Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/48248C7086FE11F194514C90ABEE528E.roa
File: 48248C7086FE11F194514C90ABEE528E.roa (raw, json)
Hash identifier: t1D6mdJSHe7uQ1Mtxb5VihTFXasasBlEjzHjOpNKHa4=
Subject key identifier: 8C:86:C7:A7:22:A4:8C:11:AC:AE:D4:13:86:98:55:D7:13:20:F6:75
Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
Certificate serial: 2798
Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/48248C7086FE11F194514C90ABEE528E.roa
Signing time: Fri 24 Jul 2026 01:23:32 +0000
ROA not before: Fri 24 Jul 2026 01:23:31 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 24499
IP address blocks: 43.224.236.0/22 maxlen: 22
43.224.236.0/24 maxlen: 24
43.224.237.0/24 maxlen: 24
43.224.238.0/24 maxlen: 24
43.224.239.0/24 maxlen: 24
103.7.76.0/22 maxlen: 22
103.7.76.0/24 maxlen: 24
103.7.77.0/24 maxlen: 24
103.7.78.0/24 maxlen: 24
103.7.79.0/24 maxlen: 24
202.69.8.0/21 maxlen: 22
202.69.8.0/24 maxlen: 24
202.69.9.0/24 maxlen: 24
202.69.10.0/24 maxlen: 24
202.69.11.0/24 maxlen: 24
202.69.12.0/22 maxlen: 24
2402:e000::/32 maxlen: 32
2402:e000:1::/48 maxlen: 48
2402:e000:2::/48 maxlen: 48
2402:e000:3::/48 maxlen: 48
2402:e000:a::/48 maxlen: 48
2402:e000:b::/48 maxlen: 48
2402:e000:c::/48 maxlen: 48
2402:e000:100::/41 maxlen: 41
2402:e000:180::/41 maxlen: 41
2402:e000:200::/41 maxlen: 41
2402:e000:400::/40 maxlen: 48
2402:e000:500::/40 maxlen: 48
2402:e000:600::/40 maxlen: 48
2402:e000:4000::/48 maxlen: 48
2402:e000:5300::/41 maxlen: 41
2402:e000:5380::/41 maxlen: 41
2402:e000:5400::/41 maxlen: 41
2402:e000:8000::/48 maxlen: 48
2402:e000:a100::/41 maxlen: 41
2402:e000:a180::/41 maxlen: 41
2402:e000:a200::/41 maxlen: 41
2402:e000:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl
rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 01:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10136 (0x2798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
Validity
Not Before: Jul 24 01:23:31 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a62be93-21c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:fd:4a:54:7a:db:01:1d:f5:25:ab:6b:79:
94:da:70:c2:63:6b:4d:28:54:57:c3:6a:71:5a:fa:
e7:d7:4f:51:b3:1d:27:0a:37:fa:ce:64:cc:af:23:
86:0b:a2:fe:86:c3:f8:e4:cc:24:5e:ff:62:68:af:
bc:06:fc:3e:c3:a1:c6:00:84:8a:2f:78:db:32:f5:
92:9d:ec:f6:93:15:e3:8f:0c:b0:ef:3b:2a:52:f5:
bf:f8:d1:75:fd:20:f6:9e:ba:a2:3c:10:96:60:67:
57:bf:9b:27:65:91:ae:fc:97:fd:37:41:d1:59:90:
66:aa:c8:89:e1:5f:9b:84:2a:fa:33:ea:15:4c:f3:
4e:1c:9e:f3:12:0f:ef:37:99:6f:19:00:3d:9a:be:
01:96:86:6f:bd:a7:fe:8c:b7:bd:7c:a5:09:93:30:
bc:5a:fe:ff:66:5d:d0:da:9b:b0:ad:e5:dd:47:7e:
4a:7b:d5:c3:da:10:2f:cf:db:67:d8:ca:61:ef:1b:
f4:47:ef:c9:c4:1c:95:a0:16:2e:c1:89:05:35:5c:
e5:62:70:22:e4:5a:af:f9:ee:3e:e1:6d:51:d8:7f:
0a:2a:0c:9f:64:9d:b4:46:a1:0d:fc:f6:32:ff:64:
28:d2:3e:c8:c5:b7:ae:bd:97:44:fa:72:6a:ba:8f:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:86:C7:A7:22:A4:8C:11:AC:AE:D4:13:86:98:55:D7:13:20:F6:75
X509v3 Authority Key Identifier:
keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/48248C7086FE11F194514C90ABEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
43.224.236.0/22
103.7.76.0/22
202.69.8.0/21
IPv6:
2402:e000::/32
Signature Algorithm: sha256WithRSAEncryption
0b:ef:0c:c4:41:5a:4d:2d:86:4a:a2:9c:bf:bb:9f:ad:0f:20:
02:46:a6:1c:4b:78:1f:b1:7d:a2:75:f2:f9:63:c4:7a:59:73:
a3:38:38:a2:25:fa:32:05:c2:ae:11:a6:03:83:77:fe:57:ff:
a5:11:98:b3:56:b7:89:5e:4b:af:39:4e:7e:15:33:d8:2f:63:
75:3f:b9:85:f5:a7:32:7c:09:ef:b1:36:13:4b:d6:06:88:fc:
6e:27:13:6a:3b:76:9b:04:2e:34:60:16:05:d5:b6:ce:a2:09:
ee:43:8a:c2:84:7d:43:ca:b7:cf:c5:3e:60:60:a2:93:5c:8c:
ea:4a:8c:bf:df:a1:4c:1b:02:26:87:ad:49:ab:a6:39:74:5f:
21:37:35:e3:93:37:76:b4:fe:11:58:de:c6:6b:f7:be:d3:f8:
31:4f:b8:b4:16:ed:0c:c4:ec:d3:d0:58:c7:1a:5a:67:bb:45:
cd:dc:28:b8:0f:43:77:6c:fa:b8:a5:b4:8b:5d:d0:6c:03:21:
96:6d:d7:fa:b9:9f:83:af:ae:05:ed:9f:4e:1b:9e:57:d2:76:
c2:bc:4b:52:ad:9e:84:1d:11:34:95:a2:38:eb:5b:f2:03:00:
90:ce:d2:4d:3d:ca:f9:dc:46:c8:80:32:2a:ab:af:64:33:9c:
46:3d:67:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:43 2026 by rpki-client