Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/31278874AB8911F19687DFB34611F970.roa
File: 31278874AB8911F19687DFB34611F970.roa (raw, json)
Hash identifier: MJy/HuSKCgYrUrC5K+TJpFGAy8EQ8a7HzxGZkyrCRwc=
Subject key identifier: 64:6E:A8:7E:13:52:8E:3D:D8:E2:D8:F4:AF:F6:78:F8:CC:AB:D2:20
Certificate issuer: /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial: 024A
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/31278874AB8911F19687DFB34611F970.roa
Signing time: Wed 30 Sep 2026 02:05:10 +0000
ROA not before: Wed 30 Sep 2026 02:05:10 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 134078
IP address blocks: 45.112.76.0/22 maxlen: 22
61.13.0.0/23 maxlen: 24
61.13.2.0/24 maxlen: 24
61.13.16.0/20 maxlen: 21
61.13.32.0/21 maxlen: 21
61.13.32.0/22 maxlen: 22
61.13.36.0/22 maxlen: 22
61.13.128.0/22 maxlen: 22
61.13.128.0/24 maxlen: 24
61.13.132.0/22 maxlen: 22
61.13.132.0/24 maxlen: 24
61.13.133.0/24 maxlen: 24
61.13.134.0/24 maxlen: 24
61.13.135.0/24 maxlen: 24
61.13.136.0/22 maxlen: 22
61.13.136.0/23 maxlen: 23
61.13.138.0/23 maxlen: 23
61.14.64.0/19 maxlen: 19
61.14.90.0/24 maxlen: 24
61.14.91.0/24 maxlen: 24
61.14.95.0/24 maxlen: 24
61.16.0.0/22 maxlen: 22
61.16.4.0/22 maxlen: 22
61.16.8.0/22 maxlen: 22
61.16.12.0/22 maxlen: 22
61.16.16.0/22 maxlen: 22
61.16.32.0/22 maxlen: 22
103.51.160.0/22 maxlen: 22
103.51.160.0/24 maxlen: 24
103.51.163.0/24 maxlen: 24
103.227.88.0/22 maxlen: 22
103.227.88.0/23 maxlen: 23
103.227.90.0/23 maxlen: 23
103.250.56.0/22 maxlen: 22
103.250.58.0/24 maxlen: 24
202.52.64.0/19 maxlen: 20
202.52.64.0/22 maxlen: 22
202.52.64.0/23 maxlen: 23
202.52.66.0/23 maxlen: 23
202.52.68.0/22 maxlen: 22
202.52.72.0/21 maxlen: 21
202.52.80.0/21 maxlen: 21
202.52.88.0/22 maxlen: 22
202.52.92.0/22 maxlen: 22
202.52.96.0/20 maxlen: 21
202.52.96.0/22 maxlen: 22
202.52.100.0/22 maxlen: 22
202.52.104.0/22 maxlen: 22
202.136.16.0/20 maxlen: 20
202.148.160.0/20 maxlen: 20
203.31.234.0/24 maxlen: 24
203.149.128.0/24 maxlen: 24
203.149.140.0/22 maxlen: 22
203.149.168.0/22 maxlen: 22
203.149.184.0/21 maxlen: 21
2404:1100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Validity
Not Before: Sep 30 02:05:10 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6abc6e56-608c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:18:7e:70:ca:7b:ad:cc:5b:d6:bc:1e:8b:
59:15:07:77:f6:67:a7:78:27:30:6c:f9:70:b8:3f:
2b:c3:7c:47:60:91:03:e6:db:dd:ae:90:7a:03:7e:
36:d2:9a:52:89:23:6e:ee:85:29:55:a8:8f:19:41:
b0:aa:c3:58:be:58:19:07:bf:ec:b4:4a:53:31:30:
85:12:cb:4b:07:b8:08:4f:40:c3:f0:41:16:00:eb:
a7:3d:ff:54:94:e8:fa:f3:f1:48:ab:e2:0d:3b:33:
e7:bc:48:da:8e:9c:23:bb:4a:44:5f:cd:1d:ff:e2:
bf:dd:31:11:90:f0:2a:5d:2b:ec:f9:77:d2:d5:9a:
b5:d1:20:97:10:31:18:52:07:e8:d0:26:0e:07:5e:
1e:4a:d0:12:f4:f0:29:ca:cb:9d:d3:c3:85:ae:a0:
9b:cb:e8:02:80:e2:3d:4e:9a:f7:70:f6:4f:c5:2d:
ff:ea:dc:5f:f6:c6:e7:84:01:4f:c5:29:84:32:db:
4a:a2:b2:ab:44:b2:ec:2e:73:6f:d4:b1:d4:78:53:
0a:81:2c:7d:15:e0:b4:ee:1b:2f:ea:50:86:cd:cb:
03:6b:ba:23:34:13:1c:cf:72:0f:ba:a9:01:43:ad:
50:88:c5:ee:cd:2f:13:88:16:1f:98:3f:3e:9c:89:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6E:A8:7E:13:52:8E:3D:D8:E2:D8:F4:AF:F6:78:F8:CC:AB:D2:20
X509v3 Authority Key Identifier:
keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/31278874AB8911F19687DFB34611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.76.0/22
61.13.0.0-61.13.2.255
61.13.16.0-61.13.39.255
61.13.128.0-61.13.139.255
61.14.64.0/19
61.16.0.0-61.16.19.255
61.16.32.0/22
103.51.160.0/22
103.227.88.0/22
103.250.56.0/22
202.52.64.0-202.52.111.255
202.136.16.0/20
202.148.160.0/20
203.31.234.0/24
203.149.128.0/24
203.149.140.0/22
203.149.168.0/22
203.149.184.0/21
IPv6:
2404:1100::/32
Signature Algorithm: sha256WithRSAEncryption
61:b5:dd:0b:bc:37:9f:d7:d0:fd:0a:74:8a:da:68:e2:38:c2:
ae:32:53:a4:32:2c:83:6a:9d:e8:65:f1:14:d9:8a:c6:19:0d:
95:40:fa:a2:a6:02:f0:be:84:de:10:34:f5:da:29:ce:c1:b9:
89:3e:46:32:19:cf:4e:84:38:5b:25:b1:50:e3:d7:9c:a5:0f:
84:f4:28:17:41:4e:b1:d4:7a:a8:eb:d1:58:25:97:0e:bf:c3:
21:c6:1e:76:85:33:f5:5e:bd:89:9c:9a:14:0e:6c:04:0b:5e:
62:b3:ee:ae:62:3e:db:3e:aa:1c:5b:b4:18:6d:93:2b:47:33:
0b:3d:2c:78:22:70:e3:c4:e3:e2:12:1a:c7:7e:23:31:f6:08:
59:35:fd:ec:e6:f1:0b:9d:80:77:c6:79:e8:91:51:9c:56:5a:
d0:37:01:89:f1:00:83:b4:be:f3:22:eb:93:9e:cf:e5:aa:c4:
97:92:3d:07:c0:55:6b:78:9b:88:e5:55:cd:63:3c:69:b8:0f:
2c:8b:8f:d9:71:2f:f1:1d:e3:bb:57:94:57:bd:3f:69:3c:cb:
91:26:a1:f8:0a:eb:41:67:b8:a5:92:fb:37:85:d4:5d:7a:86:
f6:01:3e:ab:35:c8:d0:b0:8b:75:70:0c:fe:7c:a9:33:6b:98:
42:7f:19:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 16:27:41 2026 by rpki-client