Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
File: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (raw, json)
Hash identifier: Un5EoRL9PQC9xIW5CX3zoZdwpivD2GxDkHynm1gEUVk=
Subject key identifier: CA:D1:75:57:0C:F5:8E:E8:40:5A:A4:1A:BF:9B:1B:68:08:A4:DC:16
Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Certificate serial: 0D43
Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:01:39 +0000
ROA not before: Tue 23 Dec 2025 16:12:01 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 134146
IP address blocks: 103.55.144.0/22 maxlen: 24
103.106.56.0/24 maxlen: 24
103.206.231.0/24 maxlen: 24
202.83.124.0/24 maxlen: 24
202.83.126.0/23 maxlen: 23
202.83.126.0/24 maxlen: 24
202.83.127.0/24 maxlen: 24
2400:4fc0::/32 maxlen: 32
2400:4fc0:1::/48 maxlen: 48
2400:4fc0:2::/48 maxlen: 48
2400:4fc0:3::/48 maxlen: 48
2400:4fc0:4::/48 maxlen: 48
2400:4fc0:5::/48 maxlen: 48
2400:4fc0:6::/48 maxlen: 48
2400:4fc0:7::/48 maxlen: 48
2400:4fc0:8::/48 maxlen: 48
2400:4fc0:9::/48 maxlen: 48
2400:4fc0:a::/48 maxlen: 48
2400:4fc0:b::/48 maxlen: 48
2400:4fc0:c::/48 maxlen: 48
2400:4fc0:d::/48 maxlen: 48
2400:4fc0:e::/48 maxlen: 48
2400:4fc0:f::/48 maxlen: 48
2400:4fc0:10::/48 maxlen: 48
2400:4fc0:11::/48 maxlen: 48
2400:4fc0:12::/48 maxlen: 48
2400:4fc0:13::/48 maxlen: 48
2400:4fc0:14::/48 maxlen: 48
2400:4fc0:15::/48 maxlen: 48
2400:4fc0:16::/48 maxlen: 48
2400:4fc0:17::/48 maxlen: 48
2400:4fc0:18::/48 maxlen: 48
2400:4fc0:19::/48 maxlen: 48
2400:4fc0:1a::/48 maxlen: 48
2400:4fc0:1b::/48 maxlen: 48
2400:4fc0:1c::/48 maxlen: 48
2400:4fc0:1d::/48 maxlen: 48
2400:4fc0:1e::/48 maxlen: 48
2400:4fc0:1f::/48 maxlen: 48
2400:4fc0:20::/48 maxlen: 48
2400:4fc0:21::/48 maxlen: 48
2400:4fc0:22::/48 maxlen: 48
2400:4fc0:23::/48 maxlen: 48
2400:4fc0:24::/48 maxlen: 48
2400:4fc0:25::/48 maxlen: 48
2400:4fc0:26::/48 maxlen: 48
2400:4fc0:27::/48 maxlen: 48
2400:4fc0:28::/48 maxlen: 48
2400:4fc0:29::/48 maxlen: 48
2400:4fc0:2a::/48 maxlen: 48
2400:4fc0:2b::/48 maxlen: 48
2400:4fc0:2c::/48 maxlen: 48
2400:4fc0:2d::/48 maxlen: 48
2400:4fc0:2e::/48 maxlen: 48
2400:4fc0:2f::/48 maxlen: 48
2400:4fc0:30::/48 maxlen: 48
2400:4fc0:31::/48 maxlen: 48
2400:4fc0:32::/48 maxlen: 48
2400:4fc0:33::/48 maxlen: 48
2400:4fc0:34::/48 maxlen: 48
2400:4fc0:35::/48 maxlen: 48
2400:4fc0:36::/48 maxlen: 48
2400:4fc0:37::/48 maxlen: 48
2400:4fc0:38::/48 maxlen: 48
2400:4fc0:39::/48 maxlen: 48
2400:4fc0:3a::/48 maxlen: 48
2400:4fc0:3b::/48 maxlen: 48
2400:4fc0:3c::/48 maxlen: 48
2400:4fc0:3d::/48 maxlen: 48
2400:4fc0:3e::/48 maxlen: 48
2400:4fc0:3f::/48 maxlen: 48
2400:4fc0:40::/48 maxlen: 48
2400:4fc0:41::/48 maxlen: 48
2400:4fc0:42::/48 maxlen: 48
2400:4fc0:43::/48 maxlen: 48
2400:4fc0:44::/48 maxlen: 48
2400:4fc0:45::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3395 (0xd43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Validity
Not Before: Dec 23 16:12:01 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a470f3-783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:b1:58:6c:86:c1:ea:9e:2f:0f:1a:29:94:
9d:d6:ed:50:db:81:45:c5:9e:3b:72:23:c2:84:ce:
e7:e6:b9:fc:53:cf:02:e3:01:a9:ec:48:5b:8f:3e:
6b:f5:cf:06:4c:e3:8d:1b:90:83:68:55:30:1e:0b:
4f:ea:6f:38:76:fc:c9:25:db:dd:2e:63:46:69:1b:
f0:aa:c8:9d:75:c3:4a:6c:36:2e:58:ac:74:ef:d3:
79:be:9b:f1:7d:7e:41:30:26:00:5e:67:68:e3:43:
79:45:84:0a:91:2a:2a:50:8c:d4:f6:1c:15:f7:ba:
16:a6:3a:58:2d:99:6d:92:88:f0:f1:99:74:d3:39:
f5:cf:3f:78:59:97:c2:61:4b:a3:5a:e1:e1:1a:6f:
0f:20:03:92:e5:d0:cb:07:9f:c6:0d:91:4a:99:b7:
e6:42:7d:da:f1:1f:46:5a:55:36:4f:80:16:36:54:
d2:f1:a2:32:1f:d5:75:b4:c3:0f:08:87:b2:f7:8a:
5b:49:4f:75:f9:77:d4:8e:52:4a:11:27:73:9a:c0:
be:5d:e6:cb:e1:05:2b:e5:af:70:c1:3b:d2:fa:bf:
61:9a:ee:95:df:02:ca:32:ed:06:50:29:fd:d6:82:
c2:7e:50:d6:98:f8:b5:99:5f:29:d3:a9:30:6b:c1:
55:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D1:75:57:0C:F5:8E:E8:40:5A:A4:1A:BF:9B:1B:68:08:A4:DC:16
X509v3 Authority Key Identifier:
keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.55.144.0/22
103.106.56.0/24
103.206.231.0/24
202.83.124.0/24
202.83.126.0/23
IPv6:
2400:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
97:b3:80:27:d5:bc:c3:72:f8:58:9e:af:ed:01:34:78:50:0e:
a8:e8:86:3e:4b:94:77:67:d4:95:e3:bf:79:87:dd:ed:b9:d6:
f9:e9:61:80:fc:cd:83:5c:dd:22:06:ab:7f:fc:ef:71:a8:74:
1b:42:39:56:38:2f:fd:8f:61:a3:37:ea:cd:5c:3c:7b:30:bb:
07:9c:fd:47:b3:b2:3c:db:54:99:87:60:8d:85:72:2e:40:04:
5b:83:7b:89:88:ab:66:9e:38:65:e4:3a:05:97:33:22:b3:e8:
df:b9:5c:85:2e:bf:de:63:ea:88:b6:69:df:a8:78:5b:f5:31:
f9:0e:3b:cc:5a:93:89:40:b2:b5:39:17:eb:69:37:e8:f4:7b:
5c:44:24:60:92:a3:b8:9e:ab:55:0c:56:06:2c:bf:77:f2:ee:
bd:ef:72:c2:c6:dc:a2:07:53:da:10:c0:d8:3a:66:2b:4d:0a:
f7:5b:17:42:7b:11:85:09:16:b1:d4:e5:0d:c3:ae:e3:2a:68:
0c:9b:83:b9:8c:c7:6a:9a:46:a5:50:7e:2f:d3:d5:98:77:cc:
7f:f9:46:57:9f:b0:92:70:74:72:3d:9e:82:1a:bd:0a:50:14:
c4:07:55:3e:52:37:d1:81:1a:96:72:52:06:d4:69:cc:f9:75:
3e:bf:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:10 2026 by rpki-client