Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/93840DE204E611ED89D3B27BC4F9AE02.roa
File: 93840DE204E611ED89D3B27BC4F9AE02.roa (raw, json)
Hash identifier: XeHkER619zIFoX+u6eX7dRCL1/8jXZkWE05+uf+I4wE=
Subject key identifier: 5B:FD:E5:F6:92:5F:86:19:56:56:EF:5F:7E:F6:52:7D:75:9F:CA:50
Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial: 0CF0
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/93840DE204E611ED89D3B27BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:40:56 +0000
ROA not before: Thu 29 May 2025 11:25:17 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 55492
IP address blocks: 27.131.12.0/22 maxlen: 22
27.131.12.0/24 maxlen: 24
27.131.13.0/24 maxlen: 24
27.131.14.0/24 maxlen: 24
27.131.15.0/24 maxlen: 24
45.127.244.0/22 maxlen: 22
45.127.244.0/24 maxlen: 24
45.127.245.0/24 maxlen: 24
45.127.246.0/24 maxlen: 24
45.127.247.0/24 maxlen: 24
103.196.232.0/22 maxlen: 22
103.196.232.0/24 maxlen: 24
103.196.233.0/24 maxlen: 24
103.196.234.0/23 maxlen: 23
103.196.234.0/24 maxlen: 24
103.196.235.0/24 maxlen: 24
2401:c5c0::/35 maxlen: 35
2401:c5c0::/48 maxlen: 48
2401:c5c0:1::/48 maxlen: 48
2401:c5c0:2::/48 maxlen: 48
2401:c5c0:3::/48 maxlen: 48
2401:c5c0:4::/48 maxlen: 48
2401:c5c0:5::/48 maxlen: 48
2401:c5c0:6::/48 maxlen: 48
2401:c5c0:7::/48 maxlen: 48
2401:c5c0:d::/48 maxlen: 48
2401:c5c0:11::/48 maxlen: 48
2401:c5c0:12::/48 maxlen: 48
2401:c5c0:13::/48 maxlen: 48
2401:c5c0:14::/48 maxlen: 48
2401:c5c0:15::/48 maxlen: 48
2401:c5c0:16::/48 maxlen: 48
2401:c5c0:50::/48 maxlen: 48
2401:c5c0:60::/48 maxlen: 48
2401:c5c0:d1::/48 maxlen: 48
2401:c5c0:d2::/48 maxlen: 48
2401:c5c0:100::/48 maxlen: 48
2401:c5c0:200::/48 maxlen: 48
2401:c5c0:400::/42 maxlen: 42
2401:c5c0:400::/48 maxlen: 48
2401:c5c0:440::/42 maxlen: 42
2401:c5c0:440::/48 maxlen: 48
2401:c5c0:dfa::/48 maxlen: 48
2401:c5c0:dfb::/48 maxlen: 48
2401:c5c0:dfc::/48 maxlen: 48
2401:c5c0:dfd::/48 maxlen: 48
2401:c5c0:dfe::/48 maxlen: 48
2401:c5c0:3000::/36 maxlen: 36
2401:c5c0:4000::/34 maxlen: 34
2401:c5c0:8000::/34 maxlen: 34
2401:c5c0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Validity
Not Before: May 29 11:25:17 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a425c8-860d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:38:24:98:43:79:45:e1:b3:df:bc:87:31:7d:
7e:65:d6:b5:a5:34:8b:9f:fe:b0:25:4f:fc:a6:32:
2c:3a:9f:69:f1:e3:56:d0:99:e8:e6:25:91:11:7a:
ee:ce:a4:72:59:c3:c8:e3:ee:83:de:a0:0f:20:d3:
ac:95:b0:32:a6:f3:b7:fa:34:54:eb:88:bf:0b:5d:
e8:a6:d6:25:6f:ef:fb:55:9e:a2:74:89:ce:d8:af:
fd:3d:03:7b:a4:7b:06:84:62:bf:68:3c:43:96:97:
32:64:d4:6a:84:e3:ef:ed:05:35:30:9a:d5:55:6d:
93:99:ad:91:b0:35:b6:30:46:0b:bd:6b:22:68:6a:
07:a8:e2:59:28:17:b3:f3:fe:4e:4a:be:2c:3e:f1:
dd:a6:7f:63:40:38:b3:73:ad:a6:cc:5c:89:28:cc:
c0:3c:8c:d2:93:5c:a9:43:12:fd:e4:d2:a6:5d:6f:
27:42:da:fb:b9:3f:9b:17:7d:e1:32:89:11:6f:9f:
fe:09:67:7f:66:69:ea:61:f4:c1:d4:e4:2f:62:e0:
25:68:a2:22:e7:57:dd:81:e2:d5:18:5e:e2:be:38:
b8:00:24:ae:0d:da:f5:a7:d2:4c:2f:c5:d0:2a:17:
66:6a:ef:25:52:47:aa:cc:36:a3:e0:7a:f5:4e:6e:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FD:E5:F6:92:5F:86:19:56:56:EF:5F:7E:F6:52:7D:75:9F:CA:50
X509v3 Authority Key Identifier:
keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/93840DE204E611ED89D3B27BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.12.0/22
45.127.244.0/22
103.196.232.0/22
IPv6:
2401:c5c0::/35
2401:c5c0:3000::-2401:c5c0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:85:8e:71:2d:5d:15:41:5f:87:36:b7:3e:76:cc:f5:c8:67:
26:23:6f:6e:77:6f:1e:fd:9a:4a:cb:f1:f3:e0:95:8a:b9:75:
ac:7d:17:fb:08:24:77:2b:b1:9a:ee:71:a2:b4:50:7a:6c:89:
35:0d:0a:9c:88:e0:f1:9f:09:5f:78:69:c2:3d:64:8f:db:ce:
ca:dc:d9:c2:9e:ee:a1:2a:5b:ef:5b:95:a8:86:51:0f:ff:e8:
76:7e:f3:f9:25:35:fd:64:6c:ae:5b:c2:a6:0f:d1:e3:3c:8c:
a0:d0:85:96:75:7f:c7:b7:08:5a:97:10:0d:43:ca:f7:2a:12:
f8:63:cd:4c:35:43:3a:6e:c3:91:70:93:08:fb:7b:04:60:f2:
71:42:4d:90:48:03:5a:43:0b:2a:20:4e:3f:33:2b:b6:67:e9:
92:08:24:44:15:6e:49:9d:76:2f:6d:37:0e:aa:96:ea:94:70:
4a:cb:35:31:ee:86:12:0e:11:dd:48:5c:1f:87:85:6d:42:1e:
b1:df:6c:e4:59:b8:da:c3:16:69:d6:bc:c0:b6:04:95:a5:0b:
5d:c3:64:af:dd:73:1b:fd:b2:c4:c0:92:81:6d:27:de:17:7e:
26:30:df:b4:fd:04:b8:ef:e8:27:d5:d2:f4:37:96:b7:d2:e1:
58:c9:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:47 2026 by rpki-client