Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/BAE1D7A8716711EFBF91272AC4F9AE02.roa
File: BAE1D7A8716711EFBF91272AC4F9AE02.roa (raw, json)
Hash identifier: SrXwDLxWzlD5Tzz3fVP3ku5wxDt5i+weeTQipTZ19xg=
Subject key identifier: 69:62:70:4D:7B:AC:CE:17:51:47:12:4F:A8:6E:36:AA:93:67:0B:B7
Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Certificate serial: 1102
Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/BAE1D7A8716711EFBF91272AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:16:44 +0000
ROA not before: Wed 30 Apr 2025 17:26:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46489
IP address blocks: 45.113.128.0/22 maxlen: 22
103.53.48.0/22 maxlen: 22
103.53.48.0/23 maxlen: 23
2402:2a80::/32 maxlen: 32
2402:2a80:100::/40 maxlen: 48
2402:2a80:200::/40 maxlen: 48
2402:2a80:300::/40 maxlen: 48
2402:2a80:400::/40 maxlen: 48
2402:2a80:1000::/36 maxlen: 36
2402:2a80:1000::/40 maxlen: 40
2402:2a80:1100::/40 maxlen: 40
2402:2a80:1200::/40 maxlen: 40
2402:2a80:1300::/40 maxlen: 40
2402:2a80:1400::/40 maxlen: 40
2402:2a80:1500::/40 maxlen: 40
2402:2a80:2000::/36 maxlen: 36
2402:2a80:2000::/40 maxlen: 40
2402:2a80:2100::/40 maxlen: 40
2402:2a80:3000::/36 maxlen: 36
2402:2a80:3000::/40 maxlen: 40
2402:2a80:3100::/40 maxlen: 40
2402:2a80:3200::/40 maxlen: 40
2402:2a80:3300::/40 maxlen: 40
2402:2a80:4000::/36 maxlen: 36
2402:2a80:4000::/40 maxlen: 40
2402:2a80:4100::/40 maxlen: 40
2402:2a80:4200::/40 maxlen: 40
2402:2a80:5000::/36 maxlen: 36
2402:2a80:6000::/36 maxlen: 36
2402:2a80:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4354 (0x1102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Validity
Not Before: Apr 30 17:26:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a42e2b-2ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:65:17:77:1d:df:26:69:2e:10:6d:73:95:
ac:31:ac:99:0b:1c:52:b4:63:9f:3d:01:5b:d6:cb:
02:c6:f1:79:b4:5e:76:23:61:90:02:bf:3b:dc:43:
9c:18:0f:2c:af:18:a0:61:6d:9f:5b:8f:0d:25:e0:
9a:66:ea:3f:f3:d7:e4:27:96:6c:78:ed:45:2c:e3:
7e:bf:71:cb:6b:26:69:c2:d6:6f:19:fd:59:2e:19:
e7:80:49:02:3e:78:26:a9:b0:33:a3:75:55:ae:f2:
6f:6a:63:33:99:71:42:2a:0c:19:de:b0:50:e2:71:
f3:b4:ad:90:df:cd:73:60:20:6a:55:b8:cd:d0:bc:
4f:52:c4:ea:e8:be:d1:60:d0:e6:50:64:f3:9f:79:
1c:45:a1:87:33:a8:a8:32:f6:67:f2:07:ae:44:8e:
53:dd:42:87:31:2b:63:67:3c:62:c0:94:42:1d:87:
3f:e9:f3:07:14:51:63:89:95:23:14:be:e5:5f:99:
28:d7:cb:29:b8:79:d2:21:b4:38:62:b7:0a:09:49:
7d:99:50:6e:90:2c:4a:c8:bd:6b:3f:ac:ba:a4:49:
3e:de:a5:f9:4b:bf:8d:65:05:23:92:86:08:f5:18:
ee:f9:0d:59:45:13:0e:24:5d:23:d0:a5:c8:fc:85:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:70:4D:7B:AC:CE:17:51:47:12:4F:A8:6E:36:AA:93:67:0B:B7
X509v3 Authority Key Identifier:
keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/BAE1D7A8716711EFBF91272AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.113.128.0/22
103.53.48.0/22
IPv6:
2402:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
43:59:08:a6:04:b8:a2:1a:56:9e:44:dd:88:82:e1:45:b3:af:
f4:30:21:7a:5a:2a:39:16:dd:07:ef:72:dc:d1:17:36:c1:03:
b0:fa:a3:35:99:73:f2:7c:61:cd:b2:d6:e0:53:75:ad:84:82:
ba:a1:28:1b:33:e4:a3:c9:ca:ca:29:99:79:05:06:d7:0c:1a:
90:2c:c6:5f:7a:db:c7:ac:6d:83:86:8f:7d:13:89:a9:12:3a:
7c:25:e8:12:15:e0:3e:37:30:c3:2b:2c:8f:ac:31:af:f9:44:
a2:55:51:66:11:2e:30:ca:52:1b:74:b5:59:53:e4:97:20:a1:
86:fd:03:14:bc:cb:47:8c:b3:45:8f:9e:81:9c:af:42:c2:0f:
3f:79:4e:03:2b:51:b9:d5:c8:1a:79:23:cf:ab:df:7e:49:fc:
70:fd:7a:ee:d5:6d:c5:a8:e2:86:e6:df:96:ff:83:8b:b2:67:
52:a8:7d:93:6a:6d:a1:5f:4a:0e:c3:a3:8d:9d:71:1d:5b:21:
57:79:e0:e1:15:d6:5f:b3:49:e8:f2:f8:52:66:b1:f1:f3:96:
f7:3d:34:54:27:b9:d4:a9:90:34:88:36:d1:4f:68:e0:70:50:
33:c4:28:04:56:20:e7:4f:ed:9d:61:d4:bd:4b:ea:f1:2e:4f:
86:f7:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:32 2026 by rpki-client