Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
File: C27C0758916B11EF81BBB521C4F9AE02.roa (raw, json)
Hash identifier: VMUh42L95hK3c/J26Grfe/uoGiefbltNuPCGGipRRuc=
Subject key identifier: 8B:6C:BD:39:38:FC:45:78:3B:02:A1:CC:0D:69:75:C6:A3:1B:04:21
Certificate issuer: /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial: 0294
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
Signing time: Fri 24 Jul 2026 08:42:40 +0000
ROA not before: Fri 24 Jul 2026 08:42:40 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 53813
IP address blocks: 101.2.192.0/24 maxlen: 24
101.2.193.0/24 maxlen: 24
101.2.194.0/24 maxlen: 24
101.2.195.0/24 maxlen: 24
101.2.196.0/24 maxlen: 24
101.2.197.0/24 maxlen: 24
101.2.198.0/24 maxlen: 24
101.2.199.0/24 maxlen: 24
101.2.200.0/24 maxlen: 24
101.2.201.0/24 maxlen: 24
101.2.202.0/23 maxlen: 24
101.2.204.0/23 maxlen: 24
101.2.206.0/24 maxlen: 24
101.2.207.0/24 maxlen: 24
101.2.208.0/24 maxlen: 24
101.2.209.0/24 maxlen: 24
101.2.214.0/24 maxlen: 24
101.2.215.0/24 maxlen: 24
101.2.216.0/23 maxlen: 24
101.2.218.0/23 maxlen: 24
101.2.220.0/23 maxlen: 24
101.2.222.0/23 maxlen: 24
101.2.224.0/23 maxlen: 24
101.2.226.0/23 maxlen: 24
101.2.228.0/23 maxlen: 24
101.2.230.0/23 maxlen: 24
101.2.232.0/23 maxlen: 24
101.2.234.0/23 maxlen: 24
101.2.236.0/23 maxlen: 24
101.2.238.0/23 maxlen: 24
101.2.240.0/24 maxlen: 24
101.2.241.0/24 maxlen: 24
101.2.242.0/23 maxlen: 24
101.2.244.0/23 maxlen: 24
101.2.246.0/24 maxlen: 24
101.2.247.0/24 maxlen: 24
101.2.248.0/23 maxlen: 24
101.2.250.0/24 maxlen: 24
101.2.252.0/23 maxlen: 24
101.2.254.0/23 maxlen: 24
175.107.128.0/23 maxlen: 24
175.107.130.0/23 maxlen: 24
175.107.132.0/23 maxlen: 24
175.107.134.0/24 maxlen: 24
175.107.136.0/23 maxlen: 24
175.107.138.0/23 maxlen: 24
175.107.140.0/23 maxlen: 24
175.107.142.0/23 maxlen: 24
175.107.144.0/23 maxlen: 24
175.107.146.0/23 maxlen: 24
175.107.148.0/23 maxlen: 24
175.107.150.0/23 maxlen: 24
175.107.152.0/23 maxlen: 24
175.107.154.0/23 maxlen: 24
175.107.156.0/23 maxlen: 24
175.107.158.0/23 maxlen: 24
175.107.160.0/23 maxlen: 24
175.107.162.0/23 maxlen: 24
175.107.164.0/23 maxlen: 24
175.107.166.0/23 maxlen: 24
175.107.170.0/23 maxlen: 24
175.107.172.0/23 maxlen: 24
175.107.174.0/23 maxlen: 24
175.107.176.0/23 maxlen: 24
175.107.178.0/23 maxlen: 24
175.107.180.0/23 maxlen: 24
175.107.184.0/23 maxlen: 24
175.107.186.0/23 maxlen: 24
175.107.190.0/24 maxlen: 24
2400:7aa0:1200::/40 maxlen: 48
2400:7aa0:1300::/40 maxlen: 48
2400:7aa0:1400::/40 maxlen: 48
2400:7aa0:1500::/40 maxlen: 48
2400:7aa0:1600::/40 maxlen: 48
2400:7aa0:1700::/40 maxlen: 48
2400:7aa0:1800::/40 maxlen: 48
2400:7aa0:1900::/40 maxlen: 48
2400:7aa0:1a00::/40 maxlen: 48
2400:7aa0:1b00::/40 maxlen: 48
2400:7aa0:1c00::/40 maxlen: 48
2400:7aa0:1d00::/40 maxlen: 40
2400:7aa0:1e00::/40 maxlen: 48
2400:7aa0:1f00::/40 maxlen: 48
2400:7aa0:2200::/40 maxlen: 48
2400:7aa0:2300::/40 maxlen: 48
2400:7aa0:2400::/40 maxlen: 48
2400:7aa0:2500::/40 maxlen: 48
2400:7aa0:2600::/40 maxlen: 48
2400:7aa0:2800::/40 maxlen: 48
2400:7aa0:2900::/40 maxlen: 48
2400:7aa0:2b00::/40 maxlen: 48
2400:7aa0:2c00::/40 maxlen: 48
2400:7aa0:2e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Validity
Not Before: Jul 24 08:42:40 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a632580-f01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:48:a8:ac:8b:39:9f:2d:67:71:9e:46:9b:
7a:8e:35:ba:75:0a:f9:d2:a0:21:f0:6c:d6:b0:9e:
9d:60:a5:59:33:84:ad:74:af:a0:8e:35:07:ee:52:
7a:05:ae:1b:be:2d:d4:bf:7a:6e:68:c9:75:03:85:
ab:4f:3d:9a:3f:fa:16:5e:a7:99:5b:88:47:b5:23:
99:db:0c:aa:ab:ca:69:22:e0:fd:24:13:c8:88:bc:
17:32:fb:47:73:83:44:62:8d:5b:e2:d1:ff:79:1c:
e2:52:d9:4b:78:41:61:01:af:97:5d:8e:60:a8:1a:
79:47:d1:20:39:a5:56:52:a5:83:af:4c:d4:e7:b5:
a3:39:49:9f:d3:6d:c9:d4:1e:44:dc:22:fb:2d:15:
3e:bf:98:06:ef:87:d6:78:e0:43:ea:66:fc:8b:98:
5e:6d:02:f2:98:71:18:b6:bd:4d:49:2a:06:9f:1e:
d6:2a:76:d3:81:5a:4b:53:fd:7b:ab:c1:3f:26:1f:
97:d3:53:a0:0e:0c:b5:2b:ab:1c:d2:05:5d:d5:52:
20:94:96:9a:d4:f7:2a:7e:b0:03:ef:15:5e:2d:91:
42:df:46:e0:44:62:2e:9e:0e:26:c4:7e:a3:c5:25:
6f:7d:20:af:3d:7e:3b:86:ff:17:7d:d6:52:c2:44:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6C:BD:39:38:FC:45:78:3B:02:A1:CC:0D:69:75:C6:A3:1B:04:21
X509v3 Authority Key Identifier:
keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/C27C0758916B11EF81BBB521C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.2.192.0-101.2.209.255
101.2.214.0-101.2.250.255
101.2.252.0/22
175.107.128.0-175.107.134.255
175.107.136.0-175.107.167.255
175.107.170.0-175.107.181.255
175.107.184.0/22
175.107.190.0/24
IPv6:
2400:7aa0:1200::-2400:7aa0:1fff:ffff:ffff:ffff:ffff:ffff
2400:7aa0:2200::-2400:7aa0:26ff:ffff:ffff:ffff:ffff:ffff
2400:7aa0:2800::/39
2400:7aa0:2b00::-2400:7aa0:2cff:ffff:ffff:ffff:ffff:ffff
2400:7aa0:2e00::/40
Signature Algorithm: sha256WithRSAEncryption
9b:49:fc:71:6e:a6:c4:0c:c6:ee:fb:45:d8:74:5b:c2:c1:62:
bc:d3:db:35:33:fa:1c:2c:85:87:a4:0d:f7:0f:c0:ed:20:8e:
1f:6c:07:bb:e7:2f:a5:74:53:f9:49:42:f6:c0:7e:6d:c6:4c:
50:15:6e:8f:a6:62:aa:ec:f2:8e:1b:4f:98:89:a8:0d:14:09:
0a:85:b1:90:d9:ad:39:9e:c5:59:78:ea:41:4a:12:63:f3:d4:
5d:fd:aa:69:b4:95:a6:f9:08:a0:f4:ba:46:de:16:cd:f7:65:
a5:ff:15:18:2c:f6:de:2f:e6:a0:bb:1f:a9:cc:3a:02:6c:24:
43:0b:a7:63:3d:52:6b:72:8e:00:6e:4f:cc:90:b6:7b:df:37:
3e:36:1c:3c:00:9b:bb:da:d3:d7:fe:48:59:8b:0a:2a:f2:f4:
fb:ce:1d:6a:c4:d6:57:24:7e:5c:37:ae:c0:97:9c:68:62:d0:
36:ae:83:6e:71:9a:99:da:79:e7:da:ef:50:87:5b:50:17:ed:
1e:de:5f:c8:4c:83:7e:78:c6:3a:23:4f:6e:04:c0:df:3d:e1:
ec:00:41:31:8d:55:d2:43:f7:f9:1a:1b:f7:61:86:22:51:b6:
fd:3c:6f:bc:1c:28:49:f4:7f:3c:9e:3b:bd:4c:92:1e:1d:4f:
7c:f6:83:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:13:42 2026 by rpki-client