Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/CEBECC28D38811E8A763B462C4F9AE02.roa
File: CEBECC28D38811E8A763B462C4F9AE02.roa (raw, json)
Hash identifier: 3yk/ejxMXjoeC3zuRzAqWAckUsjuzATu0Y+B562HVTM=
Subject key identifier: A3:3B:80:9A:56:EC:D1:7A:41:17:BA:55:AF:10:8D:E6:E7:3D:55:94
Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial: 138E
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/CEBECC28D38811E8A763B462C4F9AE02.roa
Signing time: Mon 31 Aug 2026 07:43:09 +0000
ROA not before: Mon 31 Aug 2026 07:43:09 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 38001
IP address blocks: 27.122.12.0/24 maxlen: 24
27.122.13.0/24 maxlen: 24
27.122.14.0/24 maxlen: 24
27.122.15.0/24 maxlen: 24
43.245.60.0/24 maxlen: 24
43.245.61.0/24 maxlen: 24
43.245.62.0/24 maxlen: 24
43.245.63.0/24 maxlen: 24
45.119.200.0/24 maxlen: 24
45.119.201.0/24 maxlen: 24
45.119.202.0/24 maxlen: 24
103.14.76.0/24 maxlen: 24
103.14.77.0/24 maxlen: 24
103.14.79.0/24 maxlen: 24
103.25.52.0/24 maxlen: 24
103.60.8.0/24 maxlen: 24
103.60.11.0/24 maxlen: 24
103.200.216.0/24 maxlen: 24
103.200.217.0/24 maxlen: 24
103.200.218.0/24 maxlen: 24
103.200.219.0/24 maxlen: 24
119.161.101.0/24 maxlen: 24
119.161.102.0/24 maxlen: 24
119.161.103.0/24 maxlen: 24
202.150.208.0/20 maxlen: 20
202.150.208.0/24 maxlen: 24
202.150.209.0/24 maxlen: 24
202.150.210.0/24 maxlen: 24
202.150.211.0/24 maxlen: 24
202.150.212.0/24 maxlen: 24
202.150.213.0/24 maxlen: 24
202.150.214.0/24 maxlen: 24
202.150.215.0/24 maxlen: 24
202.150.216.0/24 maxlen: 24
202.150.217.0/24 maxlen: 24
202.150.218.0/24 maxlen: 24
202.150.219.0/24 maxlen: 24
202.150.220.0/24 maxlen: 24
202.150.221.0/24 maxlen: 24
202.150.222.0/24 maxlen: 24
202.150.223.0/24 maxlen: 24
203.174.80.0/21 maxlen: 21
203.174.80.0/24 maxlen: 24
203.174.81.0/24 maxlen: 24
203.174.82.0/24 maxlen: 24
203.174.83.0/24 maxlen: 24
203.174.84.0/24 maxlen: 24
203.174.85.0/24 maxlen: 24
203.174.86.0/24 maxlen: 24
203.174.87.0/24 maxlen: 24
2406:f400::/32 maxlen: 32
2406:f400::/44 maxlen: 44
2406:f400:20::/44 maxlen: 44
2406:f400:40::/44 maxlen: 44
2406:f400:80::/44 maxlen: 44
2406:f400:b0::/44 maxlen: 44
2406:f400:100::/44 maxlen: 44
2406:f400:130::/44 maxlen: 44
2406:f400:160::/44 maxlen: 44
2406:f400:161::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5006 (0x138e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Validity
Not Before: Aug 31 07:43:09 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a95308d-2931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:28:ff:fa:49:f0:31:31:6c:f7:5e:ed:ee:
6f:11:54:e5:be:0a:9d:43:a0:f6:60:b3:3b:bc:47:
4e:74:04:70:4f:f8:f1:b9:0e:e2:07:df:43:fc:be:
31:0e:72:e0:cc:fe:e8:ab:e3:e7:54:8f:00:fc:a8:
54:21:60:7b:0d:1a:b7:05:6a:52:16:fa:77:14:3b:
d4:fb:b4:ca:33:a3:e2:04:a8:ba:40:44:dc:21:6d:
60:a4:f3:59:35:51:a2:59:f3:7a:0e:00:b8:99:64:
7b:1b:f1:5d:35:c1:6d:a1:08:47:03:72:07:bb:24:
68:d6:13:b8:01:04:05:97:53:a2:87:2f:7a:4c:db:
68:a7:fb:bc:a9:d3:37:50:5e:8f:7f:fc:56:86:2a:
ef:38:4d:c8:0e:a4:13:3e:ff:28:ea:7f:6e:c9:d4:
da:5a:52:ff:8d:bc:48:de:b8:74:62:26:0a:a6:0d:
2c:8e:c5:29:dd:fc:a3:c1:36:8d:63:f2:e8:93:e5:
56:02:4d:a0:19:05:0f:50:f4:12:62:63:d6:05:d1:
eb:59:c6:ff:d0:30:3c:a6:c1:84:57:48:8e:dc:4c:
a1:47:4d:69:ab:ad:c9:45:b7:bd:49:41:b0:25:81:
93:f8:e7:a4:b7:67:3c:2a:d3:14:42:d9:fd:cc:79:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3B:80:9A:56:EC:D1:7A:41:17:BA:55:AF:10:8D:E6:E7:3D:55:94
X509v3 Authority Key Identifier:
keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/CEBECC28D38811E8A763B462C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.122.12.0/22
43.245.60.0/22
45.119.200.0-45.119.202.255
103.14.76.0/23
103.14.79.0/24
103.25.52.0/24
103.60.8.0/24
103.60.11.0/24
103.200.216.0/22
119.161.101.0-119.161.103.255
202.150.208.0/20
203.174.80.0/21
IPv6:
2406:f400::/32
Signature Algorithm: sha256WithRSAEncryption
49:50:88:5a:92:e3:cc:17:b5:94:ca:18:bb:e8:a2:62:57:42:
a1:1f:0f:57:4d:ac:00:91:4a:ed:2a:46:10:e3:b7:37:87:33:
69:75:42:59:54:63:fd:83:14:4d:22:1c:c7:a5:61:fc:37:af:
7f:06:16:f3:3a:06:40:58:d1:5e:69:88:d1:c0:df:64:4c:e6:
17:86:79:ba:ab:1d:a6:b6:17:6d:46:e3:4d:21:18:38:6b:58:
7f:1f:5e:f1:07:9b:b0:8e:0b:f1:b6:d0:21:26:c3:a7:b6:22:
64:93:23:46:05:a2:c3:98:18:52:91:aa:02:b5:60:1d:ce:a1:
82:b6:1e:80:66:ca:35:b2:9f:40:47:99:ef:54:9f:89:5d:28:
0e:64:9e:f4:3f:c1:4e:d2:f4:05:0a:91:4c:43:5d:a4:66:67:
5e:63:a1:a1:3a:3d:e5:62:cd:39:a3:cf:d9:a6:f0:55:23:fc:
17:ef:f8:c7:a7:d3:57:d0:e9:d5:3d:d3:e3:74:40:b3:7a:f7:
d6:4e:18:ea:d6:aa:06:bb:0e:6f:7e:b7:34:17:04:05:b7:48:
29:c1:bb:c1:a4:d4:05:70:a1:0e:6a:0b:31:b8:79:1f:bb:5c:
25:14:3a:3b:ea:56:ee:82:5f:d5:5e:df:69:d3:51:96:25:a9:
42:08:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:47:36 2026 by rpki-client