Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9DD52514768A11F18379E3C263A30FBC.roa
File: 9DD52514768A11F18379E3C263A30FBC.roa (raw, json)
Hash identifier: qL2NfurnJkqAE91o3JbHo4kDQD0nc46unNbJSFChKog=
Subject key identifier: 76:13:3E:AF:38:51:F9:F0:FC:95:4C:F5:7E:1A:AD:32:DC:2F:50:FA
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DF5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9DD52514768A11F18379E3C263A30FBC.roa
Signing time: Fri 02 Oct 2026 15:26:07 +0000
ROA not before: Fri 02 Oct 2026 15:26:07 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140766
IP address blocks: 103.22.218.0/23 maxlen: 24
103.71.96.0/23 maxlen: 24
103.145.78.0/23 maxlen: 24
103.146.166.0/23 maxlen: 24
103.154.186.0/23 maxlen: 24
103.160.74.0/23 maxlen: 24
103.160.76.0/23 maxlen: 24
103.160.84.0/23 maxlen: 24
103.174.212.0/23 maxlen: 24
103.174.216.0/23 maxlen: 24
103.176.146.0/23 maxlen: 24
103.176.148.0/23 maxlen: 24
103.191.144.0/23 maxlen: 24
103.191.146.0/23 maxlen: 24
103.209.32.0/23 maxlen: 24
113.192.6.0/23 maxlen: 24
124.197.16.0/20 maxlen: 24
203.29.16.0/22 maxlen: 24
2001:df1:440::/48 maxlen: 48
2001:df1:4c0::/48 maxlen: 48
2001:df1:13c0::/48 maxlen: 48
2001:df1:2640::/48 maxlen: 48
2001:df2:4c40::/48 maxlen: 48
2001:df2:7c40::/48 maxlen: 48
2001:df3:4140::/48 maxlen: 48
2001:df3:5fc0::/48 maxlen: 48
2001:df3:abc0::/48 maxlen: 48
2001:df5:9980::/48 maxlen: 48
2400:15a0::/48 maxlen: 48
2400:1660::/48 maxlen: 48
2400:3320::/48 maxlen: 48
2400:3360::/48 maxlen: 48
2400:b8e0::/48 maxlen: 48
2400:f760::/48 maxlen: 48
2401:74e0::/48 maxlen: 48
2406:e4c0::/32 maxlen: 48
2406:e640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 15:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28149 (0x6df5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:26:07 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcd0f-2768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cc:e0:f0:44:a2:10:a0:44:0f:6f:9f:85:8b:
73:a9:7d:aa:1b:ce:dc:93:5c:59:fe:5a:17:0b:76:
d6:5b:80:e7:b2:43:1b:f1:c7:8d:40:e6:8c:64:7e:
be:72:aa:af:70:db:36:16:ed:0f:24:03:54:83:4f:
66:52:5f:9c:87:35:49:da:29:72:03:73:4b:f2:bb:
4c:4e:8c:98:2b:b4:f2:e8:7b:64:14:a7:9d:8b:09:
5d:70:64:88:43:c2:d9:28:21:e4:9c:85:a0:6c:7d:
9c:04:82:e3:e8:f0:8d:43:ce:6c:f8:df:c5:3c:3e:
dd:91:1d:7e:39:43:1e:44:78:7e:8d:85:ee:17:88:
db:a0:2d:92:d9:90:c9:27:45:f5:0e:61:f1:12:e3:
ce:ec:a9:d1:a3:2a:82:c8:5f:fe:a1:4f:4a:6c:75:
50:7a:8d:1b:8e:e1:ed:1a:c8:40:19:82:fc:13:e2:
cf:a1:be:66:ed:30:c8:99:d7:5f:60:6e:fc:27:ec:
cc:a7:73:a4:50:e4:f8:b4:0a:9d:cc:2a:32:10:0e:
ad:74:5b:64:bc:0e:c8:e4:c6:06:5d:9e:8e:02:62:
f3:55:17:56:f7:ed:6c:7e:a5:53:7b:6a:62:55:6d:
78:d2:3b:78:e8:53:6c:ac:3e:ab:26:d4:df:aa:7c:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:13:3E:AF:38:51:F9:F0:FC:95:4C:F5:7E:1A:AD:32:DC:2F:50:FA
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9DD52514768A11F18379E3C263A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.22.218.0/23
103.71.96.0/23
103.145.78.0/23
103.146.166.0/23
103.154.186.0/23
103.160.74.0-103.160.77.255
103.160.84.0/23
103.174.212.0/23
103.174.216.0/23
103.176.146.0-103.176.149.255
103.191.144.0/22
103.209.32.0/23
113.192.6.0/23
124.197.16.0/20
203.29.16.0/22
IPv6:
2001:df1:440::/48
2001:df1:4c0::/48
2001:df1:13c0::/48
2001:df1:2640::/48
2001:df2:4c40::/48
2001:df2:7c40::/48
2001:df3:4140::/48
2001:df3:5fc0::/48
2001:df3:abc0::/48
2001:df5:9980::/48
2400:15a0::/48
2400:1660::/48
2400:3320::/48
2400:3360::/48
2400:b8e0::/48
2400:f760::/48
2401:74e0::/48
2406:e4c0::/32
2406:e640::/48
Signature Algorithm: sha256WithRSAEncryption
87:4c:8a:28:16:67:7d:cf:e7:13:34:61:42:13:22:71:40:5b:
e0:a1:5b:2b:f0:61:23:75:45:3e:55:8f:2f:6e:9a:12:fe:23:
fc:15:20:6a:a5:44:8d:00:c6:99:75:44:21:ce:cb:a2:07:d1:
de:0f:74:b0:48:a3:95:80:20:3c:35:c8:ce:43:ba:76:b5:9f:
ef:43:7d:71:37:48:43:9f:7a:b6:14:0d:ef:20:20:2d:ea:4a:
3b:11:78:00:68:a2:64:26:6e:30:79:df:72:d3:48:b1:bd:49:
07:81:cf:6d:d4:0b:85:57:64:e2:a3:7e:ff:3c:5f:f5:13:17:
15:67:92:fc:b2:cd:b7:22:0c:0a:c6:5e:59:f1:f4:1c:9e:a3:
b5:c7:80:fb:e9:c9:5f:f4:93:69:05:56:c7:e9:c5:a8:48:3c:
5a:4e:60:a6:27:47:0d:c7:ad:fb:5e:c0:d2:ab:1f:6e:82:07:
dc:7c:99:df:d9:83:61:9e:62:3e:71:63:94:19:e7:8a:36:6b:
1e:2f:9b:dc:b0:d5:05:97:0f:5d:01:de:91:15:08:ea:22:1e:
46:d5:32:37:9f:e1:ce:1b:d5:59:dd:c3:d8:fb:68:31:6c:9f:
fd:6a:75:9f:5b:0e:97:4b:7a:af:d8:6e:8b:54:84:94:6d:1c:
c1:16:ec:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:39:35 2026 by rpki-client