Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/93840DE204E611ED89D3B27BC4F9AE02.roa
File: 93840DE204E611ED89D3B27BC4F9AE02.roa (raw, json)
Hash identifier: mFvMp8zPdnLh3HE2cfPLt1XD9e+2V2rN9bXj6Bt9pgs=
Subject key identifier: 91:8A:0E:65:F7:B5:C7:2A:5D:A2:71:2E:6F:D0:54:E3:E8:AD:11:C6
Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial: 0D26
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/93840DE204E611ED89D3B27BC4F9AE02.roa
Signing time: Mon 18 May 2026 18:22:18 +0000
ROA not before: Mon 18 May 2026 18:22:18 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55492
IP address blocks: 27.131.12.0/22 maxlen: 22
27.131.12.0/24 maxlen: 24
27.131.13.0/24 maxlen: 24
27.131.14.0/24 maxlen: 24
27.131.15.0/24 maxlen: 24
45.127.244.0/22 maxlen: 22
45.127.244.0/24 maxlen: 24
45.127.245.0/24 maxlen: 24
45.127.246.0/24 maxlen: 24
45.127.247.0/24 maxlen: 24
103.196.232.0/22 maxlen: 22
103.196.232.0/24 maxlen: 24
103.196.233.0/24 maxlen: 24
103.196.234.0/23 maxlen: 23
103.196.234.0/24 maxlen: 24
103.196.235.0/24 maxlen: 24
2401:c5c0::/35 maxlen: 35
2401:c5c0::/48 maxlen: 48
2401:c5c0:1::/48 maxlen: 48
2401:c5c0:2::/48 maxlen: 48
2401:c5c0:3::/48 maxlen: 48
2401:c5c0:4::/48 maxlen: 48
2401:c5c0:5::/48 maxlen: 48
2401:c5c0:6::/48 maxlen: 48
2401:c5c0:7::/48 maxlen: 48
2401:c5c0:d::/48 maxlen: 48
2401:c5c0:11::/48 maxlen: 48
2401:c5c0:12::/48 maxlen: 48
2401:c5c0:13::/48 maxlen: 48
2401:c5c0:14::/48 maxlen: 48
2401:c5c0:15::/48 maxlen: 48
2401:c5c0:16::/48 maxlen: 48
2401:c5c0:50::/48 maxlen: 48
2401:c5c0:60::/48 maxlen: 48
2401:c5c0:d1::/48 maxlen: 48
2401:c5c0:d2::/48 maxlen: 48
2401:c5c0:d3::/48 maxlen: 48
2401:c5c0:d4::/48 maxlen: 48
2401:c5c0:d5::/48 maxlen: 48
2401:c5c0:d6::/48 maxlen: 48
2401:c5c0:100::/48 maxlen: 48
2401:c5c0:200::/48 maxlen: 48
2401:c5c0:400::/42 maxlen: 42
2401:c5c0:400::/48 maxlen: 48
2401:c5c0:440::/42 maxlen: 42
2401:c5c0:440::/48 maxlen: 48
2401:c5c0:da0::/44 maxlen: 44
2401:c5c0:dfa::/48 maxlen: 48
2401:c5c0:dfb::/48 maxlen: 48
2401:c5c0:dfc::/48 maxlen: 48
2401:c5c0:dfd::/48 maxlen: 48
2401:c5c0:dfe::/48 maxlen: 48
2401:c5c0:3000::/36 maxlen: 36
2401:c5c0:4000::/34 maxlen: 34
2401:c5c0:8000::/34 maxlen: 34
2401:c5c0:c000::/34 maxlen: 34
2401:c5c0:dfb2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3366 (0xd26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Validity
Not Before: May 18 18:22:18 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a0b58da-5fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:3f:be:23:82:ce:2d:37:75:27:d0:4f:66:
d6:ca:ed:fa:5c:f6:95:93:a8:a6:5f:a2:13:c4:3f:
3a:4c:f9:a2:9c:cc:a9:9e:10:6b:8b:98:41:a6:d2:
0d:f6:44:e8:98:89:6a:91:02:8e:41:74:73:5f:8a:
cb:84:99:06:2b:4d:fd:a5:bc:b4:21:be:9a:43:12:
88:4a:c2:a7:6d:34:91:e8:e5:1f:3a:83:1d:0d:e7:
a2:ac:d4:e1:ed:12:e1:d9:c3:01:67:7c:7b:4f:86:
d5:34:b5:5a:7c:6d:3e:a7:f4:43:72:3e:18:b6:cf:
5a:0c:73:f1:48:0f:1b:e2:c5:93:e1:9b:b2:ac:08:
44:91:4f:8e:b3:d7:b9:f3:ec:26:cc:9b:84:b6:b7:
e7:19:e8:05:73:1b:89:ce:43:4b:11:80:c8:35:80:
76:29:85:49:c2:ae:36:a3:06:1a:66:5b:7d:b7:03:
24:9a:4c:18:2f:21:8f:ef:d9:85:fb:26:37:2d:ff:
3e:c9:a6:af:3e:23:a5:18:1b:12:c8:aa:90:34:4e:
51:8b:6f:df:4e:3a:b7:70:42:43:b3:84:01:ca:44:
5d:85:34:09:23:cc:79:7e:fa:62:df:f0:87:cf:d4:
b9:f9:6b:cd:3a:dd:3a:38:75:de:f5:f1:af:a4:bf:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8A:0E:65:F7:B5:C7:2A:5D:A2:71:2E:6F:D0:54:E3:E8:AD:11:C6
X509v3 Authority Key Identifier:
keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/93840DE204E611ED89D3B27BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.12.0/22
45.127.244.0/22
103.196.232.0/22
IPv6:
2401:c5c0::/35
2401:c5c0:3000::-2401:c5c0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:1b:40:03:c2:08:50:b3:d2:07:27:af:f1:98:a8:90:c3:96:
94:25:2e:50:36:6a:0a:4f:fc:09:58:b4:b0:6f:fb:ca:ab:9a:
f4:8c:d9:74:e3:60:47:94:72:ca:d8:f7:15:f0:37:44:f4:c9:
f5:68:e8:34:3a:03:f7:a9:e5:ea:8f:4c:d1:93:62:da:7b:03:
90:3b:60:60:5a:ef:41:ae:5a:75:f4:15:d3:d7:80:f1:11:15:
f6:3b:71:1c:27:8a:aa:68:58:a9:bd:98:5f:e3:5b:c7:9b:ea:
da:83:d3:f5:9c:7c:0a:fa:d7:55:5a:8e:97:bf:fc:20:4f:9d:
1a:9f:a3:2b:5d:17:60:32:87:7d:ff:ee:8c:a0:d1:7a:dd:90:
ff:06:e4:ba:37:02:d9:f4:d2:2c:3a:50:c0:c0:6c:90:46:99:
d5:91:e7:ab:82:18:46:7d:b2:31:64:09:90:95:cb:d5:bb:22:
5a:b5:1a:09:83:96:ce:2c:82:19:11:11:9e:91:9f:38:d1:d7:
a6:c3:bb:69:61:72:05:73:58:ab:0a:52:d7:aa:2d:da:c1:25:
ea:68:62:fb:13:e8:3e:14:92:82:d4:84:b2:b2:f1:a0:a6:d6:
9d:12:ff:40:bf:70:9d:11:b0:d3:4e:6f:cb:d5:ff:c4:90:27:
c9:d5:13:31
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgICDSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy
NTNBQkQwMjYwHhcNMjYwNTE4MTgyMjE4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTBiNThkYS01ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmfE/viOCzi03dSfQT2bWyu36XPaVk6imX6ITxD86TPminMypnhBri5hBptIN
9kTomIlqkQKOQXRzX4rLhJkGK039pby0Ib6aQxKISsKnbTSR6OUfOoMdDeeirNTh
7RLh2cMBZ3x7T4bVNLVafG0+p/RDcj4Yts9aDHPxSA8b4sWT4ZuyrAhEkU+Os9e5
8+wmzJuEtrfnGegFcxuJzkNLEYDINYB2KYVJwq42owYaZlt9twMkmkwYLyGP79mF
+yY3Lf8+yaavPiOlGBsSyKqQNE5Ri2/fTjq3cEJDs4QBykRdhTQJI8x5fvpi3/CH
z9S5+WvNOt06OHXe9fGvpL9r5QIDAQABo4ICjTCCAokwHQYDVR0OBBYEFJGKDmX3
tccqXaJxLm/QVOPorRHGMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC
NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg5MjgvNERBN0JCMjAwQjVCMTFFQUEzRUJDNjUwQzRGOUFFMDIvOTM4NDBERTIw
NEU2MTFFRDg5RDNCMjdCQzRGOUFFMDIucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAY
BAIAATASAwQCG4MMAwQCLX/0AwQCZ8ToMB8EAgACMBkDBgUkAcXAADAPAwYEJAHF
wDADBQAkAcXAMA0GCSqGSIb3DQEBCwUAA4IBAQBQG0ADwghQs9IHJ6/xmKiQw5aU
JS5QNmoKT/wJWLSwb/vKq5r0jNl042BHlHLK2PcV8DdE9Mn1aOg0OgP3qeXqj0zR
k2LaewOQO2BgWu9Brlp19BXT14DxERX2O3EcJ4qqaFipvZhf41vHm+rag9P1nHwK
+tdVWo6Xv/wgT50an6MrXRdgMod9/+6MoNF63ZD/BuS6NwLZ9NIsOlDAwGyQRpnV
keerghhGfbIxZAmQlcvVuyJatRoJg5bOLIIZERGekZ840demw7tpYXIFc1irClLX
qi3awSXqaGL7E+g+FJKC1ISysvGgptadEv9Av3CdEbDTTm/L1f/EkCfJ1RMx
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:39:00 2026 by rpki-client