Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FFCFFCFC756411F1BE4724178AA30FBC.roa
File: FFCFFCFC756411F1BE4724178AA30FBC.roa (raw, json)
Hash identifier: K+M/GXpCv3Nhy9zZfN36sc5I9tx9qAwRUjDeflaFZJU=
Subject key identifier: 89:8D:50:70:F7:44:B6:38:9A:91:18:95:E1:C4:F1:CF:4E:1B:75:C4
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 047F
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FFCFFCFC756411F1BE4724178AA30FBC.roa
Signing time: Sun 13 Sep 2026 01:51:35 +0000
ROA not before: Sun 13 Sep 2026 01:51:35 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 209043
IP address blocks: 43.225.80.0/24 maxlen: 24
43.225.81.0/24 maxlen: 24
43.225.82.0/24 maxlen: 24
43.225.83.0/24 maxlen: 24
45.113.96.0/24 maxlen: 24
45.113.97.0/24 maxlen: 24
45.113.98.0/24 maxlen: 24
45.113.99.0/24 maxlen: 24
45.120.48.0/24 maxlen: 24
45.120.49.0/24 maxlen: 24
45.120.50.0/24 maxlen: 24
45.120.51.0/24 maxlen: 24
103.44.212.0/24 maxlen: 24
103.44.213.0/24 maxlen: 24
103.44.214.0/24 maxlen: 24
103.44.215.0/24 maxlen: 24
103.50.28.0/24 maxlen: 24
103.50.29.0/24 maxlen: 24
103.50.30.0/24 maxlen: 24
103.50.31.0/24 maxlen: 24
103.52.248.0/22 maxlen: 22
103.108.0.0/24 maxlen: 24
103.108.1.0/24 maxlen: 24
103.109.74.0/24 maxlen: 24
103.109.75.0/24 maxlen: 24
103.110.144.0/22 maxlen: 22
103.114.56.0/24 maxlen: 24
103.114.57.0/24 maxlen: 24
103.119.244.0/24 maxlen: 24
103.119.247.0/24 maxlen: 24
103.221.233.0/24 maxlen: 24
139.5.88.0/22 maxlen: 22
160.20.8.0/24 maxlen: 24
160.20.9.0/24 maxlen: 24
160.20.10.0/24 maxlen: 24
160.20.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Sep 13 01:51:35 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa601a7-135e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:cb:0c:75:ba:00:5b:8a:0f:58:7d:b5:e8:
6b:f5:31:3c:a3:47:bf:47:c7:c4:52:ed:13:1f:ef:
a6:ba:6d:1e:c6:6b:72:a7:f9:fa:fd:c0:87:01:02:
61:32:8c:97:35:51:7c:c6:b0:f1:ff:b5:e9:21:8e:
49:33:ab:cc:75:8f:61:37:1c:6d:eb:10:7e:40:f1:
04:bf:56:9b:0b:42:2d:c2:3a:2d:7f:cf:20:fb:52:
33:a2:dc:17:02:5d:d7:18:51:f1:2e:8a:7f:40:53:
01:97:f4:1d:e0:6e:bd:6d:7a:80:db:26:1c:60:55:
ac:0f:6a:01:8e:47:5c:f4:2b:68:50:a9:ef:f9:fb:
89:87:33:b2:72:6b:51:bd:ce:9a:4e:23:42:eb:70:
d5:78:cf:d6:46:59:d1:03:a1:3e:66:b6:a8:c2:ca:
f4:8e:a7:b2:2e:80:65:7d:a4:1d:b0:ce:68:98:fa:
ca:e3:26:96:cc:13:75:e7:07:5a:b1:1d:87:a7:6b:
33:08:2e:bb:b3:3f:7b:4e:07:0f:57:7b:71:3c:19:
b7:39:08:1a:02:80:55:b9:30:34:b7:a2:7e:83:c0:
00:a0:0e:c9:e0:9d:8c:e2:c2:e9:d0:6a:d6:ed:f4:
c5:5e:94:67:a7:4e:9b:77:b1:b3:d1:65:9e:3a:0b:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8D:50:70:F7:44:B6:38:9A:91:18:95:E1:C4:F1:CF:4E:1B:75:C4
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FFCFFCFC756411F1BE4724178AA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.80.0/22
45.113.96.0/22
45.120.48.0/22
103.44.212.0/22
103.50.28.0/22
103.52.248.0/22
103.108.0.0/23
103.109.74.0/23
103.110.144.0/22
103.114.56.0/23
103.119.244.0/24
103.119.247.0/24
103.221.233.0/24
139.5.88.0/22
160.20.8.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:63:2d:d1:cc:e7:7d:e1:8f:18:c9:be:27:6b:f2:aa:c2:aa:
69:17:a1:23:e8:48:4f:2e:c3:3f:35:b6:3b:c2:0b:66:61:8c:
af:2a:c5:d9:92:c4:4e:65:d8:97:33:9e:a6:d4:79:cd:aa:02:
3b:c1:c2:01:46:3d:3f:56:0b:1e:b4:56:1e:99:85:20:3e:93:
64:fa:a7:27:01:7c:f2:ee:02:33:82:8a:db:c8:9b:0f:36:89:
ab:03:8c:fd:bf:f1:ec:c0:b6:da:ad:8f:65:05:b4:98:13:72:
16:e0:4a:1e:bf:86:c0:73:8c:51:a6:29:f9:63:a0:b7:66:27:
70:88:1a:36:ba:a2:f0:b2:2d:be:80:77:39:60:22:ba:bb:35:
a2:c5:44:92:4e:f4:ee:8c:33:51:80:08:a3:bc:1b:86:be:d3:
7e:61:76:b9:c8:22:14:b8:b7:fe:13:90:b3:14:86:09:76:75:
f5:14:ea:e4:0b:4d:f2:33:5f:19:05:b9:73:a2:2d:ac:d0:e5:
20:1a:4d:c9:c9:e4:33:92:2b:aa:ab:a5:07:6d:7c:e7:a1:20:
16:15:07:9f:4f:74:92:ec:a6:06:25:d0:3d:35:9a:c0:39:22:
46:a4:1a:6e:3f:6a:17:12:5d:84:4a:24:1a:1b:90:c9:45:26:
5c:38:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:22:50 2026 by rpki-client