Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/A968BCA24C8511ED94579477C4F9AE02.roa
File: A968BCA24C8511ED94579477C4F9AE02.roa (raw, json)
Hash identifier: FvWl4kxulrX5op+c9YNYXW1TSJd48nPBwMiQZTc1tI0=
Subject key identifier: 18:C4:EB:56:46:C5:F0:49:A8:E4:AD:77:1B:97:2F:21:9F:8F:C7:AD
Certificate issuer: /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50
Certificate serial: 029E
Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/A968BCA24C8511ED94579477C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:25:41 +0000
ROA not before: Fri 06 Feb 2026 21:04:29 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150348
IP address blocks: 103.16.250.0/23 maxlen: 23
103.16.250.0/24 maxlen: 24
103.16.251.0/24 maxlen: 24
2400:b360::/32 maxlen: 32
2400:b360:30::/48 maxlen: 48
2400:b360:40::/48 maxlen: 48
2400:b360:41::/48 maxlen: 48
2400:b360:42::/48 maxlen: 48
2400:b360:43::/48 maxlen: 48
2400:b360:44::/48 maxlen: 48
2400:b360:45::/48 maxlen: 48
2400:b360:46::/48 maxlen: 48
2400:b360:47::/48 maxlen: 48
2400:b360:48::/48 maxlen: 48
2400:b360:49::/48 maxlen: 48
2400:b360:4a::/48 maxlen: 48
2400:b360:4b::/48 maxlen: 48
2400:b360:4c::/48 maxlen: 48
2400:b360:4d::/48 maxlen: 48
2400:b360:4e::/48 maxlen: 48
2400:b360:4f::/48 maxlen: 48
2400:b360:50::/48 maxlen: 48
2400:b360:51::/48 maxlen: 48
2400:b360:52::/48 maxlen: 48
2400:b360:53::/48 maxlen: 48
2400:b360:54::/48 maxlen: 48
2400:b360:55::/48 maxlen: 48
2400:b360:56::/48 maxlen: 48
2400:b360:57::/48 maxlen: 48
2400:b360:58::/48 maxlen: 48
2400:b360:59::/48 maxlen: 48
2400:b360:5a::/48 maxlen: 48
2400:b360:5b::/48 maxlen: 48
2400:b360:5c::/48 maxlen: 48
2400:b360:5d::/48 maxlen: 48
2400:b360:5e::/48 maxlen: 48
2400:b360:5f::/48 maxlen: 48
2400:b360:60::/48 maxlen: 48
2400:b360:62::/48 maxlen: 48
2400:b360:63::/48 maxlen: 48
2400:b360:64::/48 maxlen: 48
2400:b360:65::/48 maxlen: 48
2400:b360:66::/48 maxlen: 48
2400:b360:67::/48 maxlen: 48
2400:b360:68::/48 maxlen: 48
2400:b360:69::/48 maxlen: 48
2400:b360:6a::/48 maxlen: 48
2400:b360:6b::/48 maxlen: 48
2400:b360:6c::/48 maxlen: 48
2400:b360:6d::/48 maxlen: 48
2400:b360:6e::/48 maxlen: 48
2400:b360:6f::/48 maxlen: 48
2400:b360:70::/48 maxlen: 48
2400:b360:71::/48 maxlen: 48
2400:b360:72::/48 maxlen: 48
2400:b360:73::/48 maxlen: 48
2400:b360:74::/48 maxlen: 48
2400:b360:75::/48 maxlen: 48
2400:b360:76::/48 maxlen: 48
2400:b360:77::/48 maxlen: 48
2400:b360:78::/48 maxlen: 48
2400:b360:79::/48 maxlen: 48
2400:b360:7a::/48 maxlen: 48
2400:b360:7b::/48 maxlen: 48
2400:b360:7c::/48 maxlen: 48
2400:b360:7d::/48 maxlen: 48
2400:b360:7e::/48 maxlen: 48
2400:b360:7f::/48 maxlen: 48
2400:b360:80::/48 maxlen: 48
2400:b360:81::/48 maxlen: 48
2400:b360:82::/48 maxlen: 48
2400:b360:83::/48 maxlen: 48
2400:b360:84::/48 maxlen: 48
2400:b360:85::/48 maxlen: 48
2400:b360:86::/48 maxlen: 48
2400:b360:87::/48 maxlen: 48
2400:b360:88::/48 maxlen: 48
2400:b360:89::/48 maxlen: 48
2400:b360:8a::/48 maxlen: 48
2400:b360:8b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl
rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 01:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670 (0x29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198166, serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50
Validity
Not Before: Feb 6 21:04:29 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a484a5-0ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:07:94:7f:d5:3d:31:b5:7a:4f:75:bd:a7:
f5:8e:b9:e5:38:fc:da:dd:b4:de:de:00:28:d2:57:
0b:9b:dd:cd:fc:fa:da:bb:14:c3:28:46:f9:24:a5:
35:10:94:c8:88:7e:bd:51:ca:0b:b5:93:c1:5a:81:
10:7a:c7:69:3f:78:63:6c:48:3f:1c:7d:5d:84:13:
e1:29:c5:6c:42:72:51:4b:d0:1e:99:ff:d4:28:0e:
95:47:36:a8:ec:89:c0:6c:07:3d:db:4f:e3:7c:60:
18:11:bf:95:ee:7d:96:03:a9:31:20:09:39:6e:b1:
e9:35:70:b7:26:12:f1:4d:ed:e5:e5:38:93:6b:9c:
9a:72:53:d0:de:f6:31:11:4c:f8:dc:12:20:6f:9c:
d1:3a:00:ec:c0:e0:4d:97:99:4c:c6:7b:5e:e2:df:
fc:cd:3d:d5:73:31:e0:0a:f0:75:57:54:b2:f5:ec:
9b:3c:03:d6:fe:a0:76:bc:7e:f5:b7:70:34:d7:5f:
e8:af:3e:38:5e:08:a2:e0:2e:c9:41:95:da:82:51:
a5:c7:66:ab:1f:0d:b7:38:e1:28:4a:6b:ea:c4:d2:
b3:47:1e:48:74:1d:7a:5e:d8:40:0f:f3:49:0e:24:
b9:cc:41:0b:5a:c4:15:49:2e:87:d0:d5:76:4f:8f:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C4:EB:56:46:C5:F0:49:A8:E4:AD:77:1B:97:2F:21:9F:8F:C7:AD
X509v3 Authority Key Identifier:
keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/A968BCA24C8511ED94579477C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.16.250.0/23
IPv6:
2400:b360::/32
Signature Algorithm: sha256WithRSAEncryption
a4:ce:94:f4:ae:42:36:92:2f:42:ab:bc:9b:f1:14:48:d6:df:
13:54:be:83:66:ae:b4:86:75:44:5e:60:4d:49:25:c5:11:5e:
25:ef:8e:c6:ff:7e:85:fe:82:d6:c5:e4:e4:3a:47:32:4c:f7:
bb:ba:63:77:b7:1c:5d:31:36:2b:62:c2:32:e1:4b:97:26:6c:
69:ed:9a:71:94:d2:22:d5:72:16:39:d8:cd:b4:ca:53:b6:3a:
5c:55:4c:01:4f:88:0c:06:ed:1a:6e:90:e2:87:db:3b:76:90:
ab:63:e9:66:d3:8f:c3:7b:9e:b4:5a:9f:ed:91:0f:2f:f7:f2:
fd:42:7b:c3:7a:49:73:c1:40:57:c3:a6:81:1b:91:6f:2b:3f:
9d:c7:3f:b2:70:03:c4:cc:13:4d:0e:b9:ca:52:ca:13:7c:82:
9e:99:89:07:8e:69:8e:21:bd:ea:10:cb:e8:43:3e:10:ba:38:
fd:09:07:41:30:bf:f7:56:ff:e2:86:b8:36:ca:b6:57:7b:c9:
d6:e2:8a:1f:b0:7c:d8:50:56:49:e8:66:5c:bc:8f:d1:aa:5e:
75:1b:05:06:02:19:10:3c:e0:38:e7:7b:a3:07:99:78:96:a4:
16:3d:83:62:ae:0d:96:2f:71:78:bd:3c:e7:4b:35:39:49:97:
00:13:13:94
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgxNjYxMTAvBgNVBAUTKDcyNTRERThDQjlCMzM5OTQ1NTQzRDg3RThFQjA1NkYx
NTNENTFGNTAwHhcNMjYwMjA2MjEwNDI5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODRhNS0wY2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8kHlH/VPTG1ek91vaf1jrnlOPza3bTe3gAo0lcLm93N/PrauxTDKEb5JKU1
EJTIiH69UcoLtZPBWoEQesdpP3hjbEg/HH1dhBPhKcVsQnJRS9Aemf/UKA6VRzao
7InAbAc920/jfGAYEb+V7n2WA6kxIAk5brHpNXC3JhLxTe3l5TiTa5yaclPQ3vYx
EUz43BIgb5zROgDswOBNl5lMxnte4t/8zT3VczHgCvB1V1Sy9eybPAPW/qB2vH71
t3A011/orz44Xgii4C7JQZXaglGlx2arHw23OOEoSmvqxNKzRx5IdB16XthAD/NJ
DiS5zEELWsQVSS6H0NV2T4+ZYQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBjE61ZG
xfBJqOStdxuXLyGfj8etMB8GA1UdIwQYMBaAFHJU3oy5szmUVUPYfo6wVvFT1R9Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE2Ni8zRTYxMjI5NDRD
ODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9aUlZROWgtanJCVzhWUFZI
MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsVGVqTG16T1pSVlE5aC1qckJXOFZQVkgxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTgxNjYvM0U2MTIyOTQ0QzgyMTFFRDlCMDNENDQ5QzRGOUFFMDIvQTk2OEJDQTI0
Qzg1MTFFRDk0NTc5NDc3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZxD6MA0EAgACMAcDBQAkALNgMA0GCSqGSIb3DQEBCwUAA4IBAQCk
zpT0rkI2ki9Cq7yb8RRI1t8TVL6DZq60hnVEXmBNSSXFEV4l747G/36F/oLWxeTk
OkcyTPe7umN3txxdMTYrYsIy4UuXJmxp7ZpxlNIi1XIWOdjNtMpTtjpcVUwBT4gM
Bu0abpDih9s7dpCrY+lm04/De560Wp/tkQ8v9/L9QnvDeklzwUBXw6aBG5FvKz+d
xz+ycAPEzBNNDrnKUsoTfIKemYkHjmmOIb3qEMvoQz4Qujj9CQdBML/3Vv/ihrg2
yrZXe8nW4oofsHzYUFZJ6GZcvI/Rql51GwUGAhkQPOA453ujB5l4lqQWPYNirg2W
L3F4vTznSzU5SZcAExOU
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:34 2026 by rpki-client