Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/0B931E94FB6611F099070A594B6F56BC.roa
File: 0B931E94FB6611F099070A594B6F56BC.roa (raw, json)
Hash identifier: uagR+FXdNjUZC+L7KSIQm2TRETRvZ6N6loPS8LZtsCE=
Subject key identifier: 33:EE:09:96:89:50:29:1B:1F:7E:AE:4C:2E:3D:AD:20:92:91:F9:13
Certificate issuer: /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial: 066E
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/0B931E94FB6611F099070A594B6F56BC.roa
Signing time: Sun 01 Mar 2026 18:11:41 +0000
ROA not before: Thu 12 Feb 2026 08:13:25 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 13150
IP address blocks: 103.203.220.0/24 maxlen: 24
103.203.221.0/24 maxlen: 24
103.203.222.0/24 maxlen: 24
103.203.223.0/24 maxlen: 24
113.30.128.0/24 maxlen: 24
113.30.130.0/24 maxlen: 24
113.30.131.0/24 maxlen: 24
113.30.132.0/24 maxlen: 24
123.253.152.0/24 maxlen: 24
123.253.153.0/24 maxlen: 24
123.253.154.0/24 maxlen: 24
123.253.155.0/24 maxlen: 24
150.195.208.0/24 maxlen: 24
150.195.209.0/24 maxlen: 24
150.195.210.0/24 maxlen: 24
150.195.211.0/24 maxlen: 24
150.195.212.0/24 maxlen: 24
150.195.214.0/24 maxlen: 24
150.195.217.0/24 maxlen: 24
150.195.218.0/24 maxlen: 24
150.195.219.0/24 maxlen: 24
150.195.220.0/24 maxlen: 24
150.195.221.0/24 maxlen: 24
150.195.222.0/24 maxlen: 24
150.195.223.0/24 maxlen: 24
202.75.240.0/24 maxlen: 24
202.75.242.0/24 maxlen: 24
202.75.243.0/24 maxlen: 24
202.75.244.0/24 maxlen: 24
202.75.246.0/24 maxlen: 24
202.75.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1646 (0x66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Validity
Not Before: Feb 12 08:13:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4815d-4ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:eb:cd:3c:7c:0d:6d:6f:d1:b4:cb:6a:8d:
82:b3:05:78:54:81:c3:0b:e6:cf:16:4c:70:d1:ee:
47:bf:1d:b4:6b:08:3c:73:1e:5b:43:3e:fa:85:7c:
9d:1d:1c:09:7f:65:09:b7:6c:7a:1c:ff:83:fb:7d:
f6:55:44:39:56:5a:3c:64:e0:e4:db:78:f4:55:29:
a0:3d:5c:ac:11:a7:7c:36:5e:b1:97:9c:01:fb:67:
99:0e:7d:1f:cf:1e:89:a3:fc:72:5e:8a:9a:1a:0b:
7c:54:c5:ec:9d:6e:7c:7b:32:ac:7c:f2:2b:25:37:
6e:a1:3e:dc:77:75:42:7f:d9:6d:74:00:80:25:ac:
50:aa:03:c6:ab:71:9f:bb:0b:17:23:1f:d4:72:cd:
22:e1:24:65:15:95:a0:39:92:a9:98:8a:38:46:bf:
61:21:93:d8:56:78:05:54:41:79:d2:1f:2a:39:0d:
3e:80:13:66:60:8e:86:2d:d5:00:e8:7f:a9:08:65:
b6:d5:dd:bd:fa:81:53:0a:85:5a:ac:82:dc:7d:ed:
4c:d6:c5:06:57:0b:21:76:ea:25:fd:33:a5:1c:8e:
a2:eb:ad:33:c9:e7:23:74:17:72:c6:a9:7e:e1:5c:
65:5a:46:00:54:5c:e8:1a:bf:54:eb:08:b4:9d:b6:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:09:96:89:50:29:1B:1F:7E:AE:4C:2E:3D:AD:20:92:91:F9:13
X509v3 Authority Key Identifier:
keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/0B931E94FB6611F099070A594B6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.203.220.0/22
113.30.128.0/24
113.30.130.0-113.30.132.255
123.253.152.0/22
150.195.208.0-150.195.212.255
150.195.214.0/24
150.195.217.0-150.195.223.255
202.75.240.0/24
202.75.242.0-202.75.244.255
202.75.246.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:79:e4:81:41:0c:07:5b:bd:a8:03:5a:5e:b6:10:c6:15:a1:
b6:9c:d5:da:02:b4:3f:fb:94:69:c5:a7:81:06:71:87:d3:69:
75:eb:3a:58:ad:69:e3:0b:30:ea:a3:d3:c2:5d:f3:ce:16:71:
39:fe:14:4b:9f:ba:be:1b:f7:8f:f7:35:b8:ac:1a:fa:ad:f0:
9d:4c:4b:f7:e8:89:71:a2:0a:e9:11:57:35:d2:e8:dd:e4:d3:
14:be:5a:10:2c:4e:03:ae:eb:6f:23:56:db:3c:38:49:4b:83:
76:08:27:6b:c1:24:85:18:5e:50:19:1e:dc:9e:45:39:1e:ec:
ea:af:bd:fb:d8:08:4e:6d:ea:30:da:e8:50:85:50:b7:e3:8a:
68:dd:6f:40:74:ad:08:eb:a1:57:d8:6a:7c:6a:fa:52:ee:2f:
8e:31:1b:62:17:e6:6e:36:a2:8f:22:ed:3b:0d:83:db:c7:f8:
00:b9:d8:b6:7c:a7:b0:99:ad:98:25:f8:1d:4b:b2:77:c7:45:
2f:c4:e9:f0:fc:42:6a:3e:96:41:4e:9b:b7:83:ca:bb:bb:cc:
9a:1e:80:26:fa:bf:3b:d1:d4:5a:49:6e:f4:9f:54:62:ec:4d:
f9:5b:d9:23:b9:91:38:fb:59:09:93:fa:52:51:9e:bb:3e:fc:
61:a3:91:96
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTREM0QxMTAvBgNVBAUTKEM4MDcwRkQwNjFBODUxRkY4QUVERTBERTBDMzYwN0VF
Qjk4RkY3MDEwHhcNMjYwMjEyMDgxMzI1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODE1ZC00YWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiJ/rzTx8DW1v0bTLao2CswV4VIHDC+bPFkxw0e5Hvx20awg8cx5bQz76hXyd
HRwJf2UJt2x6HP+D+332VUQ5Vlo8ZODk23j0VSmgPVysEad8Nl6xl5wB+2eZDn0f
zx6Jo/xyXoqaGgt8VMXsnW58ezKsfPIrJTduoT7cd3VCf9ltdACAJaxQqgPGq3Gf
uwsXIx/Ucs0i4SRlFZWgOZKpmIo4Rr9hIZPYVngFVEF50h8qOQ0+gBNmYI6GLdUA
6H+pCGW21d29+oFTCoVarILcfe1M1sUGVwshduol/TOlHI6i660zyecjdBdyxql+
4VxlWkYAVFzoGr9U6wi0nbacPQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFDPuCZaJ
UCkbH36uTC49rSCSkfkTMB8GA1UdIwQYMBaAFMgHD9BhqFH/iu3g3gw2B+65j/cB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9CMDIwMkQzMkQ4
QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi95QWNQMEdHb1VmLUs3ZURlRERZSDdybVA5
d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lBY1AwR0dvVWYtSzdlRGVERFlIN3JtUDl3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTREM0QvQjAyMDJEMzJEOEI5MTFFQkFCQzFGNDg1QzRGOUFFMDIvMEI5MzFFOTRG
QjY2MTFGMDk5MDcwQTU5NEI2RjU2QkMucm9hMHUGCCsGAQUFBwEHAQH/BGYwZDBi
BAIAATBcAwQCZ8vcAwQAcR6AMAwDBAFxHoIDBABxHoQDBAJ7/ZgwDAMEBJbD0AME
AJbD1AMEAJbD1jAMAwQAlsPZAwQFlsPAAwQAykvwMAwDBAHKS/IDBADKS/QDBAHK
S/YwDQYJKoZIhvcNAQELBQADggEBAD555IFBDAdbvagDWl62EMYVobac1doCtD/7
lGnFp4EGcYfTaXXrOlitaeMLMOqj08Jd884WcTn+FEufur4b94/3NbisGvqt8J1M
S/foiXGiCukRVzXS6N3k0xS+WhAsTgOu628jVts8OElLg3YIJ2vBJIUYXlAZHtye
RTke7OqvvfvYCE5t6jDa6FCFULfjimjdb0B0rQjroVfYanxq+lLuL44xG2IX5m42
oo8i7TsNg9vH+AC52LZ8p7CZrZgl+B1LsnfHRS/E6fD8Qmo+lkFOm7eDyru7zJoe
gCb6vzvR1FpJbvSfVGLsTflb2SO5kTj7WQmT+lJRnrs+/GGjkZY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:24:37 2026 by rpki-client