Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/E180123A500A11F09FCC5C46C4F9AE02.roa
File: E180123A500A11F09FCC5C46C4F9AE02.roa (raw, json)
Hash identifier: SvhfDhu8z7AY1Gsx30cCjfYcMF/mDJRnCXF7NmFAbv8=
Subject key identifier: E7:A1:C5:8A:41:AE:12:FD:13:4C:0B:EA:F8:62:66:D8:43:F6:D7:A4
Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial: 3664
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/E180123A500A11F09FCC5C46C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:18:41 +0000
ROA not before: Mon 23 Jun 2025 08:21:00 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 132608
IP address blocks: 103.248.204.0/22 maxlen: 23
103.248.204.0/24 maxlen: 24
103.248.205.0/24 maxlen: 24
103.248.206.0/24 maxlen: 24
103.248.207.0/24 maxlen: 24
114.130.4.0/23 maxlen: 23
114.130.4.0/24 maxlen: 24
114.130.5.0/24 maxlen: 24
114.130.8.0/24 maxlen: 24
114.130.10.0/24 maxlen: 24
114.130.31.0/24 maxlen: 24
114.130.36.0/22 maxlen: 22
114.130.36.0/24 maxlen: 24
114.130.37.0/24 maxlen: 24
114.130.41.0/24 maxlen: 24
114.130.51.0/24 maxlen: 24
114.130.52.0/23 maxlen: 24
114.130.56.0/23 maxlen: 23
114.130.58.0/24 maxlen: 24
114.130.68.0/24 maxlen: 24
114.130.71.0/24 maxlen: 24
114.130.75.0/24 maxlen: 24
114.130.80.0/24 maxlen: 24
114.130.81.0/24 maxlen: 24
114.130.83.0/24 maxlen: 24
114.130.84.0/24 maxlen: 24
114.130.85.0/24 maxlen: 24
114.130.86.0/24 maxlen: 24
114.130.89.0/24 maxlen: 24
114.130.92.0/23 maxlen: 24
114.130.94.0/24 maxlen: 24
114.130.95.0/24 maxlen: 24
114.130.96.0/23 maxlen: 24
114.130.98.0/23 maxlen: 24
114.130.120.0/24 maxlen: 24
114.130.223.0/24 maxlen: 24
2403:ec00:45::/48 maxlen: 48
2403:ec00:f000::/36 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13924 (0x3664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Validity
Not Before: Jun 23 08:21:00 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a474f1-8a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:a8:29:b4:54:b9:8f:5c:09:24:5e:2b:12:
2d:6a:74:90:f9:da:a9:3e:64:fd:1e:8f:00:a2:61:
ab:4c:7b:4f:15:d7:95:4a:77:25:8a:ee:d1:ef:12:
b9:fa:50:87:f5:b2:3b:14:10:b7:a2:44:04:e5:53:
a5:0e:13:4a:10:b2:47:a3:c9:c6:18:ab:ab:c1:75:
9d:fa:e9:c4:fe:d1:d0:04:5d:03:1a:91:a6:17:7b:
e5:73:34:81:17:3a:d2:8f:89:95:68:c0:a2:18:87:
02:a7:81:61:33:2d:84:3a:3c:fd:67:75:61:a6:af:
45:c7:ab:0e:4d:55:b1:51:eb:65:91:fb:b7:04:ed:
c0:00:29:db:1e:c4:a5:5e:a6:d8:27:51:0a:ba:21:
78:d1:a1:fa:26:da:74:88:4c:24:82:37:1e:d7:86:
ed:af:de:1e:50:57:f4:7b:8e:0d:66:e0:73:b9:da:
92:47:c0:b7:6c:f8:35:86:ca:1a:be:0f:62:6c:17:
50:47:20:32:82:9d:fa:fe:d7:c5:3f:6d:1b:8f:8f:
0b:d1:2f:de:cd:2c:91:9b:ae:e4:1a:33:e8:69:d1:
62:20:87:ff:3d:ff:d6:78:41:86:d5:9d:02:eb:c5:
94:e3:b4:6e:fb:e6:0c:07:70:51:19:a6:ff:34:a0:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A1:C5:8A:41:AE:12:FD:13:4C:0B:EA:F8:62:66:D8:43:F6:D7:A4
X509v3 Authority Key Identifier:
keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/E180123A500A11F09FCC5C46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.248.204.0/22
114.130.4.0/23
114.130.8.0/24
114.130.10.0/24
114.130.31.0/24
114.130.36.0/22
114.130.41.0/24
114.130.51.0-114.130.53.255
114.130.56.0-114.130.58.255
114.130.68.0/24
114.130.71.0/24
114.130.75.0/24
114.130.80.0/23
114.130.83.0-114.130.86.255
114.130.89.0/24
114.130.92.0-114.130.99.255
114.130.120.0/24
114.130.223.0/24
IPv6:
2403:ec00:45::/48
2403:ec00:f000::/36
Signature Algorithm: sha256WithRSAEncryption
8e:9c:7b:15:0a:83:8c:6a:a8:3c:26:9b:2f:af:0d:58:93:a4:
fc:c2:7e:42:d7:62:06:ab:ed:9d:d9:e8:ed:6f:c2:c2:c9:87:
28:0c:8d:57:db:f6:ca:ff:c4:32:7d:5e:f8:92:41:09:61:59:
99:ff:e7:8f:3c:fe:d0:c7:7d:69:e8:03:54:93:5b:87:a0:53:
50:e6:a8:d8:45:e6:bb:c4:d1:e9:c1:bc:a9:8e:f3:41:7f:b9:
51:27:c5:e2:7f:49:e6:11:e1:69:6f:4a:ab:5b:46:92:bc:d9:
bd:7a:e3:3f:62:e3:19:95:d7:42:b8:59:73:56:1d:b6:c2:ab:
0f:f6:6a:69:6f:0f:23:3d:5f:f8:5f:53:78:98:e1:e5:ac:20:
3c:41:f4:e3:c8:52:d4:b2:d8:0c:51:c1:86:f5:f1:41:3d:c4:
95:d7:5c:19:98:5a:e6:60:3b:4a:59:52:5f:5c:db:85:d2:03:
c6:3c:ac:21:24:ad:46:61:b7:1f:9d:b5:8d:72:4d:2d:bf:ae:
cd:86:d2:63:84:fe:03:ff:e1:75:12:ae:0c:e4:8d:c7:74:e5:
e8:5b:4d:fe:3f:29:de:2a:af:ca:5d:fd:44:3b:d8:90:06:30:
bc:3c:7b:1f:7f:e7:4b:6c:1e:a1:71:2a:2b:f3:7d:32:62:77:
58:67:06:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:40 2026 by rpki-client