Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/681269F8087811F19439B7C20A3D8C67.roa
File: 681269F8087811F19439B7C20A3D8C67.roa (raw, json)
Hash identifier: GfKHo2eQlYNPUrbMHKQtwwJ+sbJRJ6lCyawulNvQePo=
Subject key identifier: 65:4F:A8:AA:C2:FB:A7:0D:51:B3:55:46:75:50:D8:A1:2E:95:88:0A
Certificate issuer: /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial: 3C
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/681269F8087811F19439B7C20A3D8C67.roa
Signing time: Sun 01 Mar 2026 06:05:03 +0000
ROA not before: Fri 13 Feb 2026 01:07:46 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 9652
IP address blocks: 27.127.192.0/19 maxlen: 19
27.127.193.0/24 maxlen: 24
27.127.194.0/23 maxlen: 24
27.127.196.0/23 maxlen: 24
27.127.198.0/23 maxlen: 24
27.127.200.0/23 maxlen: 24
27.127.202.0/23 maxlen: 24
27.127.204.0/23 maxlen: 24
27.127.206.0/23 maxlen: 24
27.127.208.0/23 maxlen: 24
27.127.210.0/23 maxlen: 24
27.127.212.0/23 maxlen: 24
27.127.214.0/23 maxlen: 24
27.127.216.0/23 maxlen: 24
27.127.218.0/23 maxlen: 24
27.127.220.0/23 maxlen: 24
27.127.222.0/23 maxlen: 23
27.127.224.0/20 maxlen: 24
202.3.96.0/20 maxlen: 20
202.3.96.0/23 maxlen: 24
202.3.98.0/23 maxlen: 24
202.3.100.0/23 maxlen: 24
202.3.102.0/23 maxlen: 24
202.3.104.0/23 maxlen: 24
202.3.106.0/23 maxlen: 24
202.3.108.0/24 maxlen: 24
202.3.109.0/24 maxlen: 24
202.3.110.0/24 maxlen: 24
202.3.111.0/24 maxlen: 24
203.22.70.0/23 maxlen: 24
203.29.180.0/24 maxlen: 24
203.55.38.0/24 maxlen: 24
203.55.158.0/24 maxlen: 24
203.55.254.0/24 maxlen: 24
203.201.128.0/19 maxlen: 19
203.201.128.0/23 maxlen: 24
203.201.130.0/23 maxlen: 24
203.201.132.0/23 maxlen: 24
203.201.134.0/23 maxlen: 24
203.201.136.0/23 maxlen: 24
203.201.138.0/23 maxlen: 24
203.201.140.0/23 maxlen: 24
203.201.142.0/23 maxlen: 24
203.201.144.0/23 maxlen: 24
203.201.146.0/23 maxlen: 24
203.201.148.0/23 maxlen: 24
203.201.150.0/23 maxlen: 24
203.201.152.0/23 maxlen: 24
203.201.154.0/24 maxlen: 24
203.201.155.0/24 maxlen: 24
203.201.156.0/24 maxlen: 24
203.201.157.0/24 maxlen: 24
203.201.158.0/23 maxlen: 24
2400:6880::/32 maxlen: 32
2400:6880::/33 maxlen: 34
2400:6880::/38 maxlen: 38
2400:6880:8000::/36 maxlen: 36
2400:6880:9000::/36 maxlen: 36
2400:6880:a000::/35 maxlen: 35
2400:6880:e000::/35 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Validity
Not Before: Feb 13 01:07:46 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3d70e-a80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:78:1d:77:2b:b9:3b:29:53:e7:c8:f0:fa:
84:7e:7a:ce:08:e4:ad:45:01:49:92:b3:17:5d:38:
46:12:72:39:a2:6c:be:86:f2:7b:65:84:0d:95:a8:
c8:ee:de:12:42:6b:9b:48:bc:5a:74:e4:4d:1b:17:
6c:a7:2e:04:26:de:b7:47:49:52:f5:f4:fa:7f:38:
d3:92:80:8c:98:0f:07:15:f2:4e:2f:1a:c4:a3:24:
0a:9d:c7:b8:f6:6b:ee:49:c1:54:15:c4:23:8a:e7:
33:27:e7:57:88:8b:de:43:ac:9c:f9:92:4b:57:a6:
ea:1a:68:d8:59:11:03:e5:26:2f:ee:90:42:72:27:
d5:a6:91:f6:61:82:1a:1d:db:7a:f5:88:a9:ed:6b:
14:44:8b:bb:46:d2:17:bc:27:62:26:cc:6b:09:2e:
af:72:8f:61:9f:64:28:a9:43:80:65:d4:b8:85:39:
69:3c:9f:15:f4:ab:51:c9:20:9a:aa:64:0d:c4:e5:
9a:55:78:24:de:fc:7d:79:46:85:20:fa:3c:bb:90:
da:65:5e:f7:41:d6:a8:ac:00:0d:62:e2:a7:a1:cf:
bd:b6:e5:fd:4b:6e:ba:00:0b:46:84:97:ad:d0:8d:
94:27:1f:05:53:50:cb:f7:a0:6e:7f:a4:7c:b3:83:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4F:A8:AA:C2:FB:A7:0D:51:B3:55:46:75:50:D8:A1:2E:95:88:0A
X509v3 Authority Key Identifier:
keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/681269F8087811F19439B7C20A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
27.127.192.0-27.127.239.255
202.3.96.0/20
203.22.70.0/23
203.29.180.0/24
203.55.38.0/24
203.55.158.0/24
203.55.254.0/24
203.201.128.0/19
IPv6:
2400:6880::/32
Signature Algorithm: sha256WithRSAEncryption
50:90:8c:33:64:b2:15:e7:85:47:e5:5f:9b:ae:68:59:54:a7:
92:63:c3:06:9c:03:e9:3e:15:bc:ba:2b:50:72:2c:67:25:bf:
54:43:74:6e:f8:95:88:d9:e7:af:0a:5d:73:fe:d8:f1:99:09:
12:44:1d:08:bd:ac:e2:01:e1:f8:f5:03:2d:bb:29:f9:62:62:
b1:52:c4:67:9a:24:c3:18:f8:c1:72:84:9e:be:71:80:df:b4:
3d:e6:f3:18:fd:3b:8b:14:5f:8c:76:ec:1b:76:e0:44:d7:7f:
07:62:c8:f4:d9:38:1f:b9:26:15:69:f7:66:7e:48:fe:89:f2:
01:eb:4e:3f:65:e5:91:16:09:5e:94:55:a2:13:db:40:25:b5:
a1:15:93:77:98:5a:30:48:49:76:68:1f:a5:94:c6:93:f3:dc:
08:3e:37:8b:b1:ca:36:d3:bf:9e:08:de:13:2c:97:0c:37:2d:
d6:bf:b6:34:6a:f1:e8:07:09:ea:5d:2a:c1:40:e7:ad:c5:b3:
a5:e2:9d:39:90:d7:ac:b7:bb:44:1e:65:bd:1a:56:f9:f9:85:
e4:9f:7c:a1:fb:61:03:88:4b:d0:f4:50:11:66:e7:e2:6c:31:
79:5c:56:bd:e5:af:fe:2d:9b:fa:9a:a4:d3:34:ea:a7:d3:4c:
dd:09:3c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:46:33 2026 by rpki-client