Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
File: 8C1F014E911411EF84279055C4F9AE02.roa (raw, json)
Hash identifier: ASP0s1dpJzxVuLP1cpiiY7Opvm/0WE0WvTsAQN/soC4=
Subject key identifier: BB:4B:AB:B7:F0:A2:C9:D6:C0:04:C1:41:9C:ED:43:C2:BE:A9:1F:FC
Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial: 0CA5
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:42:58 +0000
ROA not before: Sat 06 Dec 2025 15:35:40 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 131464
IP address blocks: 103.69.148.0/22 maxlen: 22
103.69.148.0/23 maxlen: 23
103.69.148.0/24 maxlen: 24
103.69.149.0/24 maxlen: 24
103.69.150.0/23 maxlen: 23
103.69.150.0/24 maxlen: 24
103.69.151.0/24 maxlen: 24
180.149.232.0/22 maxlen: 22
180.149.232.0/23 maxlen: 23
180.149.232.0/24 maxlen: 24
180.149.233.0/24 maxlen: 24
180.149.234.0/23 maxlen: 23
180.149.234.0/24 maxlen: 24
180.149.235.0/24 maxlen: 24
2405:f280::/32 maxlen: 32
2405:f280::/33 maxlen: 33
2405:f280::/34 maxlen: 34
2405:f280::/35 maxlen: 35
2405:f280::/36 maxlen: 36
2405:f280:1::/48 maxlen: 48
2405:f280:3::/48 maxlen: 48
2405:f280:14::/48 maxlen: 48
2405:f280:34::/48 maxlen: 48
2405:f280:5c::/48 maxlen: 48
2405:f280:192::/48 maxlen: 48
2405:f280:1000::/36 maxlen: 36
2405:f280:1000::/48 maxlen: 48
2405:f280:1001::/48 maxlen: 48
2405:f280:1038::/48 maxlen: 48
2405:f280:1039::/48 maxlen: 48
2405:f280:2000::/35 maxlen: 35
2405:f280:2000::/36 maxlen: 36
2405:f280:3000::/36 maxlen: 36
2405:f280:4000::/34 maxlen: 34
2405:f280:4000::/35 maxlen: 35
2405:f280:4000::/36 maxlen: 36
2405:f280:5000::/36 maxlen: 36
2405:f280:6000::/35 maxlen: 35
2405:f280:6000::/36 maxlen: 36
2405:f280:7000::/36 maxlen: 36
2405:f280:8000::/33 maxlen: 33
2405:f280:8000::/34 maxlen: 34
2405:f280:8000::/35 maxlen: 35
2405:f280:8000::/36 maxlen: 36
2405:f280:9000::/36 maxlen: 36
2405:f280:9000::/48 maxlen: 48
2405:f280:9001::/48 maxlen: 48
2405:f280:a000::/35 maxlen: 35
2405:f280:a000::/36 maxlen: 36
2405:f280:b000::/36 maxlen: 36
2405:f280:c000::/34 maxlen: 34
2405:f280:c000::/35 maxlen: 35
2405:f280:c000::/36 maxlen: 36
2405:f280:c000::/48 maxlen: 48
2405:f280:c002::/48 maxlen: 48
2405:f280:c100::/48 maxlen: 48
2405:f280:d000::/36 maxlen: 36
2405:f280:e000::/35 maxlen: 35
2405:f280:e000::/36 maxlen: 36
2405:f280:e000::/48 maxlen: 48
2405:f280:e004::/48 maxlen: 48
2405:f280:e005::/48 maxlen: 48
2405:f280:e006::/48 maxlen: 48
2405:f280:e007::/48 maxlen: 48
2405:f280:e008::/48 maxlen: 48
2405:f280:e009::/48 maxlen: 48
2405:f280:e00a::/48 maxlen: 48
2405:f280:e00b::/48 maxlen: 48
2405:f280:e00c::/48 maxlen: 48
2405:f280:e00d::/48 maxlen: 48
2405:f280:e034::/48 maxlen: 48
2405:f280:ef00::/48 maxlen: 48
2405:f280:f000::/36 maxlen: 36
2405:f280:ff00::/40 maxlen: 40
2405:f280:ff00::/48 maxlen: 48
2405:f280:ff01::/48 maxlen: 48
2405:f280:ff02::/48 maxlen: 48
2405:f280:ff03::/48 maxlen: 48
2405:f280:ff04::/48 maxlen: 48
2405:f280:ff05::/48 maxlen: 48
2405:f280:ff06::/48 maxlen: 48
2405:f280:ff07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3237 (0xca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Validity
Not Before: Dec 6 15:35:40 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a45072-c7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:dc:12:90:f4:0e:e0:ba:41:bb:c6:78:25:
e2:24:cc:00:6f:40:79:38:c3:b1:21:93:82:62:29:
91:f7:ed:60:ac:96:e9:e6:11:50:1e:1a:52:25:5e:
4d:29:c1:b0:78:4f:b0:38:12:33:78:db:d2:a5:18:
82:d2:57:3b:79:bf:c7:2c:14:ba:ab:79:13:93:90:
40:eb:d4:dd:87:8c:95:72:25:4c:22:7d:7e:7a:b8:
c2:2a:de:4f:c4:1f:d7:7b:70:9b:08:d9:b5:75:21:
94:aa:33:f3:18:cc:69:b9:1a:61:8f:61:2f:6b:e5:
33:35:95:6e:f1:7e:ae:a0:95:be:6e:a7:17:08:cd:
7d:99:f6:52:3c:ae:6c:7c:19:3e:a3:63:cb:f5:f8:
86:03:1d:32:d3:05:4f:8d:a8:03:5d:26:1d:ff:49:
53:e8:b7:29:7e:7c:cf:5a:4e:a7:64:81:ef:78:65:
f5:fa:d5:d2:2b:39:d2:99:45:51:4b:49:9c:c4:2e:
1d:c5:20:7e:55:f6:d2:5c:43:de:42:c4:b8:5f:b8:
12:fb:fb:f4:a4:26:1e:8c:ca:3e:d4:db:b2:8e:10:
9e:01:e3:d5:ff:2c:95:ff:39:1a:62:71:a9:02:9f:
30:20:9d:df:fb:b1:a5:2b:62:f5:0b:68:22:90:a2:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4B:AB:B7:F0:A2:C9:D6:C0:04:C1:41:9C:ED:43:C2:BE:A9:1F:FC
X509v3 Authority Key Identifier:
keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.148.0/22
180.149.232.0/22
IPv6:
2405:f280::/32
Signature Algorithm: sha256WithRSAEncryption
41:1a:c0:ce:dd:e2:6a:4a:54:63:08:be:a3:60:76:e2:78:40:
c3:2d:67:a4:22:9f:e9:b7:a5:18:b8:b8:b2:9b:de:2c:36:cd:
ae:8a:44:c6:16:e2:f3:16:58:4c:c6:44:f8:61:44:05:34:5e:
a6:ae:13:a9:f0:ce:4a:8e:d0:28:86:66:67:4f:28:d0:b2:3a:
1f:b6:e7:6a:de:43:e6:da:6c:3f:48:f7:4e:9f:f6:8b:ac:18:
12:56:56:d6:0c:d2:98:9a:b5:74:be:d8:15:e1:91:5a:f1:ba:
f6:59:57:05:28:1b:a2:90:89:dc:d1:63:8b:63:18:88:a9:0b:
58:f6:ec:2c:7c:e0:4b:8b:4e:8c:3b:89:57:97:ee:4f:62:a2:
c2:13:a5:2e:66:f0:76:3b:70:ad:98:6f:01:6b:d3:b0:08:0c:
6f:c0:7a:e2:a6:7b:63:a7:13:b3:e1:df:b4:fe:8d:d4:c0:97:
64:e9:b2:92:43:6d:65:b9:fc:07:f1:f3:c5:79:82:9f:fb:6a:
a4:fa:de:a8:de:65:2b:c8:2f:5d:f8:a7:22:93:4b:4b:7a:0f:
7a:85:5c:fe:d9:58:e6:4e:ed:b9:a3:d8:7a:05:f6:5a:bc:9f:
c5:a9:65:be:36:a5:03:b9:c1:7e:55:77:d7:2f:71:33:45:37:
04:b5:fc:15
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICDKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y2REUxMTAvBgNVBAUTKDVENDI4NjgyRTg5RTlGRUQ5NjJCRTlDNDQzMkIzNEM0
NUUyRTA5QzkwHhcNMjUxMjA2MTUzNTQwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTA3Mi1jN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOvcEpD0DuC6QbvGeCXiJMwAb0B5OMOxIZOCYimR9+1grJbp5hFQHhpSJV5N
KcGweE+wOBIzeNvSpRiC0lc7eb/HLBS6q3kTk5BA69Tdh4yVciVMIn1+erjCKt5P
xB/Xe3CbCNm1dSGUqjPzGMxpuRphj2Eva+UzNZVu8X6uoJW+bqcXCM19mfZSPK5s
fBk+o2PL9fiGAx0y0wVPjagDXSYd/0lT6LcpfnzPWk6nZIHveGX1+tXSKznSmUVR
S0mcxC4dxSB+VfbSXEPeQsS4X7gS+/v0pCYejMo+1NuyjhCeAePV/yyV/zkaYnGp
Ap8wIJ3f+7GlK2L1C2gikKKopQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFLtLq7fw
osnWwATBQZztQ8K+qR/8MB8GA1UdIwQYMBaAFF1ChoLonp/tlivpxEMrNMReLgnJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjZERS84N0FBRTc0QTFC
M0ExMUVBQjRDREM2NTlDNEY5QUUwMi9YVUtHZ3VpZW4tMldLLW5FUXlzMHhGNHVD
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hVS0dndWllbi0yV0stbkVReXMweEY0dUNjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0Y2REUvODdBQUU3NEExQjNBMTFFQUI0Q0RDNjU5QzRGOUFFMDIvOEMxRjAxNEU5
MTE0MTFFRjg0Mjc5MDU1QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCZ0WUAwQCtJXoMA0EAgACMAcDBQAkBfKAMA0GCSqGSIb3DQEBCwUA
A4IBAQBBGsDO3eJqSlRjCL6jYHbieEDDLWekIp/pt6UYuLiym94sNs2uikTGFuLz
FlhMxkT4YUQFNF6mrhOp8M5KjtAohmZnTyjQsjoftudq3kPm2mw/SPdOn/aLrBgS
VlbWDNKYmrV0vtgV4ZFa8br2WVcFKBuikInc0WOLYxiIqQtY9uwsfOBLi06MO4lX
l+5PYqLCE6UuZvB2O3CtmG8Ba9OwCAxvwHripntjpxOz4d+0/o3UwJdk6bKSQ21l
ufwH8fPFeYKf+2qk+t6o3mUryC9d+Kcik0tLeg96hVz+2VjmTu25o9h6BfZavJ/F
qWW+NqUDucF+VXfXL3EzRTcEtfwV
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:23 2026 by rpki-client