Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/FB6FE2EEC6D611F1966A0A2E4611F970.roa
File: FB6FE2EEC6D611F1966A0A2E4611F970.roa (raw, json)
Hash identifier: 7V8XC5sVvTMPZmdoRzD6ohORRBiJUbzHqsbYK/kQ73w=
Subject key identifier: 63:98:CD:D5:6B:05:CC:BD:2D:5C:B3:88:3B:C7:AF:CB:38:61:9A:11
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0DC9
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/FB6FE2EEC6D611F1966A0A2E4611F970.roa
Signing time: Tue 13 Oct 2026 07:23:27 +0000
ROA not before: Tue 13 Oct 2026 07:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10214
IP address blocks: 103.6.208.0/22 maxlen: 24
103.46.212.0/22 maxlen: 22
103.46.212.0/24 maxlen: 24
103.46.213.0/24 maxlen: 24
103.46.214.0/24 maxlen: 24
103.46.215.0/24 maxlen: 24
103.89.80.0/22 maxlen: 24
103.225.228.0/22 maxlen: 24
113.30.224.0/22 maxlen: 23
113.30.225.0/24 maxlen: 24
113.30.226.0/23 maxlen: 24
121.200.32.0/20 maxlen: 20
121.200.32.0/21 maxlen: 24
121.200.40.0/22 maxlen: 24
121.200.44.0/24 maxlen: 24
121.200.46.0/23 maxlen: 24
160.20.72.0/22 maxlen: 24
163.47.56.0/22 maxlen: 22
163.47.56.0/24 maxlen: 24
163.47.57.0/24 maxlen: 24
163.47.58.0/24 maxlen: 24
163.47.59.0/24 maxlen: 24
203.57.126.0/23 maxlen: 24
2001:df1:b400::/48 maxlen: 48
2400:ec40::/32 maxlen: 32
2400:ec40::/36 maxlen: 36
2400:ec40:1000::/36 maxlen: 36
2400:ec40:2000::/36 maxlen: 36
2400:ec40:3000::/36 maxlen: 36
2400:ec40:4000::/36 maxlen: 36
2400:ec40:4000::/40 maxlen: 40
2400:ec40:5000::/36 maxlen: 36
2400:ec40:5100::/40 maxlen: 40
2400:ec40:5200::/40 maxlen: 40
2400:ec40:6000::/36 maxlen: 36
2400:ec40:7000::/36 maxlen: 36
2400:ec40:8000::/36 maxlen: 36
2400:ec40:9000::/36 maxlen: 36
2400:ec40:a000::/36 maxlen: 36
2400:ec40:b000::/36 maxlen: 36
2400:ec40:c000::/36 maxlen: 36
2400:ec40:d000::/36 maxlen: 36
2400:ec40:e000::/36 maxlen: 36
2400:ec40:f000::/36 maxlen: 36
2400:ec40:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 18:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3529 (0xdc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: Oct 13 07:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6acddc6f-4a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:70:23:e8:92:81:2b:f8:4c:85:0f:cc:91:3a:
90:27:c1:86:f1:9d:25:81:76:72:77:66:12:35:00:
ca:c6:d7:a6:78:77:ea:db:24:4d:e8:42:8e:9c:be:
91:ba:59:17:38:4d:70:c4:40:d7:6c:bb:cb:a1:4c:
15:ea:5e:3b:b0:e6:82:f3:4c:bf:b9:2d:ee:c5:e6:
2b:c3:96:da:9a:c6:2d:e5:d9:57:cb:38:9e:8d:c4:
dc:5f:66:3a:81:6d:f4:cb:97:c1:72:df:24:b0:a1:
ff:8e:a6:52:3a:ec:e4:28:c3:04:ee:34:9e:c0:e4:
e4:cd:b3:a0:0c:6e:fa:73:96:56:9c:35:b3:74:80:
b1:dc:3a:3c:49:14:dd:b8:f4:3e:42:db:04:76:ad:
0f:3f:24:9a:18:38:93:f7:1e:5e:42:9b:2c:ba:09:
ef:33:5b:c0:ec:35:4b:24:61:32:b6:25:a2:6b:1f:
56:08:bb:cb:64:78:e1:86:de:0c:1b:62:87:05:9c:
f6:f8:64:8f:e5:52:80:14:e2:57:ea:7c:c7:39:26:
a7:a6:20:a2:24:47:23:45:0c:7a:25:dd:bc:b0:38:
ac:14:45:88:c5:ae:ab:e2:08:83:f2:ba:ae:59:cc:
ae:55:21:cb:b1:91:69:bf:e5:36:43:75:c5:69:ad:
be:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:98:CD:D5:6B:05:CC:BD:2D:5C:B3:88:3B:C7:AF:CB:38:61:9A:11
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/FB6FE2EEC6D611F1966A0A2E4611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.208.0/22
103.46.212.0/22
103.89.80.0/22
103.225.228.0/22
113.30.224.0/22
121.200.32.0/20
160.20.72.0/22
163.47.56.0/22
203.57.126.0/23
IPv6:
2001:df1:b400::/48
2400:ec40::/32
Signature Algorithm: sha256WithRSAEncryption
23:8e:59:38:4b:04:d8:1d:10:d0:ad:3f:1e:e5:af:79:30:9c:
f4:10:b1:77:51:86:78:47:a0:d9:81:a1:76:fa:16:bf:16:08:
dc:f8:3b:bf:70:94:8f:c8:34:61:a8:2e:9b:c5:be:5f:bc:a7:
2e:50:5e:b6:98:b9:76:29:d6:80:dd:11:66:7d:57:24:c8:7f:
c4:9b:67:a8:ff:b6:c9:17:d9:9c:0c:c2:7e:86:f7:02:2c:98:
18:bf:45:b9:02:b5:1c:34:a9:e7:ec:3e:01:02:7c:d8:e8:d8:
2d:af:e8:79:6e:1c:5c:84:21:94:2d:6b:e6:31:10:15:1c:d9:
b4:01:dd:d9:89:b9:1e:73:86:3f:71:0b:ce:6c:c9:ef:49:05:
f4:9f:c7:28:04:8d:a0:48:8c:86:28:50:dd:ad:be:37:3f:1a:
b6:1c:d3:39:e7:d2:53:78:1d:7b:a1:b7:77:90:2d:d9:ae:2a:
0c:f8:20:c4:6a:69:b0:69:fb:02:9b:1d:7e:f2:d6:ff:c2:5f:
ba:1d:b5:48:db:e3:b3:4b:a4:18:44:31:7d:37:52:a9:40:51:
2d:a5:cb:60:0e:1a:49:b9:fd:04:b2:c4:b3:06:16:65:93:a6:
55:0e:b1:4d:28:13:9a:53:91:41:31:17:0f:d7:9a:36:70:34:
c4:e5:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:50:13 2026 by rpki-client