Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
File: 552292460F1A11E9B3F2A713C4F9AE02.roa (raw, json)
Hash identifier: 6bJMavZFRpkLHiVk166wivPVWZcYiFXj4dWo/IpNl7w=
Subject key identifier: 61:74:D6:D8:77:4C:15:25:FB:D4:5C:F0:5D:F7:CB:F3:FC:27:49:36
Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
Certificate serial: 11F5
Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:00:49 +0000
ROA not before: Tue 18 Nov 2025 17:06:20 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 56300
IP address blocks: 66.96.192.0/24 maxlen: 24
66.96.193.0/24 maxlen: 24
66.96.194.0/24 maxlen: 24
66.96.195.0/24 maxlen: 24
66.96.196.0/24 maxlen: 24
66.96.197.0/24 maxlen: 24
66.96.198.0/24 maxlen: 24
66.96.199.0/24 maxlen: 24
66.96.200.0/24 maxlen: 24
66.96.201.0/24 maxlen: 24
66.96.202.0/24 maxlen: 24
66.96.203.0/24 maxlen: 24
66.96.204.0/24 maxlen: 24
66.96.205.0/24 maxlen: 24
66.96.206.0/24 maxlen: 24
66.96.207.0/24 maxlen: 24
66.96.208.0/24 maxlen: 24
66.96.209.0/24 maxlen: 24
66.96.210.0/24 maxlen: 24
66.96.211.0/24 maxlen: 24
66.96.212.0/24 maxlen: 24
66.96.213.0/24 maxlen: 24
66.96.214.0/24 maxlen: 24
66.96.215.0/24 maxlen: 24
66.96.216.0/24 maxlen: 24
66.96.217.0/24 maxlen: 24
66.96.218.0/24 maxlen: 24
158.140.128.0/24 maxlen: 24
158.140.129.0/24 maxlen: 24
158.140.130.0/24 maxlen: 24
158.140.131.0/24 maxlen: 24
158.140.132.0/24 maxlen: 24
158.140.133.0/24 maxlen: 24
158.140.134.0/24 maxlen: 24
158.140.135.0/24 maxlen: 24
158.140.136.0/24 maxlen: 24
158.140.137.0/24 maxlen: 24
158.140.138.0/24 maxlen: 24
158.140.139.0/24 maxlen: 24
158.140.140.0/24 maxlen: 24
158.140.141.0/24 maxlen: 24
158.140.142.0/24 maxlen: 24
158.140.143.0/24 maxlen: 24
158.140.144.0/24 maxlen: 24
158.140.145.0/24 maxlen: 24
158.140.146.0/24 maxlen: 24
158.140.147.0/24 maxlen: 24
158.140.148.0/24 maxlen: 24
158.140.149.0/24 maxlen: 24
158.140.150.0/24 maxlen: 24
158.140.156.0/24 maxlen: 24
158.140.157.0/24 maxlen: 24
158.140.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl
rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4597 (0x11f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
Validity
Not Before: Nov 18 17:06:20 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a470c1-2dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:d4:e0:79:50:c2:69:20:50:39:14:e0:e6:
8b:c5:39:bd:d7:35:4a:b6:d2:2d:d9:a3:68:69:3d:
d3:69:2e:3a:10:b1:91:30:f6:8a:8c:73:2e:0f:60:
95:75:c6:f8:17:d8:e3:54:1d:f9:c3:c4:82:d6:af:
59:90:92:70:83:60:57:79:16:f4:18:39:05:34:ad:
30:60:47:cd:ee:ef:91:57:ed:0a:d8:7b:b9:0c:3d:
6d:e2:07:fb:0a:09:eb:c4:cd:ff:ca:e1:2f:74:09:
94:cb:8b:ff:1a:c7:41:96:77:22:aa:68:b0:c1:c0:
48:14:a8:25:38:3c:ea:b1:08:85:ca:13:07:6c:36:
6a:a0:28:d4:43:c7:13:8b:50:ff:7f:66:ba:34:bb:
4e:01:18:ac:f1:a5:7b:55:5e:fd:10:d5:c9:df:d7:
11:8a:89:24:c6:eb:ce:75:a5:f1:f3:9a:57:d0:b5:
f7:b8:b3:00:25:da:b2:e6:11:df:bd:d6:c3:67:df:
c2:e6:aa:f6:c2:d0:16:65:a2:56:91:3b:56:fa:f2:
cf:6a:11:b7:da:83:aa:f9:92:68:0c:66:e0:db:de:
8a:6b:e2:7c:11:08:6b:96:46:51:f4:12:8e:05:76:
34:38:d3:fe:08:32:7c:47:d6:cc:65:1c:90:85:94:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:74:D6:D8:77:4C:15:25:FB:D4:5C:F0:5D:F7:CB:F3:FC:27:49:36
X509v3 Authority Key Identifier:
keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
66.96.192.0-66.96.218.255
158.140.128.0-158.140.150.255
158.140.156.0/23
158.140.159.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c0:0b:51:59:35:b6:4e:72:8c:ce:29:3d:05:3e:08:d8:db:
72:b6:82:b8:50:b9:08:9b:53:d6:67:f6:27:36:21:b7:42:9e:
dd:bf:ec:24:04:c5:4b:e8:f8:af:43:d1:71:68:97:9d:f5:ad:
88:58:0e:91:df:07:e1:c1:3c:61:fa:31:de:62:8d:3e:60:57:
53:a0:6f:22:9d:9a:3f:37:af:b4:d5:d9:e4:7b:1d:13:9b:91:
61:47:c7:62:d2:d5:37:3d:47:03:fb:ea:f4:a5:e8:87:db:3d:
93:97:f9:d9:dd:4c:3c:8b:3c:c1:77:c5:fd:80:89:97:84:3b:
8b:c5:66:a3:42:23:95:56:57:6b:1a:b1:f0:11:28:30:d2:d0:
4d:e4:18:c1:9a:2b:ab:cc:1b:8c:d5:9c:6a:ae:0d:ca:1d:60:
2e:b5:51:11:5e:b7:f4:6a:43:0a:6b:61:31:63:48:1d:3d:e9:
5b:bc:c5:c9:39:24:50:61:22:95:39:ff:7d:86:5a:37:25:cc:
88:4d:bd:53:32:61:60:48:75:95:1f:ce:d1:8d:c6:18:5b:08:
e4:06:3e:e4:26:36:d4:0e:58:c3:5d:ee:60:b5:e9:9d:58:f3:
c6:33:59:b7:5e:d1:32:d0:37:61:2f:75:49:ac:35:16:6a:a7:
a3:47:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:03:46 2026 by rpki-client