Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/5164F13EDBD811F0A0A88CE756641951.roa
File: 5164F13EDBD811F0A0A88CE756641951.roa (raw, json)
Hash identifier: S+wwMGadgYhMS5OREKeaPh6PDBaoFk4/7hdgf2PBnsw=
Subject key identifier: BF:A2:DE:F4:71:53:B5:B7:8C:E4:96:2D:FC:7B:97:7B:DE:D7:45:79
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0D4A
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/5164F13EDBD811F0A0A88CE756641951.roa
Signing time: Thu 26 Mar 2026 01:45:24 +0000
ROA not before: Thu 26 Mar 2026 01:45:23 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 5065
IP address blocks: 43.230.52.0/24 maxlen: 24
43.230.53.0/24 maxlen: 24
43.246.198.0/24 maxlen: 24
43.249.240.0/24 maxlen: 24
43.249.243.0/24 maxlen: 24
43.250.89.0/24 maxlen: 24
43.250.90.0/24 maxlen: 24
43.250.91.0/24 maxlen: 24
43.251.184.0/24 maxlen: 24
43.251.186.0/24 maxlen: 24
45.115.33.0/24 maxlen: 24
45.115.35.0/24 maxlen: 24
45.124.63.0/24 maxlen: 24
103.7.118.0/24 maxlen: 24
103.7.119.0/24 maxlen: 24
103.13.16.0/24 maxlen: 24
103.13.19.0/24 maxlen: 24
103.15.32.0/24 maxlen: 24
103.15.34.0/24 maxlen: 24
103.15.35.0/24 maxlen: 24
103.248.150.0/24 maxlen: 24
103.248.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 02:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3402 (0xd4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Mar 26 01:45:23 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c48fb3-e672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:b5:20:09:2d:51:79:92:b8:d4:b2:25:f0:
5e:8d:12:91:27:f1:43:21:7e:34:32:88:eb:69:8c:
b6:56:35:20:c8:af:df:5f:ff:04:80:a5:8c:3a:28:
25:f8:7f:d4:bd:3f:e6:a3:f9:e9:4d:6e:de:20:11:
bb:6a:19:69:b7:f6:e9:67:08:00:8e:77:4a:f8:65:
6f:31:23:ad:24:7d:06:3a:27:cc:a5:ab:6e:93:81:
54:cc:39:f3:66:13:e4:c4:6a:0b:34:f9:89:31:ee:
d7:53:55:e7:bb:54:ab:79:d9:c1:f1:7b:3f:24:7c:
9f:10:97:cd:3a:19:52:a9:32:22:a0:89:12:92:bb:
bb:1e:b8:0a:98:b1:0c:59:3e:2c:d3:67:f0:0d:ed:
fa:e7:72:13:5b:5c:3b:4b:af:e4:2f:73:e4:06:bd:
cf:23:02:15:ab:7f:16:c0:2a:75:c8:97:8d:8d:81:
41:2d:25:e2:cb:76:92:45:9a:47:cf:d7:65:85:78:
0a:c2:97:a8:e8:47:39:fd:c4:45:f3:f6:a3:ac:d1:
7e:d6:11:42:67:a4:da:c2:5f:19:19:b5:78:50:20:
31:20:e8:58:bd:3b:19:71:5c:7f:77:36:a5:e7:3c:
26:6c:2a:c1:9d:bb:75:be:fc:61:0d:23:9a:01:8c:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A2:DE:F4:71:53:B5:B7:8C:E4:96:2D:FC:7B:97:7B:DE:D7:45:79
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/5164F13EDBD811F0A0A88CE756641951.roa
sbgp-ipAddrBlock: critical
IPv4:
43.230.52.0/23
43.246.198.0/24
43.249.240.0/24
43.249.243.0/24
43.250.89.0-43.250.91.255
43.251.184.0/24
43.251.186.0/24
45.115.33.0/24
45.115.35.0/24
45.124.63.0/24
103.7.118.0/23
103.13.16.0/24
103.13.19.0/24
103.15.32.0/24
103.15.34.0/23
103.248.150.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:78:c8:57:16:ff:4f:b0:6e:26:df:eb:31:1a:2c:6d:14:6b:
8b:7c:4d:3c:44:42:4d:6b:dc:30:60:02:77:37:34:c5:8f:43:
89:37:ff:65:b3:b8:36:41:8a:47:28:6d:4c:dc:33:4e:cb:24:
21:b8:cf:f4:e5:9d:fa:bf:a7:ca:ac:a3:de:d4:81:60:86:06:
11:34:ca:8d:a4:05:52:7b:47:60:93:15:7c:92:14:c6:db:47:
66:08:cb:e0:05:bf:77:5e:77:c0:63:08:e8:9b:27:24:26:ba:
9e:7c:d3:9a:f6:7b:a9:e1:c8:3c:3b:2f:c0:1f:93:59:6b:58:
3a:d7:ac:ab:50:b6:2e:0a:80:6f:7e:cf:db:43:e2:a1:2d:c2:
f4:01:a9:bd:0d:a9:cf:39:ef:22:54:c4:05:e8:b7:42:85:72:
cf:1e:db:a9:79:17:3e:5e:06:a2:c6:54:f5:99:e9:7c:96:24:
48:2b:e5:db:a9:9d:b5:ed:21:8f:da:70:97:66:85:77:31:08:
24:70:2f:94:f6:db:f8:2d:b7:56:76:30:8d:45:93:2d:d2:09:
15:1f:da:f9:cf:cc:00:4e:07:47:46:ad:6e:f3:0e:13:91:2f:
1f:21:35:f5:3f:9a:0b:c9:32:38:ad:62:e4:49:69:e0:5f:9e:
b6:89:4f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:00 2026 by rpki-client