Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa
File: ACE4FD2C6D1711F085288D45C4F9AE02.roa (raw, json)
Hash identifier: riSPm8Um648H2O5onROefisDf6lA1aFxuieJBfuqrKc=
Subject key identifier: 5C:CB:F7:B7:C7:08:F3:B7:6B:65:EA:1E:4E:2F:75:45:34:D6:4F:E1
Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Certificate serial: 0BDC
Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa
Signing time: Fri 17 Oct 2025 06:05:54 +0000
ROA not before: Fri 17 Oct 2025 06:05:53 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 49.124.160.0/19 maxlen: 19
49.124.195.0/24 maxlen: 24
49.124.203.0/24 maxlen: 24
49.124.211.0/24 maxlen: 24
49.124.214.0/24 maxlen: 24
49.125.128.0/20 maxlen: 20
49.125.160.0/19 maxlen: 19
115.164.0.0/24 maxlen: 24
115.164.2.0/24 maxlen: 24
115.164.4.0/24 maxlen: 24
115.164.5.0/24 maxlen: 24
115.164.14.0/24 maxlen: 24
115.164.16.0/24 maxlen: 24
115.164.18.0/24 maxlen: 24
115.164.21.0/24 maxlen: 24
115.164.33.0/24 maxlen: 24
115.164.40.0/21 maxlen: 21
115.164.48.0/20 maxlen: 20
115.164.64.0/24 maxlen: 24
115.164.72.0/21 maxlen: 21
115.164.80.0/20 maxlen: 20
115.164.110.0/24 maxlen: 24
115.164.112.0/24 maxlen: 24
115.164.113.0/24 maxlen: 24
115.164.119.0/24 maxlen: 24
115.164.128.0/24 maxlen: 24
115.164.130.0/24 maxlen: 24
115.164.132.0/24 maxlen: 24
115.164.142.0/24 maxlen: 24
115.164.146.0/24 maxlen: 24
115.164.161.0/24 maxlen: 24
115.164.168.0/21 maxlen: 21
115.164.176.0/20 maxlen: 20
115.164.200.0/21 maxlen: 21
115.164.208.0/20 maxlen: 20
115.164.240.0/24 maxlen: 24
115.164.247.0/24 maxlen: 24
182.62.8.0/24 maxlen: 24
182.62.16.0/20 maxlen: 20
182.62.32.0/20 maxlen: 20
182.62.48.0/20 maxlen: 20
182.62.64.0/20 maxlen: 20
182.62.144.0/20 maxlen: 20
182.62.160.0/20 maxlen: 20
182.62.176.0/20 maxlen: 20
182.62.192.0/20 maxlen: 20
182.62.210.0/24 maxlen: 24
182.62.224.0/20 maxlen: 20
182.62.240.0/20 maxlen: 20
182.63.7.0/24 maxlen: 24
182.63.32.0/20 maxlen: 20
182.63.40.0/21 maxlen: 21
182.63.48.0/20 maxlen: 20
182.63.56.0/21 maxlen: 21
182.63.71.0/24 maxlen: 24
182.63.96.0/20 maxlen: 20
182.63.104.0/21 maxlen: 21
182.63.112.0/20 maxlen: 20
182.63.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 19:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3036 (0xbdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E
Validity
Not Before: Oct 17 06:05:53 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68f1dcc1-6050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:39:70:d2:f0:f0:03:3b:bf:7f:20:b0:6d:
24:ed:ee:f7:73:4e:cc:ac:1e:38:ed:6e:0e:06:dd:
5a:ce:c7:8a:02:55:e3:d6:48:49:65:8a:54:74:a6:
76:47:e5:ac:26:80:30:42:cd:73:4c:ad:25:f4:42:
34:72:ac:21:22:0b:38:d0:5e:2a:0d:52:aa:2f:ea:
6a:70:4b:44:1c:3c:6b:8b:a1:57:60:4c:ff:25:59:
a5:d1:87:7e:23:46:39:4e:8a:dc:54:ea:f4:7d:16:
18:26:47:1e:8c:d9:5c:24:5f:c7:73:d2:09:b4:67:
67:3e:0d:28:ec:02:90:76:e5:37:14:65:c7:df:8b:
4c:78:cc:3b:14:71:41:c2:a2:ed:a7:5f:28:1e:02:
08:e4:b2:69:8b:49:96:ad:99:4a:17:4c:10:a3:54:
35:26:0d:43:d7:c1:12:fa:43:47:d3:8f:21:24:38:
75:72:99:73:37:bf:b5:b6:a1:cc:a9:92:b5:1c:1d:
3b:7b:c0:47:50:29:3d:ce:4a:6c:57:04:e4:25:5d:
39:74:72:91:c7:1a:de:65:1f:8c:03:4e:6d:e6:58:
dc:8c:7c:67:c7:df:eb:d9:9f:f5:4b:63:f6:65:ac:
1d:06:2b:b7:bc:91:1a:ef:71:95:e5:68:92:0b:5e:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CB:F7:B7:C7:08:F3:B7:6B:65:EA:1E:4E:2F:75:45:34:D6:4F:E1
X509v3 Authority Key Identifier:
keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.124.160.0/19
49.124.195.0/24
49.124.203.0/24
49.124.211.0/24
49.124.214.0/24
49.125.128.0/20
49.125.160.0/19
115.164.0.0/24
115.164.2.0/24
115.164.4.0/23
115.164.14.0/24
115.164.16.0/24
115.164.18.0/24
115.164.21.0/24
115.164.33.0/24
115.164.40.0-115.164.64.255
115.164.72.0-115.164.95.255
115.164.110.0/24
115.164.112.0/23
115.164.119.0/24
115.164.128.0/24
115.164.130.0/24
115.164.132.0/24
115.164.142.0/24
115.164.146.0/24
115.164.161.0/24
115.164.168.0-115.164.191.255
115.164.200.0-115.164.223.255
115.164.240.0/24
115.164.247.0/24
182.62.8.0/24
182.62.16.0-182.62.79.255
182.62.144.0-182.62.207.255
182.62.210.0/24
182.62.224.0/19
182.63.7.0/24
182.63.32.0/19
182.63.71.0/24
182.63.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:a8:64:37:29:61:a5:b1:a6:9e:b0:24:8c:44:f6:69:a0:e7:
8e:de:dc:52:d1:29:d6:d0:75:69:67:26:26:98:d0:42:5b:91:
28:16:ae:0e:e2:e5:cc:7c:6c:87:3c:5e:25:84:85:ff:c6:5d:
a2:e4:5f:b6:db:9c:b5:5a:f0:92:44:86:15:be:25:0e:ca:bd:
87:18:6c:a9:8a:b4:dd:65:8b:f2:46:64:78:78:73:67:32:78:
d1:72:ea:6e:cc:8f:52:56:54:0b:e1:7c:89:d9:81:26:f8:49:
6f:09:d8:86:bc:6b:1b:6d:40:80:af:c8:c2:7d:61:d2:ba:01:
3a:36:ea:36:06:ab:b4:e7:72:f0:bf:24:61:92:5e:82:3b:6a:
ba:55:46:2e:57:75:97:3a:17:5d:dd:08:05:b8:eb:2d:fd:59:
fb:81:09:5a:4c:e9:0e:1e:49:30:a2:13:40:e4:51:6f:2e:05:
62:fe:40:f9:7d:28:76:5f:74:21:48:5e:ce:a5:d6:9d:95:f1:
a7:21:34:ce:6f:6f:71:c7:19:38:6d:51:c2:d2:90:70:7a:41:
4c:2a:76:fc:dc:be:8e:0b:b9:5a:13:3b:f0:ac:63:06:5b:e5:
7f:8d:4d:72:1e:39:c7:cb:ce:22:31:76:de:ca:6f:ea:22:1e:
48:0e:c8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:19:36 2025 by rpki-client