Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/0FD0ED72DEDF11F085D204E3526F56BC.roa
File: 0FD0ED72DEDF11F085D204E3526F56BC.roa (raw, json)
Hash identifier: pTLqg59yg6AHQtWauJEh8VBOaMqkkf2a1JioyqursTM=
Subject key identifier: 30:4B:DC:04:FA:E4:32:CB:A8:5B:F1:93:59:3D:96:87:7C:B4:8C:3D
Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8
Certificate serial: 0A50
Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/0FD0ED72DEDF11F085D204E3526F56BC.roa
Signing time: Sat 02 May 2026 20:25:23 +0000
ROA not before: Sat 02 May 2026 20:25:23 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135391
IP address blocks: 43.224.64.0/22 maxlen: 24
43.230.88.0/22 maxlen: 24
45.253.246.0/23 maxlen: 24
45.255.126.0/24 maxlen: 24
45.255.127.0/24 maxlen: 24
45.255.132.0/22 maxlen: 24
61.29.240.0/22 maxlen: 24
61.29.248.0/24 maxlen: 24
61.29.249.0/24 maxlen: 24
61.29.250.0/23 maxlen: 24
103.43.84.0/22 maxlen: 23
103.43.84.0/23 maxlen: 24
103.43.86.0/24 maxlen: 24
103.49.132.0/22 maxlen: 24
103.65.36.0/24 maxlen: 24
103.65.40.0/22 maxlen: 24
103.98.8.0/22 maxlen: 24
103.211.230.0/23 maxlen: 24
103.216.100.0/22 maxlen: 23
103.216.100.0/24 maxlen: 24
103.216.102.0/23 maxlen: 24
146.196.76.0/23 maxlen: 24
157.119.232.0/22 maxlen: 24
2405:fd80:1000::/40 maxlen: 40
2405:fd80:1000::/48 maxlen: 48
2405:fd80:1003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl
rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2640 (0xa50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8
Validity
Not Before: May 2 20:25:23 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f65db3-d239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:73:ea:97:c2:ec:fe:93:55:ba:e6:51:d1:
16:fe:d4:a0:e4:69:06:cc:b3:a5:b0:55:2b:a0:11:
1c:56:c8:67:6c:26:11:70:a3:b1:ae:57:89:8b:5e:
ac:c0:b2:46:70:0d:19:6b:6c:2a:f7:d2:17:cb:f1:
b1:e3:82:a5:40:26:5c:e2:ed:cb:4b:9f:d3:ee:03:
67:3d:ce:49:73:92:94:83:10:5a:cb:be:0f:87:01:
23:a5:3d:82:6c:0d:fd:17:48:93:41:ef:c4:da:5a:
a1:c8:13:53:7b:41:9e:41:16:80:29:80:28:f5:5a:
cf:53:71:38:03:17:ad:1f:19:85:f7:4b:79:a4:1e:
18:4a:4d:28:a3:27:70:26:bd:0c:f4:5e:c2:35:2d:
d7:d0:b1:c4:a7:62:80:8c:15:ac:b0:cc:42:58:a1:
f9:c5:22:5a:46:0c:fd:e1:9f:a9:8e:01:02:58:dc:
47:1a:5b:0d:af:69:ff:40:29:e9:f6:b1:cb:b4:8c:
0f:5f:6c:01:20:76:3d:c9:a2:d4:bd:d7:b9:40:ca:
93:f5:3c:22:1c:59:79:91:0d:c8:d4:b5:a4:df:26:
be:b6:03:d8:49:a2:fe:c0:f7:28:7c:8a:70:d7:94:
37:e0:0c:90:a7:20:eb:23:8b:d8:57:e2:53:ea:82:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4B:DC:04:FA:E4:32:CB:A8:5B:F1:93:59:3D:96:87:7C:B4:8C:3D
X509v3 Authority Key Identifier:
keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/0FD0ED72DEDF11F085D204E3526F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.224.64.0/22
43.230.88.0/22
45.253.246.0/23
45.255.126.0/23
45.255.132.0/22
61.29.240.0/22
61.29.248.0/22
103.43.84.0/22
103.49.132.0/22
103.65.36.0/24
103.65.40.0/22
103.98.8.0/22
103.211.230.0/23
103.216.100.0/22
146.196.76.0/23
157.119.232.0/22
IPv6:
2405:fd80:1000::/40
Signature Algorithm: sha256WithRSAEncryption
91:66:f9:98:4c:50:5b:90:e5:10:0a:31:6d:b4:a7:af:cf:e6:
ed:a2:4c:9b:24:36:f2:93:ff:eb:5d:bb:0f:09:ae:f9:e8:07:
75:e2:28:4d:2f:a7:24:af:5a:41:c7:b6:17:f9:ec:b9:0e:ee:
95:58:19:24:e2:43:45:f9:31:52:dd:fb:fe:7d:44:c8:c6:5b:
c8:73:a4:fd:a2:82:09:79:39:31:0e:a2:59:ee:ef:51:f8:69:
a1:78:5b:65:cb:dc:af:35:5c:4a:cc:b5:c2:93:27:ca:dc:b8:
ba:a0:ab:c3:96:93:09:04:d7:54:d7:4a:ca:01:84:56:c0:26:
66:44:19:72:01:2b:89:11:6f:6a:7f:c3:da:73:04:14:e5:5a:
cb:49:f4:20:ce:56:08:e9:76:84:56:f9:c0:60:65:bc:c7:c5:
c4:d6:86:f3:30:45:1d:91:87:a3:74:eb:2a:61:87:4d:e7:c5:
72:bc:7a:be:f4:b6:c7:78:9d:69:c0:df:55:19:34:70:d7:92:
54:99:cc:bf:9c:3d:c9:b5:c5:9d:df:9e:ed:0c:e2:90:99:22:
bc:1f:45:a7:10:d7:77:19:b7:9d:cf:b8:35:05:7a:5a:fb:19:
a7:28:18:da:44:a7:87:65:4a:32:79:ab:ef:39:48:97:72:71:
d3:72:2a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:12:51 2026 by rpki-client