Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
File: FD6881C4438111ECBC63AC7BC4F9AE02.roa (raw, json)
Hash identifier: ILnkFT1zKxTv1BYg3Fu98OdAucFt2j96TGTvMUlYuG8=
Subject key identifier: EB:71:22:23:30:66:2F:C0:55:91:52:A8:99:32:61:A0:35:41:D8:48
Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial: 0900
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
Signing time: Wed 23 Sep 2026 03:04:25 +0000
ROA not before: Wed 23 Sep 2026 03:04:25 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 62610
IP address blocks: 129.227.127.0/24 maxlen: 24
129.227.139.0/24 maxlen: 24
129.227.143.0/24 maxlen: 24
156.59.73.0/24 maxlen: 24
156.59.123.0/24 maxlen: 24
156.59.146.0/24 maxlen: 24
156.59.184.0/24 maxlen: 24
162.128.21.0/24 maxlen: 24
162.128.82.0/24 maxlen: 24
162.128.83.0/24 maxlen: 24
162.128.84.0/24 maxlen: 24
162.128.85.0/24 maxlen: 24
162.128.86.0/24 maxlen: 24
162.128.87.0/24 maxlen: 24
162.128.88.0/24 maxlen: 24
162.128.89.0/24 maxlen: 24
162.128.90.0/24 maxlen: 24
162.128.91.0/24 maxlen: 24
162.128.92.0/24 maxlen: 24
162.128.93.0/24 maxlen: 24
162.128.94.0/24 maxlen: 24
162.128.95.0/24 maxlen: 24
162.128.101.0/24 maxlen: 24
162.128.113.0/24 maxlen: 24
162.128.132.0/24 maxlen: 24
162.128.146.0/24 maxlen: 24
162.128.215.0/24 maxlen: 24
162.128.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304 (0x900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Validity
Not Before: Sep 23 03:04:25 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ab341b9-de90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:0b:df:da:18:32:d1:e4:a6:47:40:40:03:
d6:87:5f:35:12:15:3c:44:20:67:64:22:e8:88:bf:
ab:1d:ba:1e:35:47:45:2d:8f:5f:67:48:f5:3a:e7:
a2:58:cd:f8:73:05:ce:df:c8:60:00:51:81:10:4a:
ac:3b:1d:4a:44:34:d0:a8:7a:92:f2:8f:f2:d8:60:
ca:4b:9e:46:bc:3f:dc:99:54:3d:59:20:65:97:49:
1d:df:5a:99:45:f2:2a:4f:a4:ce:4c:81:32:be:b5:
3a:9b:f9:2d:f4:5e:6f:42:2c:13:62:24:b4:0b:59:
0f:14:70:f1:b7:7c:04:3b:5a:eb:24:d3:89:87:3b:
67:62:70:5e:c0:6e:66:69:f1:5f:43:b6:47:d8:2d:
6a:61:3e:f6:c0:cb:4e:c2:8a:c9:d7:b3:56:16:f6:
b0:45:32:ee:9c:70:da:78:b3:4c:72:cd:ad:52:db:
b3:a7:bb:f7:e9:87:46:ab:e8:d5:1c:93:37:dd:4d:
48:68:bb:45:4f:37:f0:24:59:4c:1e:1f:32:fe:56:
6f:ed:ed:0e:e9:e7:28:2c:b9:af:3b:00:3f:9a:19:
69:65:13:67:18:22:c7:a9:17:10:7a:14:52:6c:bd:
62:7f:e6:89:31:f1:c2:de:b5:a6:53:ca:9f:ac:a8:
80:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:71:22:23:30:66:2F:C0:55:91:52:A8:99:32:61:A0:35:41:D8:48
X509v3 Authority Key Identifier:
keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/FD6881C4438111ECBC63AC7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
129.227.127.0/24
129.227.139.0/24
129.227.143.0/24
156.59.73.0/24
156.59.123.0/24
156.59.146.0/24
156.59.184.0/24
162.128.21.0/24
162.128.82.0-162.128.95.255
162.128.101.0/24
162.128.113.0/24
162.128.132.0/24
162.128.146.0/24
162.128.215.0-162.128.216.255
Signature Algorithm: sha256WithRSAEncryption
20:f9:b7:89:4f:54:ec:36:dd:ae:c4:6f:0b:3f:27:cb:16:99:
47:53:63:98:6c:e6:ef:18:d5:08:42:35:03:ae:ad:da:6c:0f:
c8:03:ca:cf:d6:a0:17:29:f0:be:9f:a4:fe:a9:05:c0:5d:48:
d0:e0:10:d3:e2:ea:73:4d:b5:15:53:12:29:c0:96:3d:8f:e4:
92:80:44:e2:5d:be:27:1f:e3:7b:44:7a:a6:3e:2a:bb:a2:71:
11:3d:ed:e6:4f:51:92:b3:03:b4:00:53:a2:b8:0a:70:05:a8:
32:7f:57:2f:07:04:c8:67:b9:f0:9e:69:cc:fc:fc:ae:29:0a:
89:b6:d6:06:15:76:b9:0b:ad:cd:c8:be:d5:6e:5f:07:83:a4:
2f:e7:4f:0a:7f:7d:38:3c:05:e1:06:1b:d4:63:d2:c1:ae:5e:
20:98:31:8d:ff:7c:4a:eb:b5:95:2a:05:87:b4:c1:ea:45:7d:
56:3c:81:1d:f3:ea:e6:91:31:03:03:61:43:5b:f0:d1:04:57:
56:ad:aa:03:f0:58:0e:51:b8:ec:4c:ed:7f:da:d9:1a:c8:75:
23:91:81:11:2d:8b:6c:bd:81:0d:0c:e0:be:50:67:ff:b0:1c:
cc:d7:99:0d:db:3e:6c:b6:bc:f7:63:5a:2d:84:76:ea:ac:71:
c3:09:6f:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:25:17 2026 by rpki-client