Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa
File: ACE4FD2C6D1711F085288D45C4F9AE02.roa (raw, json)
Hash identifier: GS1ZWCrOmI/wzMrtSy23rOps4nyG5A3UiWlzO5POe50=
Subject key identifier: C5:A4:E0:38:B7:9F:E7:77:18:72:D5:8A:B1:12:ED:6E:75:F1:AB:25
Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Certificate serial: 0C66
Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa
Signing time: Fri 12 Jun 2026 19:22:16 +0000
ROA not before: Fri 12 Jun 2026 19:22:16 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 49.124.160.0/19 maxlen: 19
49.124.195.0/24 maxlen: 24
49.124.203.0/24 maxlen: 24
49.124.211.0/24 maxlen: 24
49.124.214.0/24 maxlen: 24
49.125.128.0/20 maxlen: 20
49.125.160.0/19 maxlen: 19
115.164.0.0/24 maxlen: 24
115.164.2.0/24 maxlen: 24
115.164.4.0/24 maxlen: 24
115.164.5.0/24 maxlen: 24
115.164.14.0/24 maxlen: 24
115.164.16.0/24 maxlen: 24
115.164.18.0/24 maxlen: 24
115.164.21.0/24 maxlen: 24
115.164.33.0/24 maxlen: 24
115.164.40.0/21 maxlen: 21
115.164.48.0/20 maxlen: 20
115.164.64.0/24 maxlen: 24
115.164.72.0/21 maxlen: 21
115.164.80.0/20 maxlen: 20
115.164.110.0/24 maxlen: 24
115.164.112.0/24 maxlen: 24
115.164.113.0/24 maxlen: 24
115.164.119.0/24 maxlen: 24
115.164.128.0/24 maxlen: 24
115.164.130.0/24 maxlen: 24
115.164.132.0/24 maxlen: 24
115.164.142.0/24 maxlen: 24
115.164.146.0/24 maxlen: 24
115.164.161.0/24 maxlen: 24
115.164.168.0/21 maxlen: 21
115.164.176.0/20 maxlen: 20
115.164.200.0/21 maxlen: 21
115.164.208.0/20 maxlen: 20
115.164.240.0/24 maxlen: 24
115.164.247.0/24 maxlen: 24
182.62.8.0/24 maxlen: 24
182.62.16.0/20 maxlen: 20
182.62.32.0/20 maxlen: 20
182.62.48.0/20 maxlen: 20
182.62.64.0/20 maxlen: 20
182.62.144.0/20 maxlen: 20
182.62.160.0/20 maxlen: 20
182.62.176.0/20 maxlen: 20
182.62.192.0/20 maxlen: 20
182.62.210.0/24 maxlen: 24
182.62.224.0/20 maxlen: 20
182.62.240.0/20 maxlen: 20
182.63.7.0/24 maxlen: 24
182.63.32.0/20 maxlen: 20
182.63.40.0/21 maxlen: 21
182.63.48.0/20 maxlen: 20
182.63.56.0/21 maxlen: 21
182.63.71.0/24 maxlen: 24
182.63.96.0/20 maxlen: 20
182.63.104.0/21 maxlen: 21
182.63.112.0/20 maxlen: 20
182.63.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3174 (0xc66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Validity
Not Before: Jun 12 19:22:16 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2c5c68-af35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:1a:54:ad:23:d3:6e:2e:44:8f:95:7b:16:
97:fd:89:16:8f:b6:41:02:9c:b3:22:46:fd:6c:cf:
34:c9:18:77:21:00:0a:b6:24:0b:f2:48:13:90:ca:
76:6e:e5:58:16:f7:09:40:e8:a1:b2:12:37:65:b1:
ee:8a:d3:29:dc:17:38:4d:a7:b8:8f:54:17:a8:20:
92:49:8e:ff:85:f6:19:88:25:5c:64:7b:e7:81:85:
ef:a1:74:5e:80:9d:d6:eb:85:19:ab:2d:bf:71:b4:
a2:7b:5d:3d:95:a8:8b:94:49:0e:eb:bf:b3:bc:f2:
65:43:13:5a:da:43:1d:5c:1c:27:05:8c:f4:d7:be:
ce:f8:bc:37:f3:db:11:ae:6b:2b:5a:ec:42:d8:93:
55:2c:cd:1b:ce:ef:26:d2:30:6c:bf:08:c6:46:7c:
31:a0:00:ac:69:0b:61:c7:45:58:fa:46:3a:66:e0:
6f:36:cf:8d:b0:a1:e6:98:30:22:e4:99:9a:b7:8f:
ab:03:03:83:2c:c5:e0:72:c7:fa:f4:27:47:1b:ef:
52:4c:3d:84:d8:cd:ee:fa:3d:aa:1f:39:31:f3:16:
1e:b2:0d:fa:e2:a1:37:5f:e5:3e:4b:d2:81:c9:d7:
4a:16:bf:e0:ec:fd:41:a6:1a:86:30:e4:7c:6b:6c:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A4:E0:38:B7:9F:E7:77:18:72:D5:8A:B1:12:ED:6E:75:F1:AB:25
X509v3 Authority Key Identifier:
keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.124.160.0/19
49.124.195.0/24
49.124.203.0/24
49.124.211.0/24
49.124.214.0/24
49.125.128.0/20
49.125.160.0/19
115.164.0.0/24
115.164.2.0/24
115.164.4.0/23
115.164.14.0/24
115.164.16.0/24
115.164.18.0/24
115.164.21.0/24
115.164.33.0/24
115.164.40.0-115.164.64.255
115.164.72.0-115.164.95.255
115.164.110.0/24
115.164.112.0/23
115.164.119.0/24
115.164.128.0/24
115.164.130.0/24
115.164.132.0/24
115.164.142.0/24
115.164.146.0/24
115.164.161.0/24
115.164.168.0-115.164.191.255
115.164.200.0-115.164.223.255
115.164.240.0/24
115.164.247.0/24
182.62.8.0/24
182.62.16.0-182.62.79.255
182.62.144.0-182.62.207.255
182.62.210.0/24
182.62.224.0/19
182.63.7.0/24
182.63.32.0/19
182.63.71.0/24
182.63.96.0/19
Signature Algorithm: sha256WithRSAEncryption
22:af:bf:eb:44:89:65:66:02:83:08:4e:33:38:83:ff:79:9a:
5b:2d:8e:27:46:96:f5:d4:5a:c5:10:de:05:d4:98:e8:2b:27:
b8:f9:85:0d:b3:5b:1b:2a:7e:77:50:4a:18:09:12:04:94:84:
d5:aa:5d:91:b9:1c:7b:89:90:2c:b6:0c:4d:12:c0:33:20:25:
f8:f5:88:d7:09:b8:15:83:b6:84:db:8d:18:8e:86:fd:01:01:
d5:c9:10:60:60:c4:2d:41:80:9b:b1:d7:3c:5d:81:c8:a5:a0:
e2:75:f0:66:49:40:c9:82:35:5f:e7:71:8d:0e:2b:38:53:60:
06:8b:9a:1a:01:fc:81:cc:25:62:42:6c:ec:11:91:22:79:53:
a0:28:de:d8:f1:ab:e8:da:ad:c0:aa:70:6b:eb:ea:ec:35:2f:
54:3f:c5:51:b2:53:0b:13:ad:7b:97:13:ff:8e:b5:73:19:b4:
1e:89:39:05:2a:3d:ca:13:b4:b0:c9:46:25:53:55:2a:91:61:
15:1d:fa:d1:da:13:ac:3f:a9:6b:33:a8:e2:44:cd:27:da:38:
73:61:db:09:ac:80:d9:33:58:77:b8:ae:1a:55:2b:61:49:c3:
60:a9:53:f0:47:2e:48:29:bd:9d:1a:48:f5:74:ee:10:b0:9a:
e9:81:87:ec
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC
RkJBREE1N0UwHhcNMjYwNjEyMTkyMjE2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJjNWM2OC1hZjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoVoaVK0j024uRI+VexaX/YkWj7ZBApyzIkb9bM80yRh3IQAKtiQL8kgTkMp2
buVYFvcJQOihshI3ZbHuitMp3Bc4Tae4j1QXqCCSSY7/hfYZiCVcZHvngYXvoXRe
gJ3W64UZqy2/cbSie109laiLlEkO67+zvPJlQxNa2kMdXBwnBYz0177O+Lw389sR
rmsrWuxC2JNVLM0bzu8m0jBsvwjGRnwxoACsaQthx0VY+kY6ZuBvNs+NsKHmmDAi
5Jmat4+rAwODLMXgcsf69CdHG+9STD2E2M3u+j2qHzkx8xYesg364qE3X+U+S9KB
yddKFr/g7P1BphqGMOR8a2woAQIDAQABo4IDfjCCA3owHQYDVR0OBBYEFMWk4Di3
n+d3GHLVirES7W518aslMB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1
REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUE3ODYvQjBENzIzRUUzNURBMTFFQUFCODg0ODRBQzRGOUFFMDIvQUNFNEZEMkM2
RDE3MTFGMDg1Mjg4RDQ1QzRGOUFFMDIucm9hMIIBOwYIKwYBBQUHAQcBAf8EggEq
MIIBJjCCASIEAgABMIIBGgMEBTF8oAMEADF8wwMEADF8ywMEADF80wMEADF81gME
BDF9gAMEBTF9oAMEAHOkAAMEAHOkAgMEAXOkBAMEAHOkDgMEAHOkEAMEAHOkEgME
AHOkFQMEAHOkITAMAwQDc6QoAwQAc6RAMAwDBANzpEgDBAVzpEADBABzpG4DBAFz
pHADBABzpHcDBABzpIADBABzpIIDBABzpIQDBABzpI4DBABzpJIDBABzpKEwDAME
A3OkqAMEBnOkgDAMAwQDc6TIAwQFc6TAAwQAc6TwAwQAc6T3AwQAtj4IMAwDBAS2
PhADBAS2PkAwDAMEBLY+kAMEBLY+wAMEALY+0gMEBbY+4AMEALY/BwMEBbY/IAME
ALY/RwMEBbY/YDANBgkqhkiG9w0BAQsFAAOCAQEAIq+/60SJZWYCgwhOMziD/3ma
Wy2OJ0aW9dRaxRDeBdSY6CsnuPmFDbNbGyp+d1BKGAkSBJSE1apdkbkce4mQLLYM
TRLAMyAl+PWI1wm4FYO2hNuNGI6G/QEB1ckQYGDELUGAm7HXPF2ByKWg4nXwZklA
yYI1X+dxjQ4rOFNgBouaGgH8gcwlYkJs7BGRInlToCje2PGr6NqtwKpwa+vq7DUv
VD/FUbJTCxOte5cT/461cxm0Hok5BSo9yhO0sMlGJVNVKpFhFR360doTrD+pazOo
4kTNJ9o4c2HbCayA2TNYd7iuGlUrYUnDYKlT8EcuSCm9nRpI9XTuELCa6YGH7A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:05:02 2026 by rpki-client