Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/929D25381D1711F1981A78170E3D8C67.roa
File: 929D25381D1711F1981A78170E3D8C67.roa (raw, json)
Hash identifier: pkxruOivazr+5qgFvACHs2jVuJZHgefEb08Dy4uHw4w=
Subject key identifier: BE:28:E4:67:AC:ED:1F:6B:DC:1B:A4:8B:88:A5:C5:7D:58:E4:46:19
Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial: 3581
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/929D25381D1711F1981A78170E3D8C67.roa
Signing time: Sat 04 Jul 2026 15:12:47 +0000
ROA not before: Sat 04 Jul 2026 15:12:47 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 152194
IP address blocks: 45.64.52.0/24 maxlen: 24
45.64.53.0/24 maxlen: 24
45.64.54.0/23 maxlen: 24
103.1.40.0/24 maxlen: 24
103.1.42.0/24 maxlen: 24
103.1.43.0/24 maxlen: 24
112.213.96.0/19 maxlen: 19
112.213.96.0/24 maxlen: 24
112.213.97.0/24 maxlen: 24
112.213.98.0/24 maxlen: 24
112.213.99.0/24 maxlen: 24
112.213.100.0/24 maxlen: 24
112.213.101.0/24 maxlen: 24
112.213.102.0/24 maxlen: 24
112.213.103.0/24 maxlen: 24
112.213.105.0/24 maxlen: 24
112.213.106.0/24 maxlen: 24
112.213.107.0/24 maxlen: 24
112.213.108.0/24 maxlen: 24
112.213.109.0/24 maxlen: 24
112.213.110.0/24 maxlen: 24
112.213.111.0/24 maxlen: 24
112.213.112.0/24 maxlen: 24
112.213.113.0/24 maxlen: 24
112.213.114.0/24 maxlen: 24
112.213.115.0/24 maxlen: 24
112.213.116.0/23 maxlen: 24
112.213.118.0/24 maxlen: 24
112.213.119.0/24 maxlen: 24
112.213.120.0/24 maxlen: 24
112.213.121.0/24 maxlen: 24
112.213.122.0/24 maxlen: 24
112.213.123.0/24 maxlen: 24
112.213.124.0/24 maxlen: 24
112.213.125.0/24 maxlen: 24
112.213.126.0/24 maxlen: 24
112.213.127.0/24 maxlen: 24
117.18.0.0/20 maxlen: 20
117.18.0.0/24 maxlen: 24
117.18.1.0/24 maxlen: 24
117.18.2.0/24 maxlen: 24
117.18.3.0/24 maxlen: 24
117.18.4.0/24 maxlen: 24
117.18.5.0/24 maxlen: 24
117.18.6.0/24 maxlen: 24
117.18.7.0/24 maxlen: 24
117.18.9.0/24 maxlen: 24
117.18.12.0/24 maxlen: 24
117.18.13.0/24 maxlen: 24
117.18.14.0/24 maxlen: 24
117.18.15.0/24 maxlen: 24
121.54.168.0/21 maxlen: 21
121.54.168.0/24 maxlen: 24
121.54.171.0/24 maxlen: 24
121.54.173.0/24 maxlen: 24
121.54.174.0/24 maxlen: 24
121.54.175.0/24 maxlen: 24
121.127.224.0/19 maxlen: 19
121.127.224.0/24 maxlen: 24
121.127.226.0/24 maxlen: 24
121.127.227.0/24 maxlen: 24
121.127.228.0/24 maxlen: 24
121.127.229.0/24 maxlen: 24
121.127.230.0/24 maxlen: 24
121.127.231.0/24 maxlen: 24
121.127.232.0/24 maxlen: 24
121.127.233.0/24 maxlen: 24
121.127.234.0/24 maxlen: 24
121.127.241.0/24 maxlen: 24
121.127.244.0/24 maxlen: 24
121.127.245.0/24 maxlen: 24
121.127.246.0/24 maxlen: 24
121.127.248.0/24 maxlen: 24
121.127.249.0/24 maxlen: 24
121.127.250.0/24 maxlen: 24
121.127.252.0/24 maxlen: 24
121.127.253.0/24 maxlen: 24
121.127.254.0/24 maxlen: 24
121.127.255.0/24 maxlen: 24
202.146.216.0/21 maxlen: 21
202.146.216.0/24 maxlen: 24
202.146.217.0/24 maxlen: 24
202.146.218.0/24 maxlen: 24
202.146.219.0/24 maxlen: 24
202.146.220.0/24 maxlen: 24
202.146.221.0/24 maxlen: 24
202.146.222.0/24 maxlen: 24
202.146.223.0/24 maxlen: 24
210.56.48.0/21 maxlen: 24
210.56.56.0/21 maxlen: 24
223.26.48.0/24 maxlen: 24
223.26.52.0/24 maxlen: 24
223.26.57.0/24 maxlen: 24
223.26.59.0/24 maxlen: 24
223.26.61.0/24 maxlen: 24
223.26.62.0/24 maxlen: 24
223.26.63.0/24 maxlen: 24
2403:ea00::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13697 (0x3581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Validity
Not Before: Jul 4 15:12:47 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4922ef-568d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:1c:84:7d:3f:4e:3f:7f:79:22:33:15:73:
28:1d:70:f2:a9:5c:95:0f:cb:84:55:08:69:a1:7b:
ad:e3:5d:2a:e5:be:58:63:cc:35:9e:3f:f9:3b:b7:
12:54:cb:7a:67:60:7d:96:55:e3:f7:dc:72:17:90:
5a:cc:b9:aa:ce:85:9e:6d:c6:03:8e:d3:72:7c:3d:
4c:28:4a:23:7d:84:81:c1:90:d5:d6:bf:f0:0f:8e:
cf:99:b1:cc:15:8c:4c:87:45:11:51:0b:59:ed:b7:
14:e5:51:01:0c:d7:c1:fe:d2:d6:47:20:a8:f0:5f:
fd:bf:9d:cc:fd:f6:ec:21:bc:2b:e1:06:14:c3:32:
22:36:7f:aa:16:e0:72:d9:52:01:1c:4f:5e:5c:56:
43:3c:b4:4e:45:84:77:7c:ef:4f:41:2e:fa:75:5b:
5c:9b:24:d8:92:3f:ec:d0:69:4a:91:5e:86:48:9f:
73:bf:4d:8b:07:90:13:c0:86:6d:dc:b8:f1:39:99:
cf:6b:f3:8b:a1:57:e7:80:e4:10:9d:f8:85:37:b9:
be:d7:6a:30:e5:88:83:4a:43:68:f5:30:6e:5e:62:
f7:c9:d6:c9:a9:c7:d5:0c:9c:6b:b7:d1:ea:25:b9:
e7:fe:77:16:7e:6d:8e:52:b5:23:b1:b4:7c:86:cf:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:28:E4:67:AC:ED:1F:6B:DC:1B:A4:8B:88:A5:C5:7D:58:E4:46:19
X509v3 Authority Key Identifier:
keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/929D25381D1711F1981A78170E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
45.64.52.0/22
103.1.40.0/24
103.1.42.0/23
112.213.96.0/19
117.18.0.0/20
121.54.168.0/21
121.127.224.0/19
202.146.216.0/21
210.56.48.0/20
223.26.48.0/24
223.26.52.0/24
223.26.57.0/24
223.26.59.0/24
223.26.61.0-223.26.63.255
IPv6:
2403:ea00::/32
Signature Algorithm: sha256WithRSAEncryption
9a:44:72:1e:5b:91:71:8a:26:9b:9e:55:0c:46:52:d8:7b:cc:
9d:c4:22:a6:b9:80:30:ea:fe:43:71:d8:ef:dc:00:56:e0:a6:
2d:fa:9f:a3:1a:28:23:34:69:a8:ad:76:5f:75:26:1c:4d:14:
b3:ac:89:d2:54:a0:0f:7f:62:41:69:fd:3b:65:4d:95:d1:95:
28:a8:8f:7b:2c:ba:4a:37:ae:2d:c2:12:21:c1:83:8d:c8:38:
19:d6:90:7e:ea:54:dd:b0:9f:5a:3b:8e:f4:fb:c6:13:c5:c2:
a8:98:17:ac:b0:8a:59:8e:9d:b0:01:35:2e:81:fc:9c:05:cd:
d0:fa:43:e6:d8:0a:66:a5:60:23:3f:f5:06:70:a4:e7:07:ca:
0f:e6:c3:81:4e:2e:24:f9:e2:9b:cd:0e:2a:85:eb:85:d4:e5:
71:cc:f3:f9:8d:68:3e:b6:6b:cf:a0:ff:56:2c:22:a3:59:23:
59:6d:99:4d:c3:76:3b:68:3c:a6:18:c1:57:40:ac:78:55:47:
b9:cb:de:1a:3a:9c:71:8c:bc:d4:c7:d8:d1:5e:9d:50:24:75:
b8:dc:b6:15:db:e8:37:c7:c3:75:49:0f:04:2b:56:35:76:ca:
8d:69:40:69:b1:c3:cf:e4:8a:e2:4d:ea:01:87:f3:f2:95:25:
59:0d:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:39 2026 by rpki-client