Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa
File: ACE4FD2C6D1711F085288D45C4F9AE02.roa (raw, json)
Hash identifier: YVN5SpPYLF//k5lnvV0yzIgyMCr1Wwb5cyfloJQsy/k=
Subject key identifier: 44:FE:9E:A6:66:EB:00:96:03:93:08:65:3F:DD:52:AF:5D:EA:2B:49
Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Certificate serial: 0C28
Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:25:06 +0000
ROA not before: Fri 17 Oct 2025 06:05:53 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 49.124.160.0/19 maxlen: 19
49.124.195.0/24 maxlen: 24
49.124.203.0/24 maxlen: 24
49.124.211.0/24 maxlen: 24
49.124.214.0/24 maxlen: 24
49.125.128.0/20 maxlen: 20
49.125.160.0/19 maxlen: 19
115.164.0.0/24 maxlen: 24
115.164.2.0/24 maxlen: 24
115.164.4.0/24 maxlen: 24
115.164.5.0/24 maxlen: 24
115.164.14.0/24 maxlen: 24
115.164.16.0/24 maxlen: 24
115.164.18.0/24 maxlen: 24
115.164.21.0/24 maxlen: 24
115.164.33.0/24 maxlen: 24
115.164.40.0/21 maxlen: 21
115.164.48.0/20 maxlen: 20
115.164.64.0/24 maxlen: 24
115.164.72.0/21 maxlen: 21
115.164.80.0/20 maxlen: 20
115.164.110.0/24 maxlen: 24
115.164.112.0/24 maxlen: 24
115.164.113.0/24 maxlen: 24
115.164.119.0/24 maxlen: 24
115.164.128.0/24 maxlen: 24
115.164.130.0/24 maxlen: 24
115.164.132.0/24 maxlen: 24
115.164.142.0/24 maxlen: 24
115.164.146.0/24 maxlen: 24
115.164.161.0/24 maxlen: 24
115.164.168.0/21 maxlen: 21
115.164.176.0/20 maxlen: 20
115.164.200.0/21 maxlen: 21
115.164.208.0/20 maxlen: 20
115.164.240.0/24 maxlen: 24
115.164.247.0/24 maxlen: 24
182.62.8.0/24 maxlen: 24
182.62.16.0/20 maxlen: 20
182.62.32.0/20 maxlen: 20
182.62.48.0/20 maxlen: 20
182.62.64.0/20 maxlen: 20
182.62.144.0/20 maxlen: 20
182.62.160.0/20 maxlen: 20
182.62.176.0/20 maxlen: 20
182.62.192.0/20 maxlen: 20
182.62.210.0/24 maxlen: 24
182.62.224.0/20 maxlen: 20
182.62.240.0/20 maxlen: 20
182.63.7.0/24 maxlen: 24
182.63.32.0/20 maxlen: 20
182.63.40.0/21 maxlen: 21
182.63.48.0/20 maxlen: 20
182.63.56.0/21 maxlen: 21
182.63.71.0/24 maxlen: 24
182.63.96.0/20 maxlen: 20
182.63.104.0/21 maxlen: 21
182.63.112.0/20 maxlen: 20
182.63.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3112 (0xc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Validity
Not Before: Oct 17 06:05:53 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a48482-c950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:8c:99:ee:f4:81:e9:4c:fa:bb:bf:ce:5a:
73:31:c8:bb:13:d4:e4:cc:ba:eb:c9:88:6d:b4:21:
1a:ab:a8:38:62:a6:02:c1:4f:e9:6f:26:fc:c4:6f:
44:c7:70:73:fd:b2:38:a5:05:06:13:cd:d6:12:94:
e7:19:ed:e7:8e:05:c4:c2:b6:c9:22:f2:f5:fc:a3:
c5:18:ad:b4:aa:c6:98:df:06:48:24:d8:b1:6f:bb:
ca:ba:2b:48:4e:ee:1d:39:8a:49:e7:04:fc:0b:91:
a1:b2:6d:95:bc:96:82:50:77:72:3b:b2:38:91:d8:
f3:1b:24:b2:c6:62:5a:16:af:a4:d3:06:2b:23:33:
af:f2:38:3b:48:bd:53:fb:df:dc:a3:84:bc:8c:f8:
de:46:d1:35:09:d1:3b:c9:c2:83:8a:37:09:c6:03:
f9:b5:f3:42:7a:d0:ad:23:5d:cd:b6:03:71:3d:e5:
1c:31:05:ab:97:e1:f3:2d:6c:63:4a:a5:24:6f:be:
c7:35:08:fa:38:99:a3:bd:0a:94:47:26:58:ce:d7:
d3:40:16:1e:bd:aa:be:db:35:cc:74:94:b2:10:24:
83:fd:d6:ba:7b:d9:72:5a:e8:b6:d0:90:68:9e:ea:
24:ca:81:6d:bb:86:a8:da:bb:0c:af:f2:98:2d:ba:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:9E:A6:66:EB:00:96:03:93:08:65:3F:DD:52:AF:5D:EA:2B:49
X509v3 Authority Key Identifier:
keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.124.160.0/19
49.124.195.0/24
49.124.203.0/24
49.124.211.0/24
49.124.214.0/24
49.125.128.0/20
49.125.160.0/19
115.164.0.0/24
115.164.2.0/24
115.164.4.0/23
115.164.14.0/24
115.164.16.0/24
115.164.18.0/24
115.164.21.0/24
115.164.33.0/24
115.164.40.0-115.164.64.255
115.164.72.0-115.164.95.255
115.164.110.0/24
115.164.112.0/23
115.164.119.0/24
115.164.128.0/24
115.164.130.0/24
115.164.132.0/24
115.164.142.0/24
115.164.146.0/24
115.164.161.0/24
115.164.168.0-115.164.191.255
115.164.200.0-115.164.223.255
115.164.240.0/24
115.164.247.0/24
182.62.8.0/24
182.62.16.0-182.62.79.255
182.62.144.0-182.62.207.255
182.62.210.0/24
182.62.224.0/19
182.63.7.0/24
182.63.32.0/19
182.63.71.0/24
182.63.96.0/19
Signature Algorithm: sha256WithRSAEncryption
12:5a:14:75:28:ff:ac:c6:70:4e:f2:2d:ff:f0:38:19:a7:74:
57:c2:4d:49:33:4a:34:90:31:6c:5a:6e:20:d3:fe:16:c4:15:
fb:ea:a1:59:30:16:a7:07:cb:d8:37:8a:10:61:cc:e3:ed:64:
16:28:77:4c:4f:bc:79:14:96:2e:4d:18:ff:da:9d:65:a7:3d:
06:0c:f6:67:09:64:d4:48:a5:24:60:eb:fd:d5:8e:ea:1e:3b:
2d:3f:4b:fe:4b:a9:ec:df:70:11:08:d9:1a:a5:7f:ba:f6:15:
cd:1c:3f:b5:f7:a6:5a:34:99:d1:5f:19:1c:6d:86:15:4a:fb:
c1:82:e4:f4:6f:66:2e:21:08:b2:e3:82:73:39:49:78:e1:43:
d8:ef:4a:f4:fc:0f:e8:2b:e6:79:a4:a8:89:53:13:bd:d8:c5:
00:61:8e:71:4d:a3:b3:0d:78:ba:51:88:b5:a1:95:80:ae:e6:
3b:c8:74:ec:3b:ab:fc:ef:39:9b:fa:9e:ab:fa:04:bc:1a:5b:
84:3d:d8:11:f3:77:4f:00:83:81:a1:5c:65:62:0c:f6:5d:7c:
9f:af:d4:c7:b7:03:48:46:60:31:e3:31:2c:90:f1:dc:a3:22:
76:53:c9:bc:12:e3:b3:4f:67:80:b1:0e:b9:0e:57:b8:d1:06:
23:b6:bc:b4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:39 2026 by rpki-client