Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/D9BF0154DDD111F1A0B150D62266CEF9.roa
File: D9BF0154DDD111F1A0B150D62266CEF9.roa (raw, json)
Hash identifier: ik76esU2Sp3ufcAWEiZZN+RiZgQjr6h0hGo6+kugDhI=
Subject key identifier: F2:FA:52:53:F5:6E:34:19:F1:08:80:F6:81:BE:67:B4:94:0E:32:E9
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0E35
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/D9BF0154DDD111F1A0B150D62266CEF9.roa
Signing time: Wed 11 Nov 2026 13:15:46 +0000
ROA not before: Wed 11 Nov 2026 13:15:46 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 2914
IP address blocks: 43.230.54.0/24 maxlen: 24
43.231.189.0/24 maxlen: 24
43.231.190.0/24 maxlen: 24
43.231.191.0/24 maxlen: 24
43.246.128.0/24 maxlen: 24
43.246.130.0/24 maxlen: 24
43.246.131.0/24 maxlen: 24
43.246.197.0/24 maxlen: 24
43.246.199.0/24 maxlen: 24
43.249.242.0/24 maxlen: 24
43.250.88.0/24 maxlen: 24
43.250.91.0/24 maxlen: 24
43.251.184.0/24 maxlen: 24
43.251.185.0/24 maxlen: 24
43.251.186.0/24 maxlen: 24
45.124.61.0/24 maxlen: 24
103.7.117.0/24 maxlen: 24
103.7.208.0/24 maxlen: 24
103.7.211.0/24 maxlen: 24
103.12.52.0/24 maxlen: 24
103.12.55.0/24 maxlen: 24
103.15.33.0/24 maxlen: 24
103.27.80.0/24 maxlen: 24
103.197.208.0/24 maxlen: 24
103.197.209.0/24 maxlen: 24
103.197.210.0/23 maxlen: 23
153.79.90.0/24 maxlen: 24
153.79.91.0/24 maxlen: 24
153.79.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 18:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3637 (0xe35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Nov 11 13:15:46 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6af46a82-df33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:d9:f3:54:a2:b2:e4:37:b9:28:44:e6:e7:
01:ca:e0:06:96:7d:d1:7a:43:96:e9:36:f2:9c:55:
d8:5b:8e:48:e2:d2:3b:1f:af:90:26:0d:6a:4e:47:
31:2f:7e:ff:c2:9b:e4:d6:51:06:05:52:6c:7b:0b:
06:6d:96:7a:27:45:98:10:4b:cb:7e:a2:74:84:ec:
14:87:2d:50:d4:49:33:be:99:5a:3a:e9:d4:7c:2b:
af:6e:b5:f5:3d:9c:fb:12:02:bb:90:3a:7a:67:4c:
b2:3e:78:21:66:4d:a5:c2:5b:83:e6:86:25:c7:9b:
17:1d:91:55:a3:f8:37:0d:6e:67:da:15:fe:f4:cb:
1a:98:db:0f:e6:ae:71:a2:3e:39:3c:4b:bf:b8:85:
52:0d:3e:a0:9f:0d:62:da:76:8c:41:89:ac:09:48:
f6:f7:21:5a:87:b1:e7:03:10:7a:02:9e:af:af:4d:
5a:e9:60:45:24:95:1e:be:fe:e7:eb:92:68:0e:42:
8c:95:b2:bc:d1:54:04:1d:1f:41:52:d7:25:83:d9:
5d:09:4a:ef:bf:c1:0c:d7:95:40:a0:0b:37:e1:0c:
c1:2c:b4:8e:9a:30:21:c1:1a:d5:15:be:d4:26:a4:
03:d2:88:05:16:db:31:b3:b8:d7:45:b6:83:b9:be:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FA:52:53:F5:6E:34:19:F1:08:80:F6:81:BE:67:B4:94:0E:32:E9
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/D9BF0154DDD111F1A0B150D62266CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
43.230.54.0/24
43.231.189.0-43.231.191.255
43.246.128.0/24
43.246.130.0/23
43.246.197.0/24
43.246.199.0/24
43.249.242.0/24
43.250.88.0/24
43.250.91.0/24
43.251.184.0-43.251.186.255
45.124.61.0/24
103.7.117.0/24
103.7.208.0/24
103.7.211.0/24
103.12.52.0/24
103.12.55.0/24
103.15.33.0/24
103.27.80.0/24
103.197.208.0/22
153.79.90.0-153.79.92.255
Signature Algorithm: sha256WithRSAEncryption
be:04:11:ed:91:3a:94:a7:92:d7:65:1e:d0:fc:cf:9c:6b:9f:
37:0d:0e:e8:25:ed:04:dd:e4:89:69:05:24:20:8a:38:92:60:
97:00:be:cf:13:12:c9:df:7e:62:14:e0:fc:59:39:85:ba:6c:
88:28:cc:ef:53:b0:b5:97:fc:b1:2f:bd:ae:02:cd:79:6c:17:
ed:f0:f1:59:ec:96:9f:44:8d:43:49:7c:fa:1d:31:8b:e9:bf:
1a:83:3a:b9:89:69:48:04:e1:26:6d:db:79:ed:d5:dc:15:13:
a5:ae:30:22:22:e4:d0:b2:c7:e0:a6:0b:80:3e:e5:13:9d:76:
b3:bd:c5:58:dc:1d:21:8f:59:73:a3:af:85:f8:22:d3:f2:41:
ae:9b:5d:1d:b6:55:be:42:0f:33:35:27:b0:8a:f1:b8:61:10:
9e:a8:39:47:06:d3:0f:54:52:6c:e9:ef:1f:85:c6:20:6a:19:
a3:28:40:40:ea:e0:05:07:6a:85:d0:a3:4b:4f:7a:e0:04:3f:
48:12:49:5f:83:5c:ad:41:ce:6f:46:b5:05:18:78:d8:c7:bd:
15:32:dc:02:a8:76:04:98:46:9f:1f:c8:5d:8f:6f:45:4f:95:
34:44:cc:27:26:29:3f:c2:c5:34:40:8f:53:e0:61:73:7d:eb:
d5:de:a7:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:49:37 2026 by rpki-client