Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/9E1F70A4844911EAA528AD63C4F9AE02.roa
File: 9E1F70A4844911EAA528AD63C4F9AE02.roa (raw, json)
Hash identifier: kt+Cf9mIPbIRu1m1WYJwv/k0U/X/kht8lidnJLAx9zo=
Subject key identifier: 7A:8A:11:32:61:FD:9C:CC:30:24:49:8C:56:F2:4E:28:53:19:EC:9C
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 37A0
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/9E1F70A4844911EAA528AD63C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:28:55 +0000
ROA not before: Sat 22 Mar 2025 15:01:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56167
IP address blocks: 58.181.100.0/23 maxlen: 24
58.181.102.0/23 maxlen: 24
59.103.88.0/23 maxlen: 24
59.103.90.0/23 maxlen: 24
116.71.4.0/22 maxlen: 22
116.71.4.0/24 maxlen: 24
116.71.5.0/24 maxlen: 24
116.71.6.0/24 maxlen: 24
116.71.7.0/24 maxlen: 24
116.71.8.0/23 maxlen: 24
116.71.10.0/23 maxlen: 24
116.71.12.0/23 maxlen: 24
116.71.14.0/23 maxlen: 24
116.71.160.0/21 maxlen: 24
116.71.168.0/21 maxlen: 24
116.71.176.0/21 maxlen: 24
116.71.184.0/21 maxlen: 24
119.152.16.0/24 maxlen: 24
119.152.120.0/22 maxlen: 24
119.155.160.0/21 maxlen: 24
119.155.168.0/21 maxlen: 24
119.155.176.0/21 maxlen: 24
119.155.184.0/21 maxlen: 24
119.155.192.0/21 maxlen: 24
119.155.200.0/21 maxlen: 24
119.155.208.0/21 maxlen: 24
119.155.216.0/21 maxlen: 24
119.156.212.0/24 maxlen: 24
182.191.128.0/21 maxlen: 24
182.191.136.0/21 maxlen: 24
182.191.144.0/21 maxlen: 24
182.191.152.0/21 maxlen: 24
203.135.44.0/22 maxlen: 22
203.135.44.0/24 maxlen: 24
203.135.45.0/24 maxlen: 24
203.135.46.0/24 maxlen: 24
203.135.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14240 (0x37a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Mar 22 15:01:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48567-8639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:46:56:ba:63:74:b7:0d:13:b9:b6:1e:51:
96:2b:07:b0:c2:a2:c6:7b:75:91:20:b4:9c:df:01:
6a:ce:3e:17:33:a7:da:f8:d5:b7:e6:5c:e9:d5:90:
5e:30:27:aa:1e:e8:3d:52:31:14:5a:4f:14:95:66:
08:72:8d:b8:5c:e2:b2:be:05:d8:45:32:2c:09:fe:
4f:53:d0:d9:4f:2f:95:85:0e:e0:3f:05:76:4a:dd:
04:2d:8d:63:d7:7d:fd:07:00:dd:7b:db:3a:4c:cd:
67:fc:63:42:cc:33:93:0f:03:ec:69:a5:eb:56:56:
66:e0:47:f1:11:6b:13:27:3d:07:e4:00:e2:cf:82:
30:b1:08:5b:30:49:19:d1:96:36:e2:b3:6e:d2:3e:
42:17:fa:e6:7d:12:46:bf:9a:75:56:68:ba:8c:d5:
07:f4:86:bf:1d:df:70:40:d6:a4:d5:f6:ac:c3:61:
61:a8:5d:31:9b:97:ac:43:c7:d7:ce:94:8d:b3:c9:
ba:e3:03:9a:64:87:98:6a:59:b7:f7:26:1d:fa:0d:
24:5e:34:e8:52:59:68:6b:b3:4c:cd:dd:74:76:0f:
16:da:6b:c8:5b:fc:bb:2b:6b:83:1e:bf:65:f3:e4:
7b:b6:11:0b:84:84:c7:1c:80:28:37:11:71:03:d2:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8A:11:32:61:FD:9C:CC:30:24:49:8C:56:F2:4E:28:53:19:EC:9C
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/9E1F70A4844911EAA528AD63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.181.100.0/22
59.103.88.0/22
116.71.4.0-116.71.15.255
116.71.160.0/19
119.152.16.0/24
119.152.120.0/22
119.155.160.0-119.155.223.255
119.156.212.0/24
182.191.128.0/19
203.135.44.0/22
Signature Algorithm: sha256WithRSAEncryption
24:9c:76:48:ce:de:54:f8:a3:1f:62:25:90:c0:80:63:25:bd:
93:fe:c3:72:8d:f2:ec:23:9e:38:2f:ce:63:18:2a:d8:43:d8:
e2:6a:de:76:86:b3:99:50:37:5c:56:87:93:87:61:69:65:a8:
ab:13:e4:0d:ec:4d:f7:6c:62:39:25:89:7b:e0:fb:4f:4b:09:
bf:a1:d4:7a:5d:26:16:0e:e5:12:1b:31:58:5d:99:4b:c2:60:
65:57:9f:3d:24:6d:4d:f4:e2:6f:43:6c:0b:c0:65:4a:0e:9c:
f7:0e:c8:2c:47:bc:c4:69:3a:4d:76:31:fb:22:5c:cd:0c:04:
ed:cd:75:95:14:6c:9a:e0:7e:b8:50:22:c5:44:83:b3:2d:4e:
aa:a7:4a:47:a9:5f:67:0f:20:c3:6b:54:74:0f:4d:3b:20:f9:
ab:0c:21:6e:52:e2:04:00:3d:9f:c5:8a:13:e5:1c:3b:79:c6:
84:0d:41:43:a5:dc:8b:36:45:29:f7:08:7a:22:b1:71:ab:44:
b2:33:8f:c2:2b:f0:9d:13:99:ec:0a:c1:40:67:2d:6e:83:95:
18:63:f3:3a:c3:49:28:fb:83:7b:1e:ba:33:78:ee:80:81:e2:
24:41:2e:5d:4a:0b:f0:5d:79:2b:c6:61:64:0a:90:3f:dc:c0:
29:1f:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:28 2026 by rpki-client