Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C22B92AA081011EDBC3C4374C4F9AE02.roa
File: C22B92AA081011EDBC3C4374C4F9AE02.roa (raw, json)
Hash identifier: A7jVeqjHHh2APzTI1+UAUQmrzpQt1NTXyOlzr0eDS/w=
Subject key identifier: 26:EB:C5:6D:7D:99:34:59:9F:BE:34:0E:EB:C8:AC:A2:C2:39:4A:87
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0DAF
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C22B92AA081011EDBC3C4374C4F9AE02.roa
Signing time: Wed 11 Feb 2026 12:07:36 +0000
ROA not before: Wed 11 Feb 2026 12:07:36 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 135341
IP address blocks: 103.109.92.0/24 maxlen: 24
103.109.93.0/24 maxlen: 24
103.109.95.0/24 maxlen: 24
103.214.200.0/24 maxlen: 24
103.214.201.0/24 maxlen: 24
103.214.202.0/24 maxlen: 24
103.214.203.0/24 maxlen: 24
144.48.150.0/24 maxlen: 24
144.48.151.0/24 maxlen: 24
2001:df4:3100::/48 maxlen: 48
2404:4c0:10::/48 maxlen: 48
2404:4c0:10a::/48 maxlen: 48
2404:4c0:150::/48 maxlen: 48
2404:4c0:151::/48 maxlen: 48
2404:4c0:152::/48 maxlen: 48
2404:4c0:153::/48 maxlen: 48
2404:4c0:154::/48 maxlen: 48
2404:4c0:155::/48 maxlen: 48
2404:4c0:156::/48 maxlen: 48
2404:4c0:157::/48 maxlen: 48
2404:4c0:158::/48 maxlen: 48
2404:4c0:159::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3503 (0xdaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: Feb 11 12:07:36 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=698c7108-e88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:b6:12:f4:bd:42:0f:56:3d:44:29:73:b8:
42:8f:dd:f4:a6:8b:a3:88:77:ea:80:d2:e3:e3:d0:
41:63:ed:4e:ab:6d:4a:37:ba:7d:c9:57:a8:73:a4:
31:d6:d3:78:7f:c1:6c:c1:d2:3b:10:1e:48:34:62:
58:5b:ba:42:c0:7b:31:ce:2a:f4:b9:d0:4c:27:c0:
dc:02:c2:c6:0e:76:69:33:f3:5c:99:2e:45:95:45:
b1:2f:84:06:8d:ce:64:9a:f8:fd:8f:78:6e:73:b5:
36:2d:10:3f:5b:7f:0b:02:35:06:f2:ef:a6:a2:5d:
70:c6:4e:7e:bc:e4:2b:59:0c:0c:cf:38:bc:52:f2:
53:63:1c:48:2a:ae:e1:63:bb:4a:cc:57:e7:13:0e:
a0:95:90:5c:78:be:da:f6:41:81:0e:08:7b:3b:77:
49:a5:d5:70:e4:89:35:55:44:73:a8:92:08:f2:52:
c3:61:4a:8f:20:3e:d8:92:83:3f:1e:4d:6b:5b:d6:
16:ff:14:69:b6:a2:55:42:a0:7f:39:1f:2b:95:c8:
5a:63:16:49:e1:c6:e6:04:09:22:bb:09:58:12:ae:
64:cc:47:e5:87:d2:6e:6f:51:ad:81:85:cf:74:b9:
9d:ec:9a:7e:98:f0:ec:88:e0:31:03:e3:72:68:ec:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EB:C5:6D:7D:99:34:59:9F:BE:34:0E:EB:C8:AC:A2:C2:39:4A:87
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/C22B92AA081011EDBC3C4374C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.92.0/23
103.109.95.0/24
103.214.200.0/22
144.48.150.0/23
IPv6:
2001:df4:3100::/48
2404:4c0:10::/48
2404:4c0:10a::/48
2404:4c0:150::-2404:4c0:159:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
af:7b:45:3e:e3:78:37:e9:5b:b4:91:e5:bb:8a:1b:b5:2b:32:
64:fc:1a:05:02:b6:64:1f:4b:9f:6b:96:07:de:27:4a:73:59:
45:4a:07:b8:7a:83:24:e2:56:c9:35:e0:96:e0:60:27:97:31:
65:8b:56:68:12:9a:a7:fa:e6:ee:c0:17:2d:bd:3c:23:dc:f8:
ae:32:6f:07:19:91:1b:97:6d:e2:eb:6c:8d:c7:3a:4d:26:40:
ea:cc:23:a7:ed:12:2f:24:57:16:04:b5:1a:6f:db:ee:94:94:
d6:16:01:99:09:c6:ec:76:f7:2f:91:e4:68:3e:01:9a:66:b2:
2f:2f:ba:dc:5b:a1:5d:84:2a:93:b7:9c:d9:f2:68:da:26:9c:
6c:17:31:83:bf:cf:18:cf:c7:ca:a8:b0:30:04:d4:a6:31:5a:
03:a2:b0:3c:f4:78:1a:18:70:82:81:2d:7d:1c:14:0c:60:82:
41:0a:e7:da:7e:45:cd:22:c7:bb:92:c4:60:99:10:ff:9a:40:
20:85:63:64:09:8f:cf:7f:b5:31:42:a5:e8:71:17:81:f1:2f:
a8:fd:4d:79:8a:2f:fd:c9:f2:de:47:8a:c2:0e:ac:ba:7b:e4:
1e:4b:74:f6:e8:7d:59:9b:37:e5:fe:e4:59:60:77:d4:40:fa:
17:5b:ca:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:58 2026 by rpki-client