Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/84559BB01D4611EDBB06705BC4F9AE02.roa
File: 84559BB01D4611EDBB06705BC4F9AE02.roa (raw, json)
Hash identifier: ek0EmyZead5ZJJnD9KC5i+nnHS75fiqaYseVOZ4RMtQ=
Subject key identifier: 50:36:C2:6F:1A:BC:E3:1F:F9:DB:0B:0D:9F:48:9B:82:2F:EB:DA:CD
Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45
Certificate serial: 1ACF
Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/84559BB01D4611EDBB06705BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:29:38 +0000
ROA not before: Mon 10 Nov 2025 16:04:39 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9484
IP address blocks: 45.117.32.0/22 maxlen: 22
45.117.32.0/24 maxlen: 24
45.117.33.0/24 maxlen: 24
45.117.34.0/24 maxlen: 24
45.117.35.0/24 maxlen: 24
202.21.96.0/19 maxlen: 19
202.21.96.0/24 maxlen: 24
202.21.97.0/24 maxlen: 24
202.21.98.0/24 maxlen: 24
202.21.99.0/24 maxlen: 24
202.21.100.0/24 maxlen: 24
202.21.101.0/24 maxlen: 24
202.21.102.0/24 maxlen: 24
202.21.103.0/24 maxlen: 24
202.21.104.0/24 maxlen: 24
202.21.105.0/24 maxlen: 24
202.21.106.0/24 maxlen: 24
202.21.107.0/24 maxlen: 24
202.21.108.0/24 maxlen: 24
202.21.109.0/24 maxlen: 24
202.21.110.0/24 maxlen: 24
202.21.111.0/24 maxlen: 24
202.21.112.0/24 maxlen: 24
202.21.113.0/24 maxlen: 24
202.21.114.0/24 maxlen: 24
202.21.115.0/24 maxlen: 24
202.21.116.0/24 maxlen: 24
202.21.117.0/24 maxlen: 24
202.21.118.0/24 maxlen: 24
202.21.119.0/24 maxlen: 24
202.21.120.0/24 maxlen: 24
202.21.121.0/24 maxlen: 24
202.21.122.0/23 maxlen: 24
202.21.124.0/22 maxlen: 22
202.21.124.0/24 maxlen: 24
202.21.125.0/24 maxlen: 24
202.21.126.0/24 maxlen: 24
202.21.127.0/24 maxlen: 24
202.126.92.0/22 maxlen: 24
202.131.224.0/19 maxlen: 19
202.131.224.0/24 maxlen: 24
202.131.225.0/24 maxlen: 24
202.131.226.0/24 maxlen: 24
202.131.227.0/24 maxlen: 24
202.131.228.0/24 maxlen: 24
202.131.229.0/24 maxlen: 24
202.131.230.0/24 maxlen: 24
202.131.231.0/24 maxlen: 24
202.131.232.0/24 maxlen: 24
202.131.233.0/24 maxlen: 24
202.131.234.0/24 maxlen: 24
202.131.235.0/24 maxlen: 24
202.131.236.0/24 maxlen: 24
202.131.237.0/24 maxlen: 24
202.131.238.0/24 maxlen: 24
202.131.239.0/24 maxlen: 24
202.131.240.0/24 maxlen: 24
202.131.241.0/24 maxlen: 24
202.131.242.0/24 maxlen: 24
202.131.243.0/24 maxlen: 24
202.131.244.0/24 maxlen: 24
202.131.245.0/24 maxlen: 24
202.131.246.0/24 maxlen: 24
202.131.247.0/24 maxlen: 24
202.131.248.0/24 maxlen: 24
202.131.249.0/24 maxlen: 24
202.131.250.0/24 maxlen: 24
202.131.251.0/24 maxlen: 24
202.131.252.0/24 maxlen: 24
202.131.253.0/24 maxlen: 24
202.131.254.0/24 maxlen: 24
202.131.255.0/24 maxlen: 24
2407:6400::/32 maxlen: 48
2407:6400:400:700::/56 maxlen: 56
2407:6400:400:800::/56 maxlen: 56
2407:6400:400:900::/56 maxlen: 56
2407:6400:400:1000::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl
rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6863 (0x1acf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45
Validity
Not Before: Nov 10 16:04:39 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45b62-e81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3a:84:2a:0e:8b:63:5d:21:05:e5:9a:90:53:
06:15:a9:46:85:08:ee:04:1c:b2:41:bc:4d:39:ac:
0b:17:c5:77:b6:e7:22:31:55:2d:a2:21:75:c0:36:
78:33:5d:39:6f:16:e5:f2:7c:25:31:00:cf:1e:89:
32:7a:72:ee:8e:79:22:89:23:22:cc:c1:73:18:c7:
0b:e6:9b:3a:f4:26:21:e7:72:19:42:d0:1d:06:55:
25:40:db:c6:64:27:2e:74:c1:73:c2:9f:5c:e9:45:
df:ee:ea:d9:b9:6b:8a:a6:84:ba:0f:9d:20:13:d3:
bd:99:4b:03:81:e8:bb:90:cc:07:ae:5b:b6:75:2f:
b4:31:70:eb:4d:4d:e1:5b:6a:4c:ad:25:b7:bd:66:
7e:08:7f:70:9a:7c:63:c6:13:0d:02:0d:57:f7:21:
ae:92:a5:25:44:24:88:f1:fc:2d:66:d7:da:8f:62:
fb:90:57:73:60:8e:53:0a:9a:2d:2b:1b:4b:68:41:
18:2d:9b:ce:d7:42:a1:21:47:f5:63:4c:5b:e6:1d:
7a:88:2a:fb:3c:e3:50:5d:df:81:18:5c:43:64:f7:
8f:7b:17:1d:90:e0:bc:f2:d4:2e:5c:c6:8c:29:16:
87:82:17:3b:6a:14:ba:e3:00:68:d7:4f:0d:6b:92:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:36:C2:6F:1A:BC:E3:1F:F9:DB:0B:0D:9F:48:9B:82:2F:EB:DA:CD
X509v3 Authority Key Identifier:
keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/84559BB01D4611EDBB06705BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.117.32.0/22
202.21.96.0/19
202.126.92.0/22
202.131.224.0/19
IPv6:
2407:6400::/32
Signature Algorithm: sha256WithRSAEncryption
b4:d0:33:2a:88:6c:09:81:db:f1:d9:d4:a4:2b:77:ed:f7:17:
8d:40:ba:9b:7c:39:d4:70:a8:2d:5e:ba:1d:ad:2a:94:32:f2:
6b:87:f1:56:b2:3e:6e:ad:39:72:b5:97:22:38:33:e4:50:68:
f5:49:d4:fe:68:8d:55:29:f4:47:f2:c0:d0:06:f9:ae:ff:0c:
c1:d1:40:f7:6f:32:fb:b5:84:9c:7e:c7:cb:f9:88:56:9f:a7:
93:b5:83:9e:54:ac:92:59:6d:05:2a:ee:e6:52:7b:1e:bc:76:
8d:88:52:48:71:c7:7e:d5:94:19:57:bb:16:4b:f4:98:b6:95:
f3:50:18:19:d2:48:60:f7:44:ba:a3:0b:09:43:64:54:a8:ba:
c4:ac:71:27:cb:1e:8b:67:87:7d:d4:d1:aa:d8:b2:dd:1a:92:
3e:54:fc:46:2b:57:57:d8:91:8b:2e:42:92:70:1a:46:9c:55:
69:29:2d:36:41:9d:ae:84:18:64:b7:1b:e9:4d:8f:da:94:e8:
84:89:f2:b0:ca:2b:33:66:ef:15:24:a9:88:3e:ea:fd:2f:99:
e9:51:be:ea:fa:93:9d:7a:2f:ba:ed:ad:17:84:bd:13:02:43:
63:57:40:84:d0:fe:2e:92:e7:1d:90:2d:69:0f:8c:71:4a:eb:
54:73:36:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:17 2026 by rpki-client