Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/37A46070F6F211EA922F482BC4F9AE02.roa
File: 37A46070F6F211EA922F482BC4F9AE02.roa (raw, json)
Hash identifier: ZeQnkxNJvn+HBU15Tm2A7hUW0hK8weWdyAyd5/d7yZ8=
Subject key identifier: A9:2D:DD:F3:95:5A:09:14:D7:4D:99:A0:57:C5:BE:39:21:FE:04:C9
Certificate issuer: /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5
Certificate serial: 08C5
Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/37A46070F6F211EA922F482BC4F9AE02.roa
Signing time: Tue 30 Jun 2026 21:26:15 +0000
ROA not before: Tue 30 Jun 2026 21:26:15 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 17978
IP address blocks: 61.28.192.0/24 maxlen: 24
61.28.193.0/24 maxlen: 24
61.28.194.0/24 maxlen: 24
61.28.195.0/24 maxlen: 24
61.28.196.0/24 maxlen: 24
61.28.197.0/24 maxlen: 24
61.28.198.0/24 maxlen: 24
61.28.199.0/24 maxlen: 24
61.28.200.0/24 maxlen: 24
61.28.201.0/24 maxlen: 24
61.28.202.0/24 maxlen: 24
61.28.203.0/24 maxlen: 24
61.28.204.0/24 maxlen: 24
61.28.205.0/24 maxlen: 24
61.28.206.0/24 maxlen: 24
61.28.207.0/24 maxlen: 24
61.28.208.0/24 maxlen: 24
61.28.209.0/24 maxlen: 24
61.28.210.0/24 maxlen: 24
61.28.211.0/24 maxlen: 24
61.28.212.0/24 maxlen: 24
61.28.213.0/24 maxlen: 24
61.28.214.0/24 maxlen: 24
61.28.215.0/24 maxlen: 24
61.28.216.0/24 maxlen: 24
61.28.217.0/24 maxlen: 24
61.28.218.0/24 maxlen: 24
61.28.219.0/24 maxlen: 24
61.28.220.0/24 maxlen: 24
61.28.221.0/24 maxlen: 24
61.28.222.0/24 maxlen: 24
61.28.223.0/24 maxlen: 24
103.1.60.0/22 maxlen: 24
115.85.129.0/24 maxlen: 24
115.85.130.0/24 maxlen: 24
115.85.132.0/24 maxlen: 24
115.85.133.0/24 maxlen: 24
115.85.134.0/24 maxlen: 24
115.85.135.0/24 maxlen: 24
203.215.128.0/24 maxlen: 24
203.215.129.0/24 maxlen: 24
203.215.130.0/24 maxlen: 24
203.215.131.0/24 maxlen: 24
203.215.132.0/24 maxlen: 24
203.215.133.0/24 maxlen: 24
203.215.134.0/24 maxlen: 24
203.215.135.0/24 maxlen: 24
203.215.136.0/24 maxlen: 24
203.215.137.0/24 maxlen: 24
203.215.138.0/24 maxlen: 24
203.215.139.0/24 maxlen: 24
203.215.140.0/24 maxlen: 24
203.215.141.0/24 maxlen: 24
203.215.142.0/24 maxlen: 24
203.215.143.0/24 maxlen: 24
203.215.144.0/24 maxlen: 24
203.215.145.0/24 maxlen: 24
203.215.146.0/24 maxlen: 24
203.215.147.0/24 maxlen: 24
203.215.148.0/24 maxlen: 24
203.215.149.0/24 maxlen: 24
203.215.150.0/24 maxlen: 24
203.215.151.0/24 maxlen: 24
203.215.152.0/24 maxlen: 24
203.215.154.0/24 maxlen: 24
203.215.155.0/24 maxlen: 24
203.215.156.0/24 maxlen: 24
203.215.157.0/24 maxlen: 24
203.215.158.0/24 maxlen: 24
203.215.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl
rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1BAB, serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5
Validity
Not Before: Jun 30 21:26:15 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a443476-353a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:e0:ce:2d:17:1b:e2:9e:aa:79:e6:ce:dd:
87:bc:f8:b8:3a:10:8a:1b:55:c7:8c:ae:dc:d1:28:
fc:62:ff:97:0f:70:2e:6f:ff:98:1b:6b:b6:6f:1c:
56:29:af:a0:63:9c:0f:56:72:3f:59:f9:33:ab:89:
8d:26:40:47:d5:8f:2e:78:0b:61:86:15:94:7d:5a:
6c:8e:54:f3:c3:ca:2f:12:49:bd:f6:5c:28:6c:d8:
98:4d:b0:02:64:05:b2:d2:ec:56:72:f3:7f:d2:b4:
2a:92:94:98:02:9d:28:e0:ee:e5:16:4e:06:12:6f:
19:51:02:b2:2e:1b:25:cd:4d:9a:1c:2e:42:45:42:
06:31:1a:31:c1:99:a6:77:42:71:69:3d:2c:2b:67:
0c:0c:af:56:ef:dc:5d:4c:0e:9a:b2:0b:6e:e2:08:
78:f9:46:33:20:75:8d:d4:aa:79:68:c5:c0:a3:75:
2b:54:dc:28:04:46:71:29:9a:30:82:42:8c:dc:21:
6a:5b:18:4a:92:ee:7b:fd:01:24:ce:ef:db:ab:77:
41:15:33:6e:09:82:4b:58:26:b2:b4:16:a7:80:1c:
23:37:3c:fd:8d:b1:28:c9:20:04:5a:ad:ed:32:fd:
6c:0e:f5:f9:ed:c9:af:b0:fc:b7:01:c2:1c:e7:55:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2D:DD:F3:95:5A:09:14:D7:4D:99:A0:57:C5:BE:39:21:FE:04:C9
X509v3 Authority Key Identifier:
keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/37A46070F6F211EA922F482BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.28.192.0/19
103.1.60.0/22
115.85.129.0-115.85.130.255
115.85.132.0/22
203.215.128.0-203.215.152.255
203.215.154.0-203.215.159.255
Signature Algorithm: sha256WithRSAEncryption
d6:c3:3b:7b:9a:58:1c:29:b5:05:0d:05:0c:f3:c1:f5:c1:ae:
de:51:dd:9e:b6:e3:d9:91:63:f6:06:3c:f2:fc:c8:b2:ea:82:
fb:5a:6f:92:fa:f0:bf:43:84:44:f5:6d:c1:ee:00:34:88:70:
f1:11:35:57:f3:b0:fe:dc:8e:45:a5:ea:1e:a9:35:72:62:64:
f1:58:eb:30:f4:0e:e5:a0:5d:9e:17:e3:4d:0e:54:e9:0f:42:
cb:2a:a6:4a:3d:78:87:aa:b6:37:31:a7:b5:d5:6d:2e:12:de:
dd:89:52:92:29:0d:ba:63:32:a9:ea:ab:34:fa:d6:c2:93:47:
ae:f0:73:86:fb:c0:3f:0e:9d:db:64:cf:65:7f:97:2d:64:a2:
db:e7:a4:21:55:04:a0:e4:ec:97:f6:4f:24:ab:06:7c:09:78:
fc:2b:8e:33:c8:85:b7:1e:e3:82:58:5e:65:6c:ff:e1:90:e7:
cb:6a:65:ff:09:80:13:d1:41:20:5a:2d:c5:72:6e:b8:17:db:
a6:62:61:1f:ac:5e:e7:46:08:64:21:d6:8b:5a:88:34:05:5a:
31:15:28:7f:ac:cf:da:39:df:32:4f:27:87:d5:a2:67:91:fa:
97:9a:40:e3:25:6a:9f:29:44:a7:bc:b8:a1:62:99:d4:a0:4e:
88:08:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:15 2026 by rpki-client