Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/56F533B4A63011EEA6054D52C4F9AE02.roa
File: 56F533B4A63011EEA6054D52C4F9AE02.roa (raw, json)
Hash identifier: AG0uySI8j3B6fdSYGRxuEIJRJdCED4LLdcZlOw31HXc=
Subject key identifier: 38:62:77:46:64:4D:99:B3:1B:D0:8C:72:48:FF:8C:3D:82:69:D4:E2
Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial: 35F8
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/56F533B4A63011EEA6054D52C4F9AE02.roa
Signing time: Tue 08 Sep 2026 15:17:55 +0000
ROA not before: Tue 08 Sep 2026 15:17:55 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 38235
IP address blocks: 103.90.148.0/22 maxlen: 24
103.120.132.0/22 maxlen: 24
103.141.164.0/23 maxlen: 24
103.206.76.0/22 maxlen: 24
116.212.128.0/19 maxlen: 24
150.107.4.0/22 maxlen: 22
150.107.4.0/24 maxlen: 24
150.107.5.0/24 maxlen: 24
150.107.6.0/24 maxlen: 24
150.107.7.0/24 maxlen: 24
160.202.32.0/24 maxlen: 24
160.202.33.0/24 maxlen: 24
160.202.34.0/24 maxlen: 24
160.202.35.0/24 maxlen: 24
202.37.179.0/24 maxlen: 24
202.57.208.0/24 maxlen: 24
202.57.209.0/24 maxlen: 24
202.57.210.0/23 maxlen: 23
202.57.210.0/24 maxlen: 24
202.57.211.0/24 maxlen: 24
203.147.128.0/20 maxlen: 24
203.171.252.0/22 maxlen: 24
203.176.128.0/21 maxlen: 22
203.176.128.0/23 maxlen: 24
203.176.130.0/24 maxlen: 24
203.176.131.0/24 maxlen: 24
203.176.132.0/24 maxlen: 24
203.176.133.0/24 maxlen: 24
203.176.134.0/24 maxlen: 24
203.176.135.0/24 maxlen: 24
203.176.136.0/21 maxlen: 22
203.176.136.0/24 maxlen: 24
203.176.137.0/24 maxlen: 24
203.176.138.0/23 maxlen: 24
203.176.140.0/22 maxlen: 24
210.247.192.0/20 maxlen: 24
2405:da00::/32 maxlen: 36
2405:da00::/40 maxlen: 40
2405:da00::/48 maxlen: 48
2405:da00:1::/48 maxlen: 48
2405:da00:10::/44 maxlen: 44
2405:da00:99::/48 maxlen: 48
2405:da00:100::/40 maxlen: 40
2405:da00:200::/40 maxlen: 40
2405:da00:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13816 (0x35f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Validity
Not Before: Sep 8 15:17:55 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa02723-f631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:06:4a:ff:4d:d2:d0:69:5a:b7:5a:19:b4:
ed:6a:14:2a:9d:a8:2b:ae:8a:b1:f5:c6:17:50:6b:
ef:df:3c:7d:4f:77:23:12:07:01:d8:cc:9a:0e:10:
32:42:ff:7f:3c:de:d4:a9:b5:07:d3:5f:01:d5:dd:
1d:f0:57:68:89:d2:7a:9c:dd:ee:52:9e:2e:a1:7e:
ea:8f:1f:3d:29:e3:d2:cc:d5:96:b1:ad:89:05:31:
64:d1:f2:62:3c:b4:9c:35:9d:7d:1e:11:e7:d5:56:
8f:52:37:f9:aa:78:6f:25:08:e4:8f:13:6d:c6:ac:
e9:53:e1:bb:bb:b5:f0:46:98:e2:10:4c:a5:31:1f:
31:ae:41:e2:f8:ee:c7:a8:4c:64:35:b3:1a:9d:b6:
72:1a:07:d9:59:3c:5c:f6:8b:1b:d0:17:b4:aa:45:
07:80:40:6f:15:83:a0:59:38:c3:72:66:f8:87:12:
db:42:3f:bc:9f:51:3e:f9:8a:dc:fd:b9:1e:2f:2a:
0d:75:7b:c6:d1:be:db:48:b2:4b:70:a9:df:03:40:
2a:97:d8:89:d1:af:a1:55:29:42:df:ff:2f:eb:2c:
2f:15:23:37:3f:c7:51:d2:fa:51:bb:81:1c:6b:cb:
60:4b:f0:08:f3:04:f1:ff:11:29:6b:2e:bb:b0:07:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:77:46:64:4D:99:B3:1B:D0:8C:72:48:FF:8C:3D:82:69:D4:E2
X509v3 Authority Key Identifier:
keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/56F533B4A63011EEA6054D52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.90.148.0/22
103.120.132.0/22
103.141.164.0/23
103.206.76.0/22
116.212.128.0/19
150.107.4.0/22
160.202.32.0/22
202.37.179.0/24
202.57.208.0/22
203.147.128.0/20
203.171.252.0/22
203.176.128.0/20
210.247.192.0/20
IPv6:
2405:da00::/32
Signature Algorithm: sha256WithRSAEncryption
4c:31:36:44:48:1a:a6:77:94:2d:cd:86:3a:11:35:50:c9:0a:
41:48:8b:20:e6:50:d7:16:97:87:8f:de:0d:37:0b:87:95:8d:
98:ba:15:40:06:6e:3a:bf:77:09:d6:fe:2c:80:60:21:cb:73:
c6:53:fb:32:1f:7e:07:3c:74:ad:80:a2:37:7c:33:e6:66:45:
70:3c:6d:d8:71:f4:3f:b0:1e:37:98:90:18:9b:76:5a:e1:af:
43:15:53:08:b8:30:39:7b:ff:6d:c7:9c:d6:99:66:c0:1b:24:
12:4e:2e:73:bc:cc:53:ff:f0:20:6b:42:5f:ae:00:33:63:af:
83:cf:39:db:d8:46:bf:78:b0:e0:15:52:c5:f3:68:f7:dc:0d:
d6:6b:04:e4:ed:03:9c:dc:98:02:17:07:c8:e3:ea:54:8f:df:
c4:51:84:b9:e4:0b:33:4d:f9:e2:4f:1e:e8:23:a7:ef:33:a0:
8b:e3:1b:1d:fd:8d:ec:51:5a:6e:63:44:87:52:ab:d2:23:ee:
1e:7d:ab:e4:48:81:62:e0:44:43:f1:08:d8:a4:d1:1c:99:68:
30:ad:04:70:e1:13:0f:c8:86:66:3b:7c:c4:d6:32:3a:08:d2:
f2:cf:7c:36:57:d4:ad:54:c6:81:1b:e5:0a:56:cd:97:65:d4:
7a:b7:13:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:02:50 2026 by rpki-client