Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/79AE82F8171711EBB12F2574C4F9AE02.roa
File: 79AE82F8171711EBB12F2574C4F9AE02.roa (raw, json)
Hash identifier: sz1Xdztmk+bHgcOnqZNY8JnMe9LDfgb/XJH6nkfyvdA=
Subject key identifier: 07:7C:DD:61:59:3C:E2:B6:6D:AA:4F:33:F9:80:74:5D:59:BC:E0:17
Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Certificate serial: 1E48
Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/79AE82F8171711EBB12F2574C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:14:37 +0000
ROA not before: Fri 18 Apr 2025 16:34:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38880
IP address blocks: 27.131.64.0/18 maxlen: 24
27.131.80.0/21 maxlen: 23
27.131.80.0/22 maxlen: 24
27.131.84.0/23 maxlen: 24
27.131.100.0/22 maxlen: 24
43.245.68.0/24 maxlen: 24
43.245.69.0/24 maxlen: 24
43.245.70.0/24 maxlen: 24
43.245.71.0/24 maxlen: 24
103.13.56.0/22 maxlen: 24
103.31.28.0/22 maxlen: 24
103.204.106.0/23 maxlen: 24
103.213.100.0/22 maxlen: 24
111.223.224.0/20 maxlen: 22
111.223.224.0/24 maxlen: 24
111.223.225.0/24 maxlen: 24
111.223.226.0/24 maxlen: 24
111.223.227.0/24 maxlen: 24
111.223.228.0/24 maxlen: 24
111.223.229.0/24 maxlen: 24
111.223.231.0/24 maxlen: 24
111.223.232.0/24 maxlen: 24
111.223.233.0/24 maxlen: 24
111.223.234.0/24 maxlen: 24
111.223.235.0/24 maxlen: 24
111.223.236.0/24 maxlen: 24
111.223.237.0/24 maxlen: 24
111.223.238.0/24 maxlen: 24
111.223.239.0/24 maxlen: 24
119.31.224.0/21 maxlen: 24
192.140.140.0/22 maxlen: 24
2400:9c00::/32 maxlen: 32
2400:9c00::/44 maxlen: 48
2407:ca80::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:47:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7752 (0x1e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Validity
Not Before: Apr 18 16:34:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4037c-23aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:0a:34:62:32:e6:c7:d2:a4:ea:98:76:20:
63:9b:1d:f4:3f:11:59:58:c0:1e:a0:08:74:d8:75:
f9:8a:5f:b2:d1:84:8f:57:fe:04:74:0b:8f:1b:65:
52:7d:bd:7a:9a:88:b1:c3:35:8c:b9:ce:e9:64:37:
e7:ba:94:ec:1f:71:67:09:66:b6:fd:a1:c9:37:49:
d9:36:c4:2e:90:26:8c:3d:af:05:aa:0e:b1:f2:c5:
6e:a3:9d:5a:ca:2a:f8:04:50:b1:59:17:03:48:e9:
a3:c2:39:20:13:b3:10:4f:50:7f:20:f6:00:1d:95:
74:80:a0:b9:db:27:05:7c:4d:66:0e:27:85:69:c2:
77:80:f8:9e:2f:14:fd:1a:35:2c:57:6b:17:53:c9:
70:3e:96:d5:44:46:e0:6c:e6:2b:fa:a7:b3:b0:13:
31:bf:2a:e1:64:68:29:f2:d6:bc:67:7d:0d:31:a8:
ae:cb:d5:2e:61:73:ea:d8:47:33:0b:96:b5:95:c0:
41:ec:78:84:ac:82:67:64:08:c8:75:7b:d6:04:03:
9c:22:7f:f7:d3:d4:63:53:50:03:90:06:52:1e:fc:
0a:3b:a3:93:45:a5:14:a1:9b:27:c3:ad:15:9f:27:
4b:b3:47:a6:40:3f:84:54:14:a4:da:3f:1b:3a:9e:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7C:DD:61:59:3C:E2:B6:6D:AA:4F:33:F9:80:74:5D:59:BC:E0:17
X509v3 Authority Key Identifier:
keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/79AE82F8171711EBB12F2574C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.64.0/18
43.245.68.0/22
103.13.56.0/22
103.31.28.0/22
103.204.106.0/23
103.213.100.0/22
111.223.224.0/20
119.31.224.0/21
192.140.140.0/22
IPv6:
2400:9c00::/32
2407:ca80::/32
Signature Algorithm: sha256WithRSAEncryption
80:24:54:29:c3:38:83:eb:92:40:49:9d:81:24:3f:0d:28:26:
9c:99:24:83:e2:7c:a0:3a:17:c9:cf:61:61:7d:43:75:61:ed:
95:31:35:fe:bc:2c:12:f8:37:0d:1e:97:30:74:80:eb:8b:4f:
b3:b9:03:69:08:81:90:ca:90:11:9b:3e:f8:cd:3c:ad:0b:a6:
61:35:dc:95:1f:7e:85:b2:4c:51:ef:b8:d8:f7:81:b3:2d:03:
ba:25:c1:a5:f3:cc:29:dd:31:4a:cd:5c:37:ca:39:3f:d3:14:
0a:32:dd:7d:9c:b3:d5:93:f9:f8:22:aa:86:7d:ed:7b:f5:60:
d7:d5:98:27:51:a8:72:f2:84:85:e7:9a:e6:be:38:6f:77:2c:
1a:45:ea:6d:b4:95:9d:64:94:cc:d1:a1:0f:94:c1:c5:ec:7b:
be:d0:ee:ae:43:c3:0d:d3:19:14:41:60:f8:41:b4:73:38:67:
37:b6:b0:70:c6:2b:f5:f6:4c:0c:33:bb:2a:a9:93:04:83:e6:
ef:0c:68:0e:3f:d0:46:3a:3d:da:d6:bd:c1:06:76:1b:4e:55:
50:5c:21:5e:3d:4d:cb:a9:b3:87:62:ee:2d:70:e3:7c:d0:d9:
d9:48:42:62:e5:8a:28:b8:63:a5:9e:ce:8b:e3:26:10:b4:c2:
4b:f8:45:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:45 2026 by rpki-client