Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/5B45D97C2A5611F0B7C8BB20C4F9AE02.roa
File: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (raw, json)
Hash identifier: ZAcnv2B2glJNz/amDzlP0oQS8f8IykGzbvOZt8DAQOY=
Subject key identifier: F4:B7:F2:28:41:0C:54:49:96:A8:24:2D:71:97:FF:1B:7F:6B:FC:C5
Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial: BB
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/5B45D97C2A5611F0B7C8BB20C4F9AE02.roa
Signing time: Wed 25 Mar 2026 06:45:03 +0000
ROA not before: Wed 25 Mar 2026 06:45:03 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 45.253.244.0/24 maxlen: 24
45.253.245.0/24 maxlen: 24
103.211.228.0/24 maxlen: 24
103.211.229.0/24 maxlen: 24
163.227.196.0/24 maxlen: 24
163.227.197.0/24 maxlen: 24
2402:620::/48 maxlen: 48
2402:620:1::/48 maxlen: 48
2402:620:2::/48 maxlen: 48
2402:620:3::/48 maxlen: 48
2402:620:4::/48 maxlen: 48
2402:620:5::/48 maxlen: 48
2402:620:6::/48 maxlen: 48
2402:620:7::/48 maxlen: 48
2402:620:8::/48 maxlen: 48
2402:620:9::/48 maxlen: 48
2402:620:a::/48 maxlen: 48
2402:620:b::/48 maxlen: 48
2402:620:c::/48 maxlen: 48
2402:620:d::/48 maxlen: 48
2402:620:e::/48 maxlen: 48
2402:620:f::/48 maxlen: 48
2402:620:10::/48 maxlen: 48
2402:620:11::/48 maxlen: 48
2402:620:12::/48 maxlen: 48
2402:620:13::/48 maxlen: 48
2402:620:14::/48 maxlen: 48
2402:620:15::/48 maxlen: 48
2402:620:16::/48 maxlen: 48
2402:620:17::/48 maxlen: 48
2402:620:18::/48 maxlen: 48
2402:620:19::/48 maxlen: 48
2402:620:1a::/48 maxlen: 48
2402:620:1b::/48 maxlen: 48
2402:620:1c::/48 maxlen: 48
2402:620:1d::/48 maxlen: 48
2402:620:1e::/48 maxlen: 48
2402:620:1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Validity
Not Before: Mar 25 06:45:03 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69c3846f-274a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:f9:3e:ab:1b:8c:28:51:4d:43:61:9b:ab:
d2:0c:bf:71:a1:b2:de:da:29:f4:05:5a:25:45:94:
43:f3:5e:ed:ad:17:3b:09:ec:fa:79:8f:d5:1d:ec:
9f:66:92:b4:7b:44:25:12:48:88:7a:25:cd:41:88:
b1:6c:4e:c3:63:45:73:e4:92:ac:e3:af:82:cd:8e:
9a:7c:27:d8:de:57:0c:96:8a:3c:0f:6e:e9:03:fa:
23:13:29:12:ca:9d:7c:a0:d7:47:23:3b:e4:68:00:
31:ac:b2:3b:3e:d6:fb:45:57:82:b4:bc:42:f2:a8:
8b:9f:a1:24:d7:6f:7c:6c:b4:8a:26:9f:e4:cb:00:
be:81:db:b0:fa:df:a4:b7:13:ba:c9:ea:e0:1e:fb:
fa:79:3f:fa:17:be:98:0c:bd:7b:d3:65:bc:08:3d:
9b:31:a0:10:ef:31:12:a1:bf:2c:d8:a4:01:5e:97:
44:87:cc:85:14:60:c8:8e:1c:f2:65:6b:d3:2c:db:
de:f4:e6:93:46:e4:bb:46:10:42:ce:3e:4c:51:6c:
8c:65:ee:de:da:6c:e6:17:cd:60:01:bb:8a:42:d2:
f1:41:95:ec:07:9f:7c:a9:8f:86:bb:40:1a:ce:51:
5e:b1:d2:55:9b:33:91:06:cc:8b:58:67:8b:c8:ca:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B7:F2:28:41:0C:54:49:96:A8:24:2D:71:97:FF:1B:7F:6B:FC:C5
X509v3 Authority Key Identifier:
keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/5B45D97C2A5611F0B7C8BB20C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.253.244.0/23
103.211.228.0/23
163.227.196.0/23
IPv6:
2402:620::/43
Signature Algorithm: sha256WithRSAEncryption
2a:09:13:2a:e5:c3:18:fb:30:38:02:8e:1d:99:66:d4:b0:db:
ac:c9:89:2c:c4:48:33:70:c5:7b:0e:b4:dc:a4:14:5f:c7:b2:
93:a3:67:e5:70:51:f5:f2:77:4c:9f:7f:62:f2:90:87:97:54:
65:66:f6:1b:33:ee:d5:37:aa:09:06:56:24:86:7b:92:24:0d:
be:62:f9:d2:b8:ab:ed:a1:fd:15:e0:57:52:05:90:fb:87:d9:
51:0f:a3:1b:b1:e2:d3:a7:d2:0a:dd:d3:1d:54:e1:92:0b:31:
94:cc:48:21:b8:55:28:fe:f5:72:aa:7e:39:68:26:e0:82:1b:
08:94:16:e3:97:2c:fc:a0:f9:c8:a4:7c:ee:a4:a2:78:0e:67:
59:e8:62:52:b2:77:65:75:28:01:73:5a:93:a1:98:59:39:9b:
70:5f:cd:b6:9a:67:31:28:98:6c:61:3b:5d:7c:cd:17:87:24:
51:cd:74:3f:28:7c:99:73:8b:b5:36:6d:29:42:7c:13:b6:1d:
93:d6:89:b2:bc:8c:6b:dc:25:0b:b3:15:a3:ec:ae:72:f1:fe:
54:34:77:3f:3c:67:b2:e1:df:92:1d:05:d8:bd:ab:41:f4:4e:
f0:18:f4:4c:4f:bf:38:f1:b7:c6:49:70:aa:0e:2f:f5:31:e0:
15:06:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:36 2026 by rpki-client