Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/D0DC58F432C611ECA639A749C4F9AE02.roa
File: D0DC58F432C611ECA639A749C4F9AE02.roa (raw, json)
Hash identifier: oH5y3yS567DWBQ59SHWtXRtomqD32Y3MrDRrRtObbME=
Subject key identifier: 28:11:44:C6:3C:2C:86:12:5C:88:D7:85:D2:0B:42:72:92:97:92:F0
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 0874
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/D0DC58F432C611ECA639A749C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:44:24 +0000
ROA not before: Wed 08 Oct 2025 22:24:32 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 23655
IP address blocks: 103.4.152.0/22 maxlen: 22
103.66.124.0/22 maxlen: 22
103.232.104.0/22 maxlen: 22
111.69.0.0/16 maxlen: 17
111.69.0.0/21 maxlen: 21
111.69.16.0/20 maxlen: 20
111.69.20.0/24 maxlen: 24
111.69.32.0/22 maxlen: 22
111.69.36.0/22 maxlen: 22
111.69.51.0/24 maxlen: 24
111.69.64.0/24 maxlen: 24
111.69.68.0/22 maxlen: 22
111.69.68.0/24 maxlen: 24
111.69.196.0/22 maxlen: 22
111.69.212.0/22 maxlen: 22
118.148.0.0/20 maxlen: 20
118.148.1.0/24 maxlen: 24
118.148.2.0/24 maxlen: 24
118.148.3.0/24 maxlen: 24
118.148.5.0/24 maxlen: 24
118.148.11.0/24 maxlen: 24
118.148.16.0/20 maxlen: 20
118.148.28.0/22 maxlen: 22
118.148.32.0/24 maxlen: 24
118.148.33.0/24 maxlen: 24
118.148.34.0/23 maxlen: 23
118.148.36.0/22 maxlen: 22
118.148.40.0/21 maxlen: 21
118.148.48.0/21 maxlen: 21
118.148.56.0/22 maxlen: 22
118.148.60.0/22 maxlen: 22
118.148.64.0/18 maxlen: 18
118.148.64.0/23 maxlen: 23
118.148.66.0/23 maxlen: 23
118.148.68.0/23 maxlen: 23
118.148.70.0/23 maxlen: 23
118.148.72.0/23 maxlen: 23
118.148.74.0/23 maxlen: 23
118.148.80.0/23 maxlen: 23
118.148.82.0/23 maxlen: 23
118.148.84.0/23 maxlen: 23
118.148.86.0/23 maxlen: 23
118.148.100.0/23 maxlen: 23
118.148.102.0/23 maxlen: 23
118.148.112.0/23 maxlen: 23
118.148.114.0/23 maxlen: 23
118.148.116.0/23 maxlen: 23
118.148.118.0/23 maxlen: 23
118.148.120.0/23 maxlen: 23
118.148.122.0/23 maxlen: 23
118.148.124.0/23 maxlen: 23
118.148.126.0/23 maxlen: 23
118.148.128.0/17 maxlen: 18
118.148.128.0/19 maxlen: 19
118.148.192.0/19 maxlen: 19
118.149.0.0/20 maxlen: 20
118.149.2.0/24 maxlen: 24
118.149.3.0/24 maxlen: 24
118.149.5.0/24 maxlen: 24
118.149.11.0/24 maxlen: 24
118.149.16.0/20 maxlen: 20
118.149.25.0/24 maxlen: 24
118.149.32.0/24 maxlen: 24
118.149.33.0/24 maxlen: 24
118.149.34.0/23 maxlen: 23
118.149.36.0/22 maxlen: 22
118.149.40.0/21 maxlen: 21
118.149.48.0/21 maxlen: 21
118.149.56.0/22 maxlen: 22
118.149.60.0/22 maxlen: 22
118.149.64.0/18 maxlen: 18
118.149.72.0/23 maxlen: 23
118.149.74.0/23 maxlen: 23
118.149.76.0/23 maxlen: 23
118.149.78.0/23 maxlen: 23
118.149.80.0/23 maxlen: 23
118.149.82.0/23 maxlen: 23
118.149.84.0/23 maxlen: 23
118.149.86.0/23 maxlen: 23
118.149.92.0/23 maxlen: 23
118.149.94.0/23 maxlen: 23
118.149.128.0/17 maxlen: 17
123.255.0.0/18 maxlen: 19
123.255.4.0/23 maxlen: 23
123.255.13.0/24 maxlen: 24
163.47.220.0/22 maxlen: 22
202.27.38.0/23 maxlen: 23
202.27.186.0/23 maxlen: 23
202.36.220.0/23 maxlen: 23
202.49.115.0/24 maxlen: 24
202.124.96.0/20 maxlen: 20
202.124.112.0/20 maxlen: 20
202.124.122.0/24 maxlen: 24
203.86.192.0/20 maxlen: 21
2406:e000::/32 maxlen: 32
2406:e000:300::/48 maxlen: 48
2406:e000:319::/48 maxlen: 48
2406:e000:320::/48 maxlen: 48
2406:e000:324::/48 maxlen: 48
2406:e000:325::/48 maxlen: 48
2406:e000:326::/48 maxlen: 48
2406:e000:327::/48 maxlen: 48
2406:e000:328::/48 maxlen: 48
2406:e000:329::/48 maxlen: 48
2406:e000:32a::/48 maxlen: 48
2406:e000:32b::/48 maxlen: 48
2406:e000:32c::/48 maxlen: 48
2406:e000:32d::/48 maxlen: 48
2406:e000:32e::/48 maxlen: 48
2406:e000:32f::/48 maxlen: 48
2406:e000:330::/48 maxlen: 48
2406:e000:331::/48 maxlen: 48
2406:e000:332::/48 maxlen: 48
2406:e000:335::/48 maxlen: 48
2406:e000:336::/48 maxlen: 48
2406:e000:337::/48 maxlen: 48
2406:e000:338::/48 maxlen: 48
2406:e000:339::/48 maxlen: 48
2406:e000:33a::/48 maxlen: 48
2406:e000:33c::/48 maxlen: 48
2406:e000:33d::/48 maxlen: 48
2406:e000:340::/48 maxlen: 48
2406:e000:341::/48 maxlen: 48
2406:e000:343::/48 maxlen: 48
2406:e000:344::/48 maxlen: 48
2406:e000:345::/48 maxlen: 48
2406:e000:348::/48 maxlen: 48
2406:e000:349::/48 maxlen: 48
2406:e000:366::/48 maxlen: 48
2406:e000:367::/48 maxlen: 48
2406:e000:369::/48 maxlen: 48
2406:e000:370::/48 maxlen: 48
2406:e000:371::/48 maxlen: 48
2406:e000:373::/48 maxlen: 48
2406:e000:374::/48 maxlen: 48
2406:e000:375::/48 maxlen: 48
2406:e000:376::/48 maxlen: 48
2406:e000:377::/48 maxlen: 48
2406:e000:379::/48 maxlen: 48
2406:e000:380::/48 maxlen: 48
2406:e000:382::/48 maxlen: 48
2406:e000:383::/48 maxlen: 48
2406:e000:384::/48 maxlen: 48
2406:e000:385::/48 maxlen: 48
2406:e000:386::/48 maxlen: 48
2406:e000:387::/48 maxlen: 48
2406:e000:389::/48 maxlen: 48
2406:e000:390::/48 maxlen: 48
2406:e000:391::/48 maxlen: 48
2406:e000:392::/48 maxlen: 48
2406:e000:c04::/48 maxlen: 48
2406:e000:c0e::/48 maxlen: 48
2406:e000:c0f::/48 maxlen: 48
2406:e000:c10::/48 maxlen: 48
2406:e000:c19::/48 maxlen: 48
2406:e000:c1a::/48 maxlen: 48
2406:e000:c1b::/48 maxlen: 48
2406:e000:c1c::/48 maxlen: 48
2406:e000:c1d::/48 maxlen: 48
2406:e000:c22::/48 maxlen: 48
2406:e000:c23::/48 maxlen: 48
2406:e000:c24::/48 maxlen: 48
2406:e000:c25::/48 maxlen: 48
2406:e000:c26::/48 maxlen: 48
2406:e000:c28::/48 maxlen: 48
2406:e000:6000::/37 maxlen: 37
2406:e000:6800::/37 maxlen: 37
2406:e001:800::/37 maxlen: 37
2406:e001:1800::/37 maxlen: 37
2406:e001:2000::/37 maxlen: 37
2406:e001:2800::/37 maxlen: 37
2406:e001:3000::/37 maxlen: 37
2406:e001:3800::/37 maxlen: 37
2406:e001:4000::/37 maxlen: 37
2406:e001:5000::/37 maxlen: 37
2406:e001:6000::/37 maxlen: 37
2406:e001:7000::/37 maxlen: 37
2406:e001:8800::/37 maxlen: 37
2406:e001:9800::/37 maxlen: 37
2406:e001:a800::/37 maxlen: 37
2406:e001:b000::/37 maxlen: 37
2406:e001:c000::/37 maxlen: 37
2406:e001:e800::/37 maxlen: 37
2406:e001:f800::/37 maxlen: 37
2406:e002:800::/37 maxlen: 37
2406:e002:2800::/37 maxlen: 37
2406:e002:3800::/37 maxlen: 37
2406:e002:4000::/37 maxlen: 37
2406:e002:4800::/37 maxlen: 37
2406:e002:5800::/37 maxlen: 37
2406:e002:6000::/37 maxlen: 37
2406:e002:6800::/37 maxlen: 37
2406:e002:7000::/37 maxlen: 37
2406:e002:7800::/37 maxlen: 37
2406:e002:8000::/37 maxlen: 37
2406:e002:8800::/37 maxlen: 37
2406:e002:9000::/37 maxlen: 37
2406:e002:9800::/37 maxlen: 37
2406:e002:a000::/37 maxlen: 37
2406:e002:a800::/37 maxlen: 37
2406:e002:b000::/37 maxlen: 37
2406:e002:b800::/37 maxlen: 37
2406:e002:c000::/38 maxlen: 38
2406:e006::/34 maxlen: 34
2406:e006:4000::/34 maxlen: 34
2406:e007:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164 (0x874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Oct 8 22:24:32 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48908-e1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:b4:03:08:56:a7:de:55:01:1b:53:9c:ea:
70:b9:c3:ee:88:9c:06:37:a5:9c:2c:81:15:42:42:
46:20:eb:50:30:21:52:65:13:7a:02:0c:18:dd:28:
0e:b0:b0:0d:28:2f:e8:30:69:df:5f:cd:a0:62:4d:
48:59:83:9d:49:40:46:95:ff:24:9a:a7:1a:63:85:
28:03:9f:76:a4:19:31:b4:ae:d0:cb:7d:50:4d:6d:
4f:ce:c2:ed:92:93:c6:39:db:ac:b5:09:40:2a:d4:
07:30:b2:2f:99:16:49:07:2a:98:c0:bf:c1:d1:46:
62:e5:dc:c5:c7:d1:be:cf:fe:e4:49:be:f1:9a:b2:
a1:5f:d8:c0:e4:62:6b:3e:1d:ad:0b:61:3a:1c:79:
d5:68:02:ee:5f:fb:f6:d5:9b:a5:42:ba:4f:a1:a2:
c6:46:44:94:97:02:60:54:a8:d7:59:cd:79:e2:bd:
f6:29:fb:fc:ce:7e:38:44:94:a8:a7:5b:aa:1c:3d:
51:44:0c:14:cd:27:2a:f5:e4:81:d1:88:ee:ad:23:
00:07:3a:4f:41:2a:5f:2d:43:80:d9:9d:b5:71:a1:
5c:e0:35:17:0b:43:9b:52:0f:b4:e3:8b:22:f6:ca:
90:5a:aa:77:cd:25:58:af:41:a6:54:28:59:91:d5:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:11:44:C6:3C:2C:86:12:5C:88:D7:85:D2:0B:42:72:92:97:92:F0
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/D0DC58F432C611ECA639A749C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.4.152.0/22
103.66.124.0/22
103.232.104.0/22
111.69.0.0/16
118.148.0.0/15
123.255.0.0/18
163.47.220.0/22
202.27.38.0/23
202.27.186.0/23
202.36.220.0/23
202.49.115.0/24
202.124.96.0/19
203.86.192.0/20
IPv6:
2406:e000::/32
2406:e001:800::/37
2406:e001:1800::-2406:e001:47ff:ffff:ffff:ffff:ffff:ffff
2406:e001:5000::/37
2406:e001:6000::/37
2406:e001:7000::/37
2406:e001:8800::/37
2406:e001:9800::/37
2406:e001:a800::-2406:e001:b7ff:ffff:ffff:ffff:ffff:ffff
2406:e001:c000::/37
2406:e001:e800::/37
2406:e001:f800::/37
2406:e002:800::/37
2406:e002:2800::/37
2406:e002:3800::-2406:e002:4fff:ffff:ffff:ffff:ffff:ffff
2406:e002:5800::-2406:e002:c3ff:ffff:ffff:ffff:ffff:ffff
2406:e006::/33
2406:e007:8000::/34
Signature Algorithm: sha256WithRSAEncryption
39:01:eb:94:69:b0:33:2f:1f:7a:c7:94:b3:ef:5d:5c:89:42:
82:5e:02:fd:e8:8d:56:40:f3:6c:30:86:02:b2:57:f8:88:ac:
1d:08:17:fc:5a:f3:2e:63:86:e2:72:2f:93:01:44:5b:3f:3d:
3d:3b:a3:26:6f:07:9f:43:14:24:f2:fb:72:c2:3e:d4:c1:32:
72:54:a0:6c:34:ca:b7:6c:48:17:bd:b8:fd:1e:52:b2:46:e2:
b4:a2:93:dd:f5:c6:33:fe:b5:72:22:14:ff:98:26:ca:c5:64:
94:b2:ca:cf:f2:a1:2e:49:b5:9b:fb:95:36:15:65:10:a4:47:
cb:e1:a0:ab:43:b6:e5:8e:81:0d:50:af:e3:3f:b1:8a:fc:46:
c9:c1:df:0b:76:aa:f9:b1:1c:90:8d:fa:cc:a3:da:9c:94:87:
25:6b:b3:5d:e0:d2:c8:9d:8e:fc:ec:49:80:f0:56:1f:d0:a9:
79:ca:03:73:b6:95:03:d5:ce:5f:6b:4e:d7:78:11:e1:4b:3c:
f7:a6:86:9b:9f:39:6a:71:61:b2:df:9c:a2:d9:0f:17:cb:3c:
2b:3e:a8:38:85:16:b9:2f:bf:2f:79:ca:d2:88:85:a6:aa:cc:
7a:ec:25:a0:47:36:38:d3:6e:ef:cc:40:30:6c:46:6f:db:f3:
32:ae:66:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:21 2026 by rpki-client