Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa
File: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (raw, json)
Hash identifier: LowaWp7qm1ZrOD8Fkf5D763sZqEhXEDxVq8xLp3xfhs=
Subject key identifier: 78:A0:1B:9A:AC:11:3E:92:82:25:EF:94:78:80:8B:AC:AB:8C:8B:F1
Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial: 0D24
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa
Signing time: Thu 14 May 2026 19:22:19 +0000
ROA not before: Thu 14 May 2026 19:22:19 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 136224
IP address blocks: 103.84.36.0/22 maxlen: 22
103.84.36.0/23 maxlen: 23
103.84.36.0/24 maxlen: 24
103.84.37.0/24 maxlen: 24
103.84.38.0/23 maxlen: 23
103.84.38.0/24 maxlen: 24
103.84.39.0/24 maxlen: 24
113.212.108.0/22 maxlen: 22
113.212.108.0/23 maxlen: 23
113.212.108.0/24 maxlen: 24
113.212.109.0/24 maxlen: 24
113.212.110.0/23 maxlen: 23
113.212.110.0/24 maxlen: 24
113.212.111.0/24 maxlen: 24
2400:9940:5::/48 maxlen: 48
2400:9940:1000::/36 maxlen: 40
2400:9940:1000::/48 maxlen: 48
2400:9940:1001::/48 maxlen: 48
2400:9940:1002::/48 maxlen: 48
2400:9940:1003::/48 maxlen: 48
2400:9940:1004::/48 maxlen: 48
2400:9940:1100::/48 maxlen: 48
2400:9940:1101::/48 maxlen: 48
2400:9940:1102::/48 maxlen: 48
2400:9940:1103::/48 maxlen: 48
2400:9940:1104::/48 maxlen: 48
2400:9940:1137::/48 maxlen: 48
2400:9940:1138::/48 maxlen: 48
2400:9940:1139::/48 maxlen: 48
2400:9940:1142::/48 maxlen: 48
2400:9940:1143::/48 maxlen: 48
2400:9940:1144::/48 maxlen: 48
2400:9940:1145::/48 maxlen: 48
2400:9940:1146::/48 maxlen: 48
2400:9940:1147::/48 maxlen: 48
2400:9940:1200::/48 maxlen: 48
2400:9940:1201::/48 maxlen: 48
2400:9940:1202::/48 maxlen: 48
2400:9940:1203::/48 maxlen: 48
2400:9940:1204::/48 maxlen: 48
2400:9940:1300::/48 maxlen: 48
2400:9940:1301::/48 maxlen: 48
2400:9940:1302::/48 maxlen: 48
2400:9940:1303::/48 maxlen: 48
2400:9940:1304::/48 maxlen: 48
2400:9940:1400::/48 maxlen: 48
2400:9940:1401::/48 maxlen: 48
2400:9940:1402::/48 maxlen: 48
2400:9940:1403::/48 maxlen: 48
2400:9940:1404::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3364 (0xd24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Validity
Not Before: May 14 19:22:19 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a0620eb-5fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:79:b3:fb:55:d7:61:70:23:5d:c7:3b:12:
c0:7c:ac:6b:f9:bf:a1:c7:59:e1:b2:00:28:45:18:
68:ff:bc:22:3c:f1:8b:e6:4c:42:c8:0a:b2:0e:65:
ec:35:a2:38:0b:47:23:8a:8e:96:f1:6d:55:b4:cf:
e6:35:2b:4d:d9:a2:ec:9d:7e:6f:71:81:93:59:73:
5b:23:56:9d:80:9c:d0:51:dc:f9:cf:a2:48:fb:db:
59:e3:79:1b:a8:26:26:53:47:91:23:50:0a:f1:f5:
db:31:ad:2a:34:4c:54:08:cd:19:ed:76:59:21:72:
86:8f:c2:d8:eb:90:14:20:e3:31:d3:f6:17:a2:48:
d4:91:65:c9:3d:d0:27:d5:3a:2b:8f:e2:92:93:59:
60:a2:96:e5:f3:b7:0c:fa:a2:5f:cd:d9:00:5b:9c:
8c:a5:3d:1b:a6:42:1e:e6:28:c4:b5:63:19:ba:a3:
7a:fd:a7:3d:49:52:02:ef:1c:42:6d:5a:ca:34:ad:
87:81:cb:ff:cf:8a:5d:ea:45:4b:23:11:6d:f4:f4:
c1:43:4b:bf:d0:b9:84:ba:68:fc:6d:5d:3d:26:ab:
7a:ee:38:50:95:75:ff:f9:e8:2c:34:76:02:78:78:
63:c1:75:21:74:78:93:f3:eb:fd:d7:e4:ee:4e:7e:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A0:1B:9A:AC:11:3E:92:82:25:EF:94:78:80:8B:AC:AB:8C:8B:F1
X509v3 Authority Key Identifier:
keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.36.0/22
113.212.108.0/22
IPv6:
2400:9940:5::/48
2400:9940:1000::/36
Signature Algorithm: sha256WithRSAEncryption
5e:50:c9:4a:59:87:10:b8:13:95:e6:40:7c:5a:2d:50:de:a2:
55:22:ce:9e:04:bd:69:c8:a6:86:ef:cc:77:12:61:30:14:4f:
8d:aa:23:ac:9d:d2:7a:5a:aa:1a:2e:62:7c:f5:f0:6c:fc:92:
42:54:38:c7:bf:bb:02:7b:c8:c6:85:63:7c:d7:5b:7a:d8:4b:
de:e8:71:d5:af:48:2f:8a:70:7a:9e:99:35:a1:5f:e3:a7:6c:
e3:83:41:64:87:1d:34:97:0e:d0:14:2c:28:02:e3:b9:4c:b8:
c4:1c:ae:76:8a:48:bf:a1:08:de:26:9c:7b:a1:df:3e:a5:85:
5c:e1:4f:76:43:01:3b:84:64:27:e8:ce:e5:a8:82:9c:96:00:
33:94:64:8d:b0:d2:18:0b:a8:8e:a4:08:0a:0b:84:23:7b:fa:
70:c9:80:de:0f:52:2d:6e:1b:d2:34:e8:96:68:f4:95:42:94:
42:92:7c:7b:49:2e:fc:2a:38:03:8c:99:fc:5b:a6:cb:54:de:
d9:cc:9d:0c:33:61:1a:8a:3f:85:33:b8:87:c2:0d:85:48:d7:
f7:2a:0b:8f:75:ae:31:fd:11:19:d3:b1:3b:20:dd:fd:59:47:
89:fd:2d:7d:d2:f0:86:22:08:c6:37:a2:c1:47:4b:31:7b:cc:
c4:52:09:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:04:22 2026 by rpki-client