Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/4613ED02B1A811F1864819613311F970.roa
File: 4613ED02B1A811F1864819613311F970.roa (raw, json)
Hash identifier: xviOW9Ortpkk3HZFm9hDj2p9TI43GQ/HK1kFpWzTV+E=
Subject key identifier: 19:FC:E6:19:3E:2E:11:7D:42:0B:E5:C0:FE:72:7D:F0:18:64:2E:69
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 08FC
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/4613ED02B1A811F1864819613311F970.roa
Signing time: Sun 20 Sep 2026 02:23:09 +0000
ROA not before: Sun 20 Sep 2026 02:23:09 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 21859
IP address blocks: 129.227.17.0/24 maxlen: 24
129.227.18.0/24 maxlen: 24
129.227.19.0/24 maxlen: 24
129.227.29.0/24 maxlen: 24
129.227.30.0/24 maxlen: 24
129.227.31.0/24 maxlen: 24
129.227.63.0/24 maxlen: 24
129.227.124.0/24 maxlen: 24
129.227.125.0/24 maxlen: 24
129.227.176.0/23 maxlen: 24
129.227.192.0/24 maxlen: 24
129.227.193.0/24 maxlen: 24
129.227.194.0/23 maxlen: 24
156.59.16.0/22 maxlen: 24
156.59.37.0/24 maxlen: 24
156.59.48.0/23 maxlen: 24
156.59.50.0/23 maxlen: 24
156.59.52.0/22 maxlen: 24
156.59.73.0/24 maxlen: 24
156.59.80.0/21 maxlen: 24
156.59.94.0/23 maxlen: 24
156.59.108.0/24 maxlen: 24
156.59.123.0/24 maxlen: 24
156.59.128.0/21 maxlen: 24
156.59.136.0/21 maxlen: 24
156.59.146.0/24 maxlen: 24
156.59.179.0/24 maxlen: 24
156.59.216.0/24 maxlen: 24
156.59.224.0/24 maxlen: 24
156.59.225.0/24 maxlen: 24
156.59.241.0/24 maxlen: 24
156.59.246.0/23 maxlen: 24
156.59.255.0/24 maxlen: 24
162.128.43.0/24 maxlen: 24
162.128.44.0/24 maxlen: 24
162.128.53.0/24 maxlen: 24
162.128.54.0/24 maxlen: 24
162.128.55.0/24 maxlen: 24
162.128.56.0/24 maxlen: 24
162.128.57.0/24 maxlen: 24
162.128.58.0/24 maxlen: 24
162.128.59.0/24 maxlen: 24
162.128.60.0/24 maxlen: 24
162.128.61.0/24 maxlen: 24
162.128.62.0/24 maxlen: 24
162.128.63.0/24 maxlen: 24
162.128.96.0/24 maxlen: 24
162.128.97.0/24 maxlen: 24
162.128.98.0/24 maxlen: 24
162.128.99.0/24 maxlen: 24
162.128.100.0/24 maxlen: 24
162.128.102.0/24 maxlen: 24
162.128.103.0/24 maxlen: 24
162.128.105.0/24 maxlen: 24
162.128.107.0/24 maxlen: 24
162.128.109.0/24 maxlen: 24
162.128.110.0/24 maxlen: 24
162.128.111.0/24 maxlen: 24
162.128.112.0/24 maxlen: 24
162.128.114.0/24 maxlen: 24
162.128.115.0/24 maxlen: 24
162.128.116.0/24 maxlen: 24
162.128.117.0/24 maxlen: 24
162.128.118.0/24 maxlen: 24
162.128.119.0/24 maxlen: 24
162.128.121.0/24 maxlen: 24
162.128.122.0/24 maxlen: 24
162.128.123.0/24 maxlen: 24
162.128.124.0/24 maxlen: 24
162.128.125.0/24 maxlen: 24
162.128.126.0/24 maxlen: 24
162.128.134.0/24 maxlen: 24
162.128.135.0/24 maxlen: 24
162.128.140.0/24 maxlen: 24
162.128.149.0/24 maxlen: 24
162.128.150.0/24 maxlen: 24
162.128.151.0/24 maxlen: 24
162.128.156.0/24 maxlen: 24
162.128.183.0/24 maxlen: 24
162.128.186.0/24 maxlen: 24
162.128.196.0/24 maxlen: 24
162.128.197.0/24 maxlen: 24
162.128.198.0/24 maxlen: 24
162.128.199.0/24 maxlen: 24
162.128.200.0/24 maxlen: 24
162.128.201.0/24 maxlen: 24
162.128.202.0/24 maxlen: 24
162.128.203.0/24 maxlen: 24
162.128.204.0/24 maxlen: 24
162.128.205.0/24 maxlen: 24
162.128.206.0/24 maxlen: 24
162.128.207.0/24 maxlen: 24
162.128.208.0/24 maxlen: 24
162.128.209.0/24 maxlen: 24
162.128.210.0/24 maxlen: 24
162.128.211.0/24 maxlen: 24
162.128.213.0/24 maxlen: 24
162.128.214.0/24 maxlen: 24
162.128.215.0/24 maxlen: 24
162.128.216.0/24 maxlen: 24
162.128.217.0/24 maxlen: 24
162.128.218.0/24 maxlen: 24
162.128.219.0/24 maxlen: 24
162.128.220.0/24 maxlen: 24
162.128.221.0/24 maxlen: 24
162.128.222.0/24 maxlen: 24
162.128.223.0/24 maxlen: 24
162.128.224.0/24 maxlen: 24
162.128.225.0/24 maxlen: 24
162.128.226.0/24 maxlen: 24
162.128.227.0/24 maxlen: 24
162.128.228.0/24 maxlen: 24
162.128.229.0/24 maxlen: 24
162.128.230.0/24 maxlen: 24
162.128.231.0/24 maxlen: 24
162.128.232.0/24 maxlen: 24
162.128.233.0/24 maxlen: 24
162.128.234.0/24 maxlen: 24
162.128.235.0/24 maxlen: 24
162.128.236.0/24 maxlen: 24
162.128.237.0/24 maxlen: 24
162.128.238.0/24 maxlen: 24
162.128.239.0/24 maxlen: 24
162.128.240.0/24 maxlen: 24
162.128.241.0/24 maxlen: 24
162.128.242.0/24 maxlen: 24
162.128.243.0/24 maxlen: 24
162.128.244.0/24 maxlen: 24
162.128.245.0/24 maxlen: 24
162.128.246.0/24 maxlen: 24
162.128.247.0/24 maxlen: 24
162.128.248.0/24 maxlen: 24
162.128.249.0/24 maxlen: 24
162.128.250.0/24 maxlen: 24
162.128.251.0/24 maxlen: 24
162.128.252.0/24 maxlen: 24
162.128.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300 (0x8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Sep 20 02:23:09 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aaf438d-41a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:49:c7:09:e5:f5:b8:3f:e6:c9:b8:1f:87:
6b:fc:8a:2f:9e:63:8a:39:31:b3:f7:db:93:9f:f7:
5d:3f:0e:24:70:ab:7d:bf:65:25:b0:9c:b0:7e:a9:
13:c7:6d:1e:bd:63:40:f9:0d:42:4f:2f:54:cf:af:
80:90:07:7b:67:5d:af:9b:35:e8:f2:5a:92:d6:9d:
a7:fc:36:78:28:99:2b:89:ad:57:e3:6d:78:9e:9f:
2c:58:68:7f:45:35:ca:fb:58:44:5b:54:87:c8:bc:
75:bb:22:32:eb:39:26:00:5d:f5:7c:f0:fe:91:58:
09:61:50:0b:96:df:70:c4:67:a8:77:af:f6:b2:07:
fa:3d:e6:09:0a:30:96:38:d1:41:43:53:34:45:f7:
d2:8a:8f:9f:af:99:3f:80:af:9b:54:4c:9d:7c:9a:
24:fb:46:72:5e:d4:c6:1e:27:65:a9:24:6d:ba:8b:
82:dd:91:f5:3d:b9:7d:0e:56:c5:04:45:98:1f:3d:
9b:ee:e0:d9:ed:31:eb:49:e1:88:41:7b:2a:ce:48:
93:e6:21:b6:f6:34:fb:bf:e5:18:e0:f4:17:aa:50:
39:85:ad:01:a5:f6:5a:50:34:82:9f:42:97:3c:43:
26:6b:8f:f0:9a:ae:95:70:bb:c6:74:36:65:11:1b:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:E6:19:3E:2E:11:7D:42:0B:E5:C0:FE:72:7D:F0:18:64:2E:69
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/4613ED02B1A811F1864819613311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
129.227.17.0-129.227.19.255
129.227.29.0-129.227.31.255
129.227.63.0/24
129.227.124.0/23
129.227.176.0/23
129.227.192.0/22
156.59.16.0/22
156.59.37.0/24
156.59.48.0/21
156.59.73.0/24
156.59.80.0/21
156.59.94.0/23
156.59.108.0/24
156.59.123.0/24
156.59.128.0/20
156.59.146.0/24
156.59.179.0/24
156.59.216.0/24
156.59.224.0/23
156.59.241.0/24
156.59.246.0/23
156.59.255.0/24
162.128.43.0-162.128.44.255
162.128.53.0-162.128.63.255
162.128.96.0-162.128.100.255
162.128.102.0/23
162.128.105.0/24
162.128.107.0/24
162.128.109.0-162.128.112.255
162.128.114.0-162.128.119.255
162.128.121.0-162.128.126.255
162.128.134.0/23
162.128.140.0/24
162.128.149.0-162.128.151.255
162.128.156.0/24
162.128.183.0/24
162.128.186.0/24
162.128.196.0-162.128.211.255
162.128.213.0-162.128.252.255
162.128.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:71:b9:49:29:5b:31:0a:4f:c3:79:f8:b4:3e:e1:8a:28:3b:
5f:ed:d3:3d:9c:8c:46:f4:03:ae:19:dd:ff:2d:86:56:0b:d3:
8b:c1:0c:89:ba:1f:8b:df:0e:90:6e:fe:77:d2:f3:5f:33:f7:
78:b2:cc:63:ba:79:50:72:cc:88:de:d1:11:92:4f:ba:73:a7:
f0:ef:c6:38:5f:bd:c5:75:53:eb:d8:c0:3c:f3:85:bb:b3:52:
4a:fc:8e:70:62:51:c6:b7:b4:c4:c2:a1:b3:13:86:67:49:ed:
c6:a3:2a:d8:c8:55:09:8a:86:cc:d6:d7:92:9c:c2:54:2d:41:
ad:eb:b4:d6:9d:2c:4e:1c:f6:34:0d:26:8d:03:3f:07:5b:22:
ee:df:2d:3a:c4:dd:17:1c:9c:60:21:60:01:28:44:fe:45:48:
0f:a1:c9:3b:74:c8:ff:b5:ee:57:02:a9:6a:9e:00:82:64:42:
34:69:ae:0c:c5:27:7d:2c:4d:e1:29:5d:66:c8:57:fe:66:6d:
0d:33:74:39:f3:ca:e2:99:57:69:03:e3:2a:f9:f6:c4:89:ca:
18:9d:30:0d:33:71:ea:d2:33:46:88:e7:95:ad:19:37:4d:9b:
f9:af:0d:7e:78:f6:b4:3e:16:d0:65:0b:98:64:fc:e6:14:ff:
c0:70:1e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:28:18 2026 by rpki-client