Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/E009A066072B11EAB6E08A52C4F9AE02.roa
File: E009A066072B11EAB6E08A52C4F9AE02.roa (raw, json)
Hash identifier: cRfncS26heoxKs2O9UDC7eZX0A68DThqhxbubmPZb9Q=
Subject key identifier: CE:02:CB:F9:B8:00:78:44:68:12:AA:AD:C1:35:40:23:78:70:46:B4
Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial: 1089
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/E009A066072B11EAB6E08A52C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:32:03 +0000
ROA not before: Fri 28 Feb 2025 19:30:24 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 58620
IP address blocks: 119.161.48.0/24 maxlen: 24
119.161.51.0/24 maxlen: 24
119.161.61.0/24 maxlen: 24
120.29.248.0/23 maxlen: 23
120.29.252.0/24 maxlen: 24
120.29.253.0/24 maxlen: 24
120.29.254.0/24 maxlen: 24
203.17.72.0/24 maxlen: 24
2001:dcd:1::/48 maxlen: 48
2001:dcd:2::/48 maxlen: 48
2001:dcd:3::/48 maxlen: 48
2001:dcd:4::/48 maxlen: 48
2001:dcd:5::/48 maxlen: 48
2001:dcd:6::/48 maxlen: 48
2001:dcd:7::/48 maxlen: 48
2001:dcd:21::/48 maxlen: 48
2001:dcd:23::/48 maxlen: 48
2001:dcd:24::/48 maxlen: 48
2001:dcd:31::/48 maxlen: 48
2001:dcd:33::/48 maxlen: 48
2001:dcd:34::/48 maxlen: 48
2001:dcd:35::/48 maxlen: 48
2001:dcd:42::/48 maxlen: 48
2001:dcd:43::/48 maxlen: 48
2001:dcd:44::/48 maxlen: 48
2001:dcd:45::/48 maxlen: 48
2001:dcd:52::/48 maxlen: 48
2001:dcd:53::/48 maxlen: 48
2001:dcd:54::/48 maxlen: 48
2001:dcd:dd05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4233 (0x1089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Validity
Not Before: Feb 28 19:30:24 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a48623-4022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:73:5f:fb:45:79:98:20:44:d2:21:31:e5:
66:ed:0a:15:81:7b:91:49:e7:70:f8:64:06:f6:fa:
39:5d:a8:4d:b9:6f:26:20:8b:3e:35:cf:3d:27:1c:
da:bc:ce:f0:80:5f:3c:88:7a:e1:09:a2:c6:40:ae:
da:75:55:41:14:f5:ab:0b:a9:55:ef:79:eb:29:2f:
d3:5a:cc:71:6f:d6:f9:bb:27:99:50:02:64:83:0c:
f8:c4:55:29:6a:1c:9f:5d:1a:96:72:cf:e9:87:d6:
00:ad:73:af:2d:9b:0c:16:18:cd:97:0e:d4:fc:e1:
d0:85:e5:37:80:e3:af:a6:c5:6f:ae:e8:36:61:43:
2b:47:c0:9b:fa:b8:a8:44:10:4d:3e:2f:67:a5:db:
10:04:bd:b8:bc:65:2e:6b:63:7e:97:33:d5:8d:6f:
4a:b3:1b:a3:ca:d1:7e:3d:86:68:ef:12:e8:51:4e:
5f:ef:0d:7c:f9:32:c3:32:89:7f:c0:ca:12:fc:08:
28:41:69:ea:a3:f4:f0:59:82:ef:26:0a:a2:9b:de:
36:fd:6a:5c:d3:80:0e:a1:bf:bc:51:10:26:7f:8a:
b6:2f:f7:65:5d:37:d8:f1:40:2e:2e:cb:d7:07:1d:
85:49:bd:09:c6:f0:2c:5e:f1:73:b0:5f:30:b6:ad:
cc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:02:CB:F9:B8:00:78:44:68:12:AA:AD:C1:35:40:23:78:70:46:B4
X509v3 Authority Key Identifier:
keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/E009A066072B11EAB6E08A52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
119.161.48.0/24
119.161.51.0/24
119.161.61.0/24
120.29.248.0/23
120.29.252.0-120.29.254.255
203.17.72.0/24
IPv6:
2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff
2001:dcd:21::/48
2001:dcd:23::-2001:dcd:24:ffff:ffff:ffff:ffff:ffff
2001:dcd:31::/48
2001:dcd:33::-2001:dcd:35:ffff:ffff:ffff:ffff:ffff
2001:dcd:42::-2001:dcd:45:ffff:ffff:ffff:ffff:ffff
2001:dcd:52::-2001:dcd:54:ffff:ffff:ffff:ffff:ffff
2001:dcd:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
03:fc:9d:92:cf:98:8a:82:d5:53:ce:c5:ed:3a:4f:e6:bf:b1:
4f:1e:5d:ec:85:ce:7b:46:dc:4b:4f:21:c9:97:04:c0:19:b4:
81:ed:d8:10:3e:3c:8c:19:c8:31:db:8b:e4:d0:42:98:08:7a:
24:d3:1f:47:80:ae:62:19:84:d4:ce:5d:18:b3:cc:29:e4:53:
8e:75:09:1a:d1:89:5e:42:69:8d:e0:19:69:bc:b0:9d:c0:38:
a0:2c:e7:b1:0b:c1:a2:95:19:1e:35:ce:bd:1e:68:0a:a2:48:
3f:ec:07:1f:61:b7:84:1d:1e:db:c5:e1:99:2e:ad:6e:1f:62:
de:e6:4c:f4:41:59:cb:0a:5f:18:74:3e:65:7e:ca:2e:cf:73:
2d:6d:cf:da:23:29:6a:3b:42:19:92:7f:1a:80:31:a1:4d:05:
84:2a:23:18:68:d6:91:e2:46:96:16:40:75:5d:a0:f4:6a:9e:
4f:3f:c7:6c:f7:55:8b:aa:9f:e9:47:4f:c3:59:50:4d:55:9f:
43:26:cd:93:4d:de:df:d5:18:78:14:15:4a:50:ad:85:87:8a:
d6:46:b0:ef:19:1e:80:35:c3:bb:af:79:83:76:05:39:7b:13:
3f:de:ac:f8:f2:03:fa:b1:ee:27:fb:57:5f:21:20:99:ce:ee:
21:bd:21:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:19 2026 by rpki-client