Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/A709BC948FAE11F09FAE9C69C4F9AE02.roa
File: A709BC948FAE11F09FAE9C69C4F9AE02.roa (raw, json)
Hash identifier: ldTfVlgZx0sqAfRFwUDVu08wZit17CSgV0jvtS+encM=
Subject key identifier: 39:D1:E7:2F:2B:E1:4C:B7:0B:E7:DF:0F:0B:8C:31:B3:FE:10:EF:46
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 0969
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/A709BC948FAE11F09FAE9C69C4F9AE02.roa
Signing time: Wed 01 Apr 2026 08:40:48 +0000
ROA not before: Wed 01 Apr 2026 08:40:48 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 10122
IP address blocks: 103.139.72.0/24 maxlen: 24
103.139.73.0/24 maxlen: 24
164.90.64.0/24 maxlen: 24
164.90.65.0/24 maxlen: 24
164.90.66.0/24 maxlen: 24
164.90.67.0/24 maxlen: 24
164.90.68.0/24 maxlen: 24
164.90.69.0/24 maxlen: 24
164.90.70.0/24 maxlen: 24
164.90.71.0/24 maxlen: 24
164.90.72.0/24 maxlen: 24
164.90.74.0/24 maxlen: 24
164.90.75.0/24 maxlen: 24
164.90.76.0/24 maxlen: 24
164.90.77.0/24 maxlen: 24
164.90.78.0/24 maxlen: 24
164.90.79.0/24 maxlen: 24
164.90.80.0/24 maxlen: 24
164.90.81.0/24 maxlen: 24
164.90.82.0/24 maxlen: 24
164.90.83.0/24 maxlen: 24
164.90.84.0/24 maxlen: 24
164.90.85.0/24 maxlen: 24
164.90.86.0/24 maxlen: 24
164.90.87.0/24 maxlen: 24
164.90.88.0/24 maxlen: 24
164.90.89.0/24 maxlen: 24
164.90.90.0/24 maxlen: 24
164.90.91.0/24 maxlen: 24
164.90.92.0/24 maxlen: 24
164.90.93.0/24 maxlen: 24
164.90.94.0/24 maxlen: 24
164.90.95.0/24 maxlen: 24
164.90.96.0/24 maxlen: 24
164.90.98.0/24 maxlen: 24
164.90.101.0/24 maxlen: 24
164.90.102.0/24 maxlen: 24
164.90.103.0/24 maxlen: 24
164.90.105.0/24 maxlen: 24
164.90.106.0/24 maxlen: 24
164.90.107.0/24 maxlen: 24
164.90.108.0/24 maxlen: 24
164.90.109.0/24 maxlen: 24
164.90.110.0/24 maxlen: 24
164.90.111.0/24 maxlen: 24
164.90.112.0/24 maxlen: 24
164.90.113.0/24 maxlen: 24
164.90.114.0/24 maxlen: 24
164.90.115.0/24 maxlen: 24
164.90.116.0/24 maxlen: 24
164.90.117.0/24 maxlen: 24
164.90.121.0/24 maxlen: 24
164.90.122.0/24 maxlen: 24
164.90.125.0/24 maxlen: 24
164.90.126.0/24 maxlen: 24
164.90.127.0/24 maxlen: 24
202.63.32.0/24 maxlen: 24
202.63.33.0/24 maxlen: 24
202.63.34.0/24 maxlen: 24
202.63.35.0/24 maxlen: 24
202.63.36.0/24 maxlen: 24
202.63.37.0/24 maxlen: 24
202.63.38.0/24 maxlen: 24
202.63.39.0/24 maxlen: 24
202.63.40.0/24 maxlen: 24
202.63.41.0/24 maxlen: 24
202.63.42.0/24 maxlen: 24
202.63.43.0/24 maxlen: 24
202.63.44.0/24 maxlen: 24
202.63.45.0/24 maxlen: 24
202.63.46.0/24 maxlen: 24
202.63.47.0/24 maxlen: 24
202.63.48.0/24 maxlen: 24
202.63.49.0/24 maxlen: 24
202.63.50.0/24 maxlen: 24
202.63.51.0/24 maxlen: 24
202.63.52.0/24 maxlen: 24
202.63.53.0/24 maxlen: 24
202.63.54.0/24 maxlen: 24
202.63.55.0/24 maxlen: 24
202.63.56.0/24 maxlen: 24
202.63.57.0/24 maxlen: 24
202.63.58.0/24 maxlen: 24
202.63.59.0/24 maxlen: 24
202.63.60.0/24 maxlen: 24
202.63.61.0/24 maxlen: 24
202.63.62.0/24 maxlen: 24
202.63.63.0/24 maxlen: 24
202.168.96.0/24 maxlen: 24
202.168.97.0/24 maxlen: 24
202.168.99.0/24 maxlen: 24
202.168.100.0/24 maxlen: 24
202.168.101.0/24 maxlen: 24
202.168.102.0/24 maxlen: 24
202.168.103.0/24 maxlen: 24
202.168.104.0/24 maxlen: 24
202.168.105.0/24 maxlen: 24
202.168.106.0/24 maxlen: 24
202.168.107.0/24 maxlen: 24
202.168.108.0/24 maxlen: 24
202.168.109.0/24 maxlen: 24
202.168.110.0/24 maxlen: 24
202.168.111.0/24 maxlen: 24
202.168.112.0/24 maxlen: 24
202.168.113.0/24 maxlen: 24
202.168.114.0/24 maxlen: 24
202.168.115.0/24 maxlen: 24
202.168.116.0/24 maxlen: 24
202.168.117.0/24 maxlen: 24
202.168.118.0/24 maxlen: 24
202.168.119.0/24 maxlen: 24
202.168.120.0/24 maxlen: 24
202.168.121.0/24 maxlen: 24
202.168.122.0/24 maxlen: 24
202.168.123.0/24 maxlen: 24
202.168.124.0/23 maxlen: 23
202.168.124.0/24 maxlen: 24
202.168.125.0/24 maxlen: 24
202.168.126.0/24 maxlen: 24
202.168.127.0/24 maxlen: 24
2404:efc0:155::/48 maxlen: 48
2404:efc0:235::/48 maxlen: 48
2404:efc0:236::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409 (0x969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Apr 1 08:40:48 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69ccda10-75e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:be:f2:18:f4:bd:b1:ef:dd:d6:83:32:c1:
f4:6d:4c:84:d6:ea:ca:6c:71:f5:f7:19:32:33:9c:
72:87:5f:9a:63:c4:47:a3:d7:83:99:95:a4:12:5d:
45:0d:9e:db:49:5c:2f:f2:ed:56:1b:22:86:76:57:
f9:56:2b:1d:aa:9c:3d:89:2c:0c:dd:ec:a3:96:92:
ec:bd:cf:f6:4b:08:a2:2a:61:05:cc:66:e5:83:fc:
2b:a3:ed:c2:4d:3e:20:fa:ac:2b:8f:0e:96:cf:47:
71:73:4f:9a:97:03:ed:ed:08:db:22:ff:73:d3:95:
a8:0a:4d:f1:f4:c1:b4:0e:7a:17:b9:ba:6c:79:78:
08:c9:4a:3a:6e:54:3e:a3:1d:31:f1:ea:22:4a:fb:
91:20:de:2d:2c:e9:c4:c6:dc:6b:fe:b2:de:91:f3:
a3:ac:31:78:b4:e3:a7:03:66:3b:b2:5e:8f:26:52:
d8:49:23:0d:67:9e:cd:1b:23:4e:c0:ba:43:0c:1c:
6b:73:3e:c3:65:21:2e:8c:16:a8:06:90:fd:c6:f8:
3d:39:c1:88:53:11:e4:6b:10:64:1a:f2:05:2e:e4:
ea:db:0a:e7:1f:47:bd:f6:39:07:db:64:d7:75:ee:
bc:c1:bd:c4:4e:fc:b7:97:be:a6:10:9c:a5:8b:e1:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D1:E7:2F:2B:E1:4C:B7:0B:E7:DF:0F:0B:8C:31:B3:FE:10:EF:46
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/A709BC948FAE11F09FAE9C69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.72.0/23
164.90.64.0-164.90.72.255
164.90.74.0-164.90.96.255
164.90.98.0/24
164.90.101.0-164.90.103.255
164.90.105.0-164.90.117.255
164.90.121.0-164.90.122.255
164.90.125.0-164.90.127.255
202.63.32.0/19
202.168.96.0/23
202.168.99.0-202.168.127.255
IPv6:
2404:efc0:155::/48
2404:efc0:235::-2404:efc0:236:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
31:4b:28:d3:dc:28:78:89:0a:10:b2:ae:5e:77:6f:37:0a:2d:
10:1d:16:1b:6b:3d:54:bd:b0:6e:ff:b7:10:e6:ec:7b:0d:d6:
c0:1a:f6:2e:bd:7b:23:e8:33:07:83:5a:32:1d:58:98:9f:7a:
a4:78:0a:8c:bd:d5:54:7e:d1:4c:06:54:3c:cc:99:ae:f5:60:
2d:70:0c:81:8a:74:1d:4d:40:53:78:7a:a4:1e:df:d0:f0:b7:
25:c9:0a:6d:bd:d5:b8:48:b4:21:22:8a:ad:74:13:b8:db:49:
3e:1c:a3:0e:03:35:f5:26:30:f3:6c:fe:e2:c8:ed:86:37:5a:
6c:45:88:8c:8c:f7:94:11:ee:bf:5e:53:ec:69:16:dc:0a:b7:
25:06:4b:6a:1e:b0:67:0d:f2:88:ca:6e:ce:e4:64:41:cd:d9:
4f:56:0a:67:95:75:74:66:d6:f7:d1:09:1b:a0:57:69:6e:28:
ae:fb:87:6b:f7:d7:8a:53:12:fd:75:4f:99:e6:2a:a3:be:06:
9d:9a:ed:c6:39:80:e2:5d:c2:2d:f2:18:e5:09:97:f4:3d:fc:
48:8d:69:38:61:57:0e:0a:77:70:04:9c:47:10:8f:0d:b8:08:
9f:9c:d5:da:e2:a9:a1:33:e2:05:42:2a:89:0d:29:68:3a:1d:
03:8f:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:21 2026 by rpki-client