Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/48248C7086FE11F194514C90ABEE528E.roa
File: 48248C7086FE11F194514C90ABEE528E.roa (raw, json)
Hash identifier: NgYCTjF8oESgKnFoDaFz5uiMQkapg6GE80MpB2tj42k=
Subject key identifier: 62:B7:43:38:98:55:A0:99:B7:BA:50:DD:B1:A2:26:BD:5E:71:F2:54
Certificate issuer: /CN=A91FBD28/serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
Certificate serial: 27BC
Authority key identifier: B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/48248C7086FE11F194514C90ABEE528E.roa
Signing time: Wed 23 Sep 2026 10:43:09 +0000
ROA not before: Wed 23 Sep 2026 10:43:09 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 24499
IP address blocks: 43.224.236.0/22 maxlen: 22
43.224.236.0/24 maxlen: 24
43.224.237.0/24 maxlen: 24
43.224.238.0/24 maxlen: 24
43.224.239.0/24 maxlen: 24
103.7.76.0/22 maxlen: 22
103.7.76.0/24 maxlen: 24
103.7.77.0/24 maxlen: 24
103.7.78.0/24 maxlen: 24
103.7.79.0/24 maxlen: 24
202.69.8.0/21 maxlen: 22
202.69.8.0/24 maxlen: 24
202.69.9.0/24 maxlen: 24
202.69.10.0/24 maxlen: 24
202.69.11.0/24 maxlen: 24
202.69.12.0/22 maxlen: 24
2402:e000::/32 maxlen: 32
2402:e000:1::/48 maxlen: 48
2402:e000:2::/48 maxlen: 48
2402:e000:3::/48 maxlen: 48
2402:e000:a::/48 maxlen: 48
2402:e000:b::/48 maxlen: 48
2402:e000:c::/48 maxlen: 48
2402:e000:10::/48 maxlen: 48
2402:e000:11::/48 maxlen: 48
2402:e000:12::/48 maxlen: 48
2402:e000:100::/41 maxlen: 41
2402:e000:180::/41 maxlen: 41
2402:e000:200::/41 maxlen: 41
2402:e000:400::/40 maxlen: 48
2402:e000:500::/40 maxlen: 48
2402:e000:600::/40 maxlen: 48
2402:e000:700::/40 maxlen: 40
2402:e000:800::/40 maxlen: 40
2402:e000:4000::/48 maxlen: 48
2402:e000:5300::/41 maxlen: 41
2402:e000:5380::/41 maxlen: 41
2402:e000:5400::/41 maxlen: 41
2402:e000:8000::/48 maxlen: 48
2402:e000:a100::/41 maxlen: 41
2402:e000:a180::/41 maxlen: 41
2402:e000:a200::/41 maxlen: 41
2402:e000:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl
rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 15:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10172 (0x27bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBD28, serialNumber=B95D954AAEB959D3427C1076A9F57DF21C38BFCC
Validity
Not Before: Sep 23 10:43:09 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6ab3ad3d-168a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:f2:c5:ce:14:6a:f2:db:fe:dc:e8:dd:33:
6d:2d:1a:e6:4f:bb:e5:6d:e8:d3:33:73:37:9c:df:
9a:bb:35:41:ec:ca:ed:f4:89:d0:77:ee:7c:01:e7:
14:a0:5e:00:d3:ca:ed:ec:5c:a9:23:46:b6:f2:d7:
0a:e1:34:32:e7:46:03:c6:b5:aa:b9:63:a7:99:6d:
12:2d:03:a0:3d:c5:e2:91:a4:70:de:50:42:c0:d0:
30:c3:06:a1:86:fd:86:37:9d:e7:5f:b4:63:1f:ba:
88:ad:0f:93:5b:78:83:d2:84:4e:88:ac:c8:e1:56:
a3:8e:5c:ae:d2:80:36:75:22:09:7e:50:1f:ee:49:
61:d6:27:6c:e9:b9:b9:02:09:14:36:ea:17:8f:a9:
35:27:c4:40:05:a9:ca:57:38:e3:eb:04:25:98:54:
a6:4c:c5:28:98:32:c5:3d:f3:82:0a:9a:c3:9e:cd:
9b:f6:7d:2e:6c:03:7d:0b:17:fd:0b:35:cc:71:4d:
5d:aa:e4:10:f7:90:3b:db:1d:c9:d7:b8:cb:c1:9a:
a3:08:8f:a1:18:ef:27:29:d2:b8:23:f5:20:3e:14:
c1:7c:27:32:d0:3b:10:1a:b9:66:9b:09:5d:57:54:
fd:e6:76:24:57:ff:e3:9a:57:e1:16:f2:df:6d:e3:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B7:43:38:98:55:A0:99:B7:BA:50:DD:B1:A2:26:BD:5E:71:F2:54
X509v3 Authority Key Identifier:
keyid:B9:5D:95:4A:AE:B9:59:D3:42:7C:10:76:A9:F5:7D:F2:1C:38:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/uV2VSq65WdNCfBB2qfV98hw4v8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uV2VSq65WdNCfBB2qfV98hw4v8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/E6CED722E1B011E48C2DDE16C4F9AE02/48248C7086FE11F194514C90ABEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
43.224.236.0/22
103.7.76.0/22
202.69.8.0/21
IPv6:
2402:e000::/32
Signature Algorithm: sha256WithRSAEncryption
cd:84:04:db:f8:3f:7e:2b:59:b1:11:9a:08:c9:4f:26:d5:d0:
1a:e6:79:e5:39:95:88:6b:f4:ac:5a:4c:c2:5c:e3:d5:97:95:
42:93:cf:8d:a1:73:a7:60:69:71:ca:2d:6d:72:70:94:43:4b:
eb:cf:1d:1f:f2:10:f1:4f:48:9e:92:e8:5e:6d:99:03:d6:4f:
32:a4:d7:4d:5a:ee:30:13:57:a7:ef:41:4d:c5:64:a2:8f:cc:
f7:fe:5d:90:b8:5d:d8:34:93:17:40:c6:1a:37:f9:38:69:7c:
87:b8:3a:a3:14:a4:af:96:d3:69:ae:30:90:bf:25:e4:d3:a7:
07:b6:1b:09:b2:c2:61:b7:46:d6:42:ae:0b:d9:57:7b:26:4c:
1f:58:e7:22:ea:bd:59:ea:ef:1b:88:56:af:8e:88:18:4e:7b:
91:65:c3:2e:89:3c:8c:11:72:3a:ad:c6:2e:ee:2a:13:a8:fc:
61:7e:5c:97:37:2c:63:91:3f:9b:88:b5:07:91:1d:e5:c3:9b:
af:17:30:48:a7:45:18:fd:af:3f:dc:17:ba:0d:a9:83:98:b7:
27:cf:d7:96:cb:d4:62:4d:03:b2:27:16:4b:fd:53:61:34:5f:
ac:68:65:83:4c:07:9c:7d:a3:b9:94:69:a5:82:52:0c:a1:67:
30:e2:6b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:00:07 2026 by rpki-client