Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/75CF2F9A873011F1B6B4C8A97AEE528E.roa
File: 75CF2F9A873011F1B6B4C8A97AEE528E.roa (raw, json)
Hash identifier: mEYn2nIRyTCP8ZVcA/82XOrMyUlLvHd+g8HTmkjqqZU=
Subject key identifier: A7:9F:9F:42:0F:24:47:C3:CD:93:3E:0B:0F:41:F6:0B:2C:A9:F8:15
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 2890
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/75CF2F9A873011F1B6B4C8A97AEE528E.roa
Signing time: Fri 24 Jul 2026 07:22:43 +0000
ROA not before: Fri 24 Jul 2026 07:22:43 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 23944
IP address blocks: 45.127.164.0/22 maxlen: 22
61.9.36.0/22 maxlen: 22
61.9.36.0/24 maxlen: 24
61.9.37.0/24 maxlen: 24
61.9.38.0/24 maxlen: 24
61.9.39.0/24 maxlen: 24
61.9.40.0/22 maxlen: 22
61.9.40.0/24 maxlen: 24
61.9.41.0/24 maxlen: 24
61.9.42.0/24 maxlen: 24
61.9.43.0/24 maxlen: 24
61.9.44.0/22 maxlen: 22
61.9.44.0/24 maxlen: 24
61.9.45.0/24 maxlen: 24
61.9.46.0/24 maxlen: 24
61.9.47.0/24 maxlen: 24
61.9.60.0/22 maxlen: 22
61.9.60.0/24 maxlen: 24
61.9.62.0/23 maxlen: 24
61.9.100.0/22 maxlen: 22
61.9.100.0/24 maxlen: 24
61.9.101.0/24 maxlen: 24
61.9.102.0/24 maxlen: 24
61.9.103.0/24 maxlen: 24
61.9.104.0/22 maxlen: 22
61.9.104.0/24 maxlen: 24
61.9.105.0/24 maxlen: 24
61.9.106.0/24 maxlen: 24
61.9.107.0/24 maxlen: 24
61.9.108.0/22 maxlen: 22
61.9.108.0/24 maxlen: 24
61.9.109.0/24 maxlen: 24
61.9.110.0/24 maxlen: 24
61.9.111.0/24 maxlen: 24
61.9.112.0/22 maxlen: 22
61.9.112.0/24 maxlen: 24
61.9.113.0/24 maxlen: 24
61.9.114.0/24 maxlen: 24
61.9.115.0/24 maxlen: 24
61.9.116.0/22 maxlen: 22
61.9.116.0/24 maxlen: 24
61.9.117.0/24 maxlen: 24
61.9.118.0/24 maxlen: 24
61.9.119.0/24 maxlen: 24
61.9.120.0/22 maxlen: 22
61.9.120.0/24 maxlen: 24
61.9.121.0/24 maxlen: 24
61.9.122.0/24 maxlen: 24
61.9.123.0/24 maxlen: 24
61.9.124.0/22 maxlen: 22
61.9.124.0/24 maxlen: 24
61.9.125.0/24 maxlen: 24
61.9.126.0/24 maxlen: 24
61.9.127.0/24 maxlen: 24
103.196.104.0/22 maxlen: 22
111.68.32.0/19 maxlen: 24
114.108.192.0/18 maxlen: 24
124.158.48.0/20 maxlen: 20
124.158.48.0/22 maxlen: 22
124.158.52.0/22 maxlen: 22
124.158.56.0/22 maxlen: 22
124.158.56.0/24 maxlen: 24
124.158.57.0/24 maxlen: 24
124.158.60.0/22 maxlen: 22
182.18.192.0/18 maxlen: 24
202.128.48.0/20 maxlen: 20
202.128.48.0/22 maxlen: 22
202.128.48.0/24 maxlen: 24
202.128.49.0/24 maxlen: 24
202.128.50.0/23 maxlen: 24
202.128.52.0/22 maxlen: 22
202.128.52.0/24 maxlen: 24
202.128.53.0/24 maxlen: 24
202.128.54.0/24 maxlen: 24
202.128.55.0/24 maxlen: 24
202.128.56.0/23 maxlen: 24
202.128.60.0/22 maxlen: 22
202.128.60.0/24 maxlen: 24
202.128.61.0/24 maxlen: 24
202.128.62.0/24 maxlen: 24
202.128.63.0/24 maxlen: 24
2404:3c00:1000::/36 maxlen: 36
2404:3c00:2000::/36 maxlen: 44
2404:3c00:3000::/36 maxlen: 44
2404:3c00:4000::/36 maxlen: 44
2404:3c00:5000::/36 maxlen: 44
2404:3c00:6000::/36 maxlen: 44
2404:3c00:7000::/36 maxlen: 44
2404:3c00:8000::/36 maxlen: 44
2404:3c00:9000::/36 maxlen: 44
2404:3c00:a000::/36 maxlen: 44
2404:3c00:b000::/36 maxlen: 44
2404:3c00:c000::/36 maxlen: 44
2404:3c00:d000::/36 maxlen: 44
2404:3c00:e000::/36 maxlen: 44
2404:3c00:f000::/36 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 07:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10384 (0x2890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: Jul 24 07:22:43 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a6312c3-08e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:53:50:74:4c:46:9b:f7:7c:1e:5b:43:1f:
53:83:1e:58:07:f9:b3:42:70:77:fd:52:14:db:86:
de:61:2b:3d:47:33:ec:a4:00:a3:a5:06:fe:44:df:
24:01:d3:cc:5c:f6:14:ef:8f:06:a1:26:5e:70:8f:
f6:24:29:7b:c3:43:21:48:4b:6a:8d:2c:80:3a:2c:
8b:ed:45:67:91:cc:b6:bb:a9:df:54:6c:17:de:07:
96:67:42:e4:10:9a:f7:18:32:30:ab:e7:b5:5e:0c:
2b:5e:5b:98:5d:e7:24:96:0f:88:f6:ef:e4:ec:2c:
99:89:18:cd:8e:8e:45:32:9d:08:94:a3:91:9d:9e:
21:94:cb:1c:cf:21:b9:23:80:8e:02:e6:82:01:f0:
08:93:a3:18:8d:df:2f:c4:f1:39:86:f6:e8:95:68:
0a:42:c6:e2:0c:cf:53:52:14:62:1d:c5:09:10:74:
f1:79:5d:b2:8e:bf:35:66:36:90:fe:3a:37:3d:25:
2a:55:de:de:61:83:8a:2a:87:8e:68:89:ab:77:61:
d6:61:78:9a:dc:d3:fa:6a:2a:f4:08:d1:53:a6:d6:
53:dd:9b:5f:0e:6a:87:d0:c1:dd:7e:4a:b8:59:4a:
36:cb:29:3f:5e:27:a7:4a:75:43:b7:34:98:c7:e9:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9F:9F:42:0F:24:47:C3:CD:93:3E:0B:0F:41:F6:0B:2C:A9:F8:15
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/75CF2F9A873011F1B6B4C8A97AEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
45.127.164.0/22
61.9.36.0-61.9.47.255
61.9.60.0/22
61.9.100.0-61.9.127.255
103.196.104.0/22
111.68.32.0/19
114.108.192.0/18
124.158.48.0/20
182.18.192.0/18
202.128.48.0/20
IPv6:
2404:3c00:1000::-2404:3c00:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:a1:35:54:95:d6:2e:8a:47:fa:a7:79:49:50:9f:36:a6:74:
de:c1:24:74:9c:3f:5b:eb:06:ed:c1:fd:db:72:03:55:12:79:
14:28:f0:0d:31:aa:77:7f:0d:4c:ec:71:0b:d8:f9:3f:51:5e:
7c:9c:22:ad:4d:75:4f:91:2a:ad:f0:86:6c:66:98:83:ee:ec:
39:85:59:73:30:01:ba:13:25:02:e7:4d:33:cd:44:81:a8:0a:
2d:50:2e:0a:5b:d1:f3:4f:14:a1:8a:0d:8a:ec:7c:b6:83:53:
21:13:04:73:7d:0d:ad:ea:f7:6b:48:35:95:a2:74:cc:7a:13:
41:72:cf:1c:a6:53:03:60:e8:b0:6a:06:ac:db:46:b7:1a:b1:
3b:35:4d:06:98:de:bb:ca:8b:db:e2:42:94:76:8b:f7:bf:b6:
b3:bd:1a:04:76:75:a4:69:c2:da:dc:c2:5c:0f:a2:15:42:cd:
ee:46:26:a2:43:ca:5a:fe:a0:55:8c:e1:6a:95:8c:d9:a9:71:
76:bf:e9:aa:5c:fc:b8:96:eb:ab:9d:93:d7:4d:02:22:3c:92:
22:1e:b2:51:8d:45:8e:c2:b2:38:ec:95:5a:c1:99:c3:ec:8b:
fa:fd:0a:c3:63:1d:00:9c:9b:d2:87:d0:3d:2b:73:89:90:f1:
3f:19:26:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:51 2026 by rpki-client