Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
File: C264EF40348611F1AD86C498AC833773.roa (raw, json)
Hash identifier: LL/nhLphh8JqfNjbZHxlzIqdEFt4VnJ8FScPhE3AmIs=
Subject key identifier: 1E:73:39:40:66:E0:FF:A0:31:31:D3:7A:61:98:F8:1A:6A:28:A0:30
Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial: 3590
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
Signing time: Mon 14 Sep 2026 15:16:31 +0000
ROA not before: Mon 14 Sep 2026 15:16:31 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 23884
IP address blocks: 45.112.64.0/24 maxlen: 24
45.112.65.0/24 maxlen: 24
45.112.66.0/24 maxlen: 24
45.112.67.0/24 maxlen: 24
49.50.232.0/22 maxlen: 22
49.50.232.0/24 maxlen: 24
49.50.233.0/24 maxlen: 24
49.50.234.0/24 maxlen: 24
49.50.235.0/24 maxlen: 24
103.246.188.0/22 maxlen: 22
103.246.188.0/24 maxlen: 24
103.246.189.0/24 maxlen: 24
103.246.191.0/24 maxlen: 24
111.223.32.0/21 maxlen: 21
111.223.32.0/24 maxlen: 24
111.223.33.0/24 maxlen: 24
111.223.34.0/24 maxlen: 24
111.223.35.0/24 maxlen: 24
111.223.36.0/24 maxlen: 24
111.223.37.0/24 maxlen: 24
111.223.38.0/24 maxlen: 24
111.223.39.0/24 maxlen: 24
111.223.40.0/23 maxlen: 24
111.223.42.0/24 maxlen: 24
111.223.43.0/24 maxlen: 24
111.223.44.0/22 maxlen: 22
111.223.44.0/24 maxlen: 24
111.223.45.0/24 maxlen: 24
111.223.46.0/24 maxlen: 24
111.223.47.0/24 maxlen: 24
111.223.48.0/20 maxlen: 20
111.223.48.0/21 maxlen: 21
111.223.49.0/24 maxlen: 24
111.223.50.0/24 maxlen: 24
111.223.51.0/24 maxlen: 24
111.223.52.0/24 maxlen: 24
111.223.53.0/24 maxlen: 24
111.223.55.0/24 maxlen: 24
111.223.57.0/24 maxlen: 24
111.223.58.0/23 maxlen: 24
111.223.60.0/22 maxlen: 22
111.223.60.0/24 maxlen: 24
111.223.61.0/24 maxlen: 24
111.223.62.0/24 maxlen: 24
111.223.63.0/24 maxlen: 24
112.121.128.0/21 maxlen: 21
112.121.129.0/24 maxlen: 24
112.121.130.0/24 maxlen: 24
112.121.131.0/24 maxlen: 24
112.121.132.0/24 maxlen: 24
112.121.133.0/24 maxlen: 24
112.121.134.0/24 maxlen: 24
112.121.135.0/24 maxlen: 24
112.121.136.0/22 maxlen: 23
112.121.138.0/23 maxlen: 24
112.121.140.0/23 maxlen: 23
112.121.140.0/24 maxlen: 24
112.121.141.0/24 maxlen: 24
112.121.142.0/23 maxlen: 24
112.121.144.0/20 maxlen: 20
112.121.144.0/24 maxlen: 24
112.121.145.0/24 maxlen: 24
112.121.147.0/24 maxlen: 24
112.121.148.0/24 maxlen: 24
112.121.149.0/24 maxlen: 24
112.121.150.0/24 maxlen: 24
112.121.151.0/24 maxlen: 24
112.121.152.0/24 maxlen: 24
112.121.155.0/24 maxlen: 24
112.121.156.0/24 maxlen: 24
112.121.157.0/24 maxlen: 24
112.121.158.0/24 maxlen: 24
112.121.159.0/24 maxlen: 24
202.8.84.0/22 maxlen: 22
202.8.84.0/24 maxlen: 24
202.8.85.0/24 maxlen: 24
202.151.176.0/23 maxlen: 23
202.151.178.0/24 maxlen: 24
202.151.179.0/24 maxlen: 24
202.151.180.0/24 maxlen: 24
202.151.181.0/24 maxlen: 24
202.151.182.0/24 maxlen: 24
202.151.183.0/24 maxlen: 24
202.151.184.0/24 maxlen: 24
202.151.185.0/24 maxlen: 24
202.151.186.0/24 maxlen: 24
202.151.188.0/24 maxlen: 24
202.151.189.0/24 maxlen: 24
202.151.190.0/24 maxlen: 24
202.151.191.0/24 maxlen: 24
202.162.76.0/22 maxlen: 22
202.162.76.0/24 maxlen: 24
202.162.77.0/24 maxlen: 24
202.162.78.0/24 maxlen: 24
202.162.79.0/24 maxlen: 24
202.170.112.0/20 maxlen: 20
202.170.112.0/24 maxlen: 24
202.170.113.0/24 maxlen: 24
202.170.114.0/23 maxlen: 23
202.170.116.0/23 maxlen: 23
202.170.117.0/24 maxlen: 24
202.170.118.0/23 maxlen: 24
202.170.120.0/23 maxlen: 23
202.170.122.0/23 maxlen: 23
202.170.124.0/24 maxlen: 24
202.170.125.0/24 maxlen: 24
202.170.126.0/23 maxlen: 23
202.170.127.0/24 maxlen: 24
2400:ea00::/48 maxlen: 48
2400:ea00:3560::/48 maxlen: 48
2400:ea00:3561::/48 maxlen: 48
2400:ea00:c010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13712 (0x3590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Validity
Not Before: Sep 14 15:16:31 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa80fcf-1ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cb:08:1d:b7:15:7a:c0:af:5c:26:98:e5:a0:
ac:cb:4f:a2:a1:f1:92:8a:65:72:70:82:cc:98:4e:
c7:03:43:e4:7a:1c:03:7c:1d:3e:96:88:da:45:81:
ee:88:c0:26:2d:26:0c:ff:ed:6a:a2:77:0d:c7:11:
e0:ab:54:c3:5b:b2:bf:2e:4e:9e:7e:06:3a:95:e5:
c4:8f:94:b7:a8:0a:92:c2:03:e7:2e:19:79:a9:6f:
ff:99:c8:35:2e:c9:c2:41:e6:bb:bb:48:9f:51:80:
5e:0d:ba:10:4a:94:1f:ad:0b:78:b5:02:c4:4c:53:
71:13:b8:3c:c2:d2:be:db:9a:d3:38:a9:ca:eb:35:
30:fd:98:ca:90:78:ac:05:5b:c1:02:ae:51:1a:e1:
45:e8:e7:46:a6:fb:be:dd:42:5d:73:c9:63:02:fd:
d0:aa:65:9c:ea:0d:61:11:1a:a9:78:fb:3b:aa:59:
bd:6c:f9:ee:91:72:89:aa:72:9f:3d:d1:bc:6d:bf:
8b:85:ac:a6:3f:85:69:fc:7d:fd:20:cb:10:08:e9:
7f:56:ae:06:76:d2:a8:07:7a:a1:32:32:31:f9:98:
6d:79:f4:38:9d:ad:47:18:24:f7:77:6b:8d:9d:59:
35:63:dd:37:26:18:6a:64:d6:c4:8b:3e:3a:f9:15:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:73:39:40:66:E0:FF:A0:31:31:D3:7A:61:98:F8:1A:6A:28:A0:30
X509v3 Authority Key Identifier:
keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.64.0/22
49.50.232.0/22
103.246.188.0/22
111.223.32.0/19
112.121.128.0/19
202.8.84.0/22
202.151.176.0-202.151.186.255
202.151.188.0/22
202.162.76.0/22
202.170.112.0/20
IPv6:
2400:ea00::/48
2400:ea00:3560::/47
2400:ea00:c010::/48
Signature Algorithm: sha256WithRSAEncryption
0e:08:a2:85:f9:14:91:a3:e8:a6:a6:60:b0:d8:9d:b9:46:26:
0f:8d:b8:56:3a:62:a4:6e:a6:6f:75:93:2b:4e:62:e1:33:39:
ef:f6:d7:3d:42:46:09:f7:48:7c:4c:06:00:6c:e6:6b:82:52:
92:7a:e8:58:87:d2:c5:bc:8e:c9:19:04:5a:3e:00:61:42:0c:
9a:a7:0d:48:6d:4f:06:94:4d:43:ca:54:5e:d5:46:49:e4:1d:
c0:de:3b:40:b9:33:0c:21:02:fc:8d:46:d7:a9:23:e9:3f:2f:
d5:d4:76:0e:6d:0d:e7:c9:f5:06:50:8e:07:5f:98:a7:cd:5b:
2f:bf:b0:e9:79:27:74:84:17:3e:a5:37:7a:06:24:4e:93:1a:
27:a0:c4:f8:1f:ba:fd:1b:e2:fb:bb:f9:d8:b5:5e:1f:30:f0:
e8:5f:ab:c1:fb:5b:3f:ac:e4:63:60:1a:15:9e:78:d3:f0:c3:
bc:b4:ce:54:08:f2:b2:4b:99:1c:dc:eb:dc:b2:4a:ed:83:9b:
8d:80:b8:ef:82:e9:74:dd:45:93:2c:7d:0a:33:31:be:ff:76:
3d:55:13:32:37:b1:b1:87:7f:a9:7f:7c:4c:5e:38:4a:1f:85:
f0:1c:ef:3c:b3:5d:be:c8:c3:16:6d:05:7d:38:43:e8:77:6f:
4e:5c:25:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:19:00 2026 by rpki-client