Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/A709BC948FAE11F09FAE9C69C4F9AE02.roa
File: A709BC948FAE11F09FAE9C69C4F9AE02.roa (raw, json)
Hash identifier: IU7XJLBx/7Cq7nKB96mKlalgw6vu67yQpRJppd671eI=
Subject key identifier: 05:FB:48:10:C4:E9:99:C4:61:C6:C2:93:C7:7F:FB:A3:2E:27:0C:D0
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 0991
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/A709BC948FAE11F09FAE9C69C4F9AE02.roa
Signing time: Wed 10 Jun 2026 21:24:32 +0000
ROA not before: Wed 10 Jun 2026 21:24:32 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 10122
IP address blocks: 103.139.72.0/24 maxlen: 24
103.139.73.0/24 maxlen: 24
164.90.64.0/24 maxlen: 24
164.90.65.0/24 maxlen: 24
164.90.66.0/24 maxlen: 24
164.90.67.0/24 maxlen: 24
164.90.68.0/24 maxlen: 24
164.90.69.0/24 maxlen: 24
164.90.70.0/24 maxlen: 24
164.90.71.0/24 maxlen: 24
164.90.72.0/24 maxlen: 24
164.90.74.0/24 maxlen: 24
164.90.75.0/24 maxlen: 24
164.90.76.0/24 maxlen: 24
164.90.77.0/24 maxlen: 24
164.90.78.0/24 maxlen: 24
164.90.79.0/24 maxlen: 24
164.90.80.0/24 maxlen: 24
164.90.81.0/24 maxlen: 24
164.90.82.0/24 maxlen: 24
164.90.83.0/24 maxlen: 24
164.90.84.0/24 maxlen: 24
164.90.85.0/24 maxlen: 24
164.90.86.0/24 maxlen: 24
164.90.87.0/24 maxlen: 24
164.90.88.0/24 maxlen: 24
164.90.89.0/24 maxlen: 24
164.90.90.0/24 maxlen: 24
164.90.91.0/24 maxlen: 24
164.90.92.0/24 maxlen: 24
164.90.93.0/24 maxlen: 24
164.90.94.0/24 maxlen: 24
164.90.95.0/24 maxlen: 24
164.90.96.0/24 maxlen: 24
164.90.98.0/24 maxlen: 24
164.90.101.0/24 maxlen: 24
164.90.102.0/24 maxlen: 24
164.90.103.0/24 maxlen: 24
164.90.105.0/24 maxlen: 24
164.90.106.0/24 maxlen: 24
164.90.107.0/24 maxlen: 24
164.90.108.0/24 maxlen: 24
164.90.109.0/24 maxlen: 24
164.90.110.0/24 maxlen: 24
164.90.111.0/24 maxlen: 24
164.90.112.0/24 maxlen: 24
164.90.113.0/24 maxlen: 24
164.90.114.0/24 maxlen: 24
164.90.115.0/24 maxlen: 24
164.90.116.0/24 maxlen: 24
164.90.117.0/24 maxlen: 24
164.90.121.0/24 maxlen: 24
164.90.122.0/24 maxlen: 24
164.90.125.0/24 maxlen: 24
164.90.126.0/24 maxlen: 24
164.90.127.0/24 maxlen: 24
202.63.32.0/24 maxlen: 24
202.63.33.0/24 maxlen: 24
202.63.34.0/24 maxlen: 24
202.63.35.0/24 maxlen: 24
202.63.36.0/24 maxlen: 24
202.63.37.0/24 maxlen: 24
202.63.38.0/24 maxlen: 24
202.63.39.0/24 maxlen: 24
202.63.40.0/24 maxlen: 24
202.63.41.0/24 maxlen: 24
202.63.42.0/24 maxlen: 24
202.63.43.0/24 maxlen: 24
202.63.44.0/24 maxlen: 24
202.63.45.0/24 maxlen: 24
202.63.46.0/24 maxlen: 24
202.63.47.0/24 maxlen: 24
202.63.48.0/24 maxlen: 24
202.63.49.0/24 maxlen: 24
202.63.50.0/24 maxlen: 24
202.63.51.0/24 maxlen: 24
202.63.52.0/24 maxlen: 24
202.63.53.0/24 maxlen: 24
202.63.54.0/24 maxlen: 24
202.63.55.0/24 maxlen: 24
202.63.56.0/24 maxlen: 24
202.63.57.0/24 maxlen: 24
202.63.58.0/24 maxlen: 24
202.63.59.0/24 maxlen: 24
202.63.60.0/24 maxlen: 24
202.63.61.0/24 maxlen: 24
202.63.62.0/24 maxlen: 24
202.63.63.0/24 maxlen: 24
202.168.96.0/24 maxlen: 24
202.168.97.0/24 maxlen: 24
202.168.99.0/24 maxlen: 24
202.168.100.0/24 maxlen: 24
202.168.101.0/24 maxlen: 24
202.168.102.0/24 maxlen: 24
202.168.103.0/24 maxlen: 24
202.168.104.0/24 maxlen: 24
202.168.105.0/24 maxlen: 24
202.168.106.0/24 maxlen: 24
202.168.107.0/24 maxlen: 24
202.168.108.0/24 maxlen: 24
202.168.109.0/24 maxlen: 24
202.168.110.0/24 maxlen: 24
202.168.111.0/24 maxlen: 24
202.168.112.0/24 maxlen: 24
202.168.113.0/24 maxlen: 24
202.168.114.0/24 maxlen: 24
202.168.115.0/24 maxlen: 24
202.168.116.0/24 maxlen: 24
202.168.117.0/24 maxlen: 24
202.168.118.0/24 maxlen: 24
202.168.119.0/24 maxlen: 24
202.168.120.0/24 maxlen: 24
202.168.121.0/24 maxlen: 24
202.168.122.0/24 maxlen: 24
202.168.123.0/24 maxlen: 24
202.168.124.0/23 maxlen: 23
202.168.124.0/24 maxlen: 24
202.168.125.0/24 maxlen: 24
202.168.126.0/24 maxlen: 24
202.168.127.0/24 maxlen: 24
2404:efc0:155::/48 maxlen: 48
2404:efc0:235::/48 maxlen: 48
2404:efc0:236::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Jun 10 21:24:32 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a29d610-b6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:1c:f5:3f:fa:59:f3:ac:d4:48:82:08:8c:
38:7d:d5:15:2b:3d:25:c7:90:fc:ae:eb:42:b7:a0:
20:e8:b5:ef:51:54:05:36:5f:4c:33:ed:81:d3:6c:
58:2a:45:6b:b9:5a:74:18:87:d3:0a:5c:c7:80:10:
6c:6d:1f:68:0b:5f:ca:61:68:35:28:6b:99:88:95:
97:76:9c:58:6d:9b:27:b1:2c:f2:cb:4d:1e:25:d9:
6b:7c:0f:25:12:30:10:d9:ac:dd:c7:08:0b:e0:79:
aa:80:f8:32:30:17:67:aa:fb:bd:a5:36:9a:32:d6:
38:28:de:53:6c:ba:97:47:48:44:8d:cc:9b:5e:79:
a1:d9:19:bd:2b:55:eb:0f:1c:73:80:2e:b5:e2:43:
71:37:04:fe:cb:56:01:5c:c4:61:04:71:aa:20:5e:
57:f1:03:f3:a2:f3:2f:db:41:e0:ca:73:6f:d9:9c:
3c:70:61:71:15:60:fb:fc:91:5b:ec:07:0f:f6:2a:
91:16:d9:e2:34:41:6d:ea:5b:58:a5:5e:84:8e:81:
bb:dc:36:14:a9:78:9a:da:75:ca:84:79:c7:16:6b:
95:db:41:c8:79:d1:2d:7f:50:cb:a5:f1:65:03:54:
a6:1b:25:71:4d:20:fe:c3:0f:28:8c:e0:6a:1b:08:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FB:48:10:C4:E9:99:C4:61:C6:C2:93:C7:7F:FB:A3:2E:27:0C:D0
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/A709BC948FAE11F09FAE9C69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.72.0/23
164.90.64.0-164.90.72.255
164.90.74.0-164.90.96.255
164.90.98.0/24
164.90.101.0-164.90.103.255
164.90.105.0-164.90.117.255
164.90.121.0-164.90.122.255
164.90.125.0-164.90.127.255
202.63.32.0/19
202.168.96.0/23
202.168.99.0-202.168.127.255
IPv6:
2404:efc0:155::/48
2404:efc0:235::-2404:efc0:236:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4e:6d:2f:dd:59:8f:4c:f8:04:de:e7:a7:76:65:5b:5a:60:54:
f4:46:34:f9:ab:c2:3d:e7:c3:60:cc:64:3d:54:0f:38:62:1c:
01:28:39:cd:bf:08:6c:03:c7:43:df:ac:9b:08:57:1c:35:81:
cd:23:ef:1e:01:7c:e7:8b:b2:ff:e6:ec:78:25:7c:2a:94:65:
e7:0a:08:93:55:26:e2:e3:7c:20:a6:75:b6:7e:c0:4d:e8:c7:
a3:42:41:52:b7:ec:f9:3d:7b:eb:5d:83:ab:35:e2:a4:47:bc:
d6:62:f3:b0:e3:ef:64:c4:3e:4b:d6:e8:64:04:38:f3:53:81:
27:4a:5c:9c:32:eb:04:93:d6:63:d8:58:8e:34:da:c6:e9:9e:
48:0a:7c:c9:f4:57:22:40:c6:7a:ee:32:87:69:b5:05:0e:ed:
22:e5:b1:67:47:2a:42:46:12:cd:ea:e8:bd:c3:cc:77:ed:93:
3e:5e:aa:3e:2f:a0:62:b3:d9:73:f9:5a:6e:4c:2c:28:1d:14:
a2:89:eb:94:39:6b:a9:27:b2:a9:00:c0:4b:d4:e4:d7:1c:7f:
16:f9:11:e8:28:88:ca:e9:a4:c9:6b:a3:13:43:1c:27:4b:b4:
05:e8:06:a7:e5:d1:3e:0d:bb:f1:62:ea:02:f8:a5:63:9d:e2:
c6:87:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:39 2026 by rpki-client