Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/681269F8087811F19439B7C20A3D8C67.roa
File: 681269F8087811F19439B7C20A3D8C67.roa (raw, json)
Hash identifier: YMJQ6t3KOlMeCDMclcyI4S2K0MLQ5+kLB3/HRpyIzBg=
Subject key identifier: F0:26:D6:7A:B9:A7:81:17:AD:10:A4:75:DB:81:96:85:E2:27:B8:51
Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial: 99
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/681269F8087811F19439B7C20A3D8C67.roa
Signing time: Tue 25 Aug 2026 07:57:26 +0000
ROA not before: Tue 25 Aug 2026 07:57:26 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 9652
IP address blocks: 27.127.192.0/19 maxlen: 19
27.127.193.0/24 maxlen: 24
27.127.194.0/23 maxlen: 24
27.127.196.0/23 maxlen: 24
27.127.198.0/23 maxlen: 24
27.127.200.0/23 maxlen: 24
27.127.202.0/23 maxlen: 24
27.127.204.0/23 maxlen: 24
27.127.206.0/23 maxlen: 24
27.127.208.0/23 maxlen: 24
27.127.210.0/23 maxlen: 24
27.127.212.0/23 maxlen: 24
27.127.214.0/23 maxlen: 24
27.127.216.0/23 maxlen: 24
27.127.218.0/23 maxlen: 24
27.127.220.0/23 maxlen: 24
27.127.222.0/23 maxlen: 23
27.127.224.0/20 maxlen: 24
202.3.96.0/20 maxlen: 20
202.3.96.0/23 maxlen: 24
202.3.98.0/23 maxlen: 24
202.3.100.0/23 maxlen: 24
202.3.102.0/23 maxlen: 24
202.3.104.0/23 maxlen: 24
202.3.106.0/23 maxlen: 24
202.3.108.0/24 maxlen: 24
202.3.109.0/24 maxlen: 24
202.3.110.0/24 maxlen: 24
202.3.111.0/24 maxlen: 24
203.22.70.0/23 maxlen: 24
203.29.180.0/24 maxlen: 24
203.55.38.0/24 maxlen: 24
203.55.158.0/24 maxlen: 24
203.55.254.0/24 maxlen: 24
203.201.128.0/19 maxlen: 19
203.201.128.0/23 maxlen: 24
203.201.130.0/23 maxlen: 24
203.201.132.0/23 maxlen: 24
203.201.134.0/23 maxlen: 24
203.201.136.0/23 maxlen: 24
203.201.138.0/23 maxlen: 24
203.201.140.0/23 maxlen: 24
203.201.142.0/23 maxlen: 24
203.201.144.0/23 maxlen: 24
203.201.146.0/23 maxlen: 24
203.201.148.0/23 maxlen: 24
203.201.150.0/23 maxlen: 24
203.201.152.0/23 maxlen: 24
203.201.154.0/24 maxlen: 24
203.201.155.0/24 maxlen: 24
203.201.156.0/24 maxlen: 24
203.201.157.0/24 maxlen: 24
203.201.158.0/23 maxlen: 24
2400:6880::/32 maxlen: 32
2400:6880::/33 maxlen: 34
2400:6880::/38 maxlen: 38
2400:6880:8000::/36 maxlen: 36
2400:6880:9000::/36 maxlen: 36
2400:6880:a000::/35 maxlen: 35
2400:6880:e000::/35 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Validity
Not Before: Aug 25 07:57:26 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8d4ae6-092c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:77:b3:b7:53:46:e4:df:01:de:ba:c5:c7:
14:3f:2e:7d:ac:f3:0b:0f:53:2f:58:61:3b:e2:6c:
b9:1d:26:59:2f:1a:92:49:c6:d3:6c:bf:b2:37:69:
02:cb:bb:6f:aa:22:9f:e9:fd:a1:cd:c4:25:dc:83:
1f:01:6d:87:9e:c7:84:0c:63:87:74:0d:1a:3b:0d:
54:12:64:73:79:07:1b:1c:2b:32:e0:7f:d5:ed:4b:
66:b1:d2:86:e3:b5:c0:05:0b:9c:96:3c:fe:42:28:
e7:76:86:43:fe:78:e8:01:d6:70:e7:0f:ed:d3:76:
1b:34:c4:79:31:5d:a1:2e:84:6e:7b:8e:d2:99:32:
9c:f6:04:6c:e5:86:42:48:2b:c0:f9:3b:76:81:62:
5a:53:87:4b:e4:20:b7:03:02:53:92:46:9c:bc:c6:
3a:43:cc:61:f2:ec:46:a5:00:2e:ab:05:0c:c7:8f:
68:fe:91:85:f5:91:cb:55:1a:04:63:66:b0:4b:90:
4f:7f:c7:dc:1e:d7:e1:7a:50:1a:8b:39:7b:6e:b0:
c6:06:93:28:30:74:2b:8a:06:12:ac:08:27:14:4c:
de:be:f0:68:ca:47:ae:df:40:27:2d:0a:d2:73:bf:
ae:fd:fc:18:6c:19:20:36:a4:42:3f:2e:5a:cf:e4:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:26:D6:7A:B9:A7:81:17:AD:10:A4:75:DB:81:96:85:E2:27:B8:51
X509v3 Authority Key Identifier:
keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/681269F8087811F19439B7C20A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
27.127.192.0-27.127.239.255
202.3.96.0/20
203.22.70.0/23
203.29.180.0/24
203.55.38.0/24
203.55.158.0/24
203.55.254.0/24
203.201.128.0/19
IPv6:
2400:6880::/32
Signature Algorithm: sha256WithRSAEncryption
2d:90:d3:3b:dd:b5:11:e8:ee:4b:ac:9a:05:1e:d3:33:e6:5b:
73:ec:f8:f3:6b:06:f0:20:64:4c:46:1a:64:d0:c6:0c:b0:9b:
7a:ea:c0:e3:b3:85:05:6b:ae:b5:6e:24:cf:b7:1a:f4:e7:b0:
bf:09:10:31:7e:ae:1c:ad:7e:05:58:22:79:ad:69:ff:1a:68:
52:02:a2:c7:10:90:70:0f:38:e0:a7:84:68:d2:3c:f6:84:fb:
7f:43:9f:37:65:31:7b:38:c8:5d:76:a0:58:f6:fd:5f:33:5b:
75:e1:0b:11:bf:c6:3c:56:a2:2e:ff:93:e4:98:9b:7d:7f:95:
a0:41:f4:a2:3f:8f:4d:da:77:49:49:3f:f1:e8:af:20:a3:b9:
94:89:df:dd:e6:61:27:31:be:ec:cd:1d:34:50:cc:b4:a5:53:
b2:01:d8:83:8f:9b:83:0e:35:ac:3e:2f:32:dd:ac:3a:6e:c9:
d0:57:05:55:ab:eb:51:60:0c:60:8c:41:d1:48:84:f6:73:4b:
5b:eb:f6:38:80:96:7c:45:9e:b9:38:99:c6:3e:85:50:16:76:
ac:6d:b4:c2:83:14:a3:bf:67:16:c1:78:b4:7d:19:af:17:99:
94:7d:49:21:b8:73:f5:10:a6:c3:ca:c8:39:75:32:d6:1e:84:
7e:75:49:ce
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZFQTgxMTAvBgNVBAUTKDc3ODQ4ODE0OEUzQUUyRjE0QUQ0MDg1NEY3QTJGQTU5
NTc3NUM1NzUwHhcNMjYwODI1MDc1NzI2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThkNGFlNi0wOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqvd3s7dTRuTfAd66xccUPy59rPMLD1MvWGE74my5HSZZLxqSScbTbL+yN2kC
y7tvqiKf6f2hzcQl3IMfAW2HnseEDGOHdA0aOw1UEmRzeQcbHCsy4H/V7UtmsdKG
47XABQucljz+QijndoZD/njoAdZw5w/t03YbNMR5MV2hLoRue47SmTKc9gRs5YZC
SCvA+Tt2gWJaU4dL5CC3AwJTkkacvMY6Q8xh8uxGpQAuqwUMx49o/pGF9ZHLVRoE
Y2awS5BPf8fcHtfhelAaizl7brDGBpMoMHQrigYSrAgnFEzevvBoykeu30AnLQrS
c7+u/fwYbBkgNqRCPy5az+SIhwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPAm1nq5
p4EXrRCkdduBloXiJ7hRMB8GA1UdIwQYMBaAFHeEiBSOOuLxStQIVPei+llXdcV1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkVBOC8wNjhFNzY3QUM1
OUYxMUYwQjMwRDVEN0NDNEY5QUUwMi9kNFNJRkk0NjR2RksxQWhVOTZMNldWZDF4
WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Q0U0lGSTQ2NHZGSzFBaFU5Nkw2V1ZkMXhYVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUZFQTgvMDY4RTc2N0FDNTlGMTFGMEIzMEQ1RDdDQzRGOUFFMDIvNjgxMjY5Rjgw
ODc4MTFGMTk0MzlCN0MyMEEzRDhDNjcucm9hMGAGCCsGAQUFBwEHAQH/BFEwTzA+
BAIAATA4MAwDBAYbf8ADBAQbf+ADBATKA2ADBAHLFkYDBADLHbQDBADLNyYDBADL
N54DBADLN/4DBAXLyYAwDQQCAAIwBwMFACQAaIAwDQYJKoZIhvcNAQELBQADggEB
AC2Q0zvdtRHo7kusmgUe0zPmW3Ps+PNrBvAgZExGGmTQxgywm3rqwOOzhQVrrrVu
JM+3GvTnsL8JEDF+rhytfgVYInmtaf8aaFICoscQkHAPOOCnhGjSPPaE+39Dnzdl
MXs4yF12oFj2/V8zW3XhCxG/xjxWoi7/k+SYm31/laBB9KI/j03ad0lJP/HoryCj
uZSJ393mYScxvuzNHTRQzLSlU7IB2IOPm4MONaw+LzLdrDpuydBXBVWr61FgDGCM
QdFIhPZzS1vr9jiAlnxFnrk4mcY+hVAWdqxttMKDFKO/ZxbBeLR9Ga8XmZR9SSG4
c/UQpsPKyDl1MtYehH51Sc4=
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:41:19 2026 by rpki-client