Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/9B8A0A56F56F11EF84317935C4F9AE02.roa
File: 9B8A0A56F56F11EF84317935C4F9AE02.roa (raw, json)
Hash identifier: w0v+SUFS49zAOluGFYDsGJuV860I/RCIscprRkwC54Q=
Subject key identifier: 5B:38:80:92:80:35:A5:EA:EF:5D:DD:64:E9:16:CA:1F:CD:0D:B0:36
Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial: 047E
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/9B8A0A56F56F11EF84317935C4F9AE02.roa
Signing time: Mon 21 Sep 2026 00:50:58 +0000
ROA not before: Mon 21 Sep 2026 00:50:58 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 55850
IP address blocks: 14.137.0.0/19 maxlen: 19
101.53.192.0/19 maxlen: 19
101.53.208.0/21 maxlen: 21
101.53.216.0/22 maxlen: 22
101.53.220.0/22 maxlen: 23
103.8.140.0/22 maxlen: 22
103.15.126.0/23 maxlen: 23
103.26.202.0/24 maxlen: 24
103.173.251.0/24 maxlen: 24
103.241.56.0/22 maxlen: 22
115.69.160.0/19 maxlen: 19
116.251.128.0/18 maxlen: 18
116.251.192.0/21 maxlen: 21
116.251.200.0/22 maxlen: 22
124.155.224.0/20 maxlen: 20
150.107.172.0/22 maxlen: 22
163.47.236.0/22 maxlen: 22
180.148.96.0/19 maxlen: 19
202.56.32.0/20 maxlen: 20
202.56.48.0/21 maxlen: 21
202.74.33.0/24 maxlen: 24
202.137.240.0/21 maxlen: 21
203.94.32.0/19 maxlen: 19
203.124.16.0/21 maxlen: 21
2401:2f40::/32 maxlen: 32
2406:5a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150 (0x47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Validity
Not Before: Sep 21 00:50:58 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ab07f72-a910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:09:e7:9b:f9:46:fb:a5:fa:3c:ef:77:8e:
67:aa:bb:27:b4:c2:50:f2:b0:e8:3c:3e:9c:b6:3d:
7e:c7:21:48:66:59:9b:ff:e5:18:1b:40:53:b8:3a:
bc:74:a4:3d:46:67:ec:6c:89:e0:04:d5:fc:96:73:
62:a4:f6:30:57:22:c2:5d:7f:77:61:20:28:7d:ee:
cf:d5:14:40:09:80:0f:3c:c4:bc:c5:9b:90:76:48:
59:47:f8:d5:c3:f8:a1:79:1f:91:78:3d:6e:38:ff:
b9:6d:8e:09:5d:65:46:89:ab:78:fc:e1:80:20:c4:
0d:c6:88:c7:7a:c1:fa:6f:d3:0c:21:6e:f8:da:aa:
43:fe:57:4b:9d:07:69:9a:83:45:2d:13:31:d5:a3:
e6:ff:1e:dd:fc:00:32:4e:e8:66:60:d5:06:5d:41:
4a:8b:0d:34:0b:00:c4:e7:71:9b:b0:20:35:59:b6:
c6:1e:11:9a:70:68:e3:52:4a:70:d7:0b:06:fb:35:
bd:07:ea:38:68:6f:cb:94:c6:db:0b:4b:15:07:be:
66:af:b9:25:3f:9a:a1:af:20:97:8b:5d:50:f2:d6:
e5:1f:b9:66:36:24:52:23:a3:9f:dd:cd:02:af:28:
47:f9:4a:20:9c:fb:d1:13:96:b2:28:3c:d0:74:ba:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:38:80:92:80:35:A5:EA:EF:5D:DD:64:E9:16:CA:1F:CD:0D:B0:36
X509v3 Authority Key Identifier:
keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/9B8A0A56F56F11EF84317935C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.137.0.0/19
101.53.192.0/19
103.8.140.0/22
103.15.126.0/23
103.26.202.0/24
103.173.251.0/24
103.241.56.0/22
115.69.160.0/19
116.251.128.0-116.251.203.255
124.155.224.0/20
150.107.172.0/22
163.47.236.0/22
180.148.96.0/19
202.56.32.0-202.56.55.255
202.74.33.0/24
202.137.240.0/21
203.94.32.0/19
203.124.16.0/21
IPv6:
2401:2f40::/32
2406:5a00::/32
Signature Algorithm: sha256WithRSAEncryption
66:98:e4:56:d3:09:fa:18:17:23:b8:52:4c:96:45:f9:90:62:
96:de:a5:15:37:19:8d:40:ae:56:c2:fa:53:dc:71:6b:14:14:
27:9f:b1:59:ff:71:47:3e:12:a7:95:5c:de:31:ef:cf:ad:d2:
f4:fe:a9:04:a6:e5:57:7b:61:02:21:15:b9:7e:52:30:d1:57:
9b:8a:59:42:44:94:68:94:81:c3:40:f3:2d:57:bc:f9:ec:77:
f6:7e:5f:2e:d1:4d:ad:fe:a5:28:6e:a4:0f:9f:57:d8:60:0c:
37:50:e7:97:c7:93:d4:78:6b:87:61:24:ff:bb:42:1b:03:45:
d1:0e:04:66:96:c6:a2:79:0e:01:a5:8c:b4:51:33:03:d7:2e:
79:1d:60:c1:f4:e9:cf:6b:3e:f9:9f:59:3d:78:ed:6e:07:e9:
39:8f:e7:89:c0:7a:d3:ad:33:66:bd:4b:b9:f4:5a:00:eb:fa:
4d:ac:16:31:15:bb:0a:35:c7:b6:5b:66:65:2a:8c:e3:2e:f5:
69:ec:55:5e:ea:98:9c:0b:98:0a:3a:0f:0c:c0:e1:a3:9f:48:
b7:5c:58:ef:31:15:95:99:85:ef:57:0e:b0:67:4d:9d:07:f5:
a1:a7:c6:08:c8:59:8d:e3:af:95:ae:98:b1:28:24:e5:45:ad:
bf:9c:02:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:33:40 2026 by rpki-client