Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/95EC5BBE0DC811F0A0561D5AC4F9AE02.roa
File: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (raw, json)
Hash identifier: DeqneaRaSaBqZknkWh20qyHmXKPz6RiopHUHTadeIFs=
Subject key identifier: 1D:94:AE:37:6C:02:37:3B:A8:FA:07:0E:D2:CC:F7:45:62:35:49:93
Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Certificate serial: 091F
Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/95EC5BBE0DC811F0A0561D5AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:12:04 +0000
ROA not before: Tue 02 Dec 2025 21:25:44 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9723
IP address blocks: 1.178.2.0/23 maxlen: 24
1.178.66.0/23 maxlen: 24
1.178.80.0/24 maxlen: 24
1.178.82.0/23 maxlen: 24
1.178.84.0/23 maxlen: 24
1.178.96.0/22 maxlen: 24
1.178.175.0/24 maxlen: 24
1.178.176.0/22 maxlen: 24
1.179.0.0/23 maxlen: 24
1.179.4.0/22 maxlen: 24
1.179.8.0/22 maxlen: 24
1.179.12.0/23 maxlen: 24
1.179.16.0/21 maxlen: 24
1.179.48.0/22 maxlen: 24
1.179.62.0/23 maxlen: 24
1.179.96.0/22 maxlen: 24
58.87.0.0/20 maxlen: 20
58.87.0.0/23 maxlen: 23
58.87.2.0/23 maxlen: 23
58.87.6.0/23 maxlen: 23
58.87.8.0/23 maxlen: 23
58.87.10.0/23 maxlen: 23
58.87.12.0/23 maxlen: 23
58.87.14.0/24 maxlen: 24
58.87.15.0/24 maxlen: 24
110.238.21.0/24 maxlen: 24
110.238.24.0/24 maxlen: 24
110.238.25.0/24 maxlen: 24
110.238.144.0/21 maxlen: 21
110.238.144.0/22 maxlen: 24
110.238.240.0/23 maxlen: 24
110.239.0.0/21 maxlen: 21
110.239.15.0/24 maxlen: 24
110.239.16.0/23 maxlen: 23
110.239.26.0/24 maxlen: 24
110.239.31.0/24 maxlen: 24
110.239.32.0/23 maxlen: 23
110.239.128.0/20 maxlen: 20
110.239.128.0/21 maxlen: 21
110.239.176.0/21 maxlen: 21
110.239.176.0/24 maxlen: 24
110.239.178.0/24 maxlen: 24
119.12.80.0/21 maxlen: 24
119.13.0.0/23 maxlen: 23
119.13.2.0/24 maxlen: 24
119.13.3.0/24 maxlen: 24
119.13.4.0/23 maxlen: 23
119.13.6.0/23 maxlen: 23
119.13.8.0/23 maxlen: 23
119.13.10.0/24 maxlen: 24
119.13.48.0/23 maxlen: 23
119.13.48.0/24 maxlen: 24
119.13.49.0/24 maxlen: 24
119.13.144.0/22 maxlen: 24
119.13.176.0/22 maxlen: 23
119.13.176.0/23 maxlen: 24
119.13.178.0/24 maxlen: 24
119.13.240.0/23 maxlen: 24
121.91.96.0/23 maxlen: 24
121.91.199.0/24 maxlen: 24
123.200.128.0/20 maxlen: 20
123.200.128.0/22 maxlen: 22
123.200.133.0/24 maxlen: 24
123.200.134.0/23 maxlen: 23
123.200.136.0/22 maxlen: 22
123.200.140.0/22 maxlen: 22
123.200.144.0/22 maxlen: 22
123.200.148.0/22 maxlen: 22
123.200.152.0/21 maxlen: 21
123.200.160.0/23 maxlen: 23
123.200.162.0/23 maxlen: 23
123.200.164.0/23 maxlen: 23
123.200.165.0/24 maxlen: 24
123.200.166.0/23 maxlen: 23
123.200.168.0/23 maxlen: 23
123.200.170.0/23 maxlen: 23
123.200.172.0/24 maxlen: 24
123.200.174.0/24 maxlen: 24
123.200.175.0/24 maxlen: 24
123.200.176.0/23 maxlen: 23
123.200.179.0/24 maxlen: 24
123.200.180.0/23 maxlen: 23
123.200.182.0/23 maxlen: 23
123.200.184.0/22 maxlen: 22
123.200.186.0/23 maxlen: 23
123.200.187.0/24 maxlen: 24
123.200.188.0/23 maxlen: 23
123.200.200.0/23 maxlen: 24
123.200.208.0/21 maxlen: 21
123.200.216.0/21 maxlen: 21
123.200.240.0/23 maxlen: 24
202.83.64.0/19 maxlen: 19
202.83.64.0/22 maxlen: 22
202.83.68.0/23 maxlen: 23
202.83.70.0/23 maxlen: 23
202.83.72.0/24 maxlen: 24
202.83.73.0/24 maxlen: 24
202.83.74.0/23 maxlen: 23
202.83.76.0/22 maxlen: 22
202.83.80.0/23 maxlen: 23
202.83.82.0/24 maxlen: 24
202.83.83.0/24 maxlen: 24
202.83.84.0/22 maxlen: 22
202.83.88.0/23 maxlen: 23
202.83.90.0/23 maxlen: 23
202.83.92.0/23 maxlen: 23
202.83.94.0/24 maxlen: 24
202.83.95.0/24 maxlen: 24
202.183.96.0/20 maxlen: 20
202.183.96.0/24 maxlen: 24
202.183.97.0/24 maxlen: 24
202.183.98.0/24 maxlen: 24
202.183.100.0/23 maxlen: 23
202.183.102.0/23 maxlen: 23
202.183.102.0/24 maxlen: 24
202.183.104.0/22 maxlen: 22
202.183.108.0/24 maxlen: 24
202.183.110.0/24 maxlen: 24
202.183.111.0/24 maxlen: 24
202.183.112.0/20 maxlen: 20
202.183.112.0/23 maxlen: 23
202.183.114.0/23 maxlen: 23
202.183.116.0/23 maxlen: 23
202.183.118.0/24 maxlen: 24
202.183.119.0/24 maxlen: 24
202.183.120.0/22 maxlen: 22
202.183.124.0/23 maxlen: 23
202.183.126.0/24 maxlen: 24
202.183.127.0/24 maxlen: 24
210.56.64.0/24 maxlen: 24
210.56.68.0/23 maxlen: 24
210.56.70.0/23 maxlen: 24
220.157.64.0/24 maxlen: 24
220.157.70.0/24 maxlen: 24
220.157.71.0/24 maxlen: 24
220.157.74.0/23 maxlen: 24
220.157.79.0/24 maxlen: 24
220.157.80.0/23 maxlen: 24
220.157.82.0/23 maxlen: 24
220.157.84.0/23 maxlen: 24
220.157.86.0/23 maxlen: 24
220.157.90.0/24 maxlen: 24
220.157.91.0/24 maxlen: 24
220.157.92.0/24 maxlen: 24
220.157.93.0/24 maxlen: 24
220.157.94.0/24 maxlen: 24
220.157.95.0/24 maxlen: 24
2407:6800::/32 maxlen: 32
2407:6800:0:200::/56 maxlen: 56
2407:6800:0:300::/56 maxlen: 56
2407:6800:0:400::/56 maxlen: 56
2407:6800:0:500::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179
Validity
Not Before: Dec 2 21:25:44 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47364-a15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a9:c0:50:e5:d5:14:6f:76:4f:1f:80:8b:05:
c2:61:63:34:c2:54:90:ec:cf:5f:03:0a:e0:c5:93:
87:47:55:e2:bf:3e:e5:d5:17:ba:a2:35:98:a9:2d:
3d:59:9b:30:04:51:b2:b6:7a:09:93:48:6f:d3:74:
11:ac:1a:e0:cd:4c:91:18:d3:a0:a1:f0:5e:cb:9a:
d3:56:04:52:39:cb:4a:d5:1e:c9:f4:24:78:67:a8:
eb:0e:fe:54:3b:e6:fe:e2:53:fc:5b:94:8f:01:a4:
eb:0c:78:16:de:0e:78:d6:51:35:45:04:0e:c6:07:
e0:0e:9e:86:39:67:b5:f2:08:60:6a:3f:40:4e:bc:
2a:f2:e2:d5:b7:5a:9c:db:db:97:85:62:66:fd:19:
a1:b7:79:23:9f:a0:75:fa:df:3a:64:5f:68:27:a4:
c8:89:65:2b:f3:35:12:f1:bc:66:fe:b8:f1:b3:ff:
bf:8d:d6:80:48:c1:a6:d6:62:b7:87:6a:c3:b2:0b:
4b:f5:ed:64:0c:ef:56:ff:4c:77:b2:1d:9d:4a:97:
55:9e:5e:81:d3:77:80:26:18:5e:e7:88:a4:b5:a3:
03:6a:25:23:3c:2c:08:87:0a:b0:74:fa:87:ce:aa:
ed:b4:b0:6f:ea:fb:0d:f8:50:03:bd:40:8f:e0:0f:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:94:AE:37:6C:02:37:3B:A8:FA:07:0E:D2:CC:F7:45:62:35:49:93
X509v3 Authority Key Identifier:
keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/95EC5BBE0DC811F0A0561D5AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.178.2.0/23
1.178.66.0/23
1.178.80.0/24
1.178.82.0-1.178.85.255
1.178.96.0/22
1.178.175.0-1.178.179.255
1.179.0.0/23
1.179.4.0-1.179.13.255
1.179.16.0/21
1.179.48.0/22
1.179.62.0/23
1.179.96.0/22
58.87.0.0/20
110.238.21.0/24
110.238.24.0/23
110.238.144.0/21
110.238.240.0/23
110.239.0.0/21
110.239.15.0-110.239.17.255
110.239.26.0/24
110.239.31.0-110.239.33.255
110.239.128.0/20
110.239.176.0/21
119.12.80.0/21
119.13.0.0-119.13.10.255
119.13.48.0/23
119.13.144.0/22
119.13.176.0/22
119.13.240.0/23
121.91.96.0/23
121.91.199.0/24
123.200.128.0-123.200.172.255
123.200.174.0-123.200.177.255
123.200.179.0-123.200.189.255
123.200.200.0/23
123.200.208.0/20
123.200.240.0/23
202.83.64.0/19
202.183.96.0/19
210.56.64.0/24
210.56.68.0/22
220.157.64.0/24
220.157.70.0/23
220.157.74.0/23
220.157.79.0-220.157.87.255
220.157.90.0-220.157.95.255
IPv6:
2407:6800::/32
Signature Algorithm: sha256WithRSAEncryption
50:3f:fc:6f:44:26:3c:97:04:19:b9:22:f0:79:40:95:4f:b5:
6d:e5:03:8b:2a:29:55:c2:6f:9e:86:d6:db:84:65:4b:05:b2:
1a:5c:06:fe:58:2c:cb:ff:ae:59:3b:4d:df:9a:94:d0:f6:f7:
5d:37:ff:5a:69:80:74:ef:f3:9f:ae:5c:d2:1d:9d:8f:c1:7b:
e3:fb:e9:cf:7b:bd:0f:df:09:d0:eb:51:b2:16:75:9d:9e:7d:
44:85:0d:38:f8:da:8d:4c:c0:06:2f:78:be:1c:c7:7b:89:90:
ad:85:48:e0:03:4d:80:d9:09:a7:27:3d:c6:d6:0a:a6:28:ef:
ed:0a:bb:50:3c:54:11:5d:72:ae:5a:53:a3:b1:ea:00:56:df:
c8:21:ac:ef:db:5e:df:a4:da:b5:7e:29:91:08:93:ec:ed:f0:
28:1a:af:6a:89:32:88:df:b0:56:92:7b:30:5a:0f:52:6c:f9:
a9:86:e5:38:e2:78:a5:7c:b8:e5:a2:8f:91:8c:6d:95:3e:d2:
55:e8:ba:68:7a:2f:03:30:77:46:e8:73:5e:d9:a4:a5:fe:de:
a9:1c:13:f7:71:70:20:7e:b2:6e:4f:3f:d8:6d:85:93:16:79:
17:d6:65:04:aa:78:27:e3:11:b7:0c:4b:9d:16:3d:1d:7d:c4:
cd:b6:5a:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:04 2026 by rpki-client