Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/97C79A806C0511EF8B77D10EC4F9AE02.roa
File: 97C79A806C0511EF8B77D10EC4F9AE02.roa (raw, json)
Hash identifier: VkyX9N9HfLZIUAwktbH0rhQ7XlYSjzCMW1oqJJ07qeI=
Subject key identifier: A0:35:11:3C:A5:FE:53:9C:3F:97:CB:9E:14:AD:CA:5E:E2:35:F5:07
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 07DC
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/97C79A806C0511EF8B77D10EC4F9AE02.roa
Signing time: Wed 28 Jan 2026 22:18:34 +0000
ROA not before: Wed 28 Jan 2026 22:18:34 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 0
IP address blocks: 166.81.0.0/24 maxlen: 24
166.81.1.0/24 maxlen: 24
166.81.3.0/24 maxlen: 24
166.81.4.0/24 maxlen: 24
166.81.7.0/24 maxlen: 24
166.81.8.0/24 maxlen: 24
166.81.31.0/24 maxlen: 24
166.81.36.0/24 maxlen: 24
166.81.37.0/24 maxlen: 24
166.81.41.0/24 maxlen: 24
166.81.42.0/24 maxlen: 24
166.81.43.0/24 maxlen: 24
166.81.44.0/24 maxlen: 24
166.81.45.0/24 maxlen: 24
166.81.46.0/24 maxlen: 24
166.81.47.0/24 maxlen: 24
166.81.48.0/24 maxlen: 24
166.81.49.0/24 maxlen: 24
166.81.50.0/24 maxlen: 24
166.81.71.0/24 maxlen: 24
166.81.72.0/24 maxlen: 24
166.81.73.0/24 maxlen: 24
166.81.74.0/24 maxlen: 24
166.81.75.0/24 maxlen: 24
166.81.76.0/24 maxlen: 24
166.81.82.0/24 maxlen: 24
166.81.84.0/24 maxlen: 24
166.81.85.0/24 maxlen: 24
166.81.86.0/24 maxlen: 24
166.81.87.0/24 maxlen: 24
166.81.88.0/24 maxlen: 24
166.81.89.0/24 maxlen: 24
166.81.90.0/24 maxlen: 24
166.81.91.0/24 maxlen: 24
166.81.92.0/24 maxlen: 24
166.81.93.0/24 maxlen: 24
166.81.94.0/24 maxlen: 24
166.81.95.0/24 maxlen: 24
166.81.96.0/24 maxlen: 24
166.81.97.0/24 maxlen: 24
166.81.98.0/24 maxlen: 24
166.81.99.0/24 maxlen: 24
166.81.100.0/24 maxlen: 24
166.81.107.0/24 maxlen: 24
166.81.108.0/24 maxlen: 24
166.81.109.0/24 maxlen: 24
166.81.110.0/24 maxlen: 24
166.81.111.0/24 maxlen: 24
166.81.112.0/24 maxlen: 24
166.81.113.0/24 maxlen: 24
166.81.114.0/24 maxlen: 24
166.81.115.0/24 maxlen: 24
166.81.116.0/24 maxlen: 24
166.81.117.0/24 maxlen: 24
166.81.118.0/24 maxlen: 24
166.81.119.0/24 maxlen: 24
166.81.120.0/24 maxlen: 24
166.81.121.0/24 maxlen: 24
166.81.122.0/24 maxlen: 24
166.81.123.0/24 maxlen: 24
166.81.124.0/24 maxlen: 24
166.81.125.0/24 maxlen: 24
166.81.126.0/24 maxlen: 24
166.81.127.0/24 maxlen: 24
166.81.128.0/24 maxlen: 24
166.81.129.0/24 maxlen: 24
166.81.130.0/24 maxlen: 24
166.81.131.0/24 maxlen: 24
166.81.132.0/24 maxlen: 24
166.81.133.0/24 maxlen: 24
166.81.134.0/24 maxlen: 24
166.81.135.0/24 maxlen: 24
166.81.136.0/24 maxlen: 24
166.81.137.0/24 maxlen: 24
166.81.138.0/24 maxlen: 24
166.81.139.0/24 maxlen: 24
166.81.140.0/24 maxlen: 24
166.81.141.0/24 maxlen: 24
166.81.142.0/24 maxlen: 24
166.81.143.0/24 maxlen: 24
166.81.144.0/24 maxlen: 24
166.81.145.0/24 maxlen: 24
166.81.146.0/24 maxlen: 24
166.81.147.0/24 maxlen: 24
166.81.148.0/24 maxlen: 24
166.81.149.0/24 maxlen: 24
166.81.150.0/24 maxlen: 24
166.81.151.0/24 maxlen: 24
166.81.152.0/24 maxlen: 24
166.81.153.0/24 maxlen: 24
166.81.154.0/24 maxlen: 24
166.81.155.0/24 maxlen: 24
166.81.156.0/24 maxlen: 24
166.81.157.0/24 maxlen: 24
166.81.158.0/24 maxlen: 24
166.81.159.0/24 maxlen: 24
166.81.160.0/24 maxlen: 24
166.81.161.0/24 maxlen: 24
166.81.162.0/24 maxlen: 24
166.81.163.0/24 maxlen: 24
166.81.164.0/24 maxlen: 24
166.81.165.0/24 maxlen: 24
166.81.166.0/24 maxlen: 24
166.81.167.0/24 maxlen: 24
166.81.168.0/24 maxlen: 24
166.81.169.0/24 maxlen: 24
166.81.170.0/24 maxlen: 24
166.81.171.0/24 maxlen: 24
166.81.172.0/24 maxlen: 24
166.81.173.0/24 maxlen: 24
166.81.174.0/24 maxlen: 24
166.81.175.0/24 maxlen: 24
166.81.176.0/24 maxlen: 24
166.81.177.0/24 maxlen: 24
166.81.178.0/24 maxlen: 24
166.81.179.0/24 maxlen: 24
166.81.180.0/24 maxlen: 24
166.81.181.0/24 maxlen: 24
166.81.182.0/24 maxlen: 24
166.81.183.0/24 maxlen: 24
166.81.184.0/24 maxlen: 24
166.81.185.0/24 maxlen: 24
166.81.186.0/24 maxlen: 24
166.81.187.0/24 maxlen: 24
166.81.188.0/24 maxlen: 24
166.81.189.0/24 maxlen: 24
166.81.190.0/24 maxlen: 24
166.81.191.0/24 maxlen: 24
166.81.192.0/24 maxlen: 24
166.81.193.0/24 maxlen: 24
166.81.194.0/24 maxlen: 24
166.81.195.0/24 maxlen: 24
166.81.196.0/24 maxlen: 24
166.81.197.0/24 maxlen: 24
166.81.198.0/24 maxlen: 24
166.81.199.0/24 maxlen: 24
166.81.200.0/24 maxlen: 24
166.81.201.0/24 maxlen: 24
166.81.202.0/24 maxlen: 24
166.81.203.0/24 maxlen: 24
166.81.204.0/24 maxlen: 24
166.81.205.0/24 maxlen: 24
166.81.206.0/24 maxlen: 24
166.81.207.0/24 maxlen: 24
166.81.208.0/24 maxlen: 24
166.81.209.0/24 maxlen: 24
166.81.210.0/24 maxlen: 24
166.81.211.0/24 maxlen: 24
166.81.212.0/24 maxlen: 24
166.81.213.0/24 maxlen: 24
166.81.214.0/24 maxlen: 24
166.81.215.0/24 maxlen: 24
166.81.216.0/24 maxlen: 24
166.81.217.0/24 maxlen: 24
166.81.218.0/24 maxlen: 24
166.81.219.0/24 maxlen: 24
166.81.220.0/24 maxlen: 24
166.81.221.0/24 maxlen: 24
166.81.222.0/24 maxlen: 24
166.81.223.0/24 maxlen: 24
166.81.224.0/24 maxlen: 24
166.81.225.0/24 maxlen: 24
166.81.226.0/24 maxlen: 24
166.81.227.0/24 maxlen: 24
166.81.228.0/24 maxlen: 24
166.81.229.0/24 maxlen: 24
166.81.230.0/24 maxlen: 24
166.81.231.0/24 maxlen: 24
166.81.232.0/24 maxlen: 24
166.81.233.0/24 maxlen: 24
166.81.234.0/24 maxlen: 24
166.81.235.0/24 maxlen: 24
166.81.236.0/24 maxlen: 24
166.81.237.0/24 maxlen: 24
166.81.238.0/24 maxlen: 24
166.81.239.0/24 maxlen: 24
166.81.240.0/24 maxlen: 24
166.81.241.0/24 maxlen: 24
166.81.242.0/24 maxlen: 24
166.81.243.0/24 maxlen: 24
166.81.244.0/24 maxlen: 24
166.81.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2012 (0x7dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Jan 28 22:18:34 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697a8b3a-53f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:9b:96:ce:12:3f:8d:77:6f:97:5e:d3:26:
61:dc:6f:c4:93:e6:46:fb:d2:66:d5:e8:5f:61:00:
f6:f3:ea:dc:6b:1d:c3:65:d4:49:e0:88:e2:d4:04:
3e:3f:51:3b:81:ca:43:56:bd:ac:45:2c:9f:4e:ba:
ed:58:c7:5a:fc:f5:76:73:f5:29:55:4f:03:c7:fd:
5b:1b:5f:e6:c3:99:63:9b:56:82:35:52:4f:73:a1:
c2:28:bb:31:8a:22:52:5d:69:41:d9:b7:b6:96:08:
57:90:bf:a1:28:6c:f4:e3:f4:81:2e:2c:bc:ab:83:
d7:e2:93:4e:22:3b:01:3e:01:82:3f:34:20:a0:30:
d0:c2:ec:ba:5b:29:dc:60:82:d6:f0:89:8b:18:4e:
69:3c:ca:ea:da:25:28:f3:55:0a:16:37:66:39:e5:
8e:29:6c:4a:7b:62:1b:41:a7:d1:70:40:fc:ae:15:
e4:b4:81:fb:87:9e:1e:cf:ec:69:f0:cd:af:f6:11:
db:fa:23:8a:bd:19:75:ea:45:d1:89:d2:e0:e1:66:
9e:fe:06:9a:7c:42:c2:8b:55:3e:cc:d3:44:69:6d:
be:98:3c:24:df:f1:93:c8:b5:19:b7:da:24:ee:91:
a7:b0:d8:56:d2:b8:1e:9c:97:38:82:73:b2:12:3b:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:35:11:3C:A5:FE:53:9C:3F:97:CB:9E:14:AD:CA:5E:E2:35:F5:07
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/97C79A806C0511EF8B77D10EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
166.81.0.0/23
166.81.3.0-166.81.4.255
166.81.7.0-166.81.8.255
166.81.31.0/24
166.81.36.0/23
166.81.41.0-166.81.50.255
166.81.71.0-166.81.76.255
166.81.82.0/24
166.81.84.0-166.81.100.255
166.81.107.0-166.81.245.255
Signature Algorithm: sha256WithRSAEncryption
29:a5:dc:f3:b4:a9:fb:f1:7a:8d:b8:d7:ce:09:23:45:18:43:
5f:e4:28:93:06:ff:fe:d5:dc:b2:5d:46:0b:e2:5e:94:35:90:
8e:26:7a:43:63:01:2a:d9:cd:0f:50:bb:37:13:3d:39:e8:35:
d6:0b:ac:d8:52:5d:cb:23:b0:22:78:af:d0:2d:ae:06:ff:a5:
fa:b0:ed:ea:95:12:cc:f0:bd:19:da:73:b7:5c:6f:7f:4c:85:
b7:8b:57:42:a7:6f:40:02:93:06:d2:f1:2f:18:dc:e5:ab:1c:
df:8a:f8:02:35:04:47:f1:d8:35:b0:a4:5c:7c:04:53:52:3c:
2a:a5:ff:58:fd:f7:e0:61:51:87:13:7a:16:d0:37:78:a2:e6:
69:bc:5d:45:6d:68:ba:8d:b0:ea:0f:6d:cf:8b:af:be:49:cc:
bb:6a:dd:17:4a:ff:d4:78:fd:4d:3f:8b:9e:a0:c5:8f:be:64:
ae:d4:3b:92:6e:24:2e:42:bf:c9:37:b5:6b:24:f7:92:52:c2:
5a:80:70:b5:50:68:31:a7:94:ba:7e:45:a4:4e:ed:27:4d:1e:
93:9a:04:52:90:97:af:98:f7:cd:0b:c4:7c:34:bc:80:9d:a0:
58:d1:0f:ea:e6:74:4c:8d:ba:00:f1:6d:7c:cb:6d:87:ff:e6:
92:c7:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:11 2026 by rpki-client