E7921F8668C4F9AE02/0EF775B2EFCD11EF92BCB66CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.242.0.0/22
45.249.104.0/22
45.252.56.0/22
59.152.84.0/22
103.66.64.0/22
103.69.156.0/22
103.73.52.0/22
103.74.132.0/22
103.74.176.0/22
103.75.220.0/22
103.76.236.0/22
103.211.144.0/22
103.214.92.0/22
103.221.56.0/22
103.228.224.0/22
116.206.48.0/22
119.42.36.0/22
144.48.96.0/22
160.238.16.0/22
192.144.88.0/22
IPv6:
2402:54c0::/32
Signature Algorithm: sha256WithRSAEncryption
37:03:59:0b:7e:ae:c0:0d:4a:fd:0c:c2:06:af:b1:40:c4:09:
f7:b9:17:3e:3b:2d:42:af:97:42:fb:06:cf:2f:16:4d:e6:2e:
fd:ee:f4:49:cc:7a:81:0e:48:8e:78:b4:5f:c2:cd:37:e4:59:
f4:c2:d6:e2:2d:e5:ef:21:1b:25:bc:e0:84:16:8b:33:dd:29:
68:a4:fc:42:e0:52:8b:91:24:67:f2:03:84:42:de:4d:93:87:
0e:e6:c9:64:ac:60:36:99:47:9e:43:c3:b5:ec:5f:96:ce:ed:
cd:b4:b6:a1:4d:64:7d:f8:a7:36:21:87:97:45:7b:37:51:c2:
10:b1:27:39:10:1d:7f:b5:6f:27:07:35:16:ca:a2:c5:05:00:
1c:18:94:96:0d:d8:94:a5:a2:6b:07:38:6d:01:20:61:e2:d8:
8a:79:e4:5a:4c:1d:9b:12:c5:7d:96:73:3c:51:84:8e:81:68:
d9:63:98:6b:0e:6b:72:88:a2:a2:81:96:4e:f3:5a:cf:9c:36:
fb:0e:99:84:a6:3f:c8:07:8b:ed:0b:a0:23:1f:6b:9f:46:50:
1a:e0:c4:2a:08:f9:91:7c:e6:2c:4f:70:3f:81:a2:2f:aa:e8:
ed:18:fc:94:8f:8d:2e:7b:c9:8f:e7:f9:2a:02:8c:1c:fe:25:
0e:72:98:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:53:15 2026 by rpki-client