Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/6954A6281D1811F1BB26F0200F3D8C67.roa
File: 6954A6281D1811F1BB26F0200F3D8C67.roa (raw, json)
Hash identifier: XXABsTuyUY9zhDAKOY/bGcVfBEdcbQvVxf6jrMBBikE=
Subject key identifier: C3:A5:A7:D1:EE:59:86:61:ED:90:2E:DE:99:41:6A:BA:33:93:52:D8
Certificate issuer: /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial: 06AD
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/6954A6281D1811F1BB26F0200F3D8C67.roa
Signing time: Wed 27 May 2026 09:10:39 +0000
ROA not before: Wed 27 May 2026 09:10:39 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 13150
IP address blocks: 103.203.220.0/24 maxlen: 24
103.203.221.0/24 maxlen: 24
103.203.222.0/24 maxlen: 24
103.203.223.0/24 maxlen: 24
113.30.128.0/24 maxlen: 24
113.30.130.0/24 maxlen: 24
113.30.131.0/24 maxlen: 24
113.30.132.0/24 maxlen: 24
113.30.133.0/24 maxlen: 24
113.30.134.0/24 maxlen: 24
113.30.135.0/24 maxlen: 24
113.30.136.0/24 maxlen: 24
113.30.137.0/24 maxlen: 24
113.30.138.0/24 maxlen: 24
113.30.139.0/24 maxlen: 24
123.253.152.0/24 maxlen: 24
123.253.153.0/24 maxlen: 24
123.253.154.0/24 maxlen: 24
123.253.155.0/24 maxlen: 24
150.195.208.0/24 maxlen: 24
150.195.209.0/24 maxlen: 24
150.195.210.0/24 maxlen: 24
150.195.211.0/24 maxlen: 24
150.195.212.0/24 maxlen: 24
150.195.214.0/24 maxlen: 24
150.195.217.0/24 maxlen: 24
150.195.218.0/24 maxlen: 24
150.195.219.0/24 maxlen: 24
150.195.220.0/24 maxlen: 24
150.195.221.0/24 maxlen: 24
150.195.222.0/24 maxlen: 24
150.195.223.0/24 maxlen: 24
202.75.240.0/24 maxlen: 24
202.75.242.0/24 maxlen: 24
202.75.243.0/24 maxlen: 24
202.75.244.0/24 maxlen: 24
202.75.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1709 (0x6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Validity
Not Before: May 27 09:10:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a16b50e-88af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b3:08:d9:dc:26:3e:2e:c4:32:92:12:0d:d2:
5d:6b:eb:d8:f4:5a:e9:57:4a:1f:a7:86:3c:9e:53:
bd:97:17:85:6a:1e:49:aa:7a:d4:c5:cb:e4:df:e4:
e3:af:ad:c9:7b:b0:52:71:7b:99:58:16:5a:4a:05:
b2:56:3b:ab:d3:fa:98:db:d7:94:fd:20:9a:3f:fd:
87:46:14:a2:69:9d:9c:f7:47:38:f0:49:2a:ad:8f:
37:19:06:d6:52:08:90:27:af:a2:1f:8a:5b:0e:89:
25:77:be:a6:ac:a0:8d:de:aa:16:b3:44:2e:dd:f8:
5a:18:fc:c8:3e:2e:40:e2:b4:35:52:c7:b6:a0:98:
3e:f8:28:f3:86:d9:5f:d0:ec:70:1f:d6:34:5a:8b:
bf:a2:b6:6e:4d:45:9c:49:2c:26:9c:c1:b6:e3:67:
b4:85:b6:7a:2b:db:0c:af:c9:67:51:1f:c9:52:fd:
1c:c4:0d:66:61:b1:8a:22:67:2a:a9:b8:c8:2f:07:
24:4e:13:b1:13:5d:cf:b8:ac:18:6a:ef:7b:f4:12:
68:82:3c:46:77:8b:20:a7:9a:4d:ff:9d:11:ea:f1:
24:16:e3:94:a2:0c:02:37:2b:45:b6:6f:ca:2e:02:
0d:48:86:89:47:e1:5d:f7:55:2d:4c:27:d9:8c:1c:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A5:A7:D1:EE:59:86:61:ED:90:2E:DE:99:41:6A:BA:33:93:52:D8
X509v3 Authority Key Identifier:
keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/6954A6281D1811F1BB26F0200F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.203.220.0/22
113.30.128.0/24
113.30.130.0-113.30.139.255
123.253.152.0/22
150.195.208.0-150.195.212.255
150.195.214.0/24
150.195.217.0-150.195.223.255
202.75.240.0/24
202.75.242.0-202.75.244.255
202.75.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:41:51:cf:75:56:c4:c6:2d:40:ff:83:98:61:23:cb:11:d1:
2f:5d:09:48:8f:7b:5d:b0:36:40:96:6d:f4:06:50:fc:10:bc:
84:f7:5c:ec:93:00:a6:2b:df:b8:86:cc:b2:62:8c:06:16:b7:
9b:d9:57:fe:9a:5d:63:6c:40:78:17:c0:63:8a:6c:6b:28:9f:
ae:50:43:1e:99:b0:c0:cc:f0:a3:e5:66:2c:2d:76:fb:c2:79:
dd:6e:f3:7a:3f:63:4b:be:9b:b0:bb:37:2b:90:94:9d:9d:79:
ed:7e:27:60:76:58:2a:fc:fd:e5:cd:31:51:7f:0a:1f:18:2d:
e8:f7:85:ab:22:dc:e7:8d:78:2d:a9:d7:25:1b:33:e9:da:cc:
02:bc:f6:a8:51:11:e4:e8:8f:ca:ca:14:70:d0:1a:fe:47:1c:
2b:73:c7:c5:84:97:1a:81:40:aa:ef:e4:02:97:0d:e1:9c:bd:
ba:bf:97:dd:56:f0:d4:62:cd:69:9b:d3:a6:d1:5e:a3:88:92:
54:74:b2:31:bf:8a:82:b5:7a:c0:5e:b3:cf:36:08:60:89:96:
eb:b8:fa:d4:ad:37:bb:a5:5b:29:39:b9:1f:d9:97:42:3d:5f:
84:f7:d8:81:a7:1b:71:6e:cf:29:6f:01:b3:3b:ec:f3:a1:77:
d5:71:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:33:28 2026 by rpki-client