Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
File: C264EF40348611F1AD86C498AC833773.roa (raw, json)
Hash identifier: tewYCBTY+k1CJy3yXBVqzyYUM1Ll0J+GEVfqO1IbyqU=
Subject key identifier: D4:85:BD:7B:46:2B:EA:38:49:FF:BA:26:7E:51:36:75:03:5B:74:D6
Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Certificate serial: 3544
Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
Signing time: Tue 12 May 2026 05:45:02 +0000
ROA not before: Tue 12 May 2026 05:45:02 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 23884
IP address blocks: 45.112.64.0/24 maxlen: 24
45.112.65.0/24 maxlen: 24
45.112.66.0/24 maxlen: 24
45.112.67.0/24 maxlen: 24
49.50.232.0/22 maxlen: 22
49.50.232.0/24 maxlen: 24
49.50.233.0/24 maxlen: 24
49.50.234.0/24 maxlen: 24
49.50.235.0/24 maxlen: 24
103.246.188.0/22 maxlen: 22
103.246.188.0/24 maxlen: 24
103.246.189.0/24 maxlen: 24
103.246.191.0/24 maxlen: 24
111.223.32.0/21 maxlen: 21
111.223.32.0/24 maxlen: 24
111.223.33.0/24 maxlen: 24
111.223.34.0/24 maxlen: 24
111.223.35.0/24 maxlen: 24
111.223.36.0/24 maxlen: 24
111.223.37.0/24 maxlen: 24
111.223.38.0/24 maxlen: 24
111.223.39.0/24 maxlen: 24
111.223.40.0/23 maxlen: 24
111.223.42.0/24 maxlen: 24
111.223.43.0/24 maxlen: 24
111.223.44.0/22 maxlen: 22
111.223.44.0/24 maxlen: 24
111.223.45.0/24 maxlen: 24
111.223.46.0/24 maxlen: 24
111.223.47.0/24 maxlen: 24
111.223.48.0/20 maxlen: 20
111.223.48.0/21 maxlen: 21
111.223.49.0/24 maxlen: 24
111.223.50.0/24 maxlen: 24
111.223.51.0/24 maxlen: 24
111.223.52.0/24 maxlen: 24
111.223.53.0/24 maxlen: 24
111.223.55.0/24 maxlen: 24
111.223.57.0/24 maxlen: 24
111.223.58.0/23 maxlen: 24
111.223.60.0/22 maxlen: 22
111.223.60.0/24 maxlen: 24
111.223.61.0/24 maxlen: 24
111.223.62.0/24 maxlen: 24
111.223.63.0/24 maxlen: 24
112.121.128.0/21 maxlen: 21
112.121.129.0/24 maxlen: 24
112.121.130.0/24 maxlen: 24
112.121.131.0/24 maxlen: 24
112.121.132.0/24 maxlen: 24
112.121.133.0/24 maxlen: 24
112.121.134.0/24 maxlen: 24
112.121.135.0/24 maxlen: 24
112.121.136.0/22 maxlen: 23
112.121.138.0/23 maxlen: 24
112.121.140.0/24 maxlen: 24
112.121.141.0/24 maxlen: 24
112.121.142.0/23 maxlen: 24
112.121.144.0/20 maxlen: 20
112.121.144.0/24 maxlen: 24
112.121.145.0/24 maxlen: 24
112.121.147.0/24 maxlen: 24
112.121.148.0/24 maxlen: 24
112.121.149.0/24 maxlen: 24
112.121.150.0/24 maxlen: 24
112.121.151.0/24 maxlen: 24
112.121.152.0/24 maxlen: 24
112.121.155.0/24 maxlen: 24
112.121.156.0/24 maxlen: 24
112.121.157.0/24 maxlen: 24
112.121.158.0/24 maxlen: 24
112.121.159.0/24 maxlen: 24
202.8.84.0/22 maxlen: 22
202.8.84.0/24 maxlen: 24
202.8.85.0/24 maxlen: 24
202.151.176.0/23 maxlen: 23
202.151.178.0/24 maxlen: 24
202.151.179.0/24 maxlen: 24
202.151.180.0/24 maxlen: 24
202.151.181.0/24 maxlen: 24
202.151.182.0/24 maxlen: 24
202.151.183.0/24 maxlen: 24
202.151.184.0/24 maxlen: 24
202.151.185.0/24 maxlen: 24
202.151.188.0/24 maxlen: 24
202.151.189.0/24 maxlen: 24
202.151.190.0/24 maxlen: 24
202.151.191.0/24 maxlen: 24
202.162.76.0/22 maxlen: 22
202.162.76.0/24 maxlen: 24
202.162.77.0/24 maxlen: 24
202.162.78.0/24 maxlen: 24
202.162.79.0/24 maxlen: 24
202.170.112.0/20 maxlen: 20
202.170.112.0/24 maxlen: 24
202.170.113.0/24 maxlen: 24
202.170.114.0/23 maxlen: 23
202.170.116.0/23 maxlen: 23
202.170.117.0/24 maxlen: 24
202.170.118.0/23 maxlen: 24
202.170.120.0/23 maxlen: 23
202.170.122.0/23 maxlen: 23
202.170.124.0/24 maxlen: 24
202.170.125.0/24 maxlen: 24
202.170.126.0/23 maxlen: 23
202.170.127.0/24 maxlen: 24
2400:ea00::/48 maxlen: 48
2400:ea00:3560::/48 maxlen: 48
2400:ea00:3561::/48 maxlen: 48
2400:ea00:c010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13636 (0x3544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD
Validity
Not Before: May 12 05:45:02 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a02be5e-30f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:28:51:88:63:cc:1b:14:96:a2:9c:45:fe:
23:f2:30:34:95:f0:e7:4e:d0:d6:28:d6:c4:7e:2f:
66:8a:72:e2:4e:f8:20:5b:9f:d5:4f:39:80:4d:ca:
d6:62:3f:08:4a:95:94:02:5f:a1:f9:f3:8c:61:80:
c3:45:23:c1:b2:93:66:b4:48:78:31:58:bf:8d:c3:
41:cd:12:ed:53:72:c1:e9:12:16:f9:1b:60:c2:d4:
ca:a6:31:9b:68:2b:30:ff:cb:ef:4f:11:ba:3e:5c:
dc:b4:21:18:51:42:1e:01:8d:44:bf:58:14:98:b0:
fa:d6:74:8c:a3:15:e4:a5:b6:ad:f4:f8:e6:d5:bb:
a0:27:06:a9:0f:c5:37:fc:d4:3e:9f:0d:73:3c:2d:
45:97:0a:d7:e2:67:c9:0a:ba:10:16:0a:04:9b:a4:
d1:d2:b2:d9:6b:9b:dc:d9:05:8d:74:85:14:2d:5d:
22:ac:39:6e:78:90:ea:fd:42:d3:0e:13:14:e4:cd:
9e:44:44:c6:98:1d:33:5e:1e:ef:e7:96:5c:6d:64:
76:2a:b4:34:3b:32:4c:ce:90:88:d5:09:1d:b0:b5:
33:0f:3e:1d:f1:af:5d:b6:6a:e4:c1:dc:a8:a0:0a:
28:8a:63:d5:ed:14:15:55:3e:4a:7c:c4:8a:b8:0e:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:BD:7B:46:2B:EA:38:49:FF:BA:26:7E:51:36:75:03:5B:74:D6
X509v3 Authority Key Identifier:
keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/C264EF40348611F1AD86C498AC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.64.0/22
49.50.232.0/22
103.246.188.0/22
111.223.32.0/19
112.121.128.0/19
202.8.84.0/22
202.151.176.0-202.151.185.255
202.151.188.0/22
202.162.76.0/22
202.170.112.0/20
IPv6:
2400:ea00::/48
2400:ea00:3560::/47
2400:ea00:c010::/48
Signature Algorithm: sha256WithRSAEncryption
52:d5:34:d4:d8:bd:2b:9f:38:93:8b:e1:58:60:0e:57:38:8e:
20:06:d5:80:4b:d6:5e:c6:de:60:da:c3:63:77:32:4c:35:fc:
ad:8b:b6:4c:b9:26:1f:5e:eb:c0:4d:c4:1f:26:13:b8:af:17:
a4:c9:c3:f6:de:7a:08:df:11:3b:44:b3:57:dc:ba:2a:1f:ee:
34:1b:2e:26:a6:a5:27:71:3e:32:d8:76:a0:f7:7a:a9:6a:60:
98:97:f5:b3:2e:6f:3f:f3:94:fb:26:30:24:4d:ea:a6:81:ee:
69:ea:23:be:f5:07:20:21:43:0f:11:c6:1a:ac:9c:7a:83:fd:
17:13:4e:60:fb:b8:64:5c:61:65:25:2e:91:27:1e:97:67:91:
7e:ed:b0:47:72:1f:ef:d6:ac:84:d2:1c:96:c0:73:fe:bc:5a:
e0:13:9b:61:66:93:59:73:96:35:45:d6:35:b4:e7:7c:59:8b:
e7:7b:7f:92:f4:2b:bc:67:18:a0:73:e9:f4:ea:eb:8c:68:68:
2d:b5:c1:e0:5e:e7:ea:c5:a1:04:0e:46:ba:df:52:2b:ad:95:
6d:bb:5f:f3:93:1c:1b:e6:2a:af:20:a0:7e:bb:2f:b0:cc:9f:
55:57:63:3c:f7:f0:0f:01:7a:56:41:a8:98:65:e8:9c:16:64:
76:07:84:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:25:08 2026 by rpki-client