Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/0940732E0E6311EDB98DEA0DC4F9AE02.roa
File: 0940732E0E6311EDB98DEA0DC4F9AE02.roa (raw, json)
Hash identifier: fd8kDW52Sq9cJKEJvqYfssXk1O68wOynpHR8qW9FwDo=
Subject key identifier: 1D:BF:63:18:64:29:B1:88:20:91:DC:EE:C8:22:6C:E1:2A:CF:8C:1B
Certificate issuer: /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial: 07EE
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/0940732E0E6311EDB98DEA0DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:03:53 +0000
ROA not before: Mon 06 Oct 2025 22:22:50 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 136969
IP address blocks: 103.12.196.0/24 maxlen: 24
103.12.197.0/24 maxlen: 24
103.12.198.0/24 maxlen: 24
103.12.199.0/24 maxlen: 24
103.73.100.0/24 maxlen: 24
103.73.101.0/24 maxlen: 24
103.73.102.0/24 maxlen: 24
103.73.103.0/24 maxlen: 24
103.125.176.0/24 maxlen: 24
103.125.177.0/24 maxlen: 24
103.125.178.0/24 maxlen: 24
103.125.179.0/24 maxlen: 24
103.150.208.0/23 maxlen: 23
103.150.208.0/24 maxlen: 24
103.150.209.0/24 maxlen: 24
103.151.236.0/24 maxlen: 24
103.151.237.0/24 maxlen: 24
2406:f480::/32 maxlen: 32
2406:f480::/64 maxlen: 64
2406:f480:0:1::/64 maxlen: 64
2406:f480:0:2::/64 maxlen: 64
2406:f480:0:3::/64 maxlen: 64
2406:f480:800::/38 maxlen: 38
2406:f480:2000::/35 maxlen: 35
2406:f480:8000::/35 maxlen: 35
2406:f480:8000::/64 maxlen: 64
2406:f480:8000:40::/64 maxlen: 64
2406:f480:8000:41::/64 maxlen: 64
2406:f480:8000:42::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:24:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Validity
Not Before: Oct 6 22:22:50 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a47f89-4b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1d:63:7d:21:00:0d:c0:01:3f:7b:b8:4c:54:
ad:87:90:97:6d:44:90:71:f4:5a:01:c2:be:2c:57:
80:0e:2f:3b:02:c8:0f:76:ba:92:81:59:3c:61:3b:
b2:b0:6e:03:9f:9a:0b:64:51:66:97:40:49:9d:8c:
82:be:19:c2:1d:5a:b8:2e:60:9a:86:ee:aa:9b:50:
11:d0:59:94:54:4c:ee:db:57:89:cf:a0:fd:66:ec:
57:e1:cf:8c:e6:b4:d5:4f:79:57:ba:2c:13:a8:96:
b7:a4:e6:cf:54:40:0d:ec:8b:4e:73:f9:15:8c:c0:
69:5a:bf:c8:7c:a3:7b:f2:0a:34:3b:b1:88:ee:22:
87:bf:33:0a:29:b8:e1:f0:ed:a9:1c:08:81:09:cf:
b6:5f:30:2a:fa:a7:03:be:58:2d:cd:b8:7e:96:0d:
30:88:33:05:72:f2:98:62:b1:ad:6f:09:36:c4:0c:
68:8a:87:32:9b:2a:02:74:70:8f:8c:e7:63:b6:23:
6a:a4:9f:dd:42:c4:5f:74:55:59:d3:d2:39:d1:e0:
7f:df:f5:04:93:9e:e3:60:32:b2:dc:11:48:12:67:
35:8d:01:06:f1:f3:22:3b:09:04:d4:c7:ee:dc:44:
1b:94:e9:0b:a1:cf:41:d8:c6:93:06:6a:c3:21:76:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BF:63:18:64:29:B1:88:20:91:DC:EE:C8:22:6C:E1:2A:CF:8C:1B
X509v3 Authority Key Identifier:
keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/0940732E0E6311EDB98DEA0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.196.0/22
103.73.100.0/22
103.125.176.0/22
103.150.208.0/23
103.151.236.0/23
IPv6:
2406:f480::/32
Signature Algorithm: sha256WithRSAEncryption
75:9b:b1:34:26:f6:87:3e:47:63:dc:9c:bb:91:71:69:ac:14:
ea:5c:dd:86:af:14:79:c9:88:a0:f1:a1:51:68:65:ff:79:15:
70:98:f0:12:cd:7b:97:a5:2b:67:15:af:47:3b:cc:12:05:e3:
1c:45:5c:ec:5a:b0:4a:6c:82:49:f5:18:37:97:ee:e8:bb:8f:
eb:19:75:6d:fd:4a:00:67:eb:cc:0f:12:18:fc:10:a3:76:d7:
ad:bb:46:78:fa:fd:d9:98:69:5b:76:21:13:5a:84:a8:de:ad:
4a:a7:8b:ae:9a:f8:37:04:41:91:51:dd:50:95:f5:32:1a:46:
eb:e0:f7:59:35:b7:d1:f0:73:12:4e:78:60:3a:52:5b:81:73:
34:e6:01:59:99:7a:17:95:75:b4:0e:02:0e:96:11:c6:d6:73:
43:cf:1c:b8:e9:8c:c4:60:50:2a:80:71:26:95:26:0c:01:d8:
c1:1c:e1:d4:c5:31:96:4c:e1:53:d8:27:75:e9:ac:c5:39:a5:
34:a3:b7:6f:13:41:15:74:12:d1:b0:a4:69:e4:76:a3:63:48:
5a:5e:f2:9d:22:62:81:46:0a:d4:f1:8b:f9:de:f9:27:96:a9:
b7:a3:8f:52:30:06:3d:24:b1:40:2f:f5:d7:73:ae:fa:15:a1:
af:1a:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:31 2026 by rpki-client