Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
File: 552292460F1A11E9B3F2A713C4F9AE02.roa (raw, json)
Hash identifier: 6LE0lcLwgL3BW95oynVLLd/nxrm4kZLuSBQHxOvu2Gs=
Subject key identifier: F6:7D:38:89:85:41:50:AF:F1:50:59:6F:0A:CB:DD:10:98:AA:E6:86
Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
Certificate serial: 125C
Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
Signing time: Wed 19 Aug 2026 02:48:39 +0000
ROA not before: Wed 19 Aug 2026 02:48:39 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 56300
IP address blocks: 66.96.192.0/24 maxlen: 24
66.96.193.0/24 maxlen: 24
66.96.194.0/24 maxlen: 24
66.96.195.0/24 maxlen: 24
66.96.196.0/24 maxlen: 24
66.96.197.0/24 maxlen: 24
66.96.198.0/24 maxlen: 24
66.96.199.0/24 maxlen: 24
66.96.200.0/24 maxlen: 24
66.96.201.0/24 maxlen: 24
66.96.202.0/24 maxlen: 24
66.96.203.0/24 maxlen: 24
66.96.204.0/24 maxlen: 24
66.96.205.0/24 maxlen: 24
66.96.206.0/24 maxlen: 24
66.96.207.0/24 maxlen: 24
66.96.208.0/24 maxlen: 24
66.96.209.0/24 maxlen: 24
66.96.210.0/24 maxlen: 24
66.96.211.0/24 maxlen: 24
66.96.212.0/24 maxlen: 24
66.96.213.0/24 maxlen: 24
66.96.214.0/24 maxlen: 24
66.96.215.0/24 maxlen: 24
66.96.216.0/24 maxlen: 24
66.96.217.0/24 maxlen: 24
66.96.218.0/24 maxlen: 24
158.140.128.0/24 maxlen: 24
158.140.129.0/24 maxlen: 24
158.140.130.0/24 maxlen: 24
158.140.131.0/24 maxlen: 24
158.140.132.0/24 maxlen: 24
158.140.133.0/24 maxlen: 24
158.140.134.0/24 maxlen: 24
158.140.135.0/24 maxlen: 24
158.140.136.0/24 maxlen: 24
158.140.137.0/24 maxlen: 24
158.140.138.0/24 maxlen: 24
158.140.139.0/24 maxlen: 24
158.140.140.0/24 maxlen: 24
158.140.141.0/24 maxlen: 24
158.140.142.0/24 maxlen: 24
158.140.143.0/24 maxlen: 24
158.140.144.0/24 maxlen: 24
158.140.145.0/24 maxlen: 24
158.140.146.0/24 maxlen: 24
158.140.147.0/24 maxlen: 24
158.140.148.0/24 maxlen: 24
158.140.149.0/24 maxlen: 24
158.140.150.0/24 maxlen: 24
158.140.152.0/24 maxlen: 24
158.140.153.0/24 maxlen: 24
158.140.154.0/24 maxlen: 24
158.140.155.0/24 maxlen: 24
158.140.156.0/24 maxlen: 24
158.140.157.0/24 maxlen: 24
158.140.159.0/24 maxlen: 24
165.173.0.0/24 maxlen: 24
165.173.1.0/24 maxlen: 24
165.173.2.0/24 maxlen: 24
165.173.3.0/24 maxlen: 24
165.173.4.0/24 maxlen: 24
165.173.5.0/24 maxlen: 24
165.173.6.0/24 maxlen: 24
165.173.7.0/24 maxlen: 24
165.173.8.0/24 maxlen: 24
165.173.9.0/24 maxlen: 24
165.173.10.0/24 maxlen: 24
165.173.11.0/24 maxlen: 24
165.173.12.0/24 maxlen: 24
165.173.13.0/24 maxlen: 24
165.173.14.0/24 maxlen: 24
165.173.15.0/24 maxlen: 24
165.173.16.0/24 maxlen: 24
165.173.17.0/24 maxlen: 24
165.173.18.0/24 maxlen: 24
165.173.19.0/24 maxlen: 24
165.173.20.0/24 maxlen: 24
165.173.21.0/24 maxlen: 24
165.173.22.0/24 maxlen: 24
165.173.23.0/24 maxlen: 24
165.173.24.0/24 maxlen: 24
165.173.25.0/24 maxlen: 24
165.173.26.0/24 maxlen: 24
165.173.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl
rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 17:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4700 (0x125c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
Validity
Not Before: Aug 19 02:48:39 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a851987-dbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:bf:85:f4:f3:e3:ec:c5:3f:3e:c1:cf:8e:
e1:6b:38:a8:a9:ef:93:ef:51:0f:be:19:7d:ab:36:
8d:df:78:36:a8:e6:53:e7:e7:4f:92:33:46:a0:9f:
ac:8e:bc:0a:8f:00:0c:fd:e3:4d:5a:be:f1:ad:78:
5d:dd:23:f9:b0:9b:a1:33:9f:0d:cd:e3:7f:90:db:
ae:98:54:ad:30:d1:59:d4:07:8b:5d:a5:fb:5a:8a:
bf:11:e7:b1:79:2a:dd:ca:c3:0d:ab:25:41:be:d7:
99:fa:ff:b7:b6:fd:da:30:a3:78:5b:16:c4:5b:c2:
24:7b:34:4d:74:94:81:86:65:6d:01:0e:f7:5b:81:
f5:49:e3:32:51:cd:85:a3:b6:59:27:f5:44:a8:07:
81:47:5d:bc:c5:02:d1:d6:ff:0a:d1:a9:28:72:24:
99:60:67:5f:66:98:12:ea:b1:08:52:9a:53:f5:30:
0f:87:97:80:4d:0d:1f:7e:f1:e6:8e:37:5a:d5:0f:
68:ec:b4:e2:55:ee:b8:6a:5e:d9:5d:89:6e:53:4b:
66:98:bd:7e:c3:00:4f:ff:71:1d:4b:de:37:4e:4e:
c6:ee:c9:c5:cc:f7:06:05:89:00:e1:12:03:25:22:
f6:92:89:f3:bc:56:45:ac:f4:3b:3e:f5:ce:38:5b:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7D:38:89:85:41:50:AF:F1:50:59:6F:0A:CB:DD:10:98:AA:E6:86
X509v3 Authority Key Identifier:
keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
66.96.192.0-66.96.218.255
158.140.128.0-158.140.150.255
158.140.152.0-158.140.157.255
158.140.159.0/24
165.173.0.0-165.173.27.255
Signature Algorithm: sha256WithRSAEncryption
8d:41:7d:45:2f:fa:15:c5:78:3d:d8:2e:3a:3b:93:c0:7b:fc:
9c:d0:72:32:4b:ce:38:75:2d:92:24:91:44:08:53:00:88:e9:
e2:94:d6:36:3c:fc:86:c8:ee:81:09:13:b7:4b:c5:38:b3:21:
d8:92:d3:59:f5:f7:a9:02:a1:65:9c:a1:a9:bd:8f:b9:6b:fd:
0e:a0:6c:8b:0c:91:f9:58:c6:29:17:07:28:2e:28:e1:70:7f:
1d:78:1a:dc:23:f8:e8:9b:d6:c1:e3:21:0e:0a:a2:9a:eb:12:
c3:81:0d:84:89:43:9c:4d:5c:cf:4e:3b:16:87:24:49:77:a6:
bb:e1:cb:e9:d8:1e:d0:9d:a1:d7:0f:fa:05:e4:0e:4f:8d:21:
c9:b5:ce:8a:1d:2a:3e:9e:45:6b:5f:82:d1:40:df:7d:7b:bd:
71:63:22:b7:6d:47:3d:bb:cc:b2:e3:05:56:13:1b:6f:0f:fb:
0f:58:0c:16:69:77:37:94:69:c3:4a:cf:d5:a3:7d:d3:85:23:
cb:23:5c:cc:16:60:5f:78:34:e6:f9:fe:4a:79:2d:b7:2c:a0:
ca:cd:bf:22:81:65:73:6b:c5:f8:a6:d7:8c:12:2e:1d:ad:b9:
35:91:f9:07:47:8f:3a:d4:69:e4:91:ac:55:e5:07:9c:2f:20:
16:1b:55:9c
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgICElwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG
RkY3Njc0MDkwHhcNMjYwODE5MDI0ODM5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg1MTk4Ny1kYmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkK+/hfTz4+zFPz7Bz47hazioqe+T71EPvhl9qzaN33g2qOZT5+dPkjNGoJ+s
jrwKjwAM/eNNWr7xrXhd3SP5sJuhM58NzeN/kNuumFStMNFZ1AeLXaX7Woq/Eeex
eSrdysMNqyVBvteZ+v+3tv3aMKN4WxbEW8IkezRNdJSBhmVtAQ73W4H1SeMyUc2F
o7ZZJ/VEqAeBR128xQLR1v8K0akociSZYGdfZpgS6rEIUppT9TAPh5eATQ0ffvHm
jjda1Q9o7LTiVe64al7ZXYluU0tmmL1+wwBP/3EdS943Tk7G7snFzPcGBYkA4RID
JSL2konzvFZFrPQ7PvXOOFtH6QIDAQABo4IClzCCApMwHQYDVR0OBBYEFPZ9OImF
QVCv8VBZbwrL3RCYquaGMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF
M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjY3QkIvQkRGQkYxODYwRTNFMTFFOTgzNkY0MDE0QzRGOUFFMDIvNTUyMjkyNDYw
RjFBMTFFOUIzRjJBNzEzQzRGOUFFMDIucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTBD
BAIAATA9MAwDBAZCYMADBABCYNowDAMEB56MgAMEAJ6MljAMAwQDnoyYAwQBnoyc
AwQAnoyfMAsDAwClrQMEAqWtGDANBgkqhkiG9w0BAQsFAAOCAQEAjUF9RS/6FcV4
PdguOjuTwHv8nNByMkvOOHUtkiSRRAhTAIjp4pTWNjz8hsjugQkTt0vFOLMh2JLT
WfX3qQKhZZyhqb2PuWv9DqBsiwyR+VjGKRcHKC4o4XB/HXga3CP46JvWweMhDgqi
musSw4ENhIlDnE1cz047FockSXemu+HL6dge0J2h1w/6BeQOT40hybXOih0qPp5F
a1+C0UDffXu9cWMit21HPbvMsuMFVhMbbw/7D1gMFml3N5Rpw0rP1aN904UjyyNc
zBZgX3g05vn+Snkttyygys2/IoFlc2vF+KbXjBIuHa25NZH5B0ePOtRp5JGsVeUH
nC8gFhtVnA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:36:23 2026 by rpki-client