Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/D8B92776A16A11EAA517B11EC4F9AE02.roa
File: D8B92776A16A11EAA517B11EC4F9AE02.roa (raw, json)
Hash identifier: rryLB0c3XAkpHMR5QUj9LWqBdvJxU0nRbgd/uoJ3uaI=
Subject key identifier: D7:79:17:6E:1B:C8:60:4B:CC:40:72:E6:C8:31:78:0A:8C:D8:5C:E2
Certificate issuer: /CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2
Certificate serial: 1B42
Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/D8B92776A16A11EAA517B11EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:38:45 +0000
ROA not before: Wed 22 Oct 2025 16:02:51 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 24499
IP address blocks: 37.111.128.0/18 maxlen: 18
37.111.128.0/21 maxlen: 21
37.111.128.0/24 maxlen: 24
37.111.129.0/24 maxlen: 24
37.111.130.0/24 maxlen: 24
37.111.131.0/24 maxlen: 24
37.111.132.0/24 maxlen: 24
37.111.133.0/24 maxlen: 24
37.111.134.0/24 maxlen: 24
37.111.135.0/24 maxlen: 24
37.111.136.0/21 maxlen: 21
37.111.136.0/24 maxlen: 24
37.111.137.0/24 maxlen: 24
37.111.138.0/24 maxlen: 24
37.111.139.0/24 maxlen: 24
37.111.140.0/24 maxlen: 24
37.111.141.0/24 maxlen: 24
37.111.142.0/24 maxlen: 24
37.111.143.0/24 maxlen: 24
37.111.144.0/21 maxlen: 21
37.111.144.0/24 maxlen: 24
37.111.145.0/24 maxlen: 24
37.111.146.0/24 maxlen: 24
37.111.147.0/24 maxlen: 24
37.111.148.0/24 maxlen: 24
37.111.149.0/24 maxlen: 24
37.111.150.0/24 maxlen: 24
37.111.151.0/24 maxlen: 24
37.111.152.0/21 maxlen: 21
37.111.152.0/24 maxlen: 24
37.111.153.0/24 maxlen: 24
37.111.154.0/24 maxlen: 24
37.111.155.0/24 maxlen: 24
37.111.156.0/24 maxlen: 24
37.111.157.0/24 maxlen: 24
37.111.158.0/24 maxlen: 24
37.111.159.0/24 maxlen: 24
37.111.160.0/24 maxlen: 24
37.111.161.0/24 maxlen: 24
37.111.162.0/24 maxlen: 24
37.111.163.0/24 maxlen: 24
37.111.164.0/24 maxlen: 24
37.111.165.0/24 maxlen: 24
37.111.166.0/24 maxlen: 24
37.111.167.0/24 maxlen: 24
37.111.168.0/24 maxlen: 24
37.111.169.0/24 maxlen: 24
37.111.170.0/24 maxlen: 24
37.111.171.0/24 maxlen: 24
37.111.172.0/24 maxlen: 24
37.111.173.0/24 maxlen: 24
37.111.174.0/24 maxlen: 24
37.111.175.0/24 maxlen: 24
37.111.176.0/24 maxlen: 24
37.111.177.0/24 maxlen: 24
37.111.178.0/24 maxlen: 24
37.111.179.0/24 maxlen: 24
37.111.180.0/24 maxlen: 24
37.111.181.0/24 maxlen: 24
37.111.182.0/24 maxlen: 24
37.111.183.0/24 maxlen: 24
37.111.184.0/24 maxlen: 24
37.111.185.0/24 maxlen: 24
37.111.186.0/24 maxlen: 24
37.111.187.0/24 maxlen: 24
37.111.188.0/24 maxlen: 24
37.111.189.0/24 maxlen: 24
37.111.190.0/24 maxlen: 24
37.111.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl
rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6978 (0x1b42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD28, serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2
Validity
Not Before: Oct 22 16:02:51 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a44165-e5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f7:76:78:aa:4f:67:43:80:d2:ef:35:3d:d6:
4b:6b:2c:0a:90:bb:7e:b3:05:cb:31:68:ec:a2:c6:
73:d1:7b:3b:c7:4b:fc:02:c2:f4:de:90:45:e3:15:
3a:e9:49:57:1b:2e:8f:fa:44:63:48:71:6f:b8:28:
a7:ac:fe:3f:fb:19:45:fd:f2:1b:2b:c4:d7:f5:0e:
b1:e3:d6:8f:5a:c4:23:ec:d7:d8:97:2e:87:12:d1:
50:e0:1d:26:ac:79:dc:b0:ff:06:c1:53:02:ff:36:
22:9a:9e:28:07:1f:08:e5:ff:26:e6:28:2a:49:e8:
1d:0b:17:01:03:e5:30:8c:00:a0:93:2c:9f:c2:df:
95:9f:22:83:7c:26:93:b2:83:41:f6:b2:d2:d7:0f:
45:6f:14:15:1e:ac:88:e5:f5:a0:58:91:d0:2a:02:
78:44:65:ce:05:eb:03:9a:03:44:aa:4e:5c:c0:79:
bc:90:e6:8e:5d:eb:c7:4a:34:d8:70:0c:fb:b1:16:
8b:a2:96:ab:00:1c:af:a8:1e:55:fb:b3:c0:99:f8:
e6:bb:d5:b5:02:c0:22:91:cd:28:89:8c:a9:40:79:
0e:b0:21:64:11:86:0c:f0:b0:bb:a2:bd:92:ca:3e:
74:a6:c1:a9:dc:bc:61:dd:24:6e:c4:a1:39:e3:d7:
1b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:79:17:6E:1B:C8:60:4B:CC:40:72:E6:C8:31:78:0A:8C:D8:5C:E2
X509v3 Authority Key Identifier:
keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/D8B92776A16A11EAA517B11EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
37.111.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5d:2a:89:5d:ed:fa:31:e4:83:b0:e9:ee:cd:14:7a:21:77:1c:
be:3b:ce:37:f1:5c:75:04:ce:10:35:bf:f2:7c:13:d1:3a:8b:
28:fc:7d:5d:41:4f:8e:d3:2e:bf:80:b9:7e:12:02:d2:a6:72:
e1:0b:70:9b:0c:7b:f4:cc:d1:13:0c:26:07:f6:b6:c3:cf:04:
5e:d4:68:ac:3c:ce:38:6e:9f:ae:cd:55:5d:fb:49:ee:e9:c2:
db:86:2c:e7:1c:20:c5:a3:70:9d:1b:57:1a:5a:1f:87:7a:a8:
64:98:e1:cb:a1:7a:9c:c7:f4:ec:5c:c7:34:1b:40:8c:c0:2e:
7c:97:27:af:40:6d:e7:1c:e2:37:70:99:67:94:4c:cb:6f:50:
53:c5:5a:b2:97:65:05:67:66:84:56:cd:87:b6:d7:88:d3:ec:
8e:d1:27:e3:5f:15:3e:61:c0:98:80:00:4b:7f:c5:8a:55:ef:
e0:4a:82:2e:7b:98:ba:6a:6f:dc:81:c0:7b:0c:fb:bf:64:9a:
38:66:bb:74:dc:3f:0d:a7:33:6d:9c:57:e8:2d:12:cd:89:b3:
fe:b5:9a:1f:fd:58:e8:e9:fa:54:9c:43:73:69:dd:b6:d3:01:
19:21:7c:d5:53:ac:1b:c8:0b:c7:b8:9e:1e:b6:18:50:37:aa:
9b:e6:ab:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:35 2026 by rpki-client