Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/22E63812221211EF9624DB0CC4F9AE02.roa
File: 22E63812221211EF9624DB0CC4F9AE02.roa (raw, json)
Hash identifier: /Tvplkmm6qxVmlC51qbOfmRirpoi54XXMcLh/gPSqV0=
Subject key identifier: A8:4E:6F:EA:BA:EE:DA:9D:19:F3:E2:61:74:AE:65:FE:B8:BE:CD:23
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0D3E
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/22E63812221211EF9624DB0CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:52:58 +0000
ROA not before: Wed 30 Apr 2025 18:28:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10214
IP address blocks: 103.6.208.0/22 maxlen: 23
103.6.208.0/24 maxlen: 24
103.6.210.0/24 maxlen: 24
103.46.212.0/22 maxlen: 22
103.46.212.0/24 maxlen: 24
103.46.213.0/24 maxlen: 24
103.46.214.0/24 maxlen: 24
103.46.215.0/24 maxlen: 24
103.89.80.0/22 maxlen: 24
103.225.228.0/22 maxlen: 24
113.30.224.0/22 maxlen: 24
121.200.32.0/20 maxlen: 20
121.200.32.0/21 maxlen: 24
121.200.40.0/22 maxlen: 24
121.200.44.0/24 maxlen: 24
121.200.46.0/23 maxlen: 24
160.20.72.0/22 maxlen: 24
163.47.56.0/22 maxlen: 22
163.47.56.0/24 maxlen: 24
163.47.57.0/24 maxlen: 24
163.47.58.0/24 maxlen: 24
163.47.59.0/24 maxlen: 24
203.57.126.0/23 maxlen: 24
2001:df1:b400::/48 maxlen: 48
2400:ec40::/32 maxlen: 32
2400:ec40::/36 maxlen: 36
2400:ec40:1000::/36 maxlen: 36
2400:ec40:2000::/36 maxlen: 36
2400:ec40:3000::/36 maxlen: 36
2400:ec40:4000::/36 maxlen: 36
2400:ec40:4000::/40 maxlen: 40
2400:ec40:5000::/36 maxlen: 36
2400:ec40:5100::/40 maxlen: 40
2400:ec40:5200::/40 maxlen: 40
2400:ec40:6000::/36 maxlen: 36
2400:ec40:7000::/36 maxlen: 36
2400:ec40:8000::/36 maxlen: 36
2400:ec40:9000::/36 maxlen: 36
2400:ec40:a000::/36 maxlen: 36
2400:ec40:b000::/36 maxlen: 36
2400:ec40:c000::/36 maxlen: 36
2400:ec40:d000::/36 maxlen: 36
2400:ec40:e000::/36 maxlen: 36
2400:ec40:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3390 (0xd3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: Apr 30 18:28:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a444ba-7285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:18:ba:4c:98:c8:21:38:3f:1a:8e:b2:a3:
85:03:da:7c:80:c4:19:7b:c1:0b:6a:99:68:08:20:
cb:ee:07:8c:0e:b6:7e:94:f0:3c:f7:8a:c9:c8:d5:
0d:be:17:69:85:1c:ab:db:3b:62:83:b6:db:86:b5:
f7:96:12:85:9d:b8:43:7c:ba:66:4a:6f:57:dc:dc:
ca:08:d4:46:32:b1:e3:87:83:ec:b1:6f:d3:c4:11:
f3:22:36:9f:d9:83:c6:07:0a:90:85:0f:33:4d:79:
ae:db:d6:d9:01:f8:c9:f3:ba:e1:d7:06:aa:f2:f3:
7e:eb:52:db:95:90:69:f8:06:a7:3b:b7:77:70:22:
9e:c6:33:07:d3:17:7b:f9:15:75:47:48:28:cb:ee:
43:8e:08:db:06:9e:f8:38:6b:b4:ce:13:18:5d:bd:
fe:ad:a0:c0:a3:c3:f9:8c:a8:b2:63:f2:68:26:f0:
45:7c:d5:de:29:88:58:00:65:2b:b4:3c:36:fa:cc:
9d:27:29:2c:a9:05:cf:94:73:d4:f9:a2:f7:b3:97:
d5:6c:bb:5c:0d:11:6e:2a:d0:81:53:c8:f1:1f:0b:
f2:a9:7b:f9:55:98:1b:d6:10:22:af:d4:ae:3e:c9:
5a:41:a9:c7:3a:5f:1f:0d:4e:a0:14:8c:1c:59:df:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:6F:EA:BA:EE:DA:9D:19:F3:E2:61:74:AE:65:FE:B8:BE:CD:23
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/22E63812221211EF9624DB0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.208.0/22
103.46.212.0/22
103.89.80.0/22
103.225.228.0/22
113.30.224.0/22
121.200.32.0/20
160.20.72.0/22
163.47.56.0/22
203.57.126.0/23
IPv6:
2001:df1:b400::/48
2400:ec40::/32
Signature Algorithm: sha256WithRSAEncryption
4c:0a:3e:45:cd:11:fd:d6:7b:10:3c:1c:b2:cf:5a:0c:83:2d:
77:4b:1b:10:29:96:0a:bd:cc:45:e9:5d:df:0d:ff:3f:60:f3:
15:a2:61:a7:4e:ea:69:36:cf:10:a9:cb:92:b3:23:42:99:f1:
d5:70:c9:99:b0:5b:95:66:f8:9b:45:12:bc:a7:5d:1d:c4:b9:
1b:0a:a1:ec:98:4e:3b:15:1c:f6:50:2e:80:47:0c:30:19:4b:
14:18:2b:84:7c:29:c0:c4:15:e2:1d:b2:9f:12:06:56:e8:e3:
92:4f:a9:9e:4a:1f:4f:f9:fe:98:75:0a:1c:be:78:d8:52:ad:
5c:8f:a8:c5:18:f2:bb:8c:6e:7d:67:d6:a6:8f:25:1a:4c:a7:
ad:b5:4c:04:ea:bb:aa:1a:1c:25:76:6a:5c:7f:45:6a:5a:6f:
f6:bd:10:c8:6a:72:b7:ba:9e:32:0f:d9:a4:38:9e:a7:54:72:
5e:21:bb:5f:8c:c8:68:dc:13:45:5a:e9:b9:67:dc:43:56:d2:
50:df:16:33:60:7e:e3:fd:22:9a:0b:ab:f9:2c:f0:78:d0:d1:
3b:42:84:23:a3:b5:40:54:ae:e9:8c:f5:ea:72:29:d3:19:eb:
0e:7d:d0:85:63:96:e8:3c:d2:1f:6b:38:28:92:2e:aa:b4:72:
e3:dc:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:41 2026 by rpki-client