Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/0B7CEEB07CC911F08411627BC4F9AE02.roa
File: 0B7CEEB07CC911F08411627BC4F9AE02.roa (raw, json)
Hash identifier: cE+N/sJmZXPwEqsr56rRVKadyFeojKXZbwqZsGJI3ow=
Subject key identifier: A3:D2:F5:93:21:56:D0:D7:90:05:63:07:74:DA:7C:D0:D5:8C:E8:08
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 047D
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/0B7CEEB07CC911F08411627BC4F9AE02.roa
Signing time: Sun 13 Sep 2026 01:51:30 +0000
ROA not before: Sun 13 Sep 2026 01:51:30 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 203020
IP address blocks: 45.125.245.0/24 maxlen: 24
103.3.224.0/22 maxlen: 22
103.66.178.0/23 maxlen: 23
103.77.102.0/24 maxlen: 24
103.77.103.0/24 maxlen: 24
103.77.255.0/24 maxlen: 24
103.84.254.0/23 maxlen: 23
103.85.228.0/22 maxlen: 22
103.102.246.0/23 maxlen: 23
103.104.92.0/22 maxlen: 22
103.104.128.0/23 maxlen: 24
103.110.104.0/22 maxlen: 22
103.114.58.0/23 maxlen: 24
103.117.92.0/22 maxlen: 22
103.117.214.0/23 maxlen: 23
103.120.6.0/24 maxlen: 24
103.138.124.0/24 maxlen: 24
103.139.178.0/24 maxlen: 24
103.141.60.0/24 maxlen: 24
103.142.70.0/23 maxlen: 23
103.148.214.0/23 maxlen: 23
103.149.97.0/24 maxlen: 24
103.151.58.0/23 maxlen: 23
103.221.232.0/24 maxlen: 24
103.221.234.0/24 maxlen: 24
103.221.235.0/24 maxlen: 24
103.225.52.0/22 maxlen: 24
103.228.132.0/24 maxlen: 24
103.241.52.0/22 maxlen: 22
103.252.108.0/24 maxlen: 24
103.252.111.0/24 maxlen: 24
150.107.224.0/23 maxlen: 23
150.107.227.0/24 maxlen: 24
202.94.174.0/24 maxlen: 24
202.155.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 01:27:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Sep 13 01:51:30 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa601a2-97a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:03:73:a4:2f:c2:a9:ce:09:c3:c3:f1:ab:
6b:70:2a:81:8d:7c:51:29:c1:36:81:ca:07:38:a8:
4c:84:f8:76:24:4c:b5:52:f6:6f:8e:e3:af:cc:df:
c9:27:2c:19:5c:0a:0a:25:b4:13:b4:18:89:08:23:
a4:fd:a3:e7:4c:88:05:4b:c2:6f:fd:7c:b1:e9:f4:
2f:19:2a:e1:4e:8f:0e:d1:f1:84:93:c9:8b:cb:28:
64:8d:1b:64:3f:90:13:b0:9a:d1:bd:4b:08:fa:16:
a7:66:d6:a6:5f:f0:db:7d:ba:82:22:95:26:62:5e:
00:e5:54:9d:78:68:21:66:9d:f7:18:96:a2:7a:94:
d2:55:e9:74:59:33:36:39:a9:ae:51:c4:fc:da:99:
8c:87:d6:7b:b2:ff:7d:69:0b:1e:9e:90:c2:52:91:
e0:1e:11:d3:96:fb:5d:b4:45:ad:c5:e1:ae:75:ca:
39:f2:3a:2c:9e:56:a0:85:6f:df:84:ae:a1:ae:fc:
1f:a8:5c:af:40:dd:33:49:f5:1e:c6:10:c1:a7:b1:
32:4f:9a:7f:07:4f:96:7a:2e:4b:0a:aa:28:aa:c1:
33:e5:5b:39:6f:0e:fb:9f:85:fa:22:2f:1a:39:12:
fb:ca:da:fe:1c:71:02:8d:c9:86:90:62:13:69:b1:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D2:F5:93:21:56:D0:D7:90:05:63:07:74:DA:7C:D0:D5:8C:E8:08
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/0B7CEEB07CC911F08411627BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.125.245.0/24
103.3.224.0/22
103.66.178.0/23
103.77.102.0/23
103.77.255.0/24
103.84.254.0/23
103.85.228.0/22
103.102.246.0/23
103.104.92.0/22
103.104.128.0/23
103.110.104.0/22
103.114.58.0/23
103.117.92.0/22
103.117.214.0/23
103.120.6.0/24
103.138.124.0/24
103.139.178.0/24
103.141.60.0/24
103.142.70.0/23
103.148.214.0/23
103.149.97.0/24
103.151.58.0/23
103.221.232.0/24
103.221.234.0/23
103.225.52.0/22
103.228.132.0/24
103.241.52.0/22
103.252.108.0/24
103.252.111.0/24
150.107.224.0/23
150.107.227.0/24
202.94.174.0/24
202.155.186.0/23
Signature Algorithm: sha256WithRSAEncryption
11:03:a3:56:34:cb:aa:49:77:fd:66:ba:ea:a9:64:70:80:1a:
72:e4:90:69:90:e2:9c:12:69:62:97:79:ed:21:06:4c:37:cc:
a6:11:cb:2b:23:bd:cb:d2:51:b1:4a:a9:35:c6:52:ef:d3:74:
a8:53:3e:f1:18:22:ed:de:1d:59:11:6e:62:77:17:37:7c:35:
50:d8:76:3c:b7:3b:f8:99:f5:96:3d:5f:ab:66:d5:b5:30:46:
bd:59:a8:7a:18:20:98:bb:0c:5c:6d:29:d7:c4:96:91:ce:fd:
6c:90:a2:b6:1b:9c:11:f2:79:3f:80:a0:2d:d6:41:e0:b3:95:
53:8c:e7:d3:3c:65:04:11:fc:6c:d4:ae:3f:a5:87:48:5c:df:
99:61:a3:7b:63:0a:f9:76:a2:95:ad:06:32:92:d4:43:b5:fc:
1d:bf:fb:f0:36:0b:fc:56:ad:8d:57:f9:0c:34:12:6a:52:e0:
d6:c5:f0:40:9e:45:49:b2:ac:e0:96:63:10:59:3f:05:ca:15:
b6:ea:ac:6f:7e:ce:97:0c:86:77:83:19:3c:63:1a:c5:9b:3d:
bf:8d:ec:c9:22:56:e0:9e:2a:6b:47:e9:93:c4:bc:0d:2f:d0:
6a:e2:d5:d1:06:90:83:98:4e:ae:27:6d:2d:69:0e:1d:c2:31:
6d:b3:14:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:43:24 2026 by rpki-client