Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/2C9502D83C4011EA852C097BC4F9AE02.roa
File: 2C9502D83C4011EA852C097BC4F9AE02.roa (raw, json)
Hash identifier: SDiyszlThpz3pNCIvzBQHaO4Edr9QqIkJYTi6rh/4QA=
Subject key identifier: 39:FA:64:47:9D:97:CE:20:A5:D8:21:28:B6:35:F0:D7:ED:DD:41:1A
Certificate issuer: /CN=A91AEA8C/serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696
Certificate serial: 1E40
Authority key identifier: 87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/2C9502D83C4011EA852C097BC4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:31:07 +0000
ROA not before: Sun 30 Aug 2026 16:31:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 133524
IP address blocks: 43.242.134.0/23 maxlen: 23
43.242.134.0/24 maxlen: 24
43.242.135.0/24 maxlen: 24
43.245.44.0/22 maxlen: 22
43.245.44.0/24 maxlen: 24
43.245.45.0/24 maxlen: 24
43.245.46.0/24 maxlen: 24
43.245.47.0/24 maxlen: 24
103.25.76.0/22 maxlen: 22
103.25.76.0/24 maxlen: 24
103.25.77.0/24 maxlen: 24
103.25.78.0/24 maxlen: 24
103.25.79.0/24 maxlen: 24
103.29.90.0/23 maxlen: 23
103.29.90.0/24 maxlen: 24
103.29.91.0/24 maxlen: 24
103.233.204.0/22 maxlen: 22
103.233.204.0/24 maxlen: 24
103.233.205.0/24 maxlen: 24
103.233.206.0/24 maxlen: 24
103.233.207.0/24 maxlen: 24
185.133.212.0/22 maxlen: 22
185.133.212.0/24 maxlen: 24
185.133.213.0/24 maxlen: 24
185.133.214.0/24 maxlen: 24
185.133.215.0/24 maxlen: 24
2407:2a80::/32 maxlen: 32
2407:2a80::/36 maxlen: 36
2407:2a80:a::/48 maxlen: 48
2407:2a80:1000::/36 maxlen: 36
2407:2a80:2000::/36 maxlen: 36
2407:2a80:3000::/36 maxlen: 36
2407:2a80:4000::/36 maxlen: 36
2407:2a80:5000::/36 maxlen: 36
2407:2a80:6000::/36 maxlen: 36
2407:2a80:7000::/36 maxlen: 36
2407:2a80:8000::/36 maxlen: 36
2407:2a80:9000::/36 maxlen: 36
2407:2a80:a000::/36 maxlen: 36
2407:2a80:b000::/36 maxlen: 36
2407:2a80:c000::/36 maxlen: 36
2407:2a80:d000::/36 maxlen: 36
2407:2a80:e000::/36 maxlen: 36
2407:2a80:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl
rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7744 (0x1e40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEA8C, serialNumber=870B9CD2E41DAB05BD5527C9150E948959716696
Validity
Not Before: Aug 30 16:31:07 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a945acb-52f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4c:4b:bd:24:76:45:83:9c:d9:e5:79:fd:7e:
32:35:42:48:14:95:d7:fc:75:66:af:ec:74:31:76:
f0:ab:f7:81:3d:11:d9:7f:ba:71:62:af:ef:43:22:
e3:1e:03:ec:f3:da:56:9a:a8:8a:5f:16:53:8e:58:
7b:29:1a:6e:f9:d2:ba:a4:11:d8:e5:45:30:5b:21:
cb:ea:dc:a0:6f:71:64:29:8a:b4:ac:80:a2:24:ef:
2f:5f:4d:17:50:12:d4:ca:9a:9c:ca:84:12:ae:10:
f8:dd:3b:f2:dd:a0:d7:33:bc:09:ee:4c:f8:21:97:
8b:f9:9b:5e:8b:64:a2:0c:c4:80:57:8d:9c:40:8c:
d2:94:ad:1d:5c:11:5d:9a:5a:7f:f1:d8:9c:30:ce:
c7:d5:5f:a0:12:70:1c:51:4e:61:3a:ab:be:00:ea:
79:b3:26:75:23:38:fb:cc:04:69:3e:5c:c5:16:8f:
ac:84:ac:2a:6b:83:b9:0a:b2:4b:bb:58:11:38:2d:
cc:3d:6b:82:06:62:b3:96:66:72:25:c0:3a:c0:17:
92:c0:dc:a7:3b:82:04:c1:fd:b1:c3:7d:d8:ad:27:
f0:93:99:e7:db:a6:20:5d:96:ff:42:9a:8a:6c:72:
30:1b:03:1a:9a:99:c3:42:9f:09:38:d9:25:5f:d2:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FA:64:47:9D:97:CE:20:A5:D8:21:28:B6:35:F0:D7:ED:DD:41:1A
X509v3 Authority Key Identifier:
keyid:87:0B:9C:D2:E4:1D:AB:05:BD:55:27:C9:15:0E:94:89:59:71:66:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwuc0uQdqwW9VSfJFQ6UiVlxZpY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEA8C/F27B9CDEBB8611E68FF50C57C4F9AE02/2C9502D83C4011EA852C097BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.242.134.0/23
43.245.44.0/22
103.25.76.0/22
103.29.90.0/23
103.233.204.0/22
185.133.212.0/22
IPv6:
2407:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
24:d6:39:b3:94:64:19:13:c3:84:9f:5e:55:13:30:d5:93:e1:
25:0e:18:54:e6:65:a9:27:f3:e4:03:0a:ae:47:49:1e:83:9e:
39:a4:03:fe:b6:fa:60:ed:1d:4d:11:0e:77:0a:22:ab:57:e4:
f9:c2:29:a5:7f:89:5f:70:66:41:86:4a:eb:d4:c9:9a:78:22:
2d:f7:04:b1:b0:49:a4:ec:03:da:dc:1e:05:b2:55:43:2d:42:
4e:da:99:21:fd:07:d7:2c:c4:37:31:22:af:8c:a4:bd:61:a1:
0d:30:19:28:ff:29:52:22:ad:9f:52:14:43:d6:e0:23:b4:86:
c8:54:4d:a6:d9:7d:5a:b5:3f:55:59:49:27:97:3e:cb:02:a4:
90:8c:fd:c4:40:5e:1f:c4:05:d5:5d:cd:b6:e7:42:8b:c5:31:
f3:b8:8f:02:97:69:13:11:7a:c9:23:f4:36:1a:82:26:c1:8a:
34:45:aa:c0:de:4b:de:44:46:a5:60:8f:1c:b9:99:3b:18:10:
e4:bb:09:f7:d6:6e:b2:ac:51:a4:d6:24:7f:27:b0:2d:d0:44:
65:75:72:ba:ed:a8:56:93:26:05:0b:ab:56:86:bc:1c:58:96:
db:da:1a:a9:d8:5b:5b:4c:89:14:86:25:55:5d:4f:cf:eb:54:
de:53:3f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:18:36 2026 by rpki-client