Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/DCD51CB06DF711F1BD854CE560A30FBC.roa
File: DCD51CB06DF711F1BD854CE560A30FBC.roa (raw, json)
Hash identifier: 2Kkf6WZ58OCYebucMkKIDT9kxpbZD2OoVrH3j60gAbI=
Subject key identifier: 72:B4:72:E7:7A:F4:95:0C:9A:BF:01:D9:1B:0F:4F:92:D5:84:21:39
Certificate issuer: /CN=A91AE954/serialNumber=83AC168E49FB25EB76945A0BD146EA8B57BF09CC
Certificate serial: 0281
Authority key identifier: 83:AC:16:8E:49:FB:25:EB:76:94:5A:0B:D1:46:EA:8B:57:BF:09:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/DCD51CB06DF711F1BD854CE560A30FBC.roa
Signing time: Mon 22 Jun 2026 05:04:36 +0000
ROA not before: Mon 22 Jun 2026 05:04:36 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 4817
IP address blocks: 210.10.0.0/20 maxlen: 20
210.10.0.0/22 maxlen: 22
210.10.0.0/24 maxlen: 24
210.10.1.0/24 maxlen: 24
210.10.2.0/24 maxlen: 24
210.10.3.0/24 maxlen: 24
210.10.4.0/22 maxlen: 22
210.10.4.0/24 maxlen: 24
210.10.5.0/24 maxlen: 24
210.10.6.0/24 maxlen: 24
210.10.7.0/24 maxlen: 24
210.10.8.0/23 maxlen: 24
210.10.10.0/24 maxlen: 24
210.10.11.0/24 maxlen: 24
210.10.12.0/23 maxlen: 24
210.10.64.0/23 maxlen: 24
210.10.66.0/23 maxlen: 23
210.10.76.0/23 maxlen: 23
210.10.76.0/24 maxlen: 24
210.10.77.0/24 maxlen: 24
210.10.78.0/24 maxlen: 24
210.10.79.0/24 maxlen: 24
2400:79e0::/32 maxlen: 32
2400:79e0:8000::/40 maxlen: 40
2400:79e0:8030::/44 maxlen: 44
2400:79e0:8040::/44 maxlen: 44
2400:79e0:8050::/44 maxlen: 44
2400:79e0:8070::/44 maxlen: 44
2400:79e0:9000::/40 maxlen: 40
2400:79e0:9030::/44 maxlen: 44
2400:79e0:9040::/44 maxlen: 44
2400:79e0:9050::/44 maxlen: 44
2400:79e0:9070::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.crl
rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 641 (0x281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE954, serialNumber=83AC168E49FB25EB76945A0BD146EA8B57BF09CC
Validity
Not Before: Jun 22 05:04:36 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a38c263-cbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2e:f9:6c:f8:c4:3e:36:3f:41:40:11:f5:b0:
41:57:4f:4e:89:25:3a:11:d4:1c:07:23:fe:8c:2e:
0e:6b:63:46:7d:3b:8a:16:1b:00:6b:3b:4c:20:11:
19:79:53:37:30:2c:47:e3:cb:05:16:64:1c:57:da:
88:2b:6d:22:24:06:4d:96:d2:14:9b:f0:c1:18:50:
2e:42:f3:f4:c0:83:94:6e:6c:42:bb:ab:97:f1:a4:
d3:61:fc:77:39:2a:3c:4a:9a:d1:c7:3f:16:ec:81:
34:2a:33:a8:67:9c:39:cb:db:7d:4f:d4:df:fa:53:
03:60:a3:ba:04:63:4c:39:9e:12:7a:02:22:27:3e:
86:88:98:b1:a4:35:05:ef:97:a3:77:73:5f:4c:ea:
18:0f:ec:4d:93:f9:0f:95:57:b3:7e:37:b1:5a:95:
d8:ac:fb:11:bf:ed:de:c2:4d:6e:f5:28:93:35:0c:
cb:ea:ed:a4:23:a5:d4:c3:1e:ac:f0:4c:7b:e7:4d:
43:8e:bc:2d:9e:e4:09:66:54:d7:58:75:ed:da:f7:
c8:57:77:4c:ad:d5:1d:01:f7:b3:eb:e6:ad:02:31:
d0:4b:3a:0b:a6:18:f2:98:69:3d:22:89:a8:85:31:
09:25:a1:fe:bf:eb:18:d4:45:1a:f0:02:91:7d:78:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:72:E7:7A:F4:95:0C:9A:BF:01:D9:1B:0F:4F:92:D5:84:21:39
X509v3 Authority Key Identifier:
keyid:83:AC:16:8E:49:FB:25:EB:76:94:5A:0B:D1:46:EA:8B:57:BF:09:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6wWjkn7Jet2lFoL0Ubqi1e_Ccw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE954/B1F6BCC2C14A11ED882BE329C4F9AE02/DCD51CB06DF711F1BD854CE560A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
210.10.0.0/20
210.10.64.0/22
210.10.76.0/22
IPv6:
2400:79e0::/32
Signature Algorithm: sha256WithRSAEncryption
05:ca:3d:d8:0a:59:1d:3d:1c:7a:8b:c3:b4:94:4a:49:71:f2:
d2:47:fb:1f:12:88:3b:02:61:e5:d3:bd:4e:69:07:72:e7:d1:
cc:d3:ea:e7:b8:25:dd:ef:e6:95:c7:7e:f7:fc:3f:10:32:8c:
02:2d:e9:7c:b6:f9:fc:f7:7d:91:d3:28:29:a9:7b:3c:ec:46:
98:4e:10:1d:13:07:e2:14:3b:01:7f:7c:6e:5b:8f:14:8b:c6:
15:99:92:4d:bd:e0:78:f4:a1:fb:3b:2b:7c:01:c4:e4:44:19:
38:a5:79:81:02:91:30:d9:c4:40:22:8f:2a:c4:de:b4:89:72:
7e:1b:43:7a:76:ae:79:6f:73:f2:d3:58:0c:1c:ef:eb:ed:b8:
b3:66:3c:bb:31:fe:ce:c7:c0:60:d7:2c:91:64:67:18:7d:0e:
7e:f1:e0:8e:7c:aa:8a:39:55:41:ca:0a:c5:06:d2:e7:26:54:
ff:58:1c:ee:08:54:71:65:79:5b:82:ee:e4:e2:7c:3a:64:93:
49:b4:40:fa:88:ff:39:e9:5f:ce:4d:2b:df:d8:a1:83:3e:09:
a7:3d:d0:03:e1:e9:a9:03:d0:94:f6:1c:69:c9:ea:89:80:9f:
c6:ea:00:92:87:3a:40:d6:77:d1:8e:99:26:dc:6b:26:6a:2c:
07:da:c4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:06:15 2026 by rpki-client