Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/44E2CCAEBA9811EFBA471E62C4F9AE02.roa
File: 44E2CCAEBA9811EFBA471E62C4F9AE02.roa (raw, json)
Hash identifier: mYW3nKsnG4GE83HF25tjaBek0p6fEGk2hgZHM+Eo7hs=
Subject key identifier: C0:66:73:D0:3E:91:B6:1E:2B:46:C8:93:45:1E:99:A0:94:A6:49:16
Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Certificate serial: 3579
Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/44E2CCAEBA9811EFBA471E62C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:25:48 +0000
ROA not before: Wed 10 Sep 2025 14:50:48 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 24122
IP address blocks: 43.243.204.0/23 maxlen: 23
43.243.204.0/24 maxlen: 24
43.243.205.0/24 maxlen: 24
43.243.206.0/23 maxlen: 23
43.243.206.0/24 maxlen: 24
43.243.207.0/24 maxlen: 24
103.16.72.0/22 maxlen: 22
103.16.72.0/23 maxlen: 23
103.16.72.0/24 maxlen: 24
103.16.73.0/24 maxlen: 24
103.16.74.0/23 maxlen: 23
103.16.74.0/24 maxlen: 24
103.16.75.0/24 maxlen: 24
119.40.80.0/20 maxlen: 20
119.40.80.0/20 maxlen: 24
119.40.80.0/21 maxlen: 21
119.40.80.0/23 maxlen: 23
119.40.80.0/24 maxlen: 24
119.40.81.0/24 maxlen: 24
119.40.82.0/24 maxlen: 24
119.40.83.0/24 maxlen: 24
119.40.84.0/23 maxlen: 23
119.40.84.0/24 maxlen: 24
119.40.85.0/24 maxlen: 24
119.40.86.0/24 maxlen: 24
119.40.87.0/24 maxlen: 24
119.40.88.0/21 maxlen: 21
119.40.88.0/22 maxlen: 22
119.40.88.0/24 maxlen: 24
119.40.89.0/24 maxlen: 24
119.40.90.0/24 maxlen: 24
119.40.91.0/24 maxlen: 24
119.40.92.0/22 maxlen: 22
119.40.92.0/24 maxlen: 24
119.40.93.0/24 maxlen: 24
119.40.94.0/24 maxlen: 24
119.40.95.0/24 maxlen: 24
210.4.64.0/20 maxlen: 20
210.4.64.0/20 maxlen: 24
210.4.64.0/21 maxlen: 21
210.4.64.0/24 maxlen: 24
210.4.65.0/24 maxlen: 24
210.4.66.0/23 maxlen: 23
210.4.66.0/24 maxlen: 24
210.4.67.0/24 maxlen: 24
210.4.68.0/24 maxlen: 24
210.4.69.0/24 maxlen: 24
210.4.70.0/23 maxlen: 23
210.4.70.0/24 maxlen: 24
210.4.71.0/24 maxlen: 24
210.4.72.0/21 maxlen: 21
210.4.72.0/24 maxlen: 24
210.4.73.0/24 maxlen: 24
210.4.74.0/23 maxlen: 23
210.4.74.0/24 maxlen: 24
210.4.75.0/24 maxlen: 24
210.4.76.0/24 maxlen: 24
210.4.77.0/24 maxlen: 24
210.4.78.0/24 maxlen: 24
210.4.79.0/24 maxlen: 24
2403:4000::/32 maxlen: 32
2403:4000:17::/48 maxlen: 48
2403:4000:18::/48 maxlen: 48
2403:4000:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl
rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13689 (0x3579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Validity
Not Before: Sep 10 14:50:48 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4769c-8d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5f:5b:56:cd:a2:7a:62:1d:19:b9:a0:e9:05:
f6:e9:e7:0a:c5:f9:20:fd:a8:15:18:23:be:d6:b6:
d9:3d:f4:51:67:74:ab:33:8c:fe:74:78:03:26:79:
f1:e6:aa:e8:53:f9:32:13:34:5d:73:57:f4:0e:b1:
49:04:69:f3:a0:99:45:7f:49:75:93:b6:35:9e:1c:
a9:76:66:a9:7f:32:ca:00:a9:71:fa:64:32:ed:ca:
57:94:8b:0a:75:f2:68:db:64:3e:4d:04:b9:51:a6:
5e:c8:0f:b1:89:c4:a5:00:f9:32:45:6e:d0:52:a0:
93:50:3e:9c:38:9a:28:b1:b1:b8:7f:06:70:04:16:
a6:54:1e:d2:80:fd:4a:4c:63:c5:9a:93:09:06:8c:
24:fe:2e:c8:50:80:2e:88:21:41:b9:38:2b:a4:b1:
87:19:c9:2a:69:9f:d0:dc:2b:91:8f:fb:25:9a:33:
ac:c6:62:a5:b9:94:c2:a3:5d:fa:f1:8c:97:48:1a:
d7:00:b8:8c:6a:af:ec:24:65:ab:e0:86:11:0d:9b:
7a:9c:7f:88:f3:35:64:9f:ab:5d:55:6c:7d:59:0b:
e5:18:40:c1:f9:a2:68:6d:9d:af:ea:c9:b3:04:b2:
00:fa:b2:00:f2:60:db:44:f2:9c:c9:4c:a2:cf:c3:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:66:73:D0:3E:91:B6:1E:2B:46:C8:93:45:1E:99:A0:94:A6:49:16
X509v3 Authority Key Identifier:
keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/44E2CCAEBA9811EFBA471E62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.243.204.0/22
103.16.72.0/22
119.40.80.0/20
210.4.64.0/20
IPv6:
2403:4000::/32
Signature Algorithm: sha256WithRSAEncryption
59:44:86:ce:ea:48:01:78:8b:9f:c1:ce:68:5b:bc:98:b7:56:
2d:7e:af:03:96:c5:a2:0b:b3:7f:a1:82:28:94:c8:b6:ed:c9:
74:fa:aa:6f:ec:8a:7f:e4:ba:18:26:94:df:4a:44:d9:df:0d:
e8:8e:3e:9f:7c:09:44:43:80:06:2d:af:82:44:bc:eb:2e:b3:
13:c0:0f:5e:57:21:3d:9d:33:d6:08:8d:dd:29:f0:de:03:12:
25:4e:26:61:0c:53:94:af:de:44:5d:58:ed:01:cd:b1:87:68:
af:50:d6:21:03:4c:80:75:b0:69:d0:19:f8:d2:2e:71:96:c8:
16:7a:a4:02:6a:ca:74:ae:71:8a:ad:33:4d:ec:53:04:73:1f:
34:bd:d9:36:ff:6a:ec:3f:40:ef:8a:82:a2:dd:d6:bb:55:29:
df:34:b2:42:2f:ff:2f:f7:a2:8a:f3:89:25:b5:27:1a:3a:c7:
5f:79:22:8d:5f:55:69:ce:e7:12:6a:3a:c9:47:57:a1:e3:bd:
0c:93:43:8b:65:70:46:f2:d8:ab:ff:a1:23:3b:f0:c4:08:f9:
32:74:5b:8d:72:0f:b7:49:9b:83:3a:b7:55:13:23:07:79:5e:
db:a1:7c:8b:4f:be:5e:d0:1c:4d:e0:f8:4f:1b:34:9f:54:f0:
7d:ab:3d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:15 2026 by rpki-client