Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/65519ACC506C11EC99354984C4F9AE02.roa
File: 65519ACC506C11EC99354984C4F9AE02.roa (raw, json)
Hash identifier: cyYmW2mjaeVZhYJ/t/F5yjmvt3AgL3H5/RwI/7ZyO5Y=
Subject key identifier: E9:86:2E:5E:57:C9:C8:81:78:41:81:C8:8C:6E:3E:90:19:BA:AE:61
Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Certificate serial: 0910
Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/65519ACC506C11EC99354984C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:15:56 +0000
ROA not before: Thu 12 Feb 2026 20:17:46 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 59257
IP address blocks: 43.243.132.0/22 maxlen: 24
45.116.232.0/22 maxlen: 24
103.255.4.0/22 maxlen: 22
103.255.4.0/23 maxlen: 24
103.255.6.0/23 maxlen: 24
111.119.168.0/21 maxlen: 24
111.119.176.0/20 maxlen: 20
111.119.176.0/21 maxlen: 21
111.119.176.0/22 maxlen: 24
111.119.180.0/22 maxlen: 24
111.119.184.0/21 maxlen: 21
111.119.184.0/22 maxlen: 24
111.119.188.0/22 maxlen: 24
121.91.32.0/19 maxlen: 24
144.48.0.0/22 maxlen: 24
203.189.224.0/22 maxlen: 24
223.123.0.0/17 maxlen: 24
2402:ad80::/36 maxlen: 36
2402:ad80::/44 maxlen: 48
2402:ad80:10::/44 maxlen: 48
2402:ad80:20::/44 maxlen: 48
2402:ad80:60::/44 maxlen: 48
2402:ad80:70::/44 maxlen: 48
2402:ad80:80::/44 maxlen: 48
2402:ad80:90::/44 maxlen: 48
2402:ad80:a0::/44 maxlen: 48
2402:ad80:b0::/44 maxlen: 48
2402:ad80:f0::/44 maxlen: 48
2402:ad80:100::/44 maxlen: 48
2402:ad80:110::/44 maxlen: 48
2402:ad80:120::/44 maxlen: 48
2402:ad80:130::/44 maxlen: 48
2402:ad80:140::/44 maxlen: 48
2402:ad80:1b0::/44 maxlen: 48
2402:ad80:1f0::/44 maxlen: 48
2402:ad80:1000::/36 maxlen: 36
2402:ad80:2000::/36 maxlen: 36
2402:ad80:3000::/36 maxlen: 36
2402:ad80:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Validity
Not Before: Feb 12 20:17:46 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4825c-6e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:f7:68:4e:0f:48:59:b0:c2:71:76:79:4e:
5e:f0:25:3f:8e:3c:4b:46:99:51:86:24:96:65:e7:
a1:67:fa:0c:42:00:cd:5d:64:ad:d2:32:4c:52:30:
84:f5:6c:4e:1f:ab:5e:85:d9:8c:56:04:58:fb:38:
27:27:b9:a5:89:81:98:e2:92:58:3e:de:fd:ff:e6:
09:4b:89:a6:e6:4a:38:b2:e5:e8:e9:fa:ef:a4:7e:
3a:c4:57:e9:78:33:b3:bb:22:66:e9:23:81:cc:8a:
fd:22:83:5a:f5:12:f2:b8:48:a1:20:15:77:de:6c:
47:4f:40:83:30:07:73:8b:24:6d:03:82:5f:5e:ce:
e1:38:42:92:f2:57:b4:59:6d:72:07:05:4e:82:0c:
e0:c1:1c:e5:23:36:ac:c2:d4:34:d7:26:2a:4d:c2:
ce:55:ce:dd:7c:13:2c:77:5e:4f:da:fd:10:05:4a:
7b:71:3e:af:3b:d2:1f:a7:83:30:10:37:5e:e2:bd:
c7:b1:d7:6f:23:8c:31:7c:6b:2e:9d:5d:98:0a:0a:
0e:32:85:c8:18:99:2e:26:1f:2c:aa:76:b4:19:56:
f6:02:15:46:f9:0c:71:c2:bf:1f:35:8d:42:82:eb:
6e:75:8b:20:66:b1:aa:2f:c4:15:22:c7:ef:40:3e:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:86:2E:5E:57:C9:C8:81:78:41:81:C8:8C:6E:3E:90:19:BA:AE:61
X509v3 Authority Key Identifier:
keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/65519ACC506C11EC99354984C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.243.132.0/22
45.116.232.0/22
103.255.4.0/22
111.119.168.0-111.119.191.255
121.91.32.0/19
144.48.0.0/22
203.189.224.0/22
223.123.0.0/17
IPv6:
2402:ad80::-2402:ad80:4fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8b:01:2a:e4:b7:26:38:c1:fe:27:8f:8c:d8:7f:21:73:46:6c:
fb:30:72:06:f3:f4:69:e4:b7:85:24:aa:2a:44:21:92:d6:2b:
53:cc:ab:2d:6f:96:5b:24:3b:3a:f9:58:ba:5d:c0:4d:e8:03:
1d:19:8d:09:45:37:cf:b6:42:f0:f7:ad:bd:24:a4:d0:86:53:
42:5a:35:4c:fa:e1:2a:97:b5:51:d3:f5:a2:19:46:6c:3d:69:
04:2f:31:34:0d:65:3b:c1:e4:fe:be:e1:fe:5d:e6:1f:71:5f:
76:59:d4:20:dc:cb:a6:81:75:5e:3d:79:cf:c7:aa:37:26:a5:
ff:2a:7a:72:b2:33:cf:85:57:77:10:f0:bb:50:41:3a:35:b9:
da:bb:d0:64:4c:79:00:39:46:5e:b9:a8:01:9f:24:6f:68:ad:
0e:09:18:6a:a3:9b:6b:67:ab:ad:a5:30:2e:f2:0e:c5:1a:83:
48:39:3f:6e:3b:6e:e9:c1:26:49:87:00:57:14:93:ee:0a:96:
0d:99:7a:32:31:64:56:3e:36:43:11:57:93:b7:9c:21:24:46:
41:db:10:35:7f:eb:52:65:a8:58:50:71:37:1a:ab:90:17:05:
64:82:60:1a:50:51:df:b9:b3:40:77:98:05:4c:c3:c9:2f:be:
37:87:00:0a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx
Nzc4RDA2QkYwHhcNMjYwMjEyMjAxNzQ2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODI1Yy02ZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAme33aE4PSFmwwnF2eU5e8CU/jjxLRplRhiSWZeehZ/oMQgDNXWSt0jJMUjCE
9WxOH6tehdmMVgRY+zgnJ7mliYGY4pJYPt79/+YJS4mm5ko4suXo6frvpH46xFfp
eDOzuyJm6SOBzIr9IoNa9RLyuEihIBV33mxHT0CDMAdziyRtA4JfXs7hOEKS8le0
WW1yBwVOggzgwRzlIzaswtQ01yYqTcLOVc7dfBMsd15P2v0QBUp7cT6vO9Ifp4Mw
EDde4r3HsddvI4wxfGsunV2YCgoOMoXIGJkuJh8sqna0GVb2AhVG+Qxxwr8fNY1C
gutudYsgZrGqL8QVIsfvQD5OOQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOmGLl5X
yciBeEGByIxuPpAZuq5hMB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx
QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDI5OEQvMzM3QTY0MzJGMUE2MTFFQUI5NUMwRTJGQzRGOUFFMDIvNjU1MTlBQ0M1
MDZDMTFFQzk5MzU0OTg0QzRGOUFFMDIucm9hMGoGCCsGAQUFBwEHAQH/BFswWTA+
BAIAATA4AwQCK/OEAwQCLXToAwQCZ/8EMAwDBANvd6gDBAZvd4ADBAV5WyADBAKQ
MAADBALLveADBAffewAwFwQCAAIwETAPAwUHJAKtgAMGBCQCrYBAMA0GCSqGSIb3
DQEBCwUAA4IBAQCLASrktyY4wf4nj4zYfyFzRmz7MHIG8/Rp5LeFJKoqRCGS1itT
zKstb5ZbJDs6+Vi6XcBN6AMdGY0JRTfPtkLw9629JKTQhlNCWjVM+uEql7VR0/Wi
GUZsPWkELzE0DWU7weT+vuH+XeYfcV92WdQg3MumgXVePXnPx6o3JqX/KnpysjPP
hVd3EPC7UEE6Nbnau9BkTHkAOUZeuagBnyRvaK0OCRhqo5trZ6utpTAu8g7FGoNI
OT9uO27pwSZJhwBXFJPuCpYNmXoyMWRWPjZDEVeTt5whJEZB2xA1f+tSZahYUHE3
GquQFwVkgmAaUFHfubNAd5gFTMPJL743hwAK
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:24 2026 by rpki-client