Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/CE094B08006B11EAA2719060C4F9AE02.roa
File: CE094B08006B11EAA2719060C4F9AE02.roa (raw, json)
Hash identifier: 1V529Ks3PXwTRKi34Eodwq3M4BDwCRU11im6mkDfUoc=
Subject key identifier: E2:23:D6:02:DF:63:32:89:7F:52:AC:C7:49:B9:A1:9D:3C:38:16:39
Certificate issuer: /CN=A91E46A5/serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987
Certificate serial: 0D05
Authority key identifier: B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/CE094B08006B11EAA2719060C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:35:17 +0000
ROA not before: Wed 24 Dec 2025 18:15:28 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 138487
IP address blocks: 103.126.212.0/22 maxlen: 22
103.126.212.0/23 maxlen: 23
103.126.212.0/24 maxlen: 24
103.126.213.0/24 maxlen: 24
103.126.214.0/23 maxlen: 23
103.126.214.0/24 maxlen: 24
103.126.215.0/24 maxlen: 24
2404:1140::/32 maxlen: 32
2404:1140::/48 maxlen: 48
2404:1140:1::/48 maxlen: 48
2404:1140:2::/48 maxlen: 48
2404:1140:3::/48 maxlen: 48
2404:1140:4::/48 maxlen: 48
2404:1140:5::/48 maxlen: 48
2404:1140:6::/48 maxlen: 48
2404:1140:7::/48 maxlen: 48
2404:1140:8::/48 maxlen: 48
2404:1140:9::/48 maxlen: 48
2404:1140:a::/48 maxlen: 48
2404:1140:b::/48 maxlen: 48
2404:1140:c::/48 maxlen: 48
2404:1140:d::/48 maxlen: 48
2404:1140:e::/48 maxlen: 48
2404:1140:f::/48 maxlen: 48
2404:1140:10::/48 maxlen: 48
2404:1140:11::/48 maxlen: 48
2404:1140:12::/48 maxlen: 48
2404:1140:13::/48 maxlen: 48
2404:1140:14::/48 maxlen: 48
2404:1140:15::/48 maxlen: 48
2404:1140:16::/48 maxlen: 48
2404:1140:17::/48 maxlen: 48
2404:1140:18::/48 maxlen: 48
2404:1140:19::/48 maxlen: 48
2404:1140:1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl
rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3333 (0xd05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46A5, serialNumber=B2EDE203344E9CA73501C55142F9AE81609E8987
Validity
Not Before: Dec 24 18:15:28 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45cb5-7369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:74:df:39:11:91:76:b8:60:2b:83:94:a7:cc:
17:d9:07:8f:b2:2f:1c:eb:5f:d4:45:08:76:0e:ec:
f6:c1:1f:70:76:27:de:cd:63:b7:fa:1d:bc:07:77:
43:0e:12:28:1f:0e:e9:1f:aa:59:8b:8f:be:47:5c:
eb:4c:15:72:fb:a8:4d:01:1a:8d:91:75:b4:07:f1:
44:bf:78:dd:e2:d8:67:99:1f:8b:1a:36:40:3d:e8:
a1:c2:bc:01:28:30:87:cf:d8:72:7e:1e:be:de:93:
aa:e3:ef:d6:9f:85:55:90:48:a0:4c:10:69:13:95:
37:11:73:67:9b:d6:a7:b1:75:2e:e2:35:0f:7e:67:
a5:fa:66:69:e2:5a:92:9d:55:77:91:91:f3:9e:53:
4e:85:5c:f9:56:1c:ce:7e:59:90:55:72:c0:6e:40:
cd:9d:97:1f:1a:1a:6e:c3:89:ce:2b:75:22:52:50:
a5:bc:a1:23:bf:f9:6d:d3:8b:b9:bd:26:b9:23:8c:
25:21:f5:73:28:ca:e5:8e:ea:e2:a9:f1:8d:d7:8e:
0d:01:74:2d:29:fc:bc:74:05:1c:16:1f:da:95:8c:
3b:b4:5e:fc:cc:1f:32:29:0a:c5:ec:2d:33:6c:d3:
c4:39:a8:4c:56:05:67:57:35:6d:45:dd:68:25:30:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:23:D6:02:DF:63:32:89:7F:52:AC:C7:49:B9:A1:9D:3C:38:16:39
X509v3 Authority Key Identifier:
keyid:B2:ED:E2:03:34:4E:9C:A7:35:01:C5:51:42:F9:AE:81:60:9E:89:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/su3iAzROnKc1AcVRQvmugWCeiYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/su3iAzROnKc1AcVRQvmugWCeiYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46A5/0231C154006B11EA97C1BD5FC4F9AE02/CE094B08006B11EAA2719060C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.126.212.0/22
IPv6:
2404:1140::/32
Signature Algorithm: sha256WithRSAEncryption
ab:bd:2f:f5:fa:94:c4:33:bb:dc:df:9e:a3:ec:99:8f:97:02:
88:69:05:0e:c2:93:23:e5:69:83:13:a1:58:12:0e:dd:bf:c6:
84:81:05:e8:04:46:0d:12:04:19:ee:eb:5d:d3:2f:6c:07:42:
f3:06:63:51:71:9e:3d:9a:57:4c:72:d2:aa:2d:53:c7:01:34:
be:71:be:e0:7b:44:4f:7a:93:dd:36:0e:e2:54:ad:d5:0d:e9:
e4:19:12:c2:a8:18:47:a3:a9:a1:d4:52:cd:00:e0:59:b1:cb:
00:60:2d:5c:cb:ed:b4:ac:52:da:dd:af:7e:b4:51:af:09:b6:
59:2b:53:5a:3e:67:bf:37:8b:f9:f2:f5:18:21:c4:51:43:aa:
91:da:20:a0:42:08:58:eb:f0:74:0e:ac:78:ce:db:53:f8:26:
b4:83:d4:7e:2a:0f:bb:e5:10:af:a6:d5:96:02:c7:fd:38:e4:
68:57:82:82:d0:b1:fa:79:36:40:39:96:0b:81:27:4e:36:6d:
21:0a:de:62:f5:2d:ab:8b:d0:b3:5e:f3:37:fd:b5:49:c7:8f:
38:79:db:99:18:00:11:9c:84:a9:b1:ac:50:52:0f:86:1b:2c:
ec:9c:f6:62:d2:41:ee:45:67:77:15:a9:33:a4:dc:a0:3e:64:
d7:2b:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:01 2026 by rpki-client