Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/8F75257455E911E9AE112D6CC4F9AE02.roa
File: 8F75257455E911E9AE112D6CC4F9AE02.roa (raw, json)
Hash identifier: YOyhRNReWebICH9oX6oPZhIxKRKBfgETO6Jt4nNgxQY=
Subject key identifier: D0:66:62:62:D1:37:E0:89:25:94:19:12:7F:55:82:71:E2:E0:08:52
Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Certificate serial: 1066
Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/8F75257455E911E9AE112D6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:19:39 +0000
ROA not before: Mon 26 May 2025 17:49:13 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 136531
IP address blocks: 103.91.228.0/22 maxlen: 22
103.91.228.0/24 maxlen: 24
103.91.229.0/24 maxlen: 24
103.91.230.0/24 maxlen: 24
103.91.231.0/24 maxlen: 24
2401:14c0::/32 maxlen: 32
2401:14c0:1::/48 maxlen: 48
2401:14c0:2::/48 maxlen: 48
2401:14c0:3::/48 maxlen: 48
2401:14c0:4::/48 maxlen: 48
2401:14c0:5::/48 maxlen: 48
2401:14c0:6::/48 maxlen: 48
2401:14c0:7::/48 maxlen: 48
2401:14c0:8::/48 maxlen: 48
2401:14c0:9::/48 maxlen: 48
2401:14c0:a::/48 maxlen: 48
2401:14c0:b::/48 maxlen: 48
2401:14c0:c::/48 maxlen: 48
2401:14c0:d::/48 maxlen: 48
2401:14c0:e::/48 maxlen: 48
2401:14c0:f::/48 maxlen: 48
2401:14c0:10::/48 maxlen: 48
2401:14c0:11::/48 maxlen: 48
2401:14c0:12::/48 maxlen: 48
2401:14c0:13::/48 maxlen: 48
2401:14c0:14::/48 maxlen: 48
2401:14c0:15::/48 maxlen: 48
2401:14c0:16::/48 maxlen: 48
2401:14c0:21::/48 maxlen: 48
2401:14c0:2a::/48 maxlen: 48
2401:14c0:2c::/48 maxlen: 48
2401:14c0:2d::/48 maxlen: 48
2401:14c0:4a::/48 maxlen: 48
2401:14c0:8a::/48 maxlen: 48
2401:14c0:8b::/48 maxlen: 48
2401:14c0:8c::/48 maxlen: 48
2401:14c0:8d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4198 (0x1066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE96, serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Validity
Not Before: May 26 17:49:13 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a404aa-1212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ea:11:9d:27:b8:49:3d:13:df:af:9c:6a:1d:
10:c5:aa:5f:7a:04:91:0e:79:98:24:e4:e0:32:2e:
11:fb:69:5c:58:7d:03:f7:ee:87:21:b9:2b:7d:0d:
85:f1:70:4a:ed:29:be:75:98:34:62:cd:0a:1e:26:
b2:6b:8a:bf:c0:09:17:a3:3c:a4:9d:f4:1c:35:2a:
90:ec:e3:c6:d9:5d:5d:9e:60:2a:3c:47:d2:8f:89:
90:36:ec:5b:87:18:00:12:ca:44:dd:bb:bf:9e:a8:
da:a3:b2:2c:a5:a9:22:07:11:7b:6a:82:1d:8a:d3:
06:a3:f3:1d:70:b2:8f:ce:4b:2f:87:80:f9:24:fc:
c7:67:60:47:e8:92:72:62:20:04:4b:3a:15:28:9e:
0a:d2:e7:32:13:11:fa:f2:24:64:ef:b1:fc:14:8f:
cf:6f:9f:a3:be:93:19:ff:7d:a9:fc:c2:fd:6b:83:
e8:ce:c0:2c:e2:c8:ba:6e:1a:f9:f1:20:6a:cb:7a:
f0:ea:8b:32:2c:0c:88:64:b2:a4:0d:00:73:5d:49:
ed:07:c3:1c:0e:1c:a6:23:23:d0:77:9a:84:5e:28:
e1:f1:f6:3a:77:72:97:14:e3:27:e7:a6:ae:05:df:
11:20:88:7b:57:0a:2b:df:70:0f:da:e3:d2:5e:d1:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:66:62:62:D1:37:E0:89:25:94:19:12:7F:55:82:71:E2:E0:08:52
X509v3 Authority Key Identifier:
keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/8F75257455E911E9AE112D6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.228.0/22
IPv6:
2401:14c0::/32
Signature Algorithm: sha256WithRSAEncryption
89:0c:58:3b:d2:44:20:fa:2e:73:27:68:b9:67:92:18:35:02:
dd:d8:f6:fc:81:f3:3d:80:f2:4a:c8:84:df:61:82:62:2d:75:
f3:04:8e:24:ab:4d:86:fb:38:1c:47:e9:ef:0a:97:05:e4:9b:
59:b7:bd:db:84:01:c6:2f:72:cf:99:5f:f8:ea:3f:9e:fe:f1:
4c:ea:e2:21:24:13:d2:20:6c:83:2f:57:e2:c4:7c:b3:ca:7f:
35:52:14:ca:0b:f1:4f:9e:56:16:cb:85:a7:e0:11:d3:c1:4a:
ab:3f:3f:05:e4:9a:c9:7a:b9:89:00:e4:bd:3e:e7:25:a9:1a:
96:2c:41:db:c5:6a:40:09:7a:11:be:3a:47:0f:9d:c7:45:7e:
cf:8d:ac:48:16:a5:73:bd:8b:a1:b9:f9:56:c7:ea:84:0f:f1:
35:04:f4:35:84:96:25:ed:dd:06:57:e1:31:6c:25:52:61:c3:
bc:e2:bc:14:14:a5:73:29:b6:e3:64:5a:d9:46:77:43:c5:d0:
a0:e3:cb:2d:b6:a0:9d:d7:04:37:9c:ee:0b:04:97:20:be:2c:
1e:a2:05:d9:b9:86:ce:21:fb:c9:22:a0:0c:d3:14:bc:16:92:
f0:ca:aa:c1:7e:4a:13:af:9d:dd:38:b6:4e:1d:9e:c2:e5:46:
1d:54:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:28 2026 by rpki-client