Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/BFABA2D6BECE11F0B218C045C4F9AE02.roa
File: BFABA2D6BECE11F0B218C045C4F9AE02.roa (raw, json)
Hash identifier: borgFD/G1rYLDKzDejZogK4BXyIa5F9u4Hn6UrRemA4=
Subject key identifier: 29:29:11:27:D2:72:D6:48:B2:04:53:CE:3B:7D:37:FE:1E:CB:BB:D9
Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Certificate serial: 354F
Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/BFABA2D6BECE11F0B218C045C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:05:56 +0000
ROA not before: Tue 11 Nov 2025 07:19:24 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17666
IP address blocks: 43.246.164.0/24 maxlen: 24
43.246.166.0/24 maxlen: 24
43.246.167.0/24 maxlen: 24
111.67.32.0/24 maxlen: 24
111.67.33.0/24 maxlen: 24
111.67.34.0/24 maxlen: 24
111.67.35.0/24 maxlen: 24
111.67.38.0/24 maxlen: 24
111.67.39.0/24 maxlen: 24
111.67.42.0/24 maxlen: 24
111.67.43.0/24 maxlen: 24
111.67.44.0/24 maxlen: 24
111.67.45.0/24 maxlen: 24
111.67.46.0/24 maxlen: 24
111.67.47.0/24 maxlen: 24
202.9.96.0/22 maxlen: 22
202.9.100.0/24 maxlen: 24
202.9.101.0/24 maxlen: 24
202.9.102.0/24 maxlen: 24
202.9.103.0/24 maxlen: 24
202.9.104.0/23 maxlen: 24
202.9.106.0/24 maxlen: 24
202.9.107.0/24 maxlen: 24
202.87.96.0/22 maxlen: 22
202.87.96.0/24 maxlen: 24
202.87.97.0/24 maxlen: 24
202.87.98.0/24 maxlen: 24
202.87.99.0/24 maxlen: 24
202.87.104.0/24 maxlen: 24
202.87.105.0/24 maxlen: 24
202.87.106.0/24 maxlen: 24
202.87.107.0/24 maxlen: 24
202.87.108.0/24 maxlen: 24
202.87.109.0/24 maxlen: 24
202.87.110.0/24 maxlen: 24
202.87.111.0/24 maxlen: 24
202.87.124.0/24 maxlen: 24
202.87.125.0/24 maxlen: 24
202.87.126.0/24 maxlen: 24
202.87.127.0/24 maxlen: 24
2401:200::/32 maxlen: 32
2401:200::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13647 (0x354f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Validity
Not Before: Nov 11 07:19:24 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a48e14-768a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:cf:d2:a4:ee:7c:13:65:88:7e:0e:d9:5a:
cf:f3:5b:b0:96:04:37:85:16:a2:9a:d2:34:59:d6:
26:2a:60:3d:fd:7a:10:49:87:b2:71:90:39:90:41:
4a:a0:3d:f7:9a:12:4d:c1:c1:35:76:9f:46:64:d5:
a6:bc:98:c2:46:c3:e2:b1:72:7d:3e:20:fb:26:7d:
c4:c3:48:91:e3:51:36:b6:28:3f:84:50:5c:f4:25:
3b:0e:7b:51:37:4f:e6:2a:6b:a4:1f:26:71:ea:6b:
88:af:22:88:27:59:8a:08:d8:44:56:26:cf:25:ac:
0f:02:6d:23:6b:60:db:44:5f:f1:1d:b9:52:ca:23:
d4:04:d6:53:4f:b1:82:05:32:9f:2d:ce:00:29:64:
ad:66:70:a1:64:8b:d2:c3:d3:5b:75:71:73:2f:13:
62:10:04:85:a9:2b:0c:b0:9d:0f:85:8a:7d:4c:4a:
9a:eb:1a:ab:e9:85:d2:85:00:1c:dc:02:bc:d6:8c:
19:3d:d6:75:ac:4e:0a:d2:69:40:8a:12:0e:c8:28:
66:0a:15:aa:24:68:a4:07:52:b6:51:64:7e:d9:89:
23:2c:99:21:43:4d:fd:0b:6c:88:45:c4:5f:f1:a5:
cd:2c:f9:77:a3:7b:b1:0d:37:c3:83:3f:1e:31:ad:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:11:27:D2:72:D6:48:B2:04:53:CE:3B:7D:37:FE:1E:CB:BB:D9
X509v3 Authority Key Identifier:
keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/BFABA2D6BECE11F0B218C045C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.246.164.0/24
43.246.166.0/23
111.67.32.0/22
111.67.38.0/23
111.67.42.0-111.67.47.255
202.9.96.0-202.9.107.255
202.87.96.0/22
202.87.104.0/21
202.87.124.0/22
IPv6:
2401:200::/32
Signature Algorithm: sha256WithRSAEncryption
52:2c:70:3b:8e:15:40:3a:a6:6b:28:51:70:df:a8:f9:1b:03:
98:66:45:48:1c:ae:80:4b:de:bf:58:f3:f2:c8:4d:33:36:9c:
5c:b0:d3:a6:b8:eb:7e:04:4d:98:7d:9c:61:7f:46:07:16:56:
bb:ec:77:80:bf:0f:ed:e6:59:43:78:e2:e2:af:13:52:29:c7:
5f:9b:5d:9c:a6:20:72:40:93:54:1a:70:2d:27:40:6b:60:e1:
89:00:1c:43:b0:d9:7f:94:b3:46:dd:20:a1:21:71:53:5a:b7:
ac:b2:12:25:9d:c2:5a:f1:98:cc:1b:b3:43:b4:d8:a2:3a:cf:
c9:97:5a:1e:72:4f:94:e2:1f:7d:2b:b0:15:f6:99:09:00:e9:
70:8a:c9:19:97:58:15:4b:45:fc:76:e0:85:a1:20:ed:ef:04:
7f:dc:54:1e:6b:19:ee:ac:67:a7:23:3d:41:a9:b3:fd:60:fd:
53:03:4e:38:b8:3c:e8:9a:7a:ac:76:ff:52:f1:f9:89:f0:dc:
11:c0:a3:a6:87:f8:1a:3b:cf:62:f2:d7:eb:d1:dd:2d:e0:b4:
fb:32:4c:96:4d:14:df:62:34:67:2a:37:48:14:e7:c7:4d:e7:
68:32:c7:d3:c5:65:ab:d4:91:ef:ca:99:df:b5:25:19:d0:b8:
cb:7e:f6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:45 2026 by rpki-client