Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/BD6571EEC0AC11EF8F832C34C4F9AE02.roa
File: BD6571EEC0AC11EF8F832C34C4F9AE02.roa (raw, json)
Hash identifier: YwlYvcPK0LjbipBMcrV/Pp8E9LDWoYgfElzOVuCO5L0=
Subject key identifier: 40:4D:13:B2:54:2F:33:B4:BC:93:59:62:EA:FC:3B:E9:8B:ED:39:80
Certificate issuer: /CN=A91DC46A/serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54
Certificate serial: 1EC0
Authority key identifier: F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/BD6571EEC0AC11EF8F832C34C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:40:46 +0000
ROA not before: Wed 22 Jan 2025 16:23:26 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 23678
IP address blocks: 27.131.32.0/19 maxlen: 24
43.252.44.0/22 maxlen: 22
43.252.44.0/23 maxlen: 23
43.252.44.0/24 maxlen: 24
43.252.45.0/24 maxlen: 24
43.252.46.0/24 maxlen: 24
43.252.47.0/24 maxlen: 24
103.12.64.0/22 maxlen: 22
103.12.64.0/23 maxlen: 23
103.12.64.0/24 maxlen: 24
103.12.65.0/24 maxlen: 24
103.12.66.0/24 maxlen: 24
103.12.67.0/24 maxlen: 24
103.137.120.0/22 maxlen: 24
103.221.60.0/22 maxlen: 23
103.221.60.0/23 maxlen: 24
103.221.62.0/24 maxlen: 24
103.243.192.0/22 maxlen: 22
103.243.192.0/24 maxlen: 24
103.243.193.0/24 maxlen: 24
103.243.194.0/24 maxlen: 24
122.0.16.0/20 maxlen: 24
150.107.156.0/22 maxlen: 22
150.107.156.0/24 maxlen: 24
150.107.157.0/24 maxlen: 24
150.107.158.0/24 maxlen: 24
150.107.159.0/24 maxlen: 24
202.133.96.0/20 maxlen: 24
2405:6400::/32 maxlen: 36
2405:6400::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl
rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7872 (0x1ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC46A, serialNumber=F8D4A632D069964C61A33E41D6243D535B007D54
Validity
Not Before: Jan 22 16:23:26 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69a441de-4667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:ec:46:f2:24:67:58:e3:87:c3:bb:70:5e:
d8:08:ec:37:25:cb:35:1c:8d:32:d8:28:41:b6:72:
7e:06:e5:56:cb:97:01:e1:40:af:5b:8c:a4:fc:72:
d8:f5:c9:06:7b:0c:0b:12:4a:f7:fc:09:c3:98:be:
c6:89:61:f4:05:16:54:46:a0:ab:0c:26:a8:8a:90:
3f:3b:b7:5a:9b:43:0f:8c:a5:5c:7c:89:31:1f:e0:
5f:27:a9:c1:f0:4c:96:39:9c:1c:ee:7c:b3:12:83:
5f:00:9b:1f:65:45:c8:f1:d1:02:e4:fc:d2:28:a0:
25:fd:3a:b3:03:84:df:4b:fd:25:41:65:dd:9f:66:
b3:c3:92:a0:2e:f7:31:2e:7c:79:e0:42:7d:12:d2:
fc:f5:f4:96:f4:39:bb:ac:58:fc:c1:e6:41:ce:81:
28:39:d5:7c:2b:42:2e:5c:86:87:14:d1:57:fc:3d:
23:f7:77:61:8a:f6:74:07:d4:88:2b:39:9a:c3:41:
c4:a4:0b:2c:74:06:39:cb:28:96:ac:f3:3a:53:34:
17:8b:51:dc:a0:ae:c0:47:bf:0c:7e:c4:79:ff:ce:
9d:65:2e:9d:c2:87:e3:3e:14:50:97:e3:1d:e9:73:
4c:ac:70:83:fa:73:2e:9c:6d:a5:c7:be:1e:d4:39:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4D:13:B2:54:2F:33:B4:BC:93:59:62:EA:FC:3B:E9:8B:ED:39:80
X509v3 Authority Key Identifier:
keyid:F8:D4:A6:32:D0:69:96:4C:61:A3:3E:41:D6:24:3D:53:5B:00:7D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-NSmMtBplkxhoz5B1iQ9U1sAfVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC46A/00500164943211E68C1B824AC4F9AE02/BD6571EEC0AC11EF8F832C34C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.32.0/19
43.252.44.0/22
103.12.64.0/22
103.137.120.0/22
103.221.60.0/22
103.243.192.0/22
122.0.16.0/20
150.107.156.0/22
202.133.96.0/20
IPv6:
2405:6400::/32
Signature Algorithm: sha256WithRSAEncryption
67:41:e8:ea:17:dc:be:48:e1:d0:c9:a8:97:06:dc:40:17:59:
0d:86:88:6a:d8:14:59:ae:f6:f5:e9:0f:23:b9:d5:37:f0:ea:
a0:c1:76:fa:50:1a:91:d3:10:82:47:5d:93:b1:a0:18:32:43:
ec:a9:c8:9e:3d:ba:22:31:b3:4a:74:d0:ed:ad:f7:b6:aa:09:
20:cb:22:3a:8b:cf:57:9f:36:3b:28:08:37:82:59:12:6c:9a:
11:48:a0:6b:56:f8:fa:95:60:57:0f:0f:d6:82:4c:62:16:d0:
86:40:1b:ef:0c:24:56:0e:42:82:8f:1b:d4:39:f7:2e:57:a1:
83:67:5e:c6:62:c8:cd:91:35:d0:bc:f8:f6:38:fb:8a:01:57:
29:a5:43:76:02:90:9f:e9:e5:50:43:4b:5e:f9:e0:39:59:1d:
78:ca:a1:b8:0a:5f:a4:53:90:bf:0d:0d:c7:68:4b:fa:e3:64:
4c:1f:29:d9:24:67:62:72:ef:00:eb:b8:ec:19:de:82:30:05:
03:b0:2d:cd:e1:18:ac:87:a8:df:9e:e8:2b:71:b9:2c:24:9b:
d2:61:2e:08:73:28:1e:e9:f4:7a:22:6d:ab:26:b8:72:34:6e:
06:66:5f:08:b6:62:19:b4:c1:2e:f8:55:c9:a1:44:a5:f0:f0:
56:12:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:29 2026 by rpki-client