Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/B060FCD00E4311F1AA27A3801A3D8C67.roa
File: B060FCD00E4311F1AA27A3801A3D8C67.roa (raw, json)
Hash identifier: /jHwnGcod93mkftOIXxHTA503k6CU3aAb5UZbSQZX9A=
Subject key identifier: 35:34:5D:3F:B5:48:09:75:80:62:CE:86:65:25:64:43:4C:DC:D8:82
Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
Certificate serial: 01CE
Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/B060FCD00E4311F1AA27A3801A3D8C67.roa
Signing time: Sun 01 Mar 2026 16:12:58 +0000
ROA not before: Fri 20 Feb 2026 10:05:31 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 24334
IP address blocks: 103.11.88.0/22 maxlen: 22
103.11.88.0/24 maxlen: 24
103.11.89.0/24 maxlen: 24
103.11.90.0/24 maxlen: 24
103.11.91.0/24 maxlen: 24
202.83.240.0/21 maxlen: 21
202.83.240.0/24 maxlen: 24
202.83.241.0/24 maxlen: 24
202.83.242.0/24 maxlen: 24
202.83.243.0/24 maxlen: 24
202.83.244.0/24 maxlen: 24
202.83.245.0/24 maxlen: 24
202.83.246.0/24 maxlen: 24
202.83.247.0/24 maxlen: 24
202.171.208.0/21 maxlen: 21
202.171.208.0/24 maxlen: 24
202.171.209.0/24 maxlen: 24
202.171.210.0/24 maxlen: 24
202.171.211.0/24 maxlen: 24
202.171.212.0/24 maxlen: 24
202.171.213.0/24 maxlen: 24
202.171.214.0/24 maxlen: 24
202.171.215.0/24 maxlen: 24
203.142.88.0/21 maxlen: 21
203.142.88.0/24 maxlen: 24
203.142.89.0/24 maxlen: 24
203.142.90.0/24 maxlen: 24
203.142.91.0/24 maxlen: 24
203.142.92.0/24 maxlen: 24
203.142.93.0/24 maxlen: 24
203.142.94.0/24 maxlen: 24
203.142.95.0/24 maxlen: 24
2404:1a0::/30 maxlen: 30
2404:1a0::/32 maxlen: 32
2404:1a0:1000::/46 maxlen: 46
2404:1a0:1000::/47 maxlen: 47
2404:1a0:1001::/48 maxlen: 48
2404:1a0:1002::/48 maxlen: 48
2404:1a0:2008::/48 maxlen: 48
2404:1a1::/32 maxlen: 32
2404:1a2::/32 maxlen: 32
2404:1a3::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl
rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
Validity
Not Before: Feb 20 10:05:31 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a46589-24f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:8e:93:f4:3c:bc:0d:24:0e:66:5a:9d:a8:
95:0a:47:a9:1f:39:ae:f5:45:61:5e:f3:ff:82:3c:
34:76:ad:81:26:22:ab:85:6e:33:d8:56:bd:29:71:
d7:72:79:a0:f1:06:09:7f:d0:4c:e3:26:b0:a0:dd:
8f:d3:53:84:5f:9a:85:b5:40:3a:b5:21:75:73:df:
60:4d:5b:92:93:be:ac:24:c6:5e:83:e9:67:7a:b2:
a1:db:3a:eb:7d:52:da:40:a3:07:7b:55:eb:1a:50:
f0:21:86:65:4f:af:1d:01:9d:a5:17:ae:ca:f6:e7:
dc:09:ba:3a:5f:6a:b3:16:46:2e:34:ea:aa:47:9b:
aa:58:5a:20:a3:90:eb:48:cd:30:7f:68:90:6e:67:
d8:8f:dc:a7:6f:52:6d:4f:e1:d7:ef:72:00:4b:0b:
a1:9a:17:88:c7:e1:b8:a9:9c:7f:06:0d:60:02:83:
e3:c7:3f:40:86:ec:5d:46:a9:9f:74:b6:0a:4e:e2:
66:2a:21:9b:38:5d:dd:d5:5a:78:b5:58:bb:12:21:
62:e3:cd:6d:85:bd:1b:37:61:b5:38:b4:e1:12:d2:
fc:8e:c3:8e:df:fb:e8:f3:83:6a:3c:2a:62:01:68:
6c:e5:2f:7d:0a:25:73:a8:1b:65:5d:e2:b2:79:ed:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:34:5D:3F:B5:48:09:75:80:62:CE:86:65:25:64:43:4C:DC:D8:82
X509v3 Authority Key Identifier:
keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/B060FCD00E4311F1AA27A3801A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.11.88.0/22
202.83.240.0/21
202.171.208.0/21
203.142.88.0/21
IPv6:
2404:1a0::/30
Signature Algorithm: sha256WithRSAEncryption
81:d0:ac:0d:76:dd:93:be:ca:1b:1f:17:7c:0c:bd:ce:23:f0:
bd:d4:ac:bd:d0:a7:f7:98:ff:4b:f1:72:19:d7:b7:03:0f:4c:
82:26:92:e7:16:df:40:48:43:04:d3:f9:6e:79:da:bf:5c:ea:
0f:a8:f1:cf:0c:6d:22:b6:34:8b:dc:61:5e:8b:09:f7:48:d0:
23:17:fa:78:cc:e1:b9:66:cb:31:5c:12:06:c0:b0:3a:09:fd:
3f:69:d1:7b:52:87:d2:e3:31:bf:96:2f:f3:f9:9b:84:75:c4:
e2:95:f5:65:43:6d:ee:02:a2:b1:e8:36:54:53:b1:2f:eb:8c:
38:b5:76:2c:7a:0a:74:66:2c:cd:d1:4d:f3:52:e1:4f:8a:08:
51:9e:25:35:12:f6:c6:c9:6e:57:bd:43:1c:28:4e:f7:59:56:
df:b3:33:e5:91:95:a9:05:56:8b:26:ba:12:df:01:10:2d:6f:
57:4b:9b:c6:e9:1d:e8:46:82:6f:f4:83:08:fe:e8:83:bd:6d:
9e:65:47:0e:cb:12:21:be:b5:ba:7b:c7:ed:6e:bd:4c:98:fa:
7b:77:99:9f:0a:d5:83:95:af:7e:48:81:29:03:88:2f:d7:6a:
69:92:b8:f1:2b:54:0b:ba:a6:28:62:62:82:20:19:93:5c:c0:
e6:aa:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:01:42 2026 by rpki-client