Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/9E1F70A4844911EAA528AD63C4F9AE02.roa
File: 9E1F70A4844911EAA528AD63C4F9AE02.roa (raw, json)
Hash identifier: Gw6eqkoI9GjMAfax+Sy6LiS1Q6bEsJsUys7tDAvsHp8=
Subject key identifier: 09:38:0F:86:19:0F:62:91:29:B6:02:3E:C5:A2:CD:33:D2:E7:6D:77
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 37E4
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/9E1F70A4844911EAA528AD63C4F9AE02.roa
Signing time: Thu 16 Apr 2026 15:15:00 +0000
ROA not before: Thu 16 Apr 2026 15:15:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56167
IP address blocks: 58.181.100.0/23 maxlen: 24
58.181.102.0/23 maxlen: 24
59.103.88.0/23 maxlen: 24
59.103.90.0/23 maxlen: 24
116.71.4.0/22 maxlen: 22
116.71.4.0/24 maxlen: 24
116.71.5.0/24 maxlen: 24
116.71.6.0/24 maxlen: 24
116.71.7.0/24 maxlen: 24
116.71.8.0/23 maxlen: 24
116.71.10.0/23 maxlen: 24
116.71.12.0/23 maxlen: 24
116.71.14.0/23 maxlen: 24
116.71.160.0/21 maxlen: 24
116.71.168.0/21 maxlen: 24
116.71.176.0/21 maxlen: 24
116.71.184.0/21 maxlen: 24
119.152.16.0/24 maxlen: 24
119.152.120.0/22 maxlen: 24
119.155.160.0/21 maxlen: 24
119.155.168.0/21 maxlen: 24
119.155.176.0/21 maxlen: 24
119.155.184.0/21 maxlen: 24
119.155.192.0/21 maxlen: 24
119.155.200.0/21 maxlen: 24
119.155.208.0/21 maxlen: 24
119.155.216.0/21 maxlen: 24
119.156.212.0/24 maxlen: 24
182.191.128.0/21 maxlen: 24
182.191.136.0/21 maxlen: 24
182.191.144.0/21 maxlen: 24
182.191.152.0/21 maxlen: 24
203.135.44.0/22 maxlen: 22
203.135.44.0/24 maxlen: 24
203.135.45.0/24 maxlen: 24
203.135.46.0/24 maxlen: 24
203.135.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14308 (0x37e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Apr 16 15:15:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e0fcf4-4706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:67:d5:3e:17:81:f6:35:7c:c7:b2:ed:37:
69:63:26:2e:52:83:fa:e4:2c:68:b3:28:e0:7d:aa:
2d:da:c8:55:4b:fc:09:08:57:66:63:83:54:58:72:
a4:ec:f1:f5:c4:7c:c2:1b:4a:57:1c:73:1e:f5:51:
96:83:9f:dd:6d:e4:ff:0d:c2:63:34:ce:fd:14:e6:
e0:09:b8:60:97:60:f5:5e:b6:19:15:e1:ad:06:ed:
02:56:88:98:1b:7d:29:0b:29:36:7e:99:bb:ff:48:
5c:8b:af:b8:af:50:6f:c8:61:c5:0d:7a:9b:5a:cf:
db:93:6b:65:aa:36:15:d1:17:4d:31:9b:ca:0b:e2:
77:76:98:57:63:e5:9a:29:29:bf:fc:91:0c:3f:a2:
82:c8:ff:b1:d8:4d:e4:53:07:ea:d9:93:e8:1d:d6:
23:72:50:44:d3:06:63:2c:72:e9:19:a6:a1:37:e1:
17:72:9a:ac:af:ea:9f:86:1f:0d:a8:65:bb:55:20:
2f:23:e4:98:35:60:29:e7:15:45:b1:08:59:9b:a4:
88:f3:9a:00:f4:e5:88:dd:d3:f7:55:bb:5c:6c:f8:
0e:8b:15:aa:80:3a:39:15:de:74:93:d4:10:e9:d5:
12:e7:e0:7a:59:8b:24:84:dc:3c:92:ac:f1:9d:7f:
39:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:38:0F:86:19:0F:62:91:29:B6:02:3E:C5:A2:CD:33:D2:E7:6D:77
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/9E1F70A4844911EAA528AD63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.181.100.0/22
59.103.88.0/22
116.71.4.0-116.71.15.255
116.71.160.0/19
119.152.16.0/24
119.152.120.0/22
119.155.160.0-119.155.223.255
119.156.212.0/24
182.191.128.0/19
203.135.44.0/22
Signature Algorithm: sha256WithRSAEncryption
27:5a:81:64:ee:e2:b3:eb:4a:72:ca:ca:54:10:e3:5a:7f:69:
75:fd:21:58:60:c8:83:2f:18:31:a3:1a:15:c6:ed:37:92:6d:
cc:37:3c:70:87:97:ac:45:70:56:6c:b9:0b:88:9a:83:a8:1f:
bd:4b:94:88:ec:e0:72:4b:3e:8e:d1:15:8f:1c:e5:4c:d0:22:
9f:da:fa:b1:ab:ce:c5:1d:fd:83:76:78:65:ad:53:b1:92:8c:
e0:49:3e:77:b7:2c:8a:b0:76:25:88:3c:2f:6c:a9:a5:d3:f5:
9e:e0:c1:e4:61:d0:2a:33:7c:bb:47:40:c6:16:75:92:74:15:
87:8f:13:67:21:58:ed:4b:ed:56:f0:fb:a4:1c:20:0d:9b:c0:
09:32:da:0e:e0:e5:9f:e4:84:b7:a8:e6:82:03:4e:d7:87:bf:
78:b1:a3:40:82:9a:4c:d8:aa:f1:c3:c1:3e:08:aa:2d:bf:e9:
6b:32:9d:fa:5a:e8:4f:86:af:ef:50:16:1a:f4:56:a3:45:2c:
a6:88:03:10:72:3f:11:a5:8a:8a:0c:8a:9b:17:a0:b5:a9:d1:
b0:61:1e:ca:11:fe:ab:62:8f:c6:9e:af:ca:54:4b:e7:c4:d5:
e8:2a:72:b6:2a:03:cc:7b:b3:11:95:f7:de:8c:0b:78:37:7e:
26:93:a4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:04 2026 by rpki-client