Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa
File: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (raw, json)
Hash identifier: CWOtv6B0fcU2IHlDgJ0/Gmijxbm6pcAfTDFP/NJ9B84=
Subject key identifier: 67:08:41:57:99:CF:EE:D0:43:04:05:DF:B7:6B:C6:60:31:25:4D:5D
Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Certificate serial: 0F34
Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa
Signing time: Sun 02 Aug 2026 18:35:07 +0000
ROA not before: Sun 02 Aug 2026 18:35:07 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 55944
IP address blocks: 43.231.28.0/22 maxlen: 24
43.247.140.0/22 maxlen: 24
103.15.52.0/22 maxlen: 24
103.19.224.0/22 maxlen: 24
103.50.104.0/22 maxlen: 24
103.248.112.0/22 maxlen: 24
150.107.196.0/22 maxlen: 24
202.153.80.0/21 maxlen: 21
202.153.80.0/23 maxlen: 24
202.153.82.0/23 maxlen: 24
202.153.84.0/23 maxlen: 24
202.153.86.0/23 maxlen: 24
2404:ab80::/48 maxlen: 48
2404:ab80:1::/48 maxlen: 48
2404:ab80:2::/48 maxlen: 48
2404:ab80:3::/48 maxlen: 48
2404:ab80:4::/48 maxlen: 48
2404:ab80:5::/48 maxlen: 48
2404:ab80:6::/48 maxlen: 48
2404:ab80:7::/48 maxlen: 48
2404:ab80:8::/48 maxlen: 48
2404:ab80:9::/48 maxlen: 48
2404:ab80:9:400::/64 maxlen: 64
2404:ab80:9:401::/64 maxlen: 64
2404:ab80:a::/48 maxlen: 48
2404:ab80:b::/48 maxlen: 48
2404:ab80:c::/48 maxlen: 48
2404:ab80:d::/48 maxlen: 48
2404:ab80:e::/48 maxlen: 48
2404:ab80:f::/48 maxlen: 48
2404:ab80:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3892 (0xf34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Validity
Not Before: Aug 2 18:35:07 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6f8ddb-a329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:25:7e:74:d1:9e:9f:11:d7:90:a2:85:12:
56:83:06:9a:73:98:b3:8f:9e:a5:c5:f7:44:35:52:
db:ff:d6:b3:ff:23:38:a3:2e:e4:f2:e7:13:05:8f:
c1:df:1d:51:c3:e5:bb:0b:b2:49:d6:67:9a:6d:f5:
e1:b6:a9:7d:df:2f:be:ea:f2:e3:56:93:66:3a:fb:
b9:ea:1a:78:f6:0b:8c:10:e0:d2:f2:35:30:9e:00:
4b:94:3d:d8:40:55:f8:42:4b:84:78:69:d2:5e:f2:
05:11:92:8e:c8:94:5e:bb:cd:f1:71:28:e8:ee:1a:
da:bd:53:f0:b3:ae:2b:9d:a1:bb:7c:46:a4:bb:90:
c6:69:d8:da:87:e3:53:a0:43:a3:71:ff:70:e2:9e:
76:55:a0:a2:db:52:a7:ae:03:be:0c:3a:ba:1b:e0:
7a:67:8d:6b:29:99:7e:1f:64:b4:aa:45:d8:89:9a:
ed:f8:8e:b0:34:f8:f3:a7:ae:09:c8:d8:a8:38:f6:
fa:28:b3:f0:79:5d:ee:61:ad:ee:02:a4:96:a5:31:
7c:2f:7a:f5:78:5b:e9:86:bf:24:59:bd:02:73:c7:
85:1f:74:00:02:f1:5e:b6:56:07:a2:7e:64:21:c8:
f9:bd:5d:23:91:c4:bf:7b:68:09:e8:b0:a5:0f:d4:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:08:41:57:99:CF:EE:D0:43:04:05:DF:B7:6B:C6:60:31:25:4D:5D
X509v3 Authority Key Identifier:
keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.231.28.0/22
43.247.140.0/22
103.15.52.0/22
103.19.224.0/22
103.50.104.0/22
103.248.112.0/22
150.107.196.0/22
202.153.80.0/21
IPv6:
2404:ab80::-2404:ab80:10:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:41:c2:8e:c2:b6:85:76:78:e5:5a:9b:27:fb:63:73:5f:84:
54:99:2d:31:d1:ac:ab:e3:48:4b:1b:d4:54:0f:32:ac:fa:5c:
fb:fd:0c:d7:c9:3c:27:95:55:82:ec:90:26:d2:70:01:b5:0e:
be:55:b1:fb:24:89:d8:b8:59:c8:a8:e0:8f:b4:2d:1e:d8:a9:
69:8a:65:ce:9f:40:a8:3c:fb:ea:ef:87:14:47:20:fc:22:79:
05:c9:19:32:a3:3a:03:ef:3a:04:f1:97:2f:34:45:b3:4e:b1:
11:21:ee:70:06:0a:ba:d1:34:26:c6:8f:fa:c8:a2:61:f4:f9:
b8:88:a1:93:cc:3f:9e:79:1e:8c:54:33:0d:dc:88:22:20:33:
eb:49:dd:30:bf:28:98:98:44:a0:85:5b:ae:60:00:fa:18:f1:
aa:84:e9:07:a5:57:60:4a:1f:7a:ad:ec:b5:2c:39:9d:10:20:
ab:75:f8:94:7b:c7:0f:63:5d:d5:dd:64:5b:36:98:6a:43:dd:
91:e1:02:75:e8:df:db:a6:cf:15:9c:b4:db:80:7d:6e:f9:25:
ad:14:0b:55:8a:3f:dc:13:9e:5e:83:f0:4b:cf:a5:36:a2:c9:
d7:be:cd:f5:ff:f3:66:1c:cf:50:5b:52:78:2b:42:86:ae:c7:
bb:f6:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:26:46 2026 by rpki-client