Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
File: 570B25FA305111F0BED81784C4F9AE02.roa (raw, json)
Hash identifier: UNamoSLqPfgLYpd2PGo2wGNk5GFxnnncmR2Esq//UuA=
Subject key identifier: 7A:C6:CF:38:39:D5:A0:1D:EC:D2:23:5E:4B:C9:EC:DF:F9:BE:EB:4F
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 09FF
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
Signing time: Tue 24 Mar 2026 20:26:13 +0000
ROA not before: Tue 24 Mar 2026 20:26:13 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 41095
IP address blocks: 45.248.200.0/24 maxlen: 24
45.248.201.0/24 maxlen: 24
45.248.202.0/23 maxlen: 24
103.6.128.0/22 maxlen: 23
103.6.130.0/23 maxlen: 24
103.23.168.0/22 maxlen: 22
103.23.168.0/24 maxlen: 24
103.23.169.0/24 maxlen: 24
103.23.170.0/24 maxlen: 24
103.23.171.0/24 maxlen: 24
103.217.160.0/22 maxlen: 22
103.217.160.0/24 maxlen: 24
103.217.161.0/24 maxlen: 24
103.217.162.0/24 maxlen: 24
103.217.163.0/24 maxlen: 24
103.242.72.0/22 maxlen: 24
220.158.132.0/23 maxlen: 23
220.158.132.0/24 maxlen: 24
220.158.133.0/24 maxlen: 24
2401:47c0::/32 maxlen: 32
2401:47c0:1000::/36 maxlen: 36
2401:47c0:1000::/40 maxlen: 40
2401:47c0:1100::/40 maxlen: 40
2401:47c0:1200::/40 maxlen: 40
2401:47c0:1300::/40 maxlen: 40
2401:47c0:1400::/40 maxlen: 40
2401:47c0:1500::/40 maxlen: 40
2401:47c0:1600::/40 maxlen: 40
2401:47c0:1700::/40 maxlen: 40
2401:47c0:1800::/40 maxlen: 40
2401:47c0:1a00::/40 maxlen: 40
2401:47c0:1b00::/40 maxlen: 40
2401:47c0:1c00::/40 maxlen: 40
2401:47c0:1d00::/40 maxlen: 40
2401:47c0:1e00::/40 maxlen: 40
2401:47c0:1f00::/40 maxlen: 40
2401:47c0:f000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2559 (0x9ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Mar 24 20:26:13 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c2f365-271e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:07:cf:ef:e9:30:73:f5:b0:f0:a0:08:8d:
61:82:02:3c:d0:69:eb:aa:a3:e2:60:d4:b5:6b:41:
1b:17:5b:b1:80:ba:2e:46:54:57:6f:56:e8:e3:85:
45:82:83:b5:96:b1:5f:78:52:47:32:95:ef:d2:1e:
79:b5:53:95:84:ae:e2:6e:4a:fc:4a:b6:68:02:ac:
d4:b4:99:b0:5f:15:91:9d:ce:62:50:06:09:53:a2:
5c:b0:96:97:9d:95:13:3b:db:91:22:60:8e:bb:66:
45:72:ab:09:77:8a:d1:59:26:a3:5a:6d:a4:68:7d:
ff:6b:c4:a8:67:d9:cc:05:08:cf:66:0b:fa:c2:76:
4a:b6:fa:61:17:52:2b:00:d0:b1:79:ce:5b:2a:fc:
29:22:ef:33:86:75:9c:79:52:52:32:0b:5a:32:c2:
d5:33:52:39:98:d2:4b:f1:be:c3:87:c2:ab:7e:dd:
69:a1:2b:9e:05:16:73:a6:b5:05:82:3a:15:31:b6:
73:34:0b:9d:42:16:f9:bd:39:07:65:fd:39:15:f2:
cc:8d:5e:7a:56:3b:40:1a:86:09:6a:3a:88:73:1d:
36:6e:ab:14:51:69:01:89:af:de:28:d2:d0:84:61:
bb:3c:2c:39:29:fc:c6:c0:02:fb:92:f3:2e:0e:6e:
5d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:CF:38:39:D5:A0:1D:EC:D2:23:5E:4B:C9:EC:DF:F9:BE:EB:4F
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.248.200.0/22
103.6.128.0/22
103.23.168.0/22
103.217.160.0/22
103.242.72.0/22
220.158.132.0/23
IPv6:
2401:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
a1:b2:d8:ca:fc:92:ce:30:29:87:ef:86:63:67:0b:e1:84:7c:
f3:24:58:5b:75:53:31:02:23:bd:5d:2d:9b:b8:de:de:4f:4c:
a5:15:ef:63:72:41:40:d5:d8:fa:40:d9:ac:70:67:09:88:1a:
42:2e:05:d8:63:05:ed:fe:50:d6:6f:76:3a:ba:2d:3c:30:23:
a0:78:3e:86:ad:4d:4a:53:02:98:11:7a:e1:25:c3:8d:02:68:
02:0d:b7:5b:71:a1:39:06:e0:08:bf:00:ad:84:11:34:2d:17:
52:dc:59:c3:de:22:8f:cb:16:ad:84:1f:54:ab:4b:48:2f:41:
5d:3d:1f:91:cb:fb:1f:4d:ce:e5:12:48:61:b8:c8:c7:85:a5:
11:a4:04:bd:a1:a9:00:7b:dc:2d:b3:5f:b4:3e:b6:cf:6a:db:
ec:0d:28:ce:7c:c7:38:68:32:aa:e3:8d:14:b9:1e:f9:40:23:
cd:d9:43:dd:73:e1:92:dd:11:57:4d:e1:5f:fb:50:62:25:84:
90:71:fe:7e:db:dd:d1:ae:ac:cb:69:39:ee:77:69:c0:d9:2c:
25:b3:ea:52:e6:ad:75:9a:08:19:3e:24:22:cc:1c:bd:f1:65:
25:6c:b4:16:85:74:6f:3c:f3:d0:92:b3:7c:93:b7:ed:c1:fc:
76:3c:b9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:44 2026 by rpki-client