Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/61865C96599711F1904BB35BB3833773.roa
File: 61865C96599711F1904BB35BB3833773.roa (raw, json)
Hash identifier: gDZJAF+J4vmJUn7JgYk0JFg5PWvXINC2m+mUpnyhSCE=
Subject key identifier: 33:66:3B:96:CD:C1:8D:73:1F:51:6F:90:A3:67:A8:3F:ED:2C:56:F7
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0D76
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/61865C96599711F1904BB35BB3833773.roa
Signing time: Wed 27 May 2026 06:43:34 +0000
ROA not before: Wed 27 May 2026 06:43:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10214
IP address blocks: 103.6.208.0/22 maxlen: 23
103.6.208.0/24 maxlen: 24
103.6.210.0/24 maxlen: 24
103.46.212.0/22 maxlen: 22
103.46.212.0/24 maxlen: 24
103.46.213.0/24 maxlen: 24
103.46.214.0/24 maxlen: 24
103.46.215.0/24 maxlen: 24
103.89.80.0/22 maxlen: 24
103.225.228.0/22 maxlen: 24
113.30.224.0/22 maxlen: 23
113.30.225.0/24 maxlen: 24
113.30.226.0/23 maxlen: 24
121.200.32.0/20 maxlen: 20
121.200.32.0/21 maxlen: 24
121.200.40.0/22 maxlen: 24
121.200.44.0/24 maxlen: 24
121.200.46.0/23 maxlen: 24
160.20.72.0/22 maxlen: 24
163.47.56.0/22 maxlen: 22
163.47.56.0/24 maxlen: 24
163.47.57.0/24 maxlen: 24
163.47.58.0/24 maxlen: 24
163.47.59.0/24 maxlen: 24
203.57.126.0/23 maxlen: 24
2001:df1:b400::/48 maxlen: 48
2400:ec40::/32 maxlen: 32
2400:ec40::/36 maxlen: 36
2400:ec40:1000::/36 maxlen: 36
2400:ec40:2000::/36 maxlen: 36
2400:ec40:3000::/36 maxlen: 36
2400:ec40:4000::/36 maxlen: 36
2400:ec40:4000::/40 maxlen: 40
2400:ec40:5000::/36 maxlen: 36
2400:ec40:5100::/40 maxlen: 40
2400:ec40:5200::/40 maxlen: 40
2400:ec40:6000::/36 maxlen: 36
2400:ec40:7000::/36 maxlen: 36
2400:ec40:8000::/36 maxlen: 36
2400:ec40:9000::/36 maxlen: 36
2400:ec40:a000::/36 maxlen: 36
2400:ec40:b000::/36 maxlen: 36
2400:ec40:c000::/36 maxlen: 36
2400:ec40:d000::/36 maxlen: 36
2400:ec40:e000::/36 maxlen: 36
2400:ec40:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: May 27 06:43:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a169296-528a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:8b:6f:a6:13:f0:b3:eb:5e:09:2a:0c:18:
b5:bf:df:04:77:f9:6f:db:f9:5d:32:ee:7e:da:c2:
5d:72:c5:1b:44:4b:15:af:44:3a:8a:e8:db:ab:f5:
4c:86:84:ca:1e:f1:27:86:5e:6f:6a:b0:d4:a8:26:
61:b8:5d:53:75:74:4e:0c:31:35:ad:0d:34:ca:03:
21:45:d2:4c:42:ca:c1:f8:ce:b6:ce:b9:52:46:ac:
9d:8f:bc:dd:f5:09:3d:3d:63:28:3e:5b:7d:3e:87:
ba:73:25:30:1a:76:bd:bd:a2:83:56:ff:b1:cb:fc:
f3:2c:2c:7f:53:21:d3:b4:31:f7:a0:ba:b0:70:44:
b5:65:e7:3d:a3:c1:45:2b:de:26:45:1a:20:73:74:
1e:c5:4d:6e:2d:79:67:34:f5:56:cc:4a:6b:2a:e6:
a5:c7:5d:a8:4e:1a:7e:cc:39:28:9b:7f:44:6d:60:
47:34:31:2d:0a:0a:79:e5:81:2d:f9:94:2d:a9:30:
cd:43:79:47:94:13:53:d6:ce:c4:19:19:c6:7f:e3:
66:3d:a5:c7:cd:9c:98:1a:e7:2d:44:26:59:df:51:
ca:b6:48:74:9a:b5:1f:20:52:56:d6:db:50:fa:68:
54:54:3b:fb:15:3b:8e:c1:87:0d:35:d9:86:d7:d5:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:66:3B:96:CD:C1:8D:73:1F:51:6F:90:A3:67:A8:3F:ED:2C:56:F7
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/61865C96599711F1904BB35BB3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.208.0/22
103.46.212.0/22
103.89.80.0/22
103.225.228.0/22
113.30.224.0/22
121.200.32.0/20
160.20.72.0/22
163.47.56.0/22
203.57.126.0/23
IPv6:
2001:df1:b400::/48
2400:ec40::/32
Signature Algorithm: sha256WithRSAEncryption
5c:43:2f:d9:b9:aa:42:c0:d5:9c:11:92:67:b3:51:30:7c:0f:
61:57:8c:04:d7:67:3e:37:9f:29:42:5f:93:9d:66:45:e3:dc:
cd:8b:8d:99:8a:4d:92:95:f5:e5:5e:8f:44:96:f0:a2:41:b5:
a7:80:7e:f3:ba:e5:05:ed:bf:8e:41:ab:aa:8e:4c:9f:eb:aa:
21:62:4f:9b:30:09:8a:b4:a7:56:ed:a9:45:91:b3:64:95:38:
e7:61:74:e7:58:e0:ea:85:8c:89:c8:75:08:17:54:93:c2:4f:
a2:00:c5:70:10:8e:9e:e7:bc:f3:f6:76:9c:34:2d:92:19:81:
eb:1e:cc:f1:04:b7:4a:7a:e4:34:b0:27:cf:a1:76:da:fb:3b:
8a:6e:ec:5e:9e:c3:5c:2b:3f:9d:a2:6e:7a:9f:f4:3a:d7:b0:
da:87:9b:03:ec:41:80:13:58:63:f9:30:c8:f8:79:f6:66:e4:
c2:f8:a0:fd:26:6a:80:52:24:7a:03:37:f6:c2:b7:f7:a7:30:
cc:fc:69:ca:e7:28:1d:f9:36:ed:70:2f:cc:40:68:b6:60:4a:
9d:3b:fc:df:77:8f:8c:2d:e3:66:d3:35:2e:a4:62:b6:fb:83:
9a:b9:be:0c:0b:5e:55:ad:7d:3d:5a:2e:fb:ed:56:39:68:86:
bd:e4:74:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB
NUYwN0Q3N0EwHhcNMjYwNTI3MDY0MzM0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTE2OTI5Ni01MjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyUCLb6YT8LPrXgkqDBi1v98Ed/lv2/ldMu5+2sJdcsUbREsVr0Q6iujbq/VM
hoTKHvEnhl5varDUqCZhuF1TdXRODDE1rQ00ygMhRdJMQsrB+M62zrlSRqydj7zd
9Qk9PWMoPlt9Poe6cyUwGna9vaKDVv+xy/zzLCx/UyHTtDH3oLqwcES1Zec9o8FF
K94mRRogc3QexU1uLXlnNPVWzEprKualx12oThp+zDkom39EbWBHNDEtCgp55YEt
+ZQtqTDNQ3lHlBNT1s7EGRnGf+NmPaXHzZyYGuctRCZZ31HKtkh0mrUfIFJW1ttQ
+mhUVDv7FTuOwYcNNdmG19W/mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNmO5bN
wY1zH1FvkKNnqD/tLFb3MB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1
QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkJBODAvQjk4RTgxRDYwNUI5MTFFQTgyMDg5OTZFQzRGOUFFMDIvNjE4NjVDOTY1
OTk3MTFGMTkwNEJCMzVCQjM4MzM3NzMucm9hMGcGCCsGAQUFBwEHAQH/BFgwVjA8
BAIAATA2AwQCZwbQAwQCZy7UAwQCZ1lQAwQCZ+HkAwQCcR7gAwQEecggAwQCoBRI
AwQCoy84AwQByzl+MBYEAgACMBADBwAgAQ3xtAADBQAkAOxAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcQy/ZuapCwNWcEZJns1EwfA9hV4wE12c+N58pQl+TnWZF49zNi42Z
ik2SlfXlXo9ElvCiQbWngH7zuuUF7b+OQauqjkyf66ohYk+bMAmKtKdW7alFkbNk
lTjnYXTnWODqhYyJyHUIF1STwk+iAMVwEI6e57zz9nacNC2SGYHrHszxBLdKeuQ0
sCfPoXba+zuKbuxensNcKz+dom56n/Q617Dah5sD7EGAE1hj+TDI+Hn2ZuTC+KD9
JmqAUiR6Azf2wrf3pzDM/GnK5ygd+TbtcC/MQGi2YEqdO/zfd4+MLeNm0zUupGK2
+4Oaub4MC15VrX09Wi777VY5aIa95HSF
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:56 2026 by rpki-client