Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/A7098B604A5411F0A2CC9015C4F9AE02.roa
File: A7098B604A5411F0A2CC9015C4F9AE02.roa (raw, json)
Hash identifier: 9VyiC9O6U//ZPVxmrlig/dycvmzYpPGTRnjYrlBpYSE=
Subject key identifier: CE:14:E3:C5:33:EE:80:F5:23:D6:0C:B1:CB:74:2D:9A:5A:F9:0B:61
Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Certificate serial: 354E
Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/A7098B604A5411F0A2CC9015C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:10:35 +0000
ROA not before: Sat 30 Aug 2025 20:10:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24324
IP address blocks: 122.200.176.0/20 maxlen: 20
122.200.176.0/24 maxlen: 24
122.200.177.0/24 maxlen: 24
122.200.178.0/24 maxlen: 24
122.200.179.0/24 maxlen: 24
122.200.180.0/24 maxlen: 24
122.200.181.0/24 maxlen: 24
122.200.182.0/24 maxlen: 24
122.200.183.0/24 maxlen: 24
122.200.184.0/24 maxlen: 24
122.200.185.0/24 maxlen: 24
122.200.186.0/24 maxlen: 24
122.200.187.0/24 maxlen: 24
122.200.188.0/24 maxlen: 24
122.200.189.0/24 maxlen: 24
122.200.190.0/24 maxlen: 24
122.200.191.0/24 maxlen: 24
124.157.64.0/19 maxlen: 19
124.157.64.0/24 maxlen: 24
124.157.65.0/24 maxlen: 24
124.157.66.0/24 maxlen: 24
124.157.67.0/24 maxlen: 24
124.157.68.0/22 maxlen: 22
124.157.68.0/24 maxlen: 24
124.157.69.0/24 maxlen: 24
124.157.70.0/24 maxlen: 24
124.157.71.0/24 maxlen: 24
124.157.72.0/24 maxlen: 24
124.157.73.0/24 maxlen: 24
124.157.74.0/24 maxlen: 24
124.157.75.0/24 maxlen: 24
124.157.76.0/24 maxlen: 24
124.157.77.0/24 maxlen: 24
124.157.78.0/24 maxlen: 24
124.157.79.0/24 maxlen: 24
124.157.80.0/24 maxlen: 24
124.157.81.0/24 maxlen: 24
124.157.82.0/24 maxlen: 24
124.157.83.0/24 maxlen: 24
124.157.84.0/24 maxlen: 24
124.157.85.0/24 maxlen: 24
124.157.86.0/24 maxlen: 24
124.157.87.0/24 maxlen: 24
124.157.88.0/24 maxlen: 24
124.157.89.0/24 maxlen: 24
124.157.90.0/24 maxlen: 24
124.157.91.0/24 maxlen: 24
124.157.92.0/24 maxlen: 24
124.157.93.0/24 maxlen: 24
124.157.94.0/24 maxlen: 24
124.157.95.0/24 maxlen: 24
124.157.96.0/19 maxlen: 19
124.157.96.0/24 maxlen: 24
124.157.97.0/24 maxlen: 24
124.157.98.0/24 maxlen: 24
124.157.99.0/24 maxlen: 24
124.157.100.0/24 maxlen: 24
124.157.101.0/24 maxlen: 24
124.157.102.0/24 maxlen: 24
124.157.103.0/24 maxlen: 24
124.157.104.0/24 maxlen: 24
124.157.105.0/24 maxlen: 24
124.157.106.0/24 maxlen: 24
124.157.107.0/24 maxlen: 24
124.157.108.0/24 maxlen: 24
124.157.109.0/24 maxlen: 24
124.157.110.0/24 maxlen: 24
124.157.111.0/24 maxlen: 24
124.157.112.0/24 maxlen: 24
124.157.113.0/24 maxlen: 24
124.157.114.0/24 maxlen: 24
124.157.115.0/24 maxlen: 24
124.157.116.0/24 maxlen: 24
124.157.117.0/24 maxlen: 24
124.157.118.0/24 maxlen: 24
124.157.119.0/24 maxlen: 24
124.157.120.0/24 maxlen: 24
124.157.121.0/24 maxlen: 24
124.157.122.0/24 maxlen: 24
124.157.123.0/24 maxlen: 24
124.157.124.0/24 maxlen: 24
124.157.125.0/24 maxlen: 24
124.157.126.0/24 maxlen: 24
124.157.127.0/24 maxlen: 24
202.36.132.0/24 maxlen: 24
202.49.128.0/21 maxlen: 21
202.49.128.0/24 maxlen: 24
202.49.129.0/24 maxlen: 24
202.49.130.0/24 maxlen: 24
202.49.131.0/24 maxlen: 24
202.49.132.0/24 maxlen: 24
202.49.133.0/24 maxlen: 24
202.49.134.0/24 maxlen: 24
202.49.135.0/24 maxlen: 24
203.14.20.0/24 maxlen: 24
203.161.187.0/24 maxlen: 24
203.195.124.0/24 maxlen: 24
2404:6c00::/32 maxlen: 32
2404:6c00:1::/48 maxlen: 48
2404:6c00:a000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13646 (0x354e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Validity
Not Before: Aug 30 20:10:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4028b-b0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cc:58:c5:b5:89:1c:c6:0e:6c:60:81:93:1e:
5e:c5:78:5e:6e:9a:50:52:f0:e4:67:0c:09:0c:48:
ce:93:c0:24:06:83:cb:e9:f3:6d:83:8f:3d:e1:1b:
57:02:22:36:39:62:97:e8:f1:eb:cf:d4:6d:4b:2c:
2d:2a:6a:e9:74:30:4e:54:8e:a5:d1:b2:49:7e:a8:
e2:99:8e:95:8e:68:5e:df:79:75:7b:04:ed:21:92:
98:b6:b0:e2:ea:cf:02:81:f9:85:d7:16:46:ac:65:
ca:97:ab:26:3d:ab:8c:b1:15:79:2a:eb:28:28:e1:
6b:46:66:2c:b1:e4:04:94:0b:37:21:fd:e7:cc:3d:
bf:f3:20:b9:c8:78:6f:e8:1f:1b:1e:96:6d:58:a3:
08:39:58:50:3d:d2:62:65:b9:1d:4d:f5:c4:9b:8c:
07:2a:87:7d:39:ff:b9:59:c9:a3:03:02:79:4c:ad:
f9:b2:7d:72:6a:a2:a2:b3:8b:1e:f0:a7:0d:60:84:
88:ff:37:65:45:81:2b:7c:c9:df:96:1d:7d:35:dd:
72:88:7d:f0:32:d5:87:70:39:fe:c2:f1:18:31:3a:
aa:d3:0b:96:f1:64:01:56:47:23:49:d7:eb:f7:cd:
0c:15:48:26:65:d9:6c:31:11:64:a0:bf:d3:54:73:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:14:E3:C5:33:EE:80:F5:23:D6:0C:B1:CB:74:2D:9A:5A:F9:0B:61
X509v3 Authority Key Identifier:
keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/A7098B604A5411F0A2CC9015C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.200.176.0/20
124.157.64.0/18
202.36.132.0/24
202.49.128.0/21
203.14.20.0/24
203.161.187.0/24
203.195.124.0/24
IPv6:
2404:6c00::/32
Signature Algorithm: sha256WithRSAEncryption
04:93:0e:ea:f3:a8:f2:cf:3f:31:57:fd:8e:d2:03:4c:d4:49:
bf:cd:de:a5:b1:df:5f:1e:46:69:e6:2d:d5:7b:ee:3d:ac:fb:
31:d4:24:47:cf:3b:e7:36:bc:b1:15:6d:f8:a0:26:e3:f0:b4:
48:d3:54:1d:76:82:b4:22:da:34:dc:d6:cc:f1:23:60:51:87:
49:4d:dd:db:d5:5c:26:29:7e:30:c2:1e:6b:3d:ae:91:9f:5d:
0e:b3:17:0e:58:c3:2a:8f:6e:3f:da:da:7a:54:f6:8e:2b:2e:
4d:53:0e:37:98:c0:f2:db:76:2e:d2:aa:3f:20:31:14:bc:68:
2f:af:4f:c1:e1:11:39:c7:af:da:63:2b:93:e1:c9:68:c5:90:
12:6d:59:96:ae:8a:48:41:71:7e:bd:6d:2d:cf:7d:a5:49:bd:
4e:13:bd:fa:fe:ad:df:95:90:6c:50:2d:65:be:c2:ec:45:b3:
6a:50:90:76:f6:f0:fc:3c:b7:66:3a:88:7b:0e:bb:2b:7a:53:
25:d7:48:26:dc:52:0a:20:d4:41:c9:97:58:86:c4:02:e9:10:
3d:f2:76:61:45:b3:fe:3f:2b:cc:9b:a8:8f:4e:d7:9a:c3:85:
5d:6d:91:c2:f7:f2:33:ca:a9:f8:c2:23:a4:34:a9:f2:b0:2b:
c2:a3:fa:c1
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgICNU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIxNjgxMTAvBgNVBAUTKDlEMzQ2RTZEQjM5QzNEMzMwQzFBRkY5NDA2MEUxNTA1
NUZGNEVEMUMwHhcNMjUwODMwMjAxMDUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDI4Yi1iMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8cxYxbWJHMYObGCBkx5exXhebppQUvDkZwwJDEjOk8AkBoPL6fNtg4894RtX
AiI2OWKX6PHrz9RtSywtKmrpdDBOVI6l0bJJfqjimY6Vjmhe33l1ewTtIZKYtrDi
6s8CgfmF1xZGrGXKl6smPauMsRV5KusoKOFrRmYsseQElAs3If3nzD2/8yC5yHhv
6B8bHpZtWKMIOVhQPdJiZbkdTfXEm4wHKod9Of+5WcmjAwJ5TK35sn1yaqKis4se
8KcNYISI/zdlRYErfMnflh19Nd1yiH3wMtWHcDn+wvEYMTqq0wuW8WQBVkcjSdfr
980MFUgmZdlsMRFkoL/TVHMgCQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFM4U48Uz
7oD1I9YMsct0LZpa+QthMB8GA1UdIwQYMBaAFJ00bm2znD0zDBr/lAYOFQVf9O0c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjE2OC8yNEM2MkMwNjFE
OTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BUTU1Hdi1VQmc0VkJWXzA3
UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25UUnViYk9jUFRNTUd2LVVCZzRWQlZfMDdSdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzIxNjgvMjRDNjJDMDYxRDkxMTFFMjkyNDQzMEYzMDhCMDJDRDIvQTcwOThCNjA0
QTU0MTFGMEEyQ0M5MDE1QzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw
BAIAATAqAwQEesiwAwQGfJ1AAwQAyiSEAwQDyjGAAwQAyw4UAwQAy6G7AwQAy8N8
MA0EAgACMAcDBQAkBGwAMA0GCSqGSIb3DQEBCwUAA4IBAQAEkw7q86jyzz8xV/2O
0gNM1Em/zd6lsd9fHkZp5i3Ve+49rPsx1CRHzzvnNryxFW34oCbj8LRI01QddoK0
Ito03NbM8SNgUYdJTd3b1VwmKX4wwh5rPa6Rn10OsxcOWMMqj24/2tp6VPaOKy5N
Uw43mMDy23Yu0qo/IDEUvGgvr0/B4RE5x6/aYyuT4cloxZASbVmWropIQXF+vW0t
z32lSb1OE736/q3flZBsUC1lvsLsRbNqUJB29vD8PLdmOoh7DrsrelMl10gm3FIK
INRByZdYhsQC6RA98nZhRbP+PyvMm6iPTteaw4VdbZHC9/Izyqn4wiOkNKnysCvC
o/rB
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:25 2026 by rpki-client