Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73FFDABAA3F711F0B7D2CC77C4F9AE02.roa
File: 73FFDABAA3F711F0B7D2CC77C4F9AE02.roa (raw, json)
Hash identifier: JL30gKZeXiS7xjPpzKL1P0g+4rsCM2EtNjGDRKjpZAo=
Subject key identifier: 00:CA:A6:CF:A6:42:BB:86:C6:AC:40:2F:C8:F1:83:0F:CA:C3:3E:2B
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4FBF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73FFDABAA3F711F0B7D2CC77C4F9AE02.roa
Signing time: Thu 26 Feb 2026 09:51:38 +0000
ROA not before: Thu 26 Feb 2026 09:51:38 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150895
IP address blocks: 36.50.26.0/24 maxlen: 24
36.50.27.0/24 maxlen: 24
103.20.102.0/23 maxlen: 24
103.67.162.0/23 maxlen: 23
103.72.56.0/23 maxlen: 23
103.75.76.0/23 maxlen: 23
103.78.2.0/23 maxlen: 23
103.116.52.0/23 maxlen: 24
103.152.164.0/23 maxlen: 24
103.161.172.0/24 maxlen: 24
103.173.66.0/23 maxlen: 24
103.237.86.0/23 maxlen: 24
163.61.72.0/23 maxlen: 24
163.223.210.0/23 maxlen: 23
163.227.230.0/23 maxlen: 24
2001:df3:e4c0::/48 maxlen: 48
2401:2be0::/48 maxlen: 48
2401:3560::/48 maxlen: 48
2401:37e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20415 (0x4fbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Feb 26 09:51:38 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a017aa-96b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:ac:c1:5d:c4:a4:10:73:bd:59:37:1a:e8:
19:e2:51:74:b5:a6:8e:1d:b1:13:27:f7:b5:8c:3b:
3a:d3:36:8d:94:4f:25:58:93:fa:60:99:cb:44:3b:
43:eb:4d:37:2a:18:7d:25:04:79:dd:76:ad:47:ca:
e3:c0:ac:49:20:0d:38:e0:d3:c1:73:72:17:4f:90:
71:7b:4f:32:d7:06:bf:a4:c6:d9:3c:db:6a:6d:97:
f1:e1:0c:ac:e7:4d:08:e5:62:35:44:83:b8:57:4c:
ac:5e:b7:34:cc:5c:59:7a:8c:95:9c:40:99:1f:15:
b9:59:1b:ee:b1:20:26:f9:9a:8a:52:84:9d:a1:a3:
58:98:58:37:bb:36:ec:19:0c:90:39:8b:69:79:57:
3b:c3:c4:5c:93:08:ea:9f:c1:a2:b3:16:57:74:ec:
2d:b7:8d:22:de:8a:62:b2:3b:7e:eb:ad:80:ed:99:
75:c1:5a:d8:40:55:44:b1:d5:cd:82:66:78:31:14:
c8:cb:2e:51:9f:a3:0f:c3:50:7e:75:e1:ee:48:ef:
e4:71:e5:cf:58:26:1b:58:5e:e6:93:58:67:cb:27:
73:3b:66:71:28:8f:c2:6c:32:30:78:02:72:52:56:
0f:6e:0d:f5:1a:25:6b:41:c3:95:dc:97:15:cb:66:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CA:A6:CF:A6:42:BB:86:C6:AC:40:2F:C8:F1:83:0F:CA:C3:3E:2B
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/73FFDABAA3F711F0B7D2CC77C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.26.0/23
103.20.102.0/23
103.67.162.0/23
103.72.56.0/23
103.75.76.0/23
103.78.2.0/23
103.116.52.0/23
103.152.164.0/23
103.161.172.0/24
103.173.66.0/23
103.237.86.0/23
163.61.72.0/23
163.223.210.0/23
163.227.230.0/23
IPv6:
2001:df3:e4c0::/48
2401:2be0::/48
2401:3560::/48
2401:37e0::/48
Signature Algorithm: sha256WithRSAEncryption
3e:db:b0:3b:83:64:1d:c4:c7:c9:2f:1d:e4:38:61:e7:e7:e9:
64:2c:a4:16:97:6a:fc:0e:e4:ba:f6:28:1c:b8:8c:ee:f3:1c:
cb:5c:57:d9:f6:23:ff:61:33:6a:ee:7b:87:2c:03:49:45:56:
18:65:bf:ba:90:94:ac:4a:27:7a:2b:60:41:24:66:f8:f8:cb:
dc:d0:87:1c:46:4e:4c:ff:a2:3c:7e:b3:52:5a:88:f0:9b:5b:
80:f5:bd:00:95:60:b6:7c:a5:54:38:e3:b1:46:6f:8f:04:31:
17:ff:ff:21:30:5f:8c:1e:33:f1:a8:4e:ce:67:af:76:d6:8d:
a1:75:7c:9e:f6:b5:86:86:9c:cf:b0:74:4a:41:1e:2e:9d:ee:
81:fb:0b:f1:44:8f:de:ae:4f:7e:df:9f:21:b7:d1:b3:6e:10:
83:a6:3d:1e:2f:7e:55:47:d6:e3:e1:dc:11:50:9e:d5:72:5d:
38:a2:65:e0:19:b6:80:6b:85:8f:2d:cd:3b:11:f6:d1:54:c9:
4e:50:e5:a7:3b:0a:ed:5e:c2:3b:71:35:25:76:b3:a7:6d:70:
2f:f3:15:39:8d:f0:14:d6:46:27:a7:41:b1:3f:e6:a9:7f:41:
6e:76:5a:9b:02:7f:6f:0b:56:fa:97:9c:6c:67:5a:90:5e:9b:
9e:14:76:78
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgICT78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYwMjI2MDk1MTM4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWEwMTdhYS05NmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl9+swV3EpBBzvVk3GugZ4lF0taaOHbETJ/e1jDs60zaNlE8lWJP6YJnLRDtD
6003Khh9JQR53XatR8rjwKxJIA044NPBc3IXT5Bxe08y1wa/pMbZPNtqbZfx4Qys
500I5WI1RIO4V0ysXrc0zFxZeoyVnECZHxW5WRvusSAm+ZqKUoSdoaNYmFg3uzbs
GQyQOYtpeVc7w8Rckwjqn8GisxZXdOwtt40i3opisjt+662A7Zl1wVrYQFVEsdXN
gmZ4MRTIyy5Rn6MPw1B+deHuSO/kceXPWCYbWF7mk1hnyydzO2ZxKI/CbDIweAJy
UlYPbg31GiVrQcOV3JcVy2ZHbwIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFADKps+m
QruGxqxAL8jxgw/Kwz4rMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNzNGRkRBQkFB
M0Y3MTFGMEI3RDJDQzc3QzRGOUFFMDIucm9hMIGbBggrBgEFBQcBBwEB/wSBizCB
iDBaBAIAATBUAwQBJDIaAwQBZxRmAwQBZ0OiAwQBZ0g4AwQBZ0tMAwQBZ04CAwQB
Z3Q0AwQBZ5ikAwQAZ6GsAwQBZ61CAwQBZ+1WAwQBoz1IAwQBo9/SAwQBo+PmMCoE
AgACMCQDBwAgAQ3z5MADBwAkASvgAAADBwAkATVgAAADBwAkATfgAAAwDQYJKoZI
hvcNAQELBQADggEBAD7bsDuDZB3Ex8kvHeQ4Yefn6WQspBaXavwO5Lr2KBy4jO7z
HMtcV9n2I/9hM2rue4csA0lFVhhlv7qQlKxKJ3orYEEkZvj4y9zQhxxGTkz/ojx+
s1JaiPCbW4D1vQCVYLZ8pVQ447FGb48EMRf//yEwX4weM/GoTs5nr3bWjaF1fJ72
tYaGnM+wdEpBHi6d7oH7C/FEj96uT37fnyG30bNuEIOmPR4vflVH1uPh3BFQntVy
XTiiZeAZtoBrhY8tzTsR9tFUyU5Q5ac7Cu1ewjtxNSV2s6dtcC/zFTmN8BTWRien
QbE/5ql/QW52WpsCf28LVvqXnGxnWpBem54Udng=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:45 2026 by rpki-client