Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/6451124A7F8011F185F61C616BA30FBC.roa
File: 6451124A7F8011F185F61C616BA30FBC.roa (raw, json)
Hash identifier: g0xBRgtx3LTs/6OUv7iJqT++L+ftR+R9Gj6ww6LaFas=
Subject key identifier: 26:3D:DE:32:29:E2:5D:C6:D3:94:BF:A5:9F:A3:CB:25:7C:F4:20:E3
Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Certificate serial: 0D44
Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/6451124A7F8011F185F61C616BA30FBC.roa
Signing time: Tue 14 Jul 2026 12:34:44 +0000
ROA not before: Tue 14 Jul 2026 12:34:44 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55492
IP address blocks: 27.131.12.0/22 maxlen: 22
27.131.12.0/24 maxlen: 24
27.131.13.0/24 maxlen: 24
27.131.14.0/24 maxlen: 24
27.131.15.0/24 maxlen: 24
45.127.244.0/22 maxlen: 22
45.127.244.0/24 maxlen: 24
45.127.245.0/24 maxlen: 24
45.127.246.0/24 maxlen: 24
45.127.247.0/24 maxlen: 24
103.196.232.0/22 maxlen: 22
103.196.232.0/24 maxlen: 24
103.196.233.0/24 maxlen: 24
103.196.234.0/24 maxlen: 24
103.196.235.0/24 maxlen: 24
2401:c5c0::/35 maxlen: 35
2401:c5c0::/48 maxlen: 48
2401:c5c0:1::/48 maxlen: 48
2401:c5c0:2::/48 maxlen: 48
2401:c5c0:3::/48 maxlen: 48
2401:c5c0:4::/48 maxlen: 48
2401:c5c0:5::/48 maxlen: 48
2401:c5c0:6::/48 maxlen: 48
2401:c5c0:7::/48 maxlen: 48
2401:c5c0:d::/48 maxlen: 48
2401:c5c0:11::/48 maxlen: 48
2401:c5c0:12::/48 maxlen: 48
2401:c5c0:13::/48 maxlen: 48
2401:c5c0:14::/48 maxlen: 48
2401:c5c0:15::/48 maxlen: 48
2401:c5c0:16::/48 maxlen: 48
2401:c5c0:50::/48 maxlen: 48
2401:c5c0:60::/48 maxlen: 48
2401:c5c0:d1::/48 maxlen: 48
2401:c5c0:d2::/48 maxlen: 48
2401:c5c0:d3::/48 maxlen: 48
2401:c5c0:d4::/48 maxlen: 48
2401:c5c0:d5::/48 maxlen: 48
2401:c5c0:d6::/48 maxlen: 48
2401:c5c0:100::/48 maxlen: 48
2401:c5c0:200::/48 maxlen: 48
2401:c5c0:400::/42 maxlen: 42
2401:c5c0:400::/48 maxlen: 48
2401:c5c0:440::/42 maxlen: 42
2401:c5c0:440::/48 maxlen: 48
2401:c5c0:da0::/44 maxlen: 44
2401:c5c0:dfa::/48 maxlen: 48
2401:c5c0:dfb::/48 maxlen: 48
2401:c5c0:dfc::/48 maxlen: 48
2401:c5c0:dfd::/48 maxlen: 48
2401:c5c0:dfe::/48 maxlen: 48
2401:c5c0:3000::/36 maxlen: 36
2401:c5c0:4000::/34 maxlen: 34
2401:c5c0:8000::/34 maxlen: 34
2401:c5c0:c000::/34 maxlen: 34
2401:c5c0:dfb2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3396 (0xd44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026
Validity
Not Before: Jul 14 12:34:44 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a562ce4-0012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4c:69:de:34:a8:64:69:c8:bf:c6:9e:82:c2:
69:71:9d:3d:de:ae:bd:21:9d:88:87:45:83:18:6f:
91:de:ec:ea:ef:78:46:3e:85:c5:eb:9a:f9:62:dd:
30:5b:5d:0d:33:20:73:cf:e6:3e:74:c3:ce:92:4c:
3d:72:17:02:56:4e:aa:cd:c3:9c:14:62:15:01:ed:
28:4b:99:b5:f3:01:7e:ad:b0:ee:85:42:44:3f:c4:
2e:90:29:75:4d:38:e4:ba:70:d0:7c:e5:da:d9:b7:
7d:c1:fe:ef:63:26:60:ac:40:95:ea:29:21:98:f9:
58:cc:39:c0:59:d1:1b:0d:62:72:78:3a:54:01:99:
ea:02:d6:dd:34:2d:4c:83:3f:9e:69:34:58:97:3f:
ea:82:39:a7:23:09:b4:8c:60:f8:54:3e:e7:4c:2b:
b3:a5:02:74:08:be:f0:ad:f7:85:8a:54:c7:2d:2d:
e3:d1:dd:43:fb:d4:70:af:04:36:72:44:9e:79:1f:
32:1e:24:77:bd:53:ba:e1:cf:f9:d6:cd:c6:5a:46:
f4:f7:b7:9e:6b:c1:3b:5d:e4:c7:bd:59:d4:a9:c5:
10:e8:f9:15:e8:80:67:0d:01:b7:0d:17:2d:5b:a8:
88:ab:10:e3:15:39:3c:dc:85:a5:7f:cf:5d:44:e2:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3D:DE:32:29:E2:5D:C6:D3:94:BF:A5:9F:A3:CB:25:7C:F4:20:E3
X509v3 Authority Key Identifier:
keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/6451124A7F8011F185F61C616BA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.12.0/22
45.127.244.0/22
103.196.232.0/22
IPv6:
2401:c5c0::/35
2401:c5c0:3000::-2401:c5c0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7c:45:d7:a5:46:51:a3:b4:5d:b2:c2:77:96:e8:03:93:cc:f1:
11:27:e2:91:31:a7:12:9c:42:e3:62:95:0f:fc:16:36:2d:56:
7e:1e:c3:66:cc:fb:e7:5e:e2:2d:dd:f0:ce:97:6e:46:34:b4:
c7:c5:91:7d:3b:db:8d:7b:99:17:b8:51:4d:be:d4:60:58:fb:
ac:6c:ad:f6:66:81:08:04:6d:0d:2c:03:db:dd:73:92:07:79:
4e:94:e5:15:cf:0c:c1:42:22:db:98:82:34:f8:fd:47:5b:dc:
16:70:d1:2a:48:f0:52:b8:d7:a2:07:9d:91:a6:ee:fb:f3:ed:
b2:e6:1f:4f:90:49:c8:06:fc:11:0e:60:c2:eb:b9:87:64:fb:
83:96:79:da:0a:c1:f7:ea:0a:fd:ae:9b:4b:19:fd:71:6b:bb:
5c:e9:39:97:da:9e:c7:bd:42:13:e3:91:a7:b6:51:36:2d:4d:
3c:08:15:04:aa:70:7f:4d:f9:94:9e:ac:05:90:a5:2f:54:2d:
11:ec:e3:f9:4c:46:89:50:45:81:d6:6a:a1:65:cf:9d:6c:5b:
af:94:43:1d:1f:76:5b:d8:cb:07:4e:95:9b:5e:3e:93:1c:94:
1d:80:05:b3:ee:7b:cd:7a:e6:34:6f:e9:85:c1:3c:2d:aa:27:
56:b7:d3:c8
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy
NTNBQkQwMjYwHhcNMjYwNzE0MTIzNDQ0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU2MmNlNC0wMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl0xp3jSoZGnIv8aegsJpcZ093q69IZ2Ih0WDGG+R3uzq73hGPoXF65r5Yt0w
W10NMyBzz+Y+dMPOkkw9chcCVk6qzcOcFGIVAe0oS5m18wF+rbDuhUJEP8QukCl1
TTjkunDQfOXa2bd9wf7vYyZgrECV6ikhmPlYzDnAWdEbDWJyeDpUAZnqAtbdNC1M
gz+eaTRYlz/qgjmnIwm0jGD4VD7nTCuzpQJ0CL7wrfeFilTHLS3j0d1D+9RwrwQ2
ckSeeR8yHiR3vVO64c/51s3GWkb097eea8E7XeTHvVnUqcUQ6PkV6IBnDQG3DRct
W6iIqxDjFTk83IWlf89dROIgLQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFCY93jIp
4l3G05S/pZ+jyyV89CDjMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC
NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw
Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg5MjgvNERBN0JCMjAwQjVCMTFFQUEzRUJDNjUwQzRGOUFFMDIvNjQ1MTEyNEE3
RjgwMTFGMTg1RjYxQzYxNkJBMzBGQkMucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAY
BAIAATASAwQCG4MMAwQCLX/0AwQCZ8ToMB8EAgACMBkDBgUkAcXAADAPAwYEJAHF
wDADBQAkAcXAMA0GCSqGSIb3DQEBCwUAA4IBAQB8RdelRlGjtF2ywneW6AOTzPER
J+KRMacSnELjYpUP/BY2LVZ+HsNmzPvnXuIt3fDOl25GNLTHxZF9O9uNe5kXuFFN
vtRgWPusbK32ZoEIBG0NLAPb3XOSB3lOlOUVzwzBQiLbmII0+P1HW9wWcNEqSPBS
uNeiB52Rpu778+2y5h9PkEnIBvwRDmDC67mHZPuDlnnaCsH36gr9rptLGf1xa7tc
6TmX2p7HvUIT45GntlE2LU08CBUEqnB/TfmUnqwFkKUvVC0R7OP5TEaJUEWB1mqh
Zc+dbFuvlEMdH3Zb2MsHTpWbXj6THJQdgAWz7nvNeuY0b+mFwTwtqidWt9PI
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:29:53 2026 by rpki-client