Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/942C4BCCCD6B11F185B490F22166CEF9.roa
File: 942C4BCCCD6B11F185B490F22166CEF9.roa (raw, json)
Hash identifier: kDbS2eluwtqf5+VSLJQjaG4q5sdl0SOha7k713ZsR5Y=
Subject key identifier: 2D:C4:1A:8F:09:87:C3:3A:07:B0:B5:DD:9E:C5:19:52:BB:3C:09:15
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 1105
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/942C4BCCCD6B11F185B490F22166CEF9.roa
Signing time: Wed 21 Oct 2026 16:22:16 +0000
ROA not before: Wed 21 Oct 2026 16:22:16 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 3356
IP address blocks: 202.53.197.0/24 maxlen: 24
2401:df00:1::/48 maxlen: 48
2401:df00:2::/48 maxlen: 48
2401:df00:7::/48 maxlen: 48
2401:df00:11::/48 maxlen: 48
2401:df00:12::/48 maxlen: 48
2401:df00:21::/48 maxlen: 48
2401:df00:22::/48 maxlen: 48
2401:df00:27::/48 maxlen: 48
2401:df00:31::/48 maxlen: 48
2401:df00:32::/48 maxlen: 48
2401:df00:41::/48 maxlen: 48
2401:df00:42::/48 maxlen: 48
2401:df00:47::/48 maxlen: 48
2401:df00:51::/48 maxlen: 48
2401:df00:52::/48 maxlen: 48
2401:df00:57::/48 maxlen: 48
2401:df00:61::/48 maxlen: 48
2401:df00:62::/48 maxlen: 48
2401:df00:181::/48 maxlen: 48
2401:df00:182::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 17:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4357 (0x1105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Oct 21 16:22:16 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ad8e6b8-2d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:c5:b4:d1:cb:7f:1b:fd:76:2c:38:85:35:
56:ff:c7:ec:43:0c:5c:57:be:6f:04:48:55:08:bf:
52:ac:54:4f:fb:f1:dc:98:a8:80:a8:14:b6:13:29:
f7:11:6d:50:b3:04:6b:2d:2c:13:ee:28:ac:d8:0e:
03:3e:f9:fb:42:db:89:3c:c7:ab:aa:5f:68:02:87:
00:80:36:38:a9:2b:f2:62:ef:74:e4:c4:4c:41:55:
91:53:e1:6b:6b:a7:37:fd:3b:fe:dd:84:b4:21:dd:
e4:e5:34:37:38:9e:fd:0a:2e:1a:84:0d:95:49:2a:
99:96:09:06:79:9c:67:9c:ac:54:0a:00:38:46:bd:
06:2d:78:a3:6a:22:6d:db:03:57:b7:ab:d4:76:00:
42:8e:58:56:0a:ce:56:60:c9:b2:4a:77:e1:b0:9e:
39:e2:68:d1:1b:8b:7b:88:ea:e9:f1:31:89:37:20:
15:e8:30:05:04:31:8b:1f:d5:6a:ba:9f:8d:f8:0d:
56:6e:5b:1d:07:e1:6c:52:84:39:ff:83:6b:2f:55:
ff:91:92:21:d6:30:91:9b:c1:af:82:9a:f8:ae:38:
4d:f0:19:e1:22:f4:a8:b7:3b:0d:55:50:a2:22:93:
0f:41:6b:f4:e6:57:bc:11:a6:71:46:75:99:c4:5c:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C4:1A:8F:09:87:C3:3A:07:B0:B5:DD:9E:C5:19:52:BB:3C:09:15
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/942C4BCCCD6B11F185B490F22166CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
202.53.197.0/24
IPv6:
2401:df00:1::-2401:df00:2:ffff:ffff:ffff:ffff:ffff
2401:df00:7::/48
2401:df00:11::-2401:df00:12:ffff:ffff:ffff:ffff:ffff
2401:df00:21::-2401:df00:22:ffff:ffff:ffff:ffff:ffff
2401:df00:27::/48
2401:df00:31::-2401:df00:32:ffff:ffff:ffff:ffff:ffff
2401:df00:41::-2401:df00:42:ffff:ffff:ffff:ffff:ffff
2401:df00:47::/48
2401:df00:51::-2401:df00:52:ffff:ffff:ffff:ffff:ffff
2401:df00:57::/48
2401:df00:61::-2401:df00:62:ffff:ffff:ffff:ffff:ffff
2401:df00:181::-2401:df00:182:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8f:4f:56:ea:66:e7:cb:f7:4d:f9:3f:98:8c:4a:21:49:84:fb:
88:0f:24:85:18:d8:10:8a:45:d5:67:4f:56:e1:68:19:4d:dd:
40:ef:d9:c6:0f:b3:02:6c:38:64:00:3e:c9:a2:a4:f1:9a:4e:
50:49:ca:69:2b:e5:d2:f1:d1:a3:6c:43:80:dc:b0:95:d3:48:
15:29:70:b4:d9:cb:8c:4a:5b:f5:ac:13:d9:0d:f6:e0:c8:76:
ab:d9:ad:2e:bb:a6:28:7d:5d:2a:6c:af:21:81:bb:e8:c1:e1:
ef:7d:b2:41:a7:67:19:40:db:90:a0:e0:4a:80:82:81:1f:95:
47:ef:3e:55:9d:9f:1b:8d:24:5f:37:a3:23:01:35:bb:1d:56:
c1:91:3d:e8:fd:6e:55:da:0c:ba:97:b9:20:4a:75:53:1a:7e:
ee:de:15:eb:26:38:13:75:cd:5c:61:ae:37:7a:07:8e:a4:90:
e7:0c:1a:39:f0:92:94:c8:b2:8b:69:34:72:5c:04:76:40:70:
60:e6:ee:e9:38:d8:42:64:73:c8:98:c0:ab:77:a9:3d:60:13:
d5:d3:f6:c2:55:01:cd:cc:84:f1:a1:3c:96:41:95:9d:b0:41:
6c:3f:ac:38:64:89:5c:dc:71:63:1c:02:b5:39:e3:86:ee:3a:
7e:d6:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:03:00 2026 by rpki-client