Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/EB56BC4E332311F1AE890F3EB7833773.roa
File: EB56BC4E332311F1AE890F3EB7833773.roa (raw, json)
Hash identifier: KqYOqvSsGfe9/YuOAMOQ7xZCaedOl3C9H94v5PQH6VA=
Subject key identifier: 80:68:65:4A:A0:01:69:01:D4:FA:88:A7:DF:D3:7F:B1:A1:30:29:30
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3711
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/EB56BC4E332311F1AE890F3EB7833773.roa
Signing time: Wed 08 Apr 2026 08:21:19 +0000
ROA not before: Wed 08 Apr 2026 08:21:19 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 23750
IP address blocks: 103.207.84.0/24 maxlen: 24
103.207.86.0/24 maxlen: 24
103.207.87.0/24 maxlen: 24
116.90.100.0/24 maxlen: 24
116.90.106.0/24 maxlen: 24
116.90.107.0/24 maxlen: 24
116.90.108.0/24 maxlen: 24
116.90.109.0/24 maxlen: 24
116.90.110.0/24 maxlen: 24
116.90.111.0/24 maxlen: 24
116.90.120.0/24 maxlen: 24
116.90.123.0/24 maxlen: 24
116.90.124.0/24 maxlen: 24
116.90.125.0/24 maxlen: 24
116.90.126.0/24 maxlen: 24
116.90.127.0/24 maxlen: 24
121.46.65.0/24 maxlen: 24
121.46.66.0/24 maxlen: 24
202.69.32.0/24 maxlen: 24
202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.35.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.37.0/24 maxlen: 24
202.69.38.0/24 maxlen: 24
202.69.39.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.44.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
202.69.48.0/24 maxlen: 24
202.69.49.0/24 maxlen: 24
202.69.50.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.69.52.0/24 maxlen: 24
202.69.53.0/24 maxlen: 24
202.69.54.0/24 maxlen: 24
202.69.55.0/24 maxlen: 24
202.69.56.0/24 maxlen: 24
202.69.57.0/24 maxlen: 24
202.69.58.0/24 maxlen: 24
202.69.59.0/24 maxlen: 24
202.69.60.0/24 maxlen: 24
202.69.61.0/24 maxlen: 24
202.69.62.0/24 maxlen: 24
202.69.63.0/24 maxlen: 24
202.142.144.0/24 maxlen: 24
202.142.145.0/24 maxlen: 24
202.142.146.0/24 maxlen: 24
202.142.147.0/24 maxlen: 24
202.142.148.0/24 maxlen: 24
202.142.149.0/24 maxlen: 24
202.142.150.0/24 maxlen: 24
202.142.152.0/24 maxlen: 24
202.142.153.0/24 maxlen: 24
202.142.154.0/24 maxlen: 24
202.142.156.0/24 maxlen: 24
202.142.157.0/24 maxlen: 24
202.142.158.0/24 maxlen: 24
202.142.159.0/24 maxlen: 24
2406:ac00:1::/48 maxlen: 48
2406:ac00:2::/48 maxlen: 48
2406:ac00:203::/48 maxlen: 48
2406:ac00:204::/48 maxlen: 48
2406:ac00:205::/48 maxlen: 48
2406:ac00:206::/48 maxlen: 48
2406:ac00:207::/48 maxlen: 48
2406:ac00:208::/48 maxlen: 48
2406:ac00:209::/48 maxlen: 48
2406:ac00:300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14097 (0x3711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Apr 8 08:21:19 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69d60fff-2e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:ff:38:0f:df:d8:0a:06:22:42:0d:ce:1f:
7c:b4:d6:c6:7b:1b:a4:52:8a:a7:79:93:49:4f:ef:
af:2d:3d:a8:eb:da:53:e7:4a:88:ff:47:ed:45:9d:
f9:4f:eb:57:d2:4a:1a:00:9a:a0:5a:33:8d:b2:8c:
7d:ff:81:e8:f1:67:66:db:ab:88:62:b6:27:55:e2:
4b:b3:66:9e:c4:9a:c9:c7:c9:20:23:9a:1d:10:96:
33:e4:74:c7:50:42:96:53:00:4c:5d:05:04:5c:41:
74:31:df:97:aa:2d:a6:ff:7c:75:ea:11:e5:77:48:
d2:10:3b:2f:7a:37:fd:76:77:5c:75:b6:85:63:86:
a0:67:59:1b:81:93:47:4d:18:db:1b:be:96:7d:4a:
41:94:88:0d:ca:e4:ae:f1:0c:f6:8c:0a:59:65:08:
68:4c:4b:0a:27:02:a7:6d:e1:a6:da:84:8c:8c:08:
00:01:f2:ac:c2:dc:a8:c8:f1:e9:8a:ee:d0:f8:c8:
95:d0:5e:01:19:27:69:2c:bf:59:1e:5d:85:26:d5:
62:d5:59:02:22:21:c4:17:92:a1:4e:42:ae:8d:eb:
38:81:24:47:a8:38:09:81:98:b6:2f:70:19:98:42:
c8:0c:60:6d:a9:fb:c3:42:79:ed:91:37:64:8c:76:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:68:65:4A:A0:01:69:01:D4:FA:88:A7:DF:D3:7F:B1:A1:30:29:30
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/EB56BC4E332311F1AE890F3EB7833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.84.0/24
103.207.86.0/23
116.90.100.0/24
116.90.106.0-116.90.111.255
116.90.120.0/24
116.90.123.0-116.90.127.255
121.46.65.0-121.46.66.255
202.69.32.0/19
202.142.144.0-202.142.150.255
202.142.152.0-202.142.154.255
202.142.156.0/22
IPv6:
2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff
2406:ac00:203::-2406:ac00:209:ffff:ffff:ffff:ffff:ffff
2406:ac00:300::/48
Signature Algorithm: sha256WithRSAEncryption
8e:e3:12:c1:f4:bb:86:5e:2d:7d:0c:b7:62:c0:aa:bf:b3:47:
89:0c:0c:6e:49:e8:a2:be:23:ae:3c:5f:ab:31:d0:3c:f4:0b:
9d:e2:db:70:00:3b:39:9c:e2:42:e2:10:d3:dd:be:16:0f:1c:
ed:2f:0c:7d:d8:1a:51:a3:14:de:40:b5:cc:9a:bc:e6:5c:1e:
3d:9c:7d:af:8f:e7:2f:4f:f7:a2:ec:0d:1b:76:2e:f8:28:61:
7f:13:d0:5b:1a:32:e1:f7:e7:a2:e3:05:ac:f5:4e:6c:3c:b9:
ec:20:9b:6a:f9:fc:cd:46:aa:97:9e:ac:aa:f6:b3:61:52:db:
a0:5c:a1:24:bf:37:51:27:3b:32:c9:9b:76:39:83:c4:48:92:
7e:a8:00:f4:ea:05:2e:4b:f8:f6:e4:1a:bc:08:4d:0a:1d:1f:
1c:33:ce:9c:c4:ec:e3:dd:9b:33:15:6f:f8:b7:b3:c7:7c:94:
a3:ec:12:bc:0a:4f:f5:57:4a:e5:19:30:38:56:00:81:3a:0d:
85:e5:2d:6a:11:a2:70:17:4a:75:3a:a3:3b:30:7a:29:06:6f:
59:95:b9:24:76:5d:bb:ba:a2:43:38:55:b3:65:3c:c4:be:b9:
d1:04:ad:e9:40:23:f0:74:9a:c0:80:ca:4a:93:1f:7b:e8:c4:
d0:47:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:05 2026 by rpki-client