Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/E5A2E480A29F11F1BF8A2D6D3411F970.roa
File: E5A2E480A29F11F1BF8A2D6D3411F970.roa (raw, json)
Hash identifier: po7ACU514+Tf/q+0sZb3nc1AQ1Z+vwg0epu32LWxXO8=
Subject key identifier: 1A:F6:C0:9B:26:79:2E:BF:75:CB:D2:A0:8C:C4:93:F8:F7:0E:67:41
Certificate issuer: /CN=A91E5770/serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854
Certificate serial: 4E
Authority key identifier: BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/E5A2E480A29F11F1BF8A2D6D3411F970.roa
Signing time: Fri 28 Aug 2026 05:18:26 +0000
ROA not before: Fri 28 Aug 2026 05:18:26 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 63888
IP address blocks: 43.229.52.0/22 maxlen: 22
43.229.52.0/24 maxlen: 24
43.229.53.0/24 maxlen: 24
43.229.54.0/24 maxlen: 24
43.229.55.0/24 maxlen: 24
43.230.144.0/22 maxlen: 22
43.230.145.0/24 maxlen: 24
43.230.146.0/24 maxlen: 24
43.230.147.0/24 maxlen: 24
43.231.196.0/22 maxlen: 22
43.231.196.0/24 maxlen: 24
43.231.197.0/24 maxlen: 24
43.231.198.0/24 maxlen: 24
43.231.199.0/24 maxlen: 24
43.247.0.0/22 maxlen: 22
43.247.0.0/24 maxlen: 24
43.247.1.0/24 maxlen: 24
43.247.2.0/24 maxlen: 24
43.247.3.0/24 maxlen: 24
103.41.184.0/22 maxlen: 22
103.41.184.0/24 maxlen: 24
103.41.186.0/24 maxlen: 24
103.41.187.0/24 maxlen: 24
103.49.212.0/22 maxlen: 22
103.49.213.0/24 maxlen: 24
103.49.214.0/24 maxlen: 24
103.49.215.0/24 maxlen: 24
103.51.12.0/22 maxlen: 22
103.51.14.0/24 maxlen: 24
103.51.15.0/24 maxlen: 24
103.224.248.0/22 maxlen: 22
103.224.248.0/24 maxlen: 24
103.224.249.0/24 maxlen: 24
103.224.250.0/24 maxlen: 24
103.224.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl
rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5770, serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854
Validity
Not Before: Aug 28 05:18:26 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a911a22-95c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:b7:d9:c5:32:98:61:da:d0:3b:7d:58:4e:
61:93:d4:41:26:33:e2:48:f9:80:ea:9f:bc:3e:12:
84:d1:de:68:e4:32:3b:0b:9b:d4:45:79:12:93:56:
51:fc:9c:79:92:09:63:98:ae:7d:27:fb:9e:41:1a:
db:4e:32:8b:ea:d4:99:9c:5a:fe:ab:58:df:59:41:
39:bb:8d:4c:f6:91:af:42:6f:17:f7:7c:66:d6:ec:
8a:c3:ad:09:f8:f9:d6:a4:7c:66:ce:72:91:cf:6e:
dd:b3:d1:70:40:c1:c8:c1:65:90:79:95:23:70:59:
2c:ee:48:6b:20:9e:f0:fa:70:bf:14:c9:76:f7:43:
81:15:e0:51:8e:b9:80:9d:38:81:a0:82:74:1a:f2:
39:3d:df:28:6b:0f:dd:bb:2e:64:d1:4b:78:f0:98:
04:ff:f1:86:c2:54:09:cc:ad:23:7c:cc:cf:ed:db:
c1:ad:ba:4c:ab:a9:af:93:1a:91:af:2d:23:1b:39:
fe:01:f8:89:28:de:00:ff:a3:d9:2f:9d:46:6b:85:
09:c0:9f:2d:43:d1:1a:f7:ab:a5:87:71:4b:f8:e8:
9c:13:d5:06:74:2a:3b:0e:a0:9f:38:dd:0c:9f:d1:
9a:f6:4b:07:22:c1:c7:a3:3a:91:92:eb:58:2e:31:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F6:C0:9B:26:79:2E:BF:75:CB:D2:A0:8C:C4:93:F8:F7:0E:67:41
X509v3 Authority Key Identifier:
keyid:BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/E5A2E480A29F11F1BF8A2D6D3411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.229.52.0/22
43.230.144.0/22
43.231.196.0/22
43.247.0.0/22
103.41.184.0/22
103.49.212.0/22
103.51.12.0/22
103.224.248.0/22
Signature Algorithm: sha256WithRSAEncryption
12:67:af:07:85:24:31:f3:a2:65:1d:57:b9:f5:83:47:3b:e4:
0c:87:f7:e2:bc:68:b9:ae:f5:00:fd:74:bb:2c:41:11:a4:06:
1c:ef:e1:5a:4e:df:14:ea:cd:71:d5:45:92:1f:76:67:30:82:
b8:57:3d:6a:ef:0f:d4:3e:e5:0f:d8:15:23:c2:2b:4e:e9:2e:
1c:59:36:e4:eb:0c:e4:e3:f5:51:82:13:b8:29:e7:cd:a9:1f:
34:2e:a5:6e:2b:64:bf:ca:9a:be:44:95:21:fb:38:6e:77:d7:
84:33:af:1c:1a:19:6b:64:c3:0f:cd:25:e5:73:9f:db:70:95:
4f:72:a0:8b:02:35:56:9c:53:d1:ad:d0:90:19:54:89:04:8e:
8e:74:9b:e3:ac:69:59:51:9b:d3:03:42:5b:aa:b6:1e:55:e9:
d1:4e:e1:e6:6b:e1:57:f6:89:d7:f3:8f:17:6f:7b:1e:7c:74:
df:f2:c3:7e:e6:25:38:fd:0b:58:b4:a2:4e:21:62:47:2e:4f:
29:e2:7c:fa:eb:11:0b:13:a2:68:a5:5b:80:ce:94:b5:9c:f7:
68:fb:66:25:a8:97:80:e6:34:86:75:bd:c2:65:ef:9c:0e:05:
6a:ba:fe:4d:3d:c1:90:f8:90:a3:eb:71:f0:a2:a4:19:8e:08:
1f:1b:e6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:29:15 2026 by rpki-client