Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/A26500A2A27F11EBBE87837FC4F9AE02.roa
File: A26500A2A27F11EBBE87837FC4F9AE02.roa (raw, json)
Hash identifier: cqa0Somkg4bu4edGnIzTywlNZW4b5W68WcwgTAEwHEw=
Subject key identifier: D5:48:F4:4F:24:4F:0A:C8:0B:5D:C0:42:A7:13:12:9B:16:FC:FC:3C
Certificate issuer: /CN=A91C39D1/serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
Certificate serial: 06AC
Authority key identifier: 8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/A26500A2A27F11EBBE87837FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 11:30:42 +0000
ROA not before: Wed 04 Feb 2026 22:18:57 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 45648
IP address blocks: 27.34.240.0/24 maxlen: 24
27.34.241.0/24 maxlen: 24
27.34.242.0/24 maxlen: 24
27.34.243.0/24 maxlen: 24
27.34.244.0/24 maxlen: 24
27.34.245.0/24 maxlen: 24
27.34.246.0/24 maxlen: 24
27.34.247.0/24 maxlen: 24
27.34.248.0/24 maxlen: 24
27.34.249.0/24 maxlen: 24
27.34.250.0/24 maxlen: 24
27.34.251.0/24 maxlen: 24
27.34.252.0/24 maxlen: 24
27.34.253.0/24 maxlen: 24
27.34.254.0/24 maxlen: 24
27.34.255.0/24 maxlen: 24
43.254.160.0/24 maxlen: 24
43.254.161.0/24 maxlen: 24
43.254.162.0/24 maxlen: 24
43.254.163.0/24 maxlen: 24
103.228.220.0/24 maxlen: 24
103.228.221.0/24 maxlen: 24
103.228.222.0/24 maxlen: 24
103.228.223.0/24 maxlen: 24
111.125.192.0/24 maxlen: 24
111.125.193.0/24 maxlen: 24
111.125.200.0/24 maxlen: 24
111.125.201.0/24 maxlen: 24
111.125.202.0/24 maxlen: 24
111.125.203.0/24 maxlen: 24
111.125.204.0/24 maxlen: 24
111.125.205.0/24 maxlen: 24
111.125.206.0/24 maxlen: 24
111.125.207.0/24 maxlen: 24
111.125.212.0/24 maxlen: 24
183.87.212.0/24 maxlen: 24
183.87.213.0/24 maxlen: 24
183.87.250.0/24 maxlen: 24
203.201.60.0/24 maxlen: 24
203.201.61.0/24 maxlen: 24
203.201.62.0/24 maxlen: 24
203.201.63.0/24 maxlen: 24
2400:d280::/32 maxlen: 32
2400:d280::/36 maxlen: 36
2400:d280:1000::/36 maxlen: 36
2400:d280:2000::/36 maxlen: 36
2400:d280:3000::/36 maxlen: 36
2400:d280:4000::/36 maxlen: 36
2400:d280:5000::/36 maxlen: 36
2400:d280:6000::/36 maxlen: 36
2400:d280:7000::/36 maxlen: 36
2400:d280:8000::/36 maxlen: 36
2400:d280:9000::/36 maxlen: 36
2400:d280:a000::/36 maxlen: 36
2400:d280:b000::/36 maxlen: 36
2400:d280:c000::/36 maxlen: 36
2400:d280:d000::/36 maxlen: 36
2400:d280:e000::/36 maxlen: 36
2400:d280:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl
rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1708 (0x6ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C39D1, serialNumber=8DEEAE856E95F3CEACE112C0A1EA97BA45A57A44
Validity
Not Before: Feb 4 22:18:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a574e1-7c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:a9:95:fc:6d:f7:7e:e7:ab:02:af:73:25:
3c:d4:a3:d5:9b:29:ec:41:1b:90:47:d5:60:8b:db:
41:45:be:f8:24:1a:58:81:56:8a:01:91:ae:77:9b:
16:8a:e0:db:bf:5e:50:54:ec:e2:58:ae:82:be:45:
fa:98:47:18:75:28:cd:80:0c:4d:fc:dd:a5:2d:3c:
08:24:19:f1:fe:87:ea:55:af:cb:b2:17:c4:0c:3b:
e4:af:4a:14:7a:a4:30:1d:26:e0:3c:54:44:1a:ea:
b3:6c:09:e2:b8:19:fe:e1:51:b1:9f:3e:b0:03:9a:
64:e2:1d:2e:67:cb:f9:05:73:98:da:ad:94:59:7a:
3f:2a:f7:b0:cb:66:8c:59:60:75:b8:d0:8c:df:19:
32:ce:f8:63:74:53:59:85:73:d1:8c:8a:76:b9:cb:
b8:06:d0:c7:b8:4d:22:57:ed:83:21:c4:bd:78:3d:
6c:b8:8b:8b:76:6a:57:07:cf:df:b6:4a:24:3a:f4:
21:28:24:5a:c5:40:d9:4a:cd:61:7e:61:5f:c7:99:
10:75:59:2b:2e:ce:f0:2e:9c:98:b9:b6:25:6c:54:
00:6f:f7:64:fb:69:77:5c:99:74:e3:40:5d:35:d2:
2d:4d:df:e7:53:89:e5:6b:03:a2:7a:92:ef:d6:e0:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:48:F4:4F:24:4F:0A:C8:0B:5D:C0:42:A7:13:12:9B:16:FC:FC:3C
X509v3 Authority Key Identifier:
keyid:8D:EE:AE:85:6E:95:F3:CE:AC:E1:12:C0:A1:EA:97:BA:45:A5:7A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/je6uhW6V886s4RLAoeqXukWlekQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/je6uhW6V886s4RLAoeqXukWlekQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C39D1/088C1B48A27D11EBA28F9177C4F9AE02/A26500A2A27F11EBBE87837FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.34.240.0/20
43.254.160.0/22
103.228.220.0/22
111.125.192.0/23
111.125.200.0/21
111.125.212.0/24
183.87.212.0/23
183.87.250.0/24
203.201.60.0/22
IPv6:
2400:d280::/32
Signature Algorithm: sha256WithRSAEncryption
39:3e:bb:4c:b7:32:bb:2d:7d:ae:00:f4:72:ab:c2:cb:c1:c8:
75:b6:52:b3:25:92:4b:be:e8:8f:23:60:b8:ad:e0:1c:b6:c3:
9b:f6:b4:17:02:d0:4f:81:75:e9:1d:06:c8:29:5e:3f:69:e2:
37:0c:f6:76:0b:e2:f4:b7:c0:4d:38:eb:31:8d:be:af:1c:8d:
bb:ca:fe:51:da:ed:8f:75:dd:e2:c0:8a:ab:98:d8:bd:76:59:
d1:1f:ef:16:cc:08:5a:d2:dd:60:21:6d:53:42:0c:a1:83:84:
5c:24:4c:55:07:a0:4c:9a:89:3d:d5:a2:e6:d9:2a:ff:f1:cb:
52:df:57:af:b9:22:c9:28:2b:46:32:fe:df:6b:41:5b:ee:56:
1f:8b:f5:aa:4b:f8:8c:1a:af:ce:83:3c:59:7d:ea:39:72:be:
25:e7:88:88:33:27:ae:b2:56:62:a9:98:9c:85:da:3b:d4:2a:
54:78:5c:d0:c9:16:38:eb:9e:4c:bf:4b:01:9b:d2:1c:83:d3:
55:d9:2c:04:f5:1b:d8:7a:ee:8f:cb:b0:98:5b:54:5b:49:4f:
ea:a1:bf:c4:cc:81:13:11:ab:3b:ab:de:cb:ed:62:48:fb:be:
6d:66:26:bc:13:58:2a:b4:2f:9d:41:c0:ce:e5:21:82:e4:86:
1e:a2:30:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:02 2026 by rpki-client