Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
File: FD6881C4438111ECBC63AC7BC4F9AE02.roa (raw, json)
Hash identifier: ugnh2SKs5pUN1sciv4Z2+oJiPmP5pRYlU4H3H/Zco3A=
Subject key identifier: 4B:D2:AC:78:68:CF:01:5D:92:6D:B3:A0:0D:CC:E3:9A:87:F1:24:6A
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 0932
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
Signing time: Wed 11 Nov 2026 02:07:04 +0000
ROA not before: Wed 11 Nov 2026 02:07:04 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 62610
IP address blocks: 129.227.98.0/24 maxlen: 24
129.227.100.0/24 maxlen: 24
129.227.101.0/24 maxlen: 24
129.227.127.0/24 maxlen: 24
129.227.139.0/24 maxlen: 24
129.227.143.0/24 maxlen: 24
129.227.224.0/24 maxlen: 24
129.227.225.0/24 maxlen: 24
156.59.73.0/24 maxlen: 24
156.59.123.0/24 maxlen: 24
156.59.146.0/24 maxlen: 24
156.59.184.0/24 maxlen: 24
156.59.218.0/24 maxlen: 24
156.59.219.0/24 maxlen: 24
162.128.8.0/24 maxlen: 24
162.128.21.0/24 maxlen: 24
162.128.45.0/24 maxlen: 24
162.128.82.0/24 maxlen: 24
162.128.83.0/24 maxlen: 24
162.128.84.0/24 maxlen: 24
162.128.85.0/24 maxlen: 24
162.128.86.0/24 maxlen: 24
162.128.87.0/24 maxlen: 24
162.128.88.0/24 maxlen: 24
162.128.89.0/24 maxlen: 24
162.128.90.0/24 maxlen: 24
162.128.91.0/24 maxlen: 24
162.128.92.0/24 maxlen: 24
162.128.93.0/24 maxlen: 24
162.128.94.0/24 maxlen: 24
162.128.95.0/24 maxlen: 24
162.128.101.0/24 maxlen: 24
162.128.113.0/24 maxlen: 24
162.128.132.0/24 maxlen: 24
162.128.146.0/24 maxlen: 24
162.128.215.0/24 maxlen: 24
162.128.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 21:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2354 (0x932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Nov 11 02:07:04 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6af3cdc7-2c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:45:c3:0b:0e:be:99:1c:1c:da:03:0d:02:
d8:c4:99:c3:bc:a4:ff:0f:47:5f:15:01:da:fd:97:
b8:8b:25:c6:46:08:3d:e9:c7:d9:1e:7d:de:3d:b0:
3e:79:7a:02:e9:7e:2c:16:71:b2:d4:90:ce:3e:dc:
19:df:93:66:30:30:a2:35:6e:0c:23:55:d1:9e:ef:
aa:9b:a7:fc:24:05:9e:43:8d:cb:d1:c5:be:82:0b:
9a:1c:86:da:bb:be:ee:2f:37:2b:f1:84:72:55:a8:
41:b9:88:84:99:19:d0:70:9c:d7:16:ff:16:09:9d:
0a:35:36:e0:7e:b2:f1:28:7b:d7:2c:b7:73:d4:0c:
4e:2f:c3:39:b6:3f:0b:a1:b6:98:95:c5:01:da:49:
da:8b:7a:e9:d1:85:ad:cf:26:67:0b:9e:ba:39:a4:
dc:70:89:16:b3:3e:76:ac:32:51:4f:79:7a:af:1d:
28:e7:b8:de:5b:a8:bb:f2:e5:41:e9:d2:63:04:37:
6d:21:e2:1c:56:84:a1:88:2e:56:6b:3e:7a:d7:d2:
42:a5:45:66:40:bd:7e:4d:e7:01:8e:84:ad:a7:3a:
1a:b8:10:08:54:ef:a4:af:e8:b1:b1:38:be:f0:d0:
3a:f2:d6:03:51:39:fb:0f:29:cb:2f:0b:74:95:46:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D2:AC:78:68:CF:01:5D:92:6D:B3:A0:0D:CC:E3:9A:87:F1:24:6A
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
129.227.98.0/24
129.227.100.0/23
129.227.127.0/24
129.227.139.0/24
129.227.143.0/24
129.227.224.0/23
156.59.73.0/24
156.59.123.0/24
156.59.146.0/24
156.59.184.0/24
156.59.218.0/23
162.128.8.0/24
162.128.21.0/24
162.128.45.0/24
162.128.82.0-162.128.95.255
162.128.101.0/24
162.128.113.0/24
162.128.132.0/24
162.128.146.0/24
162.128.215.0-162.128.216.255
Signature Algorithm: sha256WithRSAEncryption
6a:6a:b8:71:a2:21:25:78:be:17:a9:8a:e5:94:67:64:91:4a:
94:41:68:88:b5:d0:f8:4c:6e:71:16:da:70:3e:4d:5a:7a:45:
06:ce:b3:9b:7a:28:1c:2a:4a:e3:f9:46:39:91:d2:22:dc:f6:
c9:f7:b1:20:4a:46:1a:2e:54:cd:44:9b:c1:34:77:2a:9f:c2:
b6:35:92:fb:12:02:4e:6a:5a:12:5e:b6:7b:28:6d:f1:b2:8c:
b7:e2:5f:2e:63:41:18:6e:f4:f6:b4:36:c9:04:3a:09:54:5f:
1b:2f:4f:d7:90:8a:1e:5f:7a:bc:da:86:5f:f0:85:c7:d0:1a:
f1:3b:35:52:a6:58:4e:b2:7c:07:ed:ee:cc:48:2e:85:1a:3c:
dd:0a:13:1d:a8:c0:8a:44:ef:1a:3c:5c:8a:c5:b2:e8:eb:b9:
e4:af:d8:fa:9b:7c:ef:ac:87:94:2d:10:65:b5:8d:83:b8:7b:
d0:90:d2:e1:2b:6d:af:04:b7:0b:57:ef:ba:ec:e9:35:5f:39:
be:59:cc:7f:72:8d:32:0f:d0:2b:cf:fb:7b:92:9a:d8:06:18:
2e:83:c1:5b:6c:b3:f9:bc:62:64:09:14:17:20:12:60:fc:37:
8b:62:4e:ce:c3:e7:cb:d8:ba:d5:85:fb:69:df:16:26:dc:15:
ae:d1:01:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:23:22 2026 by rpki-client