Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/005CDC821F1411EC85E08546C4F9AE02.roa
File: 005CDC821F1411EC85E08546C4F9AE02.roa (raw, json)
Hash identifier: yjiUEg90fnpv0QBcsW6mTbQABnoEdV6bwbUeRkmNaXI=
Subject key identifier: 6B:23:14:B5:11:9E:B2:CE:67:6A:47:BE:21:4F:1F:9F:B8:EE:8C:8F
Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial: 07D0
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/005CDC821F1411EC85E08546C4F9AE02.roa
Signing time: Wed 30 Sep 2026 22:42:56 +0000
ROA not before: Wed 30 Sep 2026 22:42:56 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 23655
IP address blocks: 151.210.128.0/17 maxlen: 17
151.210.128.0/23 maxlen: 23
151.210.130.0/23 maxlen: 23
151.210.132.0/23 maxlen: 23
151.210.134.0/23 maxlen: 23
151.210.136.0/23 maxlen: 23
151.210.138.0/23 maxlen: 23
151.210.140.0/23 maxlen: 23
151.210.142.0/23 maxlen: 23
151.210.144.0/23 maxlen: 23
151.210.146.0/23 maxlen: 23
151.210.148.0/23 maxlen: 23
151.210.150.0/23 maxlen: 23
151.210.152.0/23 maxlen: 23
151.210.154.0/23 maxlen: 23
151.210.156.0/23 maxlen: 23
151.210.158.0/23 maxlen: 23
151.210.160.0/23 maxlen: 23
151.210.162.0/23 maxlen: 23
151.210.164.0/23 maxlen: 23
151.210.166.0/23 maxlen: 23
151.210.168.0/23 maxlen: 23
151.210.170.0/23 maxlen: 23
151.210.172.0/23 maxlen: 23
151.210.174.0/23 maxlen: 23
151.210.224.0/23 maxlen: 23
151.210.226.0/23 maxlen: 23
151.210.228.0/23 maxlen: 23
151.210.230.0/23 maxlen: 23
151.210.232.0/23 maxlen: 23
151.210.234.0/23 maxlen: 23
151.210.236.0/23 maxlen: 23
151.210.238.0/23 maxlen: 23
151.210.240.0/23 maxlen: 23
151.210.242.0/23 maxlen: 23
151.210.244.0/23 maxlen: 23
151.210.246.0/23 maxlen: 23
151.210.248.0/23 maxlen: 23
151.210.250.0/23 maxlen: 23
151.210.252.0/23 maxlen: 23
151.210.254.0/23 maxlen: 23
165.84.0.0/19 maxlen: 19
165.84.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 21:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Validity
Not Before: Sep 30 22:42:56 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd906f-ff37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:27:05:ac:55:55:04:4c:02:69:92:75:48:
e7:ae:92:41:e4:34:65:df:a4:fc:95:4d:bd:8f:7c:
f7:16:22:f2:d4:c3:57:3c:30:f5:f5:65:c2:db:ef:
bd:b5:91:64:2b:70:ea:dc:59:84:6c:1c:8d:36:1d:
59:a5:30:3d:2f:f3:6e:ea:b2:0b:87:f1:b7:13:b8:
74:a4:06:d8:88:04:bf:80:07:a8:45:50:3a:a1:d8:
6a:32:4d:6c:58:51:13:89:06:d6:91:56:f4:88:74:
30:bc:fa:ac:6c:dd:22:39:72:35:b9:36:9e:44:31:
6e:a7:3f:80:0b:6b:2d:dd:34:b1:6e:36:23:c5:3a:
57:45:6b:dd:62:07:82:c5:b6:5d:f8:c3:c9:4d:19:
81:a1:d0:f1:c0:d2:df:43:16:ac:bf:9f:22:ea:05:
88:51:ce:af:2d:05:69:1f:60:5b:44:8f:71:20:24:
0c:75:68:c0:f9:b5:20:5d:f4:e5:78:4e:1d:7f:2c:
0e:1b:af:69:92:c1:93:5c:b4:97:e1:f9:f6:4f:5b:
75:38:e8:86:20:53:01:50:f5:48:b4:19:e4:bb:a7:
5c:69:aa:2c:dc:66:e3:88:71:62:60:9a:76:37:54:
0b:2b:60:1e:6e:dd:f4:aa:74:6b:98:c9:ca:e1:14:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:23:14:B5:11:9E:B2:CE:67:6A:47:BE:21:4F:1F:9F:B8:EE:8C:8F
X509v3 Authority Key Identifier:
keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/005CDC821F1411EC85E08546C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
151.210.128.0/17
165.84.0.0/19
165.84.48.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:17:eb:ef:6f:f2:67:bf:5a:1d:c4:93:a5:4c:fe:2a:5f:dc:
46:55:01:2e:55:73:9f:f9:e1:42:e9:18:9f:74:08:58:16:a4:
e0:9c:05:3a:26:44:da:db:df:be:50:81:e3:37:ab:76:5b:4e:
ee:02:f0:8d:29:93:6f:2b:6c:6b:eb:07:7d:b0:bf:a8:bb:e7:
ad:2f:b8:ce:41:39:6c:1f:fb:7f:dd:c0:5c:2a:49:33:32:f4:
fb:87:9b:02:24:9d:76:d6:b3:84:89:be:ae:52:25:1e:9a:cd:
a9:fc:c6:5b:20:45:2d:0a:5e:a1:9b:20:c2:05:60:db:3c:86:
39:d2:1a:6c:13:94:80:02:48:4c:cd:69:14:b5:a4:cc:e6:6b:
c3:a4:8f:8c:04:5b:44:1c:13:2f:b0:cd:d5:05:0d:9c:45:1e:
bd:eb:5e:f2:05:98:b7:8c:f3:bd:14:02:23:84:15:67:e5:a7:
ab:bb:cb:93:ba:de:ba:7a:98:96:1c:a2:9b:21:fa:9f:45:aa:
ba:ef:98:42:e9:50:2d:6e:f7:dc:85:74:fb:6a:db:05:f5:27:
6d:e9:c0:cd:12:94:27:50:8d:aa:89:52:3e:2c:9a:ca:39:71:
aa:11:bc:bc:80:5c:8e:58:1a:bd:7a:c4:d7:bd:d6:72:23:7d:
8e:3b:d3:ed
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG
QkNCMDAxMDEwHhcNMjYwOTMwMjI0MjU2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkOTA2Zi1mZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0IsnBaxVVQRMAmmSdUjnrpJB5DRl36T8lU29j3z3FiLy1MNXPDD19WXC2++9
tZFkK3Dq3FmEbByNNh1ZpTA9L/Nu6rILh/G3E7h0pAbYiAS/gAeoRVA6odhqMk1s
WFETiQbWkVb0iHQwvPqsbN0iOXI1uTaeRDFupz+AC2st3TSxbjYjxTpXRWvdYgeC
xbZd+MPJTRmBodDxwNLfQxasv58i6gWIUc6vLQVpH2BbRI9xICQMdWjA+bUgXfTl
eE4dfywOG69pksGTXLSX4fn2T1t1OOiGIFMBUPVItBnku6dcaaos3GbjiHFiYJp2
N1QLK2Aebt30qnRrmMnK4RQM6QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGsjFLUR
nrLOZ2pHviFPH5+47oyPMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2
QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDA2QUEvODY1OEU0NjY4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvMDA1Q0RDODIx
RjE0MTFFQzg1RTA4NTQ2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQHl9KAAwQFpVQAAwQEpVQwMA0GCSqGSIb3DQEBCwUAA4IBAQB/F+vv
b/Jnv1odxJOlTP4qX9xGVQEuVXOf+eFC6RifdAhYFqTgnAU6JkTa29++UIHjN6t2
W07uAvCNKZNvK2xr6wd9sL+ou+etL7jOQTlsH/t/3cBcKkkzMvT7h5sCJJ121rOE
ib6uUiUems2p/MZbIEUtCl6hmyDCBWDbPIY50hpsE5SAAkhMzWkUtaTM5mvDpI+M
BFtEHBMvsM3VBQ2cRR69617yBZi3jPO9FAIjhBVn5aeru8uTut66epiWHKKbIfqf
Raq675hC6VAtbvfchXT7atsF9Sdt6cDNEpQnUI2qiVI+LJrKOXGqEby8gFyOWBq9
esTXvdZyI32OO9Pt
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:50:04 2026 by rpki-client