Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/565F5E1A387E11F1A4D7FBEEB8833773.roa
File: 565F5E1A387E11F1A4D7FBEEB8833773.roa (raw, json)
Hash identifier: btGl9/9IImqkMQ2Rnz/mDC0C6eVcn+WKvBtdlYz+m+8=
Subject key identifier: 81:D4:C4:76:30:71:A7:AE:34:CE:48:3D:F6:04:56:0B:66:C7:C2:40
Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221
Certificate serial: 05BC
Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/565F5E1A387E11F1A4D7FBEEB8833773.roa
Signing time: Fri 04 Sep 2026 23:45:14 +0000
ROA not before: Fri 04 Sep 2026 23:45:14 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38224
IP address blocks: 112.109.96.0/19 maxlen: 23
112.109.96.0/23 maxlen: 24
112.109.100.0/22 maxlen: 24
112.109.104.0/21 maxlen: 24
112.109.112.0/20 maxlen: 24
114.31.224.0/20 maxlen: 20
114.31.224.0/23 maxlen: 23
114.31.226.0/23 maxlen: 23
114.31.228.0/23 maxlen: 23
114.31.230.0/23 maxlen: 23
119.252.144.0/20 maxlen: 20
119.252.144.0/21 maxlen: 21
119.252.144.0/24 maxlen: 24
119.252.145.0/24 maxlen: 24
119.252.147.0/24 maxlen: 24
119.252.148.0/23 maxlen: 23
119.252.152.0/24 maxlen: 24
119.252.153.0/24 maxlen: 24
119.252.154.0/23 maxlen: 24
119.252.156.0/22 maxlen: 22
119.252.156.0/24 maxlen: 24
119.252.158.0/23 maxlen: 23
202.137.232.0/21 maxlen: 21
202.137.232.0/24 maxlen: 24
202.137.233.0/24 maxlen: 24
202.137.234.0/24 maxlen: 24
202.137.235.0/24 maxlen: 24
202.137.236.0/23 maxlen: 23
202.137.238.0/24 maxlen: 24
202.137.239.0/24 maxlen: 24
2405:e200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1468 (0x5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221
Validity
Not Before: Sep 4 23:45:14 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9b580a-691c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:5b:06:00:df:27:72:de:18:61:db:99:82:
e5:0d:bf:be:2f:b2:5e:8e:24:c1:c6:bb:19:d8:5b:
aa:56:6f:5f:e3:92:40:ab:f0:c7:87:6a:dc:5e:bc:
72:d5:dc:11:56:2b:49:0e:bb:34:78:2e:31:3f:e2:
0c:e2:33:38:48:c2:83:9b:97:b5:9b:3b:33:15:2a:
6c:99:fd:91:bc:8e:a3:6b:f7:c9:11:28:92:83:43:
02:f2:99:e7:75:dd:a3:4d:65:5a:ac:76:8a:40:46:
a9:11:72:ff:59:b4:b8:1a:1e:dc:19:4a:34:7a:3e:
84:d7:bb:54:a6:bc:df:94:29:44:99:f4:c3:fb:e6:
f1:8c:5e:5e:cf:50:ee:d2:08:15:e5:2a:b1:94:4c:
bc:a3:eb:fe:70:44:6a:6d:3d:f0:57:ec:89:f7:1a:
b2:a4:44:19:68:41:d3:b4:04:5b:71:79:76:be:ef:
f6:6a:71:d7:fe:32:94:47:44:21:1d:fb:50:2f:10:
8e:9b:66:14:4b:b9:be:92:1f:a0:6f:8b:aa:e3:5d:
08:39:d2:5d:51:2c:75:ab:ed:d8:fa:d9:62:2c:eb:
4e:a3:97:c8:89:71:9b:34:5a:a9:86:d1:6e:b6:2c:
a4:ec:c7:6f:d3:f9:44:bf:2e:2e:23:fd:07:75:5b:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D4:C4:76:30:71:A7:AE:34:CE:48:3D:F6:04:56:0B:66:C7:C2:40
X509v3 Authority Key Identifier:
keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/565F5E1A387E11F1A4D7FBEEB8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
112.109.96.0/19
114.31.224.0/20
119.252.144.0/20
202.137.232.0/21
IPv6:
2405:e200::/32
Signature Algorithm: sha256WithRSAEncryption
21:21:d4:0e:86:91:e0:76:39:73:c9:ed:0b:8c:62:f2:75:a3:
0d:f6:73:c1:4f:ed:76:98:1a:fb:9a:d8:32:dd:2a:38:ce:68:
4c:53:31:62:d9:82:7f:50:2a:e0:3f:2f:13:f4:09:a6:27:a2:
c5:88:23:2d:84:14:5d:cd:22:e9:de:0d:2d:9f:a1:15:c4:5b:
6a:f2:4b:ab:e6:ca:1e:dc:81:40:4e:a2:eb:9b:02:ff:ee:a0:
9e:03:98:62:00:2e:b5:57:09:49:70:2d:ab:9a:27:9b:04:37:
b2:cf:f3:af:21:33:ba:bd:49:b1:d1:e5:bd:7d:cc:51:82:41:
86:39:96:df:74:4d:0f:4d:85:50:dc:24:a7:04:ed:ee:06:c9:
de:38:da:7b:63:71:c8:4e:22:b9:97:48:c7:5c:96:e2:05:41:
23:83:10:09:7c:ff:03:3c:ff:7c:fd:33:6b:fe:40:01:79:eb:
ff:af:9b:d6:63:7f:65:8c:a5:8c:4f:29:0c:2b:60:9a:87:32:
a6:68:24:28:c9:6d:9b:21:f8:2f:db:fa:b5:49:0d:8a:ae:52:
a0:8e:a3:bd:87:e8:85:9f:04:54:ca:dd:24:db:b9:c2:54:bc:
83:74:d7:cf:60:93:a8:77:eb:97:a4:ba:94:17:82:27:8e:f3:
fa:38:6f:6e
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB
MjE0MzcyMjEwHhcNMjYwOTA0MjM0NTE0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTliNTgwYS02OTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwMJbBgDfJ3LeGGHbmYLlDb++L7JejiTBxrsZ2FuqVm9f45JAq/DHh2rcXrxy
1dwRVitJDrs0eC4xP+IM4jM4SMKDm5e1mzszFSpsmf2RvI6ja/fJESiSg0MC8pnn
dd2jTWVarHaKQEapEXL/WbS4Gh7cGUo0ej6E17tUprzflClEmfTD++bxjF5ez1Du
0ggV5SqxlEy8o+v+cERqbT3wV+yJ9xqypEQZaEHTtARbcXl2vu/2anHX/jKUR0Qh
HftQLxCOm2YUS7m+kh+gb4uq410IOdJdUSx1q+3Y+tliLOtOo5fIiXGbNFqphtFu
tiyk7Mdv0/lEvy4uI/0HdVvNPwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFIHUxHYw
caeuNM5IPfYEVgtmx8JAMB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw
QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDAyNUEvRDVFRjFBOTAzMEFEMTFFQzk1QjE1RDE4QzRGOUFFMDIvNTY1RjVFMUEz
ODdFMTFGMUE0RDdGQkVFQjg4MzM3NzMucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe
BAIAATAYAwQFcG1gAwQEch/gAwQEd/yQAwQDyonoMA0EAgACMAcDBQAkBeIAMA0G
CSqGSIb3DQEBCwUAA4IBAQAhIdQOhpHgdjlzye0LjGLydaMN9nPBT+12mBr7mtgy
3So4zmhMUzFi2YJ/UCrgPy8T9AmmJ6LFiCMthBRdzSLp3g0tn6EVxFtq8kur5soe
3IFATqLrmwL/7qCeA5hiAC61VwlJcC2rmiebBDeyz/OvITO6vUmx0eW9fcxRgkGG
OZbfdE0PTYVQ3CSnBO3uBsneONp7Y3HITiK5l0jHXJbiBUEjgxAJfP8DPP98/TNr
/kABeev/r5vWY39ljKWMTykMK2CahzKmaCQoyW2bIfgv2/q1SQ2KrlKgjqO9h+iF
nwRUyt0k27nCVLyDdNfPYJOod+uXpLqUF4InjvP6OG9u
-----END CERTIFICATE-----
Generated at Sat Sep 26 22:24:00 2026 by rpki-client