Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/79AE82F8171711EBB12F2574C4F9AE02.roa
File: 79AE82F8171711EBB12F2574C4F9AE02.roa (raw, json)
Hash identifier: yBw1OwRflSpRekgSai0NfX2eWxbhAGYmfm4EXjFEniM=
Subject key identifier: 36:B3:61:F0:E5:51:D3:78:5D:31:4F:2E:8D:71:91:3B:A6:B8:A0:05
Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Certificate serial: 1E6B
Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/79AE82F8171711EBB12F2574C4F9AE02.roa
Signing time: Thu 30 Apr 2026 16:19:16 +0000
ROA not before: Thu 30 Apr 2026 16:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38880
IP address blocks: 27.131.64.0/18 maxlen: 24
27.131.80.0/21 maxlen: 23
27.131.80.0/22 maxlen: 24
27.131.84.0/23 maxlen: 24
27.131.100.0/22 maxlen: 24
43.245.68.0/24 maxlen: 24
43.245.69.0/24 maxlen: 24
43.245.70.0/24 maxlen: 24
43.245.71.0/24 maxlen: 24
103.13.56.0/22 maxlen: 24
103.31.28.0/22 maxlen: 24
103.204.106.0/23 maxlen: 24
103.213.100.0/22 maxlen: 24
111.223.224.0/20 maxlen: 22
111.223.224.0/24 maxlen: 24
111.223.225.0/24 maxlen: 24
111.223.226.0/24 maxlen: 24
111.223.227.0/24 maxlen: 24
111.223.228.0/24 maxlen: 24
111.223.229.0/24 maxlen: 24
111.223.231.0/24 maxlen: 24
111.223.232.0/24 maxlen: 24
111.223.233.0/24 maxlen: 24
111.223.234.0/24 maxlen: 24
111.223.235.0/24 maxlen: 24
111.223.236.0/24 maxlen: 24
111.223.237.0/24 maxlen: 24
111.223.238.0/24 maxlen: 24
111.223.239.0/24 maxlen: 24
119.31.224.0/21 maxlen: 24
192.140.140.0/22 maxlen: 24
2400:9c00::/32 maxlen: 32
2400:9c00::/44 maxlen: 48
2407:ca80::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7787 (0x1e6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Validity
Not Before: Apr 30 16:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f38103-e86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:a7:cd:9f:06:9a:dd:41:a2:98:84:00:70:
24:8b:54:07:73:57:2c:29:7b:3d:24:1e:1a:26:0b:
f5:5d:99:13:f9:49:3e:5f:a6:dc:58:bd:43:26:ea:
3a:25:48:82:a1:c3:df:57:0b:10:64:38:de:1d:61:
f6:0b:83:a1:de:56:09:ff:6f:01:f4:d6:13:43:06:
18:9a:84:55:fa:57:e3:3c:f6:dc:52:ce:48:5b:58:
9d:e4:95:de:7d:5f:72:7e:0a:d7:00:4f:e0:26:fa:
12:b6:ff:7c:3d:f0:77:9b:cd:ef:7a:fe:fd:08:ff:
ce:63:10:1c:eb:16:13:27:1d:ac:e9:c7:7a:0e:c9:
92:5b:35:12:80:3f:a9:af:4d:63:bc:57:a8:21:8f:
fd:2a:ae:64:d9:1e:ae:2e:46:40:f5:70:59:2e:e1:
9e:8f:53:59:b1:8e:aa:00:b1:b7:6d:61:d9:4c:bb:
1a:22:95:7b:35:cf:d6:68:6b:a8:ec:5c:b3:8a:9f:
3b:6f:d3:ff:5c:42:f4:28:53:2b:a1:f4:10:6b:f3:
0e:48:92:26:d0:ba:56:87:39:b9:ad:14:c2:13:78:
e7:7b:43:fb:67:43:a3:7d:6c:cf:27:da:ef:81:c1:
99:c4:f3:c7:28:c1:04:e1:60:70:66:cc:cf:fc:d8:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B3:61:F0:E5:51:D3:78:5D:31:4F:2E:8D:71:91:3B:A6:B8:A0:05
X509v3 Authority Key Identifier:
keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/79AE82F8171711EBB12F2574C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.64.0/18
43.245.68.0/22
103.13.56.0/22
103.31.28.0/22
103.204.106.0/23
103.213.100.0/22
111.223.224.0/20
119.31.224.0/21
192.140.140.0/22
IPv6:
2400:9c00::/32
2407:ca80::/32
Signature Algorithm: sha256WithRSAEncryption
a5:fa:f3:50:39:97:7c:1f:9c:88:1b:e3:05:c4:5c:8f:ed:7f:
45:d1:df:bb:df:33:f4:3b:c5:25:8a:98:9b:5c:6a:e1:87:35:
4d:72:2b:c2:3d:02:3c:fd:15:08:2a:9a:7c:bb:1d:52:ba:ad:
ba:8a:37:db:6e:0d:71:83:73:66:49:2f:92:8e:3e:e7:3d:b4:
5a:c4:e1:a6:4c:da:37:7a:8b:a8:59:55:ae:c2:67:3d:eb:b5:
bf:db:9c:17:c9:8e:ca:54:20:7c:bc:2e:0c:4e:96:f3:ed:94:
8e:69:64:f0:a4:ea:da:a7:8d:dc:35:b6:5e:f5:c4:e7:e3:c4:
b7:62:09:f5:9a:90:82:ca:4a:23:f1:a1:1c:f1:ae:2d:c8:5c:
5f:49:ee:1c:a9:0b:48:75:67:d3:7d:30:a3:ba:8b:d4:35:65:
ee:a2:fa:6b:fa:7a:48:93:cd:cb:e3:5a:d0:84:3e:5b:90:55:
bc:11:d9:b6:d1:3e:36:c4:78:bc:1f:92:fc:23:9a:4b:ae:33:
65:5f:22:d0:14:b7:c8:78:a0:fd:c3:c2:e3:d1:d9:d7:bf:84:
4d:11:b5:dc:11:36:67:ba:e8:d7:57:8f:11:db:0e:6d:85:bb:
20:a3:5b:d0:13:3b:d3:08:ca:70:24:aa:4f:d4:5b:00:00:c6:
5d:43:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:05 2026 by rpki-client