Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/B7BC1B76506A11EDBB3A804AC4F9AE02.roa
File: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (raw, json)
Hash identifier: 8XTO+z2V3mKRowJtJ3/VVnjJvJ5dBkEOKZePDCXGrW0=
Subject key identifier: 5E:A4:72:F3:EA:C3:7C:70:EA:77:8D:00:04:69:70:5E:C0:BF:65:FE
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 0805
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/B7BC1B76506A11EDBB3A804AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:26:25 +0000
ROA not before: Wed 28 Jan 2026 22:18:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 38166
IP address blocks: 166.81.5.0/24 maxlen: 24
166.81.9.0/24 maxlen: 24
166.81.10.0/24 maxlen: 24
166.81.11.0/24 maxlen: 24
166.81.12.0/24 maxlen: 24
166.81.13.0/24 maxlen: 24
166.81.14.0/24 maxlen: 24
166.81.15.0/24 maxlen: 24
166.81.16.0/24 maxlen: 24
166.81.17.0/24 maxlen: 24
166.81.18.0/24 maxlen: 24
166.81.19.0/24 maxlen: 24
166.81.20.0/24 maxlen: 24
166.81.21.0/24 maxlen: 24
166.81.22.0/24 maxlen: 24
166.81.23.0/24 maxlen: 24
166.81.24.0/24 maxlen: 24
166.81.25.0/24 maxlen: 24
166.81.26.0/24 maxlen: 24
166.81.27.0/24 maxlen: 24
166.81.28.0/24 maxlen: 24
166.81.29.0/24 maxlen: 24
166.81.30.0/24 maxlen: 24
166.81.33.0/24 maxlen: 24
166.81.34.0/24 maxlen: 24
166.81.35.0/24 maxlen: 24
166.81.38.0/24 maxlen: 24
166.81.39.0/24 maxlen: 24
166.81.40.0/24 maxlen: 24
166.81.51.0/24 maxlen: 24
166.81.52.0/24 maxlen: 24
166.81.53.0/24 maxlen: 24
166.81.54.0/24 maxlen: 24
166.81.55.0/24 maxlen: 24
166.81.56.0/24 maxlen: 24
166.81.57.0/24 maxlen: 24
166.81.58.0/24 maxlen: 24
166.81.59.0/24 maxlen: 24
166.81.60.0/24 maxlen: 24
166.81.61.0/24 maxlen: 24
166.81.62.0/24 maxlen: 24
166.81.65.0/24 maxlen: 24
166.81.66.0/24 maxlen: 24
166.81.67.0/24 maxlen: 24
166.81.68.0/24 maxlen: 24
166.81.69.0/24 maxlen: 24
166.81.70.0/24 maxlen: 24
166.81.77.0/24 maxlen: 24
166.81.78.0/24 maxlen: 24
166.81.79.0/24 maxlen: 24
166.81.80.0/24 maxlen: 24
166.81.81.0/24 maxlen: 24
166.81.83.0/24 maxlen: 24
166.81.84.0/24 maxlen: 24
166.81.85.0/24 maxlen: 24
166.81.87.0/24 maxlen: 24
166.81.88.0/24 maxlen: 24
166.81.89.0/24 maxlen: 24
166.81.90.0/24 maxlen: 24
166.81.91.0/24 maxlen: 24
166.81.95.0/24 maxlen: 24
166.81.96.0/24 maxlen: 24
166.81.97.0/24 maxlen: 24
166.81.98.0/24 maxlen: 24
166.81.99.0/24 maxlen: 24
166.81.100.0/24 maxlen: 24
166.81.101.0/24 maxlen: 24
166.81.102.0/24 maxlen: 24
166.81.103.0/24 maxlen: 24
166.81.104.0/24 maxlen: 24
166.81.105.0/24 maxlen: 24
166.81.106.0/24 maxlen: 24
166.81.246.0/24 maxlen: 24
166.81.247.0/24 maxlen: 24
166.81.248.0/24 maxlen: 24
166.81.249.0/24 maxlen: 24
166.81.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Jan 28 22:18:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a484d1-4153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:d5:18:32:a0:00:24:cd:85:41:35:7f:82:
d2:56:af:53:81:0c:9a:93:8c:e4:24:7f:e3:16:19:
3f:c3:40:cf:da:e8:75:81:d7:0a:10:94:68:1f:4d:
da:98:89:f2:02:4c:b5:22:0c:02:23:1d:0e:86:61:
0b:da:55:23:f8:2c:a0:83:52:b5:d5:d8:6d:b2:1a:
94:c8:06:f4:4f:b1:4a:4e:a0:55:f1:50:cd:cf:2c:
94:0a:48:cc:fb:5d:43:b4:71:93:26:90:b8:e4:32:
ec:bb:49:d3:56:0a:c3:a0:a3:a4:a7:95:3f:b6:c4:
86:a4:29:bc:eb:9b:7f:2f:7a:53:c5:b1:07:3c:45:
ca:08:a2:e1:69:33:ec:5f:6a:17:81:2b:e6:aa:32:
ff:e7:9d:82:46:83:0c:8b:ba:e0:72:cb:d1:47:01:
a4:9c:3c:b2:be:b1:30:f1:01:08:81:6f:95:45:de:
5f:f8:86:eb:81:81:75:34:98:9a:61:5a:8b:33:27:
46:ad:a6:9b:ea:5b:5c:de:6c:c1:1e:36:0f:f1:5c:
3e:f8:27:f4:67:8f:c9:04:51:e9:e4:95:6a:3e:b9:
27:8c:a6:ae:77:e0:c1:4c:d5:b7:a6:fb:b1:68:ba:
98:b7:3d:6b:ab:2d:1b:3c:fd:99:9a:46:3d:ab:7c:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A4:72:F3:EA:C3:7C:70:EA:77:8D:00:04:69:70:5E:C0:BF:65:FE
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/B7BC1B76506A11EDBB3A804AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
166.81.5.0/24
166.81.9.0-166.81.30.255
166.81.33.0-166.81.35.255
166.81.38.0-166.81.40.255
166.81.51.0-166.81.62.255
166.81.65.0-166.81.70.255
166.81.77.0-166.81.81.255
166.81.83.0-166.81.85.255
166.81.87.0-166.81.91.255
166.81.95.0-166.81.106.255
166.81.246.0-166.81.250.255
Signature Algorithm: sha256WithRSAEncryption
78:69:98:47:eb:b6:bc:21:67:7e:8b:19:06:d7:b2:19:fe:1c:
fe:99:ac:72:1b:bc:e0:35:53:cc:c1:11:5f:d2:66:5f:da:90:
58:94:05:90:81:1c:80:3b:ee:86:b9:2b:8b:c1:e3:4a:1d:fd:
39:35:36:6c:a5:0f:fc:63:e2:a1:12:ae:cb:94:09:c1:fe:fa:
28:e7:71:24:9c:fe:a6:7b:88:8a:b6:6b:22:68:56:e2:46:0d:
b0:b9:25:9f:c5:63:1d:a7:b6:e3:f4:8c:00:f8:d9:05:e7:94:
df:27:54:2e:0c:4d:59:ca:fd:da:0d:37:a6:ab:93:0f:c7:33:
26:39:1a:86:8f:c8:6d:4c:fd:13:10:9b:41:90:bc:91:87:b0:
3e:f0:05:f9:72:0c:9d:8a:77:12:05:41:63:40:a2:a8:89:35:
25:b8:30:7a:4b:57:b5:47:a9:31:34:7c:c5:13:a1:b5:c0:c6:
d9:f7:2f:75:67:58:c4:76:fd:9e:d3:b7:7e:c8:cb:d5:b4:38:
39:12:7b:82:87:c3:67:10:0c:83:c1:17:af:38:26:06:c5:06:
02:2a:d4:0a:af:58:e6:16:85:35:22:e2:28:99:0e:47:d2:7e:
e9:47:94:05:fb:35:e7:9d:8e:91:7d:05:3f:02:83:39:c3:db:
16:fb:21:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:04 2026 by rpki-client