Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/CEBECC28D38811E8A763B462C4F9AE02.roa
File: CEBECC28D38811E8A763B462C4F9AE02.roa (raw, json)
Hash identifier: W3z7Z3gndKKyVqbzLQ8UmizWLHqqgUTLcWOrGVdfX2g=
Subject key identifier: 03:45:F1:A0:93:43:F7:74:F6:4D:FC:75:17:07:B9:60:B1:F5:BC:0B
Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial: 1356
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/CEBECC28D38811E8A763B462C4F9AE02.roa
Signing time: Tue 26 May 2026 17:25:47 +0000
ROA not before: Tue 26 May 2026 17:25:47 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 38001
IP address blocks: 43.245.60.0/24 maxlen: 24
43.245.61.0/24 maxlen: 24
43.245.62.0/24 maxlen: 24
43.245.63.0/24 maxlen: 24
45.119.200.0/24 maxlen: 24
45.119.201.0/24 maxlen: 24
45.119.202.0/24 maxlen: 24
103.14.76.0/24 maxlen: 24
103.14.77.0/24 maxlen: 24
103.14.79.0/24 maxlen: 24
103.25.52.0/24 maxlen: 24
103.60.8.0/24 maxlen: 24
103.60.11.0/24 maxlen: 24
103.200.216.0/24 maxlen: 24
103.200.217.0/24 maxlen: 24
103.200.218.0/24 maxlen: 24
103.200.219.0/24 maxlen: 24
119.161.101.0/24 maxlen: 24
119.161.102.0/24 maxlen: 24
119.161.103.0/24 maxlen: 24
202.150.208.0/20 maxlen: 20
202.150.208.0/24 maxlen: 24
202.150.209.0/24 maxlen: 24
202.150.210.0/24 maxlen: 24
202.150.211.0/24 maxlen: 24
202.150.212.0/24 maxlen: 24
202.150.213.0/24 maxlen: 24
202.150.214.0/24 maxlen: 24
202.150.215.0/24 maxlen: 24
202.150.216.0/24 maxlen: 24
202.150.217.0/24 maxlen: 24
202.150.218.0/24 maxlen: 24
202.150.219.0/24 maxlen: 24
202.150.220.0/24 maxlen: 24
202.150.221.0/24 maxlen: 24
202.150.222.0/24 maxlen: 24
202.150.223.0/24 maxlen: 24
203.174.80.0/21 maxlen: 21
203.174.80.0/24 maxlen: 24
203.174.81.0/24 maxlen: 24
203.174.82.0/24 maxlen: 24
203.174.83.0/24 maxlen: 24
203.174.84.0/24 maxlen: 24
203.174.85.0/24 maxlen: 24
203.174.86.0/24 maxlen: 24
203.174.87.0/24 maxlen: 24
2406:f400::/32 maxlen: 32
2406:f400::/44 maxlen: 44
2406:f400:20::/44 maxlen: 44
2406:f400:40::/44 maxlen: 44
2406:f400:80::/44 maxlen: 44
2406:f400:b0::/44 maxlen: 44
2406:f400:100::/44 maxlen: 44
2406:f400:130::/44 maxlen: 44
2406:f400:160::/44 maxlen: 44
2406:f400:161::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:58:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4950 (0x1356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Validity
Not Before: May 26 17:25:47 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a15d79b-4a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:ef:0b:a9:24:01:72:b2:f8:b7:d6:ae:67:
00:f9:bf:bb:bd:60:61:39:a7:32:15:24:69:84:94:
ff:a4:fb:b5:40:e8:ab:13:30:fb:c9:54:86:d5:4e:
42:54:ac:9c:fb:18:94:dc:64:3e:a5:7f:87:ea:5f:
45:69:b7:9c:e5:f0:7f:25:80:f2:cc:de:b6:f0:91:
53:a9:42:65:4d:9a:52:6c:7c:0a:3a:6a:01:38:17:
e1:1a:83:ac:a9:db:77:5f:04:64:7d:b7:63:8c:35:
08:c5:bf:84:d0:6c:45:59:a3:b9:c3:5f:f4:f9:6b:
04:80:77:a4:cd:54:2c:17:97:15:5e:18:3c:30:84:
57:87:58:e3:bc:bb:4d:cb:1f:d2:a5:31:ea:bb:3f:
f8:54:ec:24:0a:36:bf:79:0f:c4:33:47:75:95:c9:
02:46:68:69:48:9e:72:29:39:ea:a3:af:c1:5d:d9:
78:16:bc:e8:14:a4:05:d2:69:ff:02:2e:b0:8b:b8:
c4:c6:21:f1:6d:81:64:cc:09:8d:35:43:21:94:f9:
0f:0f:97:27:3b:22:fb:5d:ee:db:61:5b:b0:fd:2b:
32:db:c8:83:12:b4:8d:65:55:cf:40:e3:b7:45:35:
bb:6b:60:58:14:84:80:d4:01:08:12:53:83:9e:c3:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:45:F1:A0:93:43:F7:74:F6:4D:FC:75:17:07:B9:60:B1:F5:BC:0B
X509v3 Authority Key Identifier:
keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/CEBECC28D38811E8A763B462C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.60.0/22
45.119.200.0-45.119.202.255
103.14.76.0/23
103.14.79.0/24
103.25.52.0/24
103.60.8.0/24
103.60.11.0/24
103.200.216.0/22
119.161.101.0-119.161.103.255
202.150.208.0/20
203.174.80.0/21
IPv6:
2406:f400::/32
Signature Algorithm: sha256WithRSAEncryption
58:b2:9c:53:d0:c2:64:23:d9:13:76:f2:ac:07:d5:08:82:4d:
bf:99:2d:8e:9a:7b:d2:b5:a6:ac:92:71:86:97:96:6e:d7:8c:
15:90:bc:7b:c3:0f:2b:f3:1c:9d:7f:9c:44:32:5d:75:f2:86:
8c:6b:91:1f:4d:ff:eb:b9:06:15:55:20:8e:1e:f7:2e:69:eb:
0a:a4:31:11:8c:d5:39:40:52:eb:3e:57:03:00:1f:3d:d0:11:
a9:ef:05:b0:d1:d3:4d:8d:05:ab:e8:39:ce:d3:5f:c6:23:0f:
4c:85:bb:2c:5b:c6:ce:a8:a8:d5:a8:df:49:34:a4:34:b4:a5:
f6:2d:90:21:0e:96:37:7f:a1:bf:7f:21:24:69:7c:be:e6:bb:
23:0d:d7:b7:db:b4:fe:53:33:64:50:b4:06:31:04:99:d6:bd:
93:79:4d:a1:81:fd:63:49:ea:06:bb:cd:55:41:c0:6a:e3:dd:
4e:52:a4:a5:be:73:e7:b9:ee:16:4d:0a:fe:cf:df:32:f8:fb:
88:49:94:fa:f7:da:cc:69:53:a9:93:9b:44:30:23:42:9c:57:
74:18:aa:96:30:66:f2:24:25:05:9c:61:f5:7e:59:54:33:b9:
72:a0:8b:b6:ec:2e:3b:88:1d:7f:3c:d3:87:3c:4a:75:d5:64:
c5:5c:5a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:50 2026 by rpki-client