Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/42D4386CDFDB11F0A18E0FE3536F56BC.roa
File: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (raw, json)
Hash identifier: eUh3+0eNlTLz/GijzP1F9VFF/VuE/2wjuZ3Eqz98/Ac=
Subject key identifier: 37:6F:F2:E5:57:FE:3D:7F:3F:05:35:E1:00:02:D9:91:8D:BC:A5:5B
Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial: 0250
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/42D4386CDFDB11F0A18E0FE3536F56BC.roa
Signing time: Sun 01 Mar 2026 16:16:22 +0000
ROA not before: Tue 23 Dec 2025 08:45:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 45352
IP address blocks: 45.117.120.0/24 maxlen: 24
45.117.121.0/24 maxlen: 24
45.117.122.0/24 maxlen: 24
103.57.188.0/24 maxlen: 24
103.57.189.0/24 maxlen: 24
103.57.190.0/23 maxlen: 24
2403:1cc0::/48 maxlen: 48
2403:1cc0:1000::/48 maxlen: 48
2403:1cc0:1001::/48 maxlen: 48
2403:1cc0:1002::/48 maxlen: 48
2403:1cc0:1003::/48 maxlen: 48
2403:1cc0:1007::/48 maxlen: 48
2403:1cc0:1008::/48 maxlen: 48
2403:1cc0:1201::/48 maxlen: 48
2403:1cc0:1301::/48 maxlen: 48
2403:1cc0:1303::/48 maxlen: 48
2403:1cc0:1401::/48 maxlen: 48
2403:1cc0:2000::/48 maxlen: 48
2403:1cc0:2201::/48 maxlen: 48
2403:1cc0:2300::/48 maxlen: 48
2403:1cc0:3201::/48 maxlen: 48
2403:1cc0:3202::/48 maxlen: 48
2403:1cc0:3203::/48 maxlen: 48
2403:1cc0:4101::/48 maxlen: 48
2403:1cc0:5201::/48 maxlen: 48
2403:1cc0:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Validity
Not Before: Dec 23 08:45:18 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a46656-dfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:c6:1d:9f:72:88:b9:14:df:b5:73:e2:5f:
aa:b0:8a:84:53:50:c0:45:1e:6c:1b:8c:32:07:3e:
7f:ae:b9:e5:20:f7:0d:4a:d5:5c:1a:f9:06:23:99:
e4:91:5f:9b:9b:08:99:65:af:14:7f:c8:20:0d:ef:
85:5b:89:bc:ec:f0:72:43:69:0c:72:8b:1c:6a:e6:
c7:1f:93:fb:a6:eb:12:2f:da:b5:d5:93:ca:6c:9f:
69:da:23:fb:ed:b8:9b:83:ca:bf:6f:d0:1c:43:98:
85:e7:b0:a1:2f:2d:72:c5:50:e1:e2:72:65:55:89:
8e:c1:60:46:08:09:0a:44:06:4b:14:15:b6:fe:f6:
c3:5c:35:17:d1:b6:e9:7f:93:1f:37:d6:8f:27:81:
d7:d5:81:61:84:8c:00:e2:e9:17:5a:8b:5d:5d:02:
ed:64:1b:48:a6:fc:3f:3f:cc:4d:f6:95:e9:58:b1:
3b:b9:bf:16:aa:89:62:64:5e:83:75:dc:18:2a:ce:
e6:77:84:4c:c8:57:9c:4a:32:43:77:57:01:fb:65:
1f:ba:92:47:01:c9:b2:df:c5:83:00:86:cb:9f:5b:
70:99:41:f4:e9:9d:a1:59:1f:00:1b:57:09:c7:79:
1f:f1:5e:33:b0:b6:c7:83:2f:fd:84:61:00:16:44:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6F:F2:E5:57:FE:3D:7F:3F:05:35:E1:00:02:D9:91:8D:BC:A5:5B
X509v3 Authority Key Identifier:
keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/42D4386CDFDB11F0A18E0FE3536F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
45.117.120.0-45.117.122.255
103.57.188.0/22
IPv6:
2403:1cc0::/48
2403:1cc0:1000::/46
2403:1cc0:1007::-2403:1cc0:1008:ffff:ffff:ffff:ffff:ffff
2403:1cc0:1201::/48
2403:1cc0:1301::/48
2403:1cc0:1303::/48
2403:1cc0:1401::/48
2403:1cc0:2000::/48
2403:1cc0:2201::/48
2403:1cc0:2300::/48
2403:1cc0:3201::-2403:1cc0:3203:ffff:ffff:ffff:ffff:ffff
2403:1cc0:4101::/48
2403:1cc0:5201::/48
2403:1cc0:6000::/48
Signature Algorithm: sha256WithRSAEncryption
96:e2:12:bb:13:90:4a:f1:45:05:73:5c:99:8b:df:d6:c0:35:
97:db:33:c3:c8:f1:de:30:90:bc:84:2a:4a:8e:ca:87:6a:33:
3c:14:7b:cd:35:8d:23:08:19:16:99:ef:b7:9d:6a:5a:8e:38:
1a:fc:33:b3:db:42:68:34:e7:ee:f7:82:24:6c:0d:65:80:37:
ab:cb:0c:e0:02:7a:83:8b:63:0e:38:97:36:dd:81:fe:76:d8:
25:9a:8c:28:3f:ff:47:c8:d4:3e:fb:f3:53:48:58:6a:9b:d4:
2c:1f:3b:07:e6:56:48:fe:af:98:69:f7:ad:55:b7:e2:a1:25:
5f:d1:ee:f6:c5:ee:40:2b:8c:8b:3f:52:1a:d9:cf:52:7b:fc:
ec:1a:73:84:09:82:fa:83:c5:e8:2a:01:f0:7c:fb:7c:8b:30:
20:c3:ed:2a:8d:ac:26:61:30:aa:37:36:5f:1f:b8:df:6c:d0:
7e:5b:4e:e2:4f:08:97:cc:14:82:e5:37:3a:27:32:a9:9c:5c:
d8:49:63:0f:f6:a4:2d:d4:31:c8:36:43:cc:bf:f2:60:96:a0:
63:70:4a:37:6f:8a:c0:16:44:c8:96:12:4b:33:43:d8:07:81:
b0:90:b8:ec:d0:e7:c8:8b:a7:9d:a2:79:cd:f6:85:a0:f1:fe:
07:9b:b8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:42 2026 by rpki-client