Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/929D25381D1711F1981A78170E3D8C67.roa
File: 929D25381D1711F1981A78170E3D8C67.roa (raw, json)
Hash identifier: i9GKuEAC1w7Uzsve2QE3rzgfDee7AvdLIQUdi85I8+s=
Subject key identifier: 79:98:13:58:5B:C2:75:FB:7C:E2:98:1C:FB:DB:04:87:0C:86:58:C4
Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial: 3542
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/929D25381D1711F1981A78170E3D8C67.roa
Signing time: Wed 11 Mar 2026 07:03:17 +0000
ROA not before: Wed 11 Mar 2026 07:03:17 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 152194
IP address blocks: 45.64.52.0/24 maxlen: 24
45.64.53.0/24 maxlen: 24
45.64.54.0/23 maxlen: 24
103.1.40.0/24 maxlen: 24
103.1.42.0/24 maxlen: 24
103.1.43.0/24 maxlen: 24
112.213.96.0/19 maxlen: 19
112.213.96.0/24 maxlen: 24
112.213.97.0/24 maxlen: 24
112.213.98.0/24 maxlen: 24
112.213.99.0/24 maxlen: 24
112.213.100.0/24 maxlen: 24
112.213.101.0/24 maxlen: 24
112.213.102.0/24 maxlen: 24
112.213.103.0/24 maxlen: 24
112.213.105.0/24 maxlen: 24
112.213.106.0/24 maxlen: 24
112.213.107.0/24 maxlen: 24
112.213.108.0/24 maxlen: 24
112.213.109.0/24 maxlen: 24
112.213.110.0/24 maxlen: 24
112.213.111.0/24 maxlen: 24
112.213.112.0/24 maxlen: 24
112.213.113.0/24 maxlen: 24
112.213.114.0/24 maxlen: 24
112.213.115.0/24 maxlen: 24
112.213.116.0/23 maxlen: 24
112.213.118.0/24 maxlen: 24
112.213.119.0/24 maxlen: 24
112.213.120.0/24 maxlen: 24
112.213.121.0/24 maxlen: 24
112.213.122.0/24 maxlen: 24
112.213.123.0/24 maxlen: 24
112.213.124.0/24 maxlen: 24
112.213.125.0/24 maxlen: 24
112.213.126.0/24 maxlen: 24
112.213.127.0/24 maxlen: 24
117.18.0.0/20 maxlen: 20
117.18.0.0/24 maxlen: 24
117.18.1.0/24 maxlen: 24
117.18.2.0/24 maxlen: 24
117.18.3.0/24 maxlen: 24
117.18.4.0/24 maxlen: 24
117.18.5.0/24 maxlen: 24
117.18.6.0/24 maxlen: 24
117.18.7.0/24 maxlen: 24
117.18.9.0/24 maxlen: 24
117.18.12.0/24 maxlen: 24
117.18.13.0/24 maxlen: 24
117.18.14.0/24 maxlen: 24
117.18.15.0/24 maxlen: 24
121.54.168.0/21 maxlen: 21
121.54.168.0/24 maxlen: 24
121.54.171.0/24 maxlen: 24
121.54.173.0/24 maxlen: 24
121.54.174.0/24 maxlen: 24
121.54.175.0/24 maxlen: 24
121.127.224.0/19 maxlen: 19
121.127.224.0/24 maxlen: 24
121.127.226.0/24 maxlen: 24
121.127.227.0/24 maxlen: 24
121.127.228.0/24 maxlen: 24
121.127.229.0/24 maxlen: 24
121.127.230.0/24 maxlen: 24
121.127.231.0/24 maxlen: 24
121.127.232.0/24 maxlen: 24
121.127.233.0/24 maxlen: 24
121.127.234.0/24 maxlen: 24
121.127.241.0/24 maxlen: 24
121.127.244.0/24 maxlen: 24
121.127.245.0/24 maxlen: 24
121.127.246.0/24 maxlen: 24
121.127.248.0/24 maxlen: 24
121.127.249.0/24 maxlen: 24
121.127.250.0/24 maxlen: 24
121.127.252.0/24 maxlen: 24
121.127.253.0/24 maxlen: 24
121.127.254.0/24 maxlen: 24
121.127.255.0/24 maxlen: 24
202.146.216.0/21 maxlen: 21
202.146.216.0/24 maxlen: 24
202.146.217.0/24 maxlen: 24
202.146.218.0/24 maxlen: 24
202.146.219.0/24 maxlen: 24
202.146.220.0/24 maxlen: 24
202.146.221.0/24 maxlen: 24
202.146.222.0/24 maxlen: 24
202.146.223.0/24 maxlen: 24
210.56.48.0/21 maxlen: 24
210.56.56.0/21 maxlen: 24
223.26.48.0/24 maxlen: 24
223.26.52.0/24 maxlen: 24
223.26.57.0/24 maxlen: 24
223.26.59.0/24 maxlen: 24
223.26.61.0/24 maxlen: 24
223.26.62.0/24 maxlen: 24
223.26.63.0/24 maxlen: 24
2403:ea00::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13634 (0x3542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Validity
Not Before: Mar 11 07:03:17 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69b113b5-bd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:3f:72:da:56:70:3c:e6:38:8c:29:b5:76:
5a:da:17:fc:5a:06:1e:0d:76:5d:40:bf:c6:24:f1:
41:fe:23:7a:7b:43:e8:d8:7f:81:d3:44:37:29:4e:
c1:50:56:32:e3:ac:ec:c0:77:69:cb:9d:67:2c:be:
f3:45:62:de:5b:7b:39:23:13:ad:0c:a1:84:b5:48:
15:27:a5:10:85:48:0f:96:ff:8f:06:4a:b6:9d:ef:
df:86:ec:cf:34:9d:b5:34:68:08:fb:ca:12:ef:b0:
02:9e:a7:10:33:81:6e:fe:71:19:4a:26:e4:12:fc:
bd:6a:ae:99:80:5a:4c:45:c9:5b:de:5b:4b:b7:45:
c3:ee:50:95:ff:4a:e1:ae:30:ad:aa:4f:2d:3e:69:
98:bf:38:f1:00:04:d0:6f:45:04:78:61:a8:a6:82:
0c:a0:34:55:fb:3a:20:ed:0c:46:ad:84:1c:2d:4c:
64:5d:c3:9f:a7:45:6e:3a:0b:7e:eb:63:a1:6c:47:
52:45:e1:82:38:4a:12:6c:27:ed:e2:f8:1a:8a:f3:
04:ea:8d:5c:23:fa:d7:2c:86:2b:16:a6:ee:1d:a3:
46:f3:fd:fb:3d:80:32:12:b1:3b:a9:a9:07:ac:ca:
ac:8b:e4:3b:53:81:5f:fd:59:72:55:c5:23:7d:18:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:98:13:58:5B:C2:75:FB:7C:E2:98:1C:FB:DB:04:87:0C:86:58:C4
X509v3 Authority Key Identifier:
keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/929D25381D1711F1981A78170E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
45.64.52.0/22
103.1.40.0/24
103.1.42.0/23
112.213.96.0/19
117.18.0.0/20
121.54.168.0/21
121.127.224.0/19
202.146.216.0/21
210.56.48.0/20
223.26.48.0/24
223.26.52.0/24
223.26.57.0/24
223.26.59.0/24
223.26.61.0-223.26.63.255
IPv6:
2403:ea00::/32
Signature Algorithm: sha256WithRSAEncryption
63:1e:2a:a5:64:63:d6:2f:8b:8a:7e:eb:c9:0f:a3:cd:34:a2:
75:81:93:44:a6:05:fc:84:d3:e7:9e:16:32:e4:aa:b2:c8:eb:
b7:51:89:05:e1:e3:c8:0b:9f:95:db:8c:0c:8d:37:2b:f4:50:
e3:94:45:98:12:49:8b:ec:1f:68:4e:27:14:f5:c8:44:10:97:
eb:3a:36:bf:1a:b6:b2:12:86:f6:53:bd:9f:f3:c0:8d:62:0b:
8f:69:46:de:90:8e:30:d9:ad:8b:5d:68:52:a6:40:5d:e5:30:
28:11:bb:73:39:28:4b:b6:aa:b2:f0:57:61:28:37:fe:b2:3c:
a5:6f:66:fb:8d:67:9b:0f:95:cf:a1:d9:68:fa:38:15:e1:ce:
3b:f7:7f:51:0e:b0:37:58:48:d8:20:7a:9a:d5:42:05:74:24:
84:c7:d1:f0:11:5f:ae:dd:60:b4:45:fc:8e:27:bc:38:23:75:
b4:30:2f:d6:e6:3f:93:70:0f:ed:4b:2b:24:cd:57:e7:2e:91:
fc:ad:1d:e4:5b:b8:a4:a4:6d:e6:c2:fd:f3:3c:d5:a9:55:ff:
67:25:54:38:08:72:2d:f3:6b:91:10:de:a1:64:c9:94:5b:b3:
c7:68:f0:fa:6c:97:58:df:79:83:44:ff:80:22:80:6a:7d:14:
07:5d:0c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:06:54 2026 by rpki-client