Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa
File: C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa (raw, json)
Hash identifier: ub2UwmJHfTSxoavuI6+2HDPbk/zf32PQjhZJmlUwhnE=
Subject key identifier: 2A:A9:69:54:08:78:36:D4:01:AB:8D:62:78:C8:BA:A2:FE:42:15:DB
Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial: 355E
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa
Signing time: Wed 15 Apr 2026 03:28:09 +0000
ROA not before: Wed 15 Apr 2026 03:28:09 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 133159
IP address blocks: 43.224.180.0/22 maxlen: 22
45.124.52.0/22 maxlen: 22
103.1.184.0/22 maxlen: 22
103.16.128.0/22 maxlen: 22
103.17.56.0/24 maxlen: 24
103.17.57.0/24 maxlen: 24
103.100.36.0/22 maxlen: 23
103.249.236.0/22 maxlen: 22
110.232.112.0/22 maxlen: 22
112.213.32.0/21 maxlen: 21
112.213.36.0/24 maxlen: 24
119.42.52.0/23 maxlen: 23
119.42.54.0/23 maxlen: 23
150.107.72.0/22 maxlen: 22
150.107.75.0/24 maxlen: 24
175.45.180.0/22 maxlen: 23
175.45.182.0/23 maxlen: 24
203.18.30.0/24 maxlen: 24
203.29.240.0/22 maxlen: 22
203.57.50.0/23 maxlen: 24
203.57.114.0/23 maxlen: 23
2404:9400::/48 maxlen: 48
2404:9400:1::/48 maxlen: 48
2404:9400:2::/48 maxlen: 48
2404:9400:3::/48 maxlen: 48
2404:9400:4::/48 maxlen: 48
2404:9400:5::/48 maxlen: 48
2404:9400:6::/48 maxlen: 48
2404:9400:e::/48 maxlen: 48
2404:9400:f::/48 maxlen: 48
2404:9400:101::/48 maxlen: 48
2404:9400:102::/48 maxlen: 48
2404:9400:103::/48 maxlen: 48
2404:9400:104::/48 maxlen: 48
2404:9400:105::/48 maxlen: 48
2404:9400:106::/48 maxlen: 48
2404:9400:1000::/36 maxlen: 36
2404:9400:2000::/36 maxlen: 36
2404:9400:3000::/36 maxlen: 36
2404:9400:4000::/36 maxlen: 36
2404:9400:5000::/36 maxlen: 36
2404:9400:6000::/36 maxlen: 36
2404:9400:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13662 (0x355e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Validity
Not Before: Apr 15 03:28:09 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69df05c9-e5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:8d:1f:3b:d4:72:13:9b:46:8f:f1:30:bd:
ea:1c:33:05:0d:6d:07:42:e9:b5:cd:60:e9:41:24:
d9:97:76:2c:50:13:fe:35:2a:62:00:75:ea:7b:61:
f3:e6:26:ba:cd:91:e2:99:b1:71:32:84:c7:e2:ff:
18:4f:8e:19:6d:c7:05:10:7f:19:56:22:40:2a:16:
52:76:4a:fb:a7:69:6e:fa:72:e0:e0:85:66:d2:38:
4e:0a:2b:f6:f8:5f:8e:02:6d:d8:f7:20:e6:8e:e9:
d2:21:60:8d:9c:a9:81:8c:10:da:12:fc:6d:73:19:
a8:85:9e:a8:40:48:9b:6e:ae:48:37:ef:34:9e:26:
e5:07:13:62:2d:af:1d:9b:62:71:1f:9d:ec:de:74:
a7:76:af:b8:f3:39:ba:90:54:ce:22:92:e0:df:f6:
c0:8c:fc:4a:71:f7:d8:14:69:88:87:a9:f4:3c:51:
ad:55:52:b0:a1:eb:bb:f9:29:48:d9:aa:31:7d:30:
ed:95:6e:77:f3:e8:36:50:93:c6:b0:b6:db:7b:e0:
dd:64:59:6e:07:52:6e:4b:9f:6f:31:b8:5e:35:f2:
6d:c2:ea:35:69:76:45:dc:7d:fa:06:17:54:bb:8b:
88:38:58:7f:5a:60:ee:a8:ee:43:70:08:49:85:54:
08:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A9:69:54:08:78:36:D4:01:AB:8D:62:78:C8:BA:A2:FE:42:15:DB
X509v3 Authority Key Identifier:
keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/C6BCEF8ECF2311F09BE9DF62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.224.180.0/22
45.124.52.0/22
103.1.184.0/22
103.16.128.0/22
103.17.56.0/23
103.100.36.0/22
103.249.236.0/22
110.232.112.0/22
112.213.32.0/21
119.42.52.0/22
150.107.72.0/22
175.45.180.0/22
203.18.30.0/24
203.29.240.0/22
203.57.50.0/23
203.57.114.0/23
IPv6:
2404:9400::-2404:9400:6:ffff:ffff:ffff:ffff:ffff
2404:9400:e::/47
2404:9400:101::-2404:9400:106:ffff:ffff:ffff:ffff:ffff
2404:9400:1000::-2404:9400:6fff:ffff:ffff:ffff:ffff:ffff
2404:9400:e000::/36
Signature Algorithm: sha256WithRSAEncryption
bc:b6:67:a4:f7:5f:ce:7b:78:38:ff:b5:7c:6f:51:93:7c:4c:
03:ec:b5:79:c5:01:4e:66:fc:8b:1f:08:79:39:61:d9:4a:8c:
44:7d:51:7b:ff:18:29:ff:03:bb:5f:91:e1:e6:01:26:ed:10:
f8:22:15:fe:3c:2e:aa:3a:f2:9a:c6:45:ad:2f:6f:64:9e:c1:
69:48:a7:32:fc:6b:e2:8d:ed:26:7d:e5:28:aa:3f:68:aa:40:
64:67:e9:cb:13:27:93:0c:01:17:1a:d0:42:5c:dc:90:09:4a:
f3:5d:12:1e:99:da:e7:97:4f:6f:b2:cc:54:fa:d9:8c:ac:aa:
3a:48:4f:87:8c:b4:11:9a:f2:bc:36:20:f8:ba:a7:ce:c6:8e:
9f:a8:d0:5c:c3:e5:96:37:b0:17:67:c6:bf:ee:63:f3:4d:65:
24:4c:7f:26:57:73:3e:34:a8:7a:17:69:82:48:47:82:2b:95:
ee:39:6f:59:c7:9a:94:11:a9:60:95:79:f5:d8:6c:16:1d:f6:
c7:15:eb:b6:de:eb:00:38:08:66:27:31:f4:84:af:0a:64:53:
4f:bd:3f:0a:97:a7:c1:7a:d2:4d:f1:9c:c2:35:8a:e1:7a:fc:
71:31:ff:14:fb:9b:33:16:3f:25:02:8c:92:2c:75:93:c2:b1:
0b:dc:37:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:14:56 2026 by rpki-client