Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/6451124A7F8011F185F61C616BA30FBC.roa
File: 6451124A7F8011F185F61C616BA30FBC.roa (raw, json)
Hash identifier: o3+ZJqky9inXgHtSxC+UnBSLFmoputjC6nKC+kOkMzY=
Subject key identifier: 95:99:BB:D6:BA:C8:95:2B:09:B1:C2:E6:36:78:05:A2:B3:92:EF:37
Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial: 0D68
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/6451124A7F8011F185F61C616BA30FBC.roa
Signing time: Thu 10 Sep 2026 05:46:56 +0000
ROA not before: Thu 10 Sep 2026 05:46:56 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55492
IP address blocks: 27.131.12.0/22 maxlen: 22
27.131.12.0/24 maxlen: 24
27.131.13.0/24 maxlen: 24
27.131.14.0/24 maxlen: 24
27.131.15.0/24 maxlen: 24
45.127.244.0/22 maxlen: 22
45.127.244.0/24 maxlen: 24
45.127.245.0/24 maxlen: 24
45.127.246.0/24 maxlen: 24
45.127.247.0/24 maxlen: 24
103.196.232.0/22 maxlen: 22
103.196.232.0/24 maxlen: 24
103.196.233.0/24 maxlen: 24
103.196.234.0/24 maxlen: 24
103.196.235.0/24 maxlen: 24
2401:c5c0::/35 maxlen: 35
2401:c5c0::/48 maxlen: 48
2401:c5c0:1::/48 maxlen: 48
2401:c5c0:2::/48 maxlen: 48
2401:c5c0:3::/48 maxlen: 48
2401:c5c0:4::/48 maxlen: 48
2401:c5c0:5::/48 maxlen: 48
2401:c5c0:6::/48 maxlen: 48
2401:c5c0:7::/48 maxlen: 48
2401:c5c0:d::/48 maxlen: 48
2401:c5c0:11::/48 maxlen: 48
2401:c5c0:12::/48 maxlen: 48
2401:c5c0:13::/48 maxlen: 48
2401:c5c0:14::/48 maxlen: 48
2401:c5c0:15::/48 maxlen: 48
2401:c5c0:16::/48 maxlen: 48
2401:c5c0:50::/48 maxlen: 48
2401:c5c0:60::/48 maxlen: 48
2401:c5c0:d0::/44 maxlen: 44
2401:c5c0:d1::/48 maxlen: 48
2401:c5c0:d2::/48 maxlen: 48
2401:c5c0:d3::/48 maxlen: 48
2401:c5c0:d4::/48 maxlen: 48
2401:c5c0:d5::/48 maxlen: 48
2401:c5c0:d6::/48 maxlen: 48
2401:c5c0:d7::/48 maxlen: 48
2401:c5c0:d8::/48 maxlen: 48
2401:c5c0:100::/48 maxlen: 48
2401:c5c0:200::/48 maxlen: 48
2401:c5c0:400::/42 maxlen: 42
2401:c5c0:400::/48 maxlen: 48
2401:c5c0:440::/42 maxlen: 42
2401:c5c0:440::/48 maxlen: 48
2401:c5c0:d00::/44 maxlen: 44
2401:c5c0:da0::/44 maxlen: 44
2401:c5c0:dfa::/48 maxlen: 48
2401:c5c0:dfb::/48 maxlen: 48
2401:c5c0:dfc::/48 maxlen: 48
2401:c5c0:dfd::/48 maxlen: 48
2401:c5c0:dfe::/48 maxlen: 48
2401:c5c0:3000::/36 maxlen: 36
2401:c5c0:4000::/34 maxlen: 34
2401:c5c0:8000::/34 maxlen: 34
2401:c5c0:c000::/34 maxlen: 34
2401:c5c0:dfb2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:15:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3432 (0xd68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Validity
Not Before: Sep 10 05:46:56 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aa2444f-3a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:d8:57:fd:9b:ff:2b:a1:7f:b9:e6:c5:fe:
2c:41:7a:93:09:ef:12:5b:b4:6a:81:ba:fc:0f:a1:
cd:7f:51:2a:51:51:46:4d:32:05:57:0c:b8:ec:84:
0d:d0:98:ce:9a:cb:50:a2:31:99:0a:c1:c1:ec:72:
17:6e:75:01:ea:d1:53:66:71:50:b3:b0:d4:30:ac:
ed:1a:81:ad:3b:b5:77:9b:cc:d3:7e:3c:b4:65:74:
e4:50:02:cf:05:a1:65:e1:8d:e8:12:85:29:2d:d1:
a1:58:d4:7e:10:c6:1f:90:dc:e0:c4:e7:53:8a:b1:
86:bb:f8:7a:1a:84:1f:7c:7e:64:4a:35:49:a0:21:
cb:d9:f9:d0:5e:ac:cb:04:6f:13:6f:83:62:31:38:
50:b0:bc:a8:c4:45:32:e1:1d:7e:ab:73:06:c7:ca:
23:c9:29:3f:98:3c:2e:d0:ac:96:18:c2:52:49:38:
46:96:f8:7c:4e:f7:d3:5b:01:37:c8:a7:37:d6:ae:
1d:0a:49:4e:7a:e7:a5:71:f8:fc:d6:eb:27:07:52:
6f:e4:52:b8:d7:7e:18:b9:d3:56:6e:a8:94:b8:30:
fa:13:de:af:7d:74:79:dd:d4:6e:30:89:fe:5c:31:
80:56:d5:87:6f:7b:8d:c0:65:b3:9b:5e:48:31:53:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:99:BB:D6:BA:C8:95:2B:09:B1:C2:E6:36:78:05:A2:B3:92:EF:37
X509v3 Authority Key Identifier:
keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/6451124A7F8011F185F61C616BA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.12.0/22
45.127.244.0/22
103.196.232.0/22
IPv6:
2401:c5c0::/35
2401:c5c0:3000::-2401:c5c0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6a:b1:28:cd:0b:7e:96:a3:57:49:20:78:2b:08:58:c1:27:81:
05:e3:34:5f:86:99:d1:a2:5d:7d:5c:c7:d7:51:b8:b8:78:63:
2c:0d:a2:08:d3:ca:fd:a6:a5:34:8c:a8:3f:f1:8c:44:e9:06:
ff:d8:3e:ff:c1:cb:fb:39:74:e8:f8:a9:ad:32:b8:f8:e8:be:
0b:76:2e:55:99:f4:42:fb:93:35:6f:6c:4d:4b:76:a8:8b:bb:
96:c1:8d:37:a7:7e:27:d4:c9:6e:5b:7f:1d:60:4c:9c:f5:85:
1b:fe:62:6d:ee:6f:b5:a4:28:94:51:4d:f3:da:a5:4a:bd:3b:
6a:05:00:0d:41:33:db:8b:69:40:05:3a:da:b1:c8:b6:f4:88:
7b:f4:9e:8f:ff:b6:17:2d:e4:16:ca:97:0b:ec:6c:4f:46:03:
4b:66:6a:ef:3a:15:c3:ca:d3:8e:01:fd:af:92:6f:76:38:fc:
b8:44:6c:5e:a6:8a:1e:5b:fc:88:27:eb:fa:00:59:d2:f6:d8:
c3:87:5d:ef:a8:db:b6:d3:f0:89:60:41:b6:e1:a6:29:90:ab:
c0:09:d1:48:65:72:0a:7e:b2:56:07:e2:99:51:53:1f:a9:d9:
a7:c2:25:4f:47:07:58:90:f5:a5:56:26:f3:15:27:3f:2d:f7:
15:1f:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:14:07 2026 by rpki-client