Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/60523BEA0CA411ED96936D79C4F9AE02.roa
File: 60523BEA0CA411ED96936D79C4F9AE02.roa (raw, json)
Hash identifier: 6jrH7luWVFa/EBIKOSXO0MpS17prp6l8m7pIdmNPjD8=
Subject key identifier: B8:29:B0:BA:11:9E:81:81:D9:EE:23:5A:E3:58:72:EA:84:E9:89:89
Certificate issuer: /CN=A91E504E/serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Certificate serial: 045A
Authority key identifier: A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/60523BEA0CA411ED96936D79C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:30:30 +0000
ROA not before: Wed 07 Jan 2026 11:55:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 133861
IP address blocks: 43.225.44.0/24 maxlen: 24
43.225.45.0/24 maxlen: 24
43.225.46.0/24 maxlen: 24
43.225.47.0/24 maxlen: 24
43.240.28.0/22 maxlen: 22
43.240.28.0/24 maxlen: 24
43.240.29.0/24 maxlen: 24
43.240.30.0/24 maxlen: 24
43.240.31.0/24 maxlen: 24
43.242.32.0/22 maxlen: 22
43.242.32.0/24 maxlen: 24
43.242.33.0/24 maxlen: 24
43.242.34.0/24 maxlen: 24
43.242.35.0/24 maxlen: 24
45.119.96.0/24 maxlen: 24
45.119.97.0/24 maxlen: 24
45.119.98.0/24 maxlen: 24
45.119.99.0/24 maxlen: 24
103.44.28.0/24 maxlen: 24
103.44.29.0/24 maxlen: 24
103.44.30.0/24 maxlen: 24
103.44.31.0/24 maxlen: 24
103.59.144.0/24 maxlen: 24
103.59.145.0/24 maxlen: 24
103.59.146.0/24 maxlen: 24
103.59.147.0/24 maxlen: 24
103.249.108.0/24 maxlen: 24
103.249.109.0/24 maxlen: 24
103.249.110.0/24 maxlen: 24
103.249.111.0/24 maxlen: 24
103.254.148.0/24 maxlen: 24
103.254.149.0/24 maxlen: 24
103.254.150.0/24 maxlen: 24
103.254.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114 (0x45a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E504E, serialNumber=A3F272752EC5D9E129E4DFCA080B88D39B794944
Validity
Not Before: Jan 7 11:55:46 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a582e6-0ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:04:db:5b:52:f4:d6:82:ee:b6:0c:7a:ea:02:
fc:e3:38:97:d8:ef:61:21:c8:46:7c:29:50:e3:7e:
fe:b4:5e:6c:bb:90:15:eb:f7:9b:ba:a8:51:9a:d7:
18:27:9d:06:5f:95:d9:ff:c9:d7:16:db:0f:57:73:
bf:62:34:88:e1:a5:10:7d:df:20:2e:8b:2a:02:b3:
63:b4:71:09:1d:8e:78:21:0c:a0:c8:ee:ed:93:78:
75:cc:9e:df:01:4a:fc:28:11:54:38:6a:34:a1:4f:
5e:bc:3a:9f:75:69:2b:aa:9b:09:96:0a:b9:72:1e:
16:a5:c6:e9:79:66:1c:6d:af:c4:8a:06:e7:9b:83:
15:c5:88:59:64:ec:3b:87:a1:71:f8:59:b4:80:12:
a5:e8:cf:7b:2d:82:17:93:07:e9:40:46:fb:0f:b0:
6a:33:2a:47:8b:0e:35:ef:ca:b1:09:36:bd:d7:86:
c1:a2:3b:b9:fa:e1:e9:95:9f:ca:82:be:78:25:70:
13:73:2d:1b:cf:dd:eb:25:ca:2c:71:0e:2d:91:36:
66:f2:3d:11:8c:15:fb:cb:3e:8b:a0:c8:ef:7b:93:
67:8f:45:0f:d1:df:10:77:2b:a3:95:cb:a9:78:94:
7e:f8:55:fb:48:81:77:22:75:5f:6e:2e:16:5c:15:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:29:B0:BA:11:9E:81:81:D9:EE:23:5A:E3:58:72:EA:84:E9:89:89
X509v3 Authority Key Identifier:
keyid:A3:F2:72:75:2E:C5:D9:E1:29:E4:DF:CA:08:0B:88:D3:9B:79:49:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/o_JydS7F2eEp5N_KCAuI05t5SUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_JydS7F2eEp5N_KCAuI05t5SUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/59094990960811ECA04A0086C4F9AE02/60523BEA0CA411ED96936D79C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.44.0/22
43.240.28.0/22
43.242.32.0/22
45.119.96.0/22
103.44.28.0/22
103.59.144.0/22
103.249.108.0/22
103.254.148.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:59:1b:0b:94:d8:3d:8e:6d:01:70:9e:a0:1f:19:3c:11:ad:
18:43:9c:f4:72:5c:89:5a:27:75:e8:54:25:91:7c:ab:24:ee:
7b:20:28:6c:bf:bb:e0:32:ed:fe:62:25:7d:ef:6a:ea:1f:d0:
a0:49:31:71:b3:c2:4b:f8:7a:5d:43:a9:54:56:7a:e7:54:89:
f6:97:1f:eb:f6:51:e7:57:1e:8c:dc:fe:e2:1a:1e:e3:30:a3:
82:bb:77:ea:e1:31:5f:85:2b:d3:b0:08:1a:c2:32:71:05:64:
c6:e2:5b:6d:2f:19:5e:42:f3:e8:0b:8b:24:8f:38:e9:cf:83:
8f:ce:f9:30:6d:c3:1b:65:bb:b0:1a:0a:52:7e:9c:0d:0a:57:
3e:ca:68:7a:0d:84:c2:94:11:56:f5:81:cc:97:73:87:a4:52:
5a:d9:0e:a7:e5:93:52:d2:2b:ab:dc:3a:b2:b5:57:c3:e2:56:
de:5e:ca:9a:5e:17:7e:70:0f:f8:c7:78:80:8a:29:de:05:2b:
5b:ec:54:7c:58:80:16:36:24:05:40:84:be:30:46:91:f1:64:
8e:03:88:2b:2f:6f:9f:c3:92:7f:0c:b3:8c:ef:ca:57:c3:14:
75:3e:c2:42:c9:5f:0e:08:db:83:53:26:51:4f:72:2b:51:cf:
8f:97:8e:70
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUwNEUxMTAvBgNVBAUTKEEzRjI3Mjc1MkVDNUQ5RTEyOUU0REZDQTA4MEI4OEQz
OUI3OTQ5NDQwHhcNMjYwMTA3MTE1NTQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODJlNi0wY2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7ATbW1L01oLutgx66gL84ziX2O9hIchGfClQ437+tF5su5AV6/ebuqhRmtcY
J50GX5XZ/8nXFtsPV3O/YjSI4aUQfd8gLosqArNjtHEJHY54IQygyO7tk3h1zJ7f
AUr8KBFUOGo0oU9evDqfdWkrqpsJlgq5ch4WpcbpeWYcba/Eigbnm4MVxYhZZOw7
h6Fx+Fm0gBKl6M97LYIXkwfpQEb7D7BqMypHiw4178qxCTa914bBoju5+uHplZ/K
gr54JXATcy0bz93rJcoscQ4tkTZm8j0RjBX7yz6LoMjve5Nnj0UP0d8Qdyujlcup
eJR++FX7SIF3InVfbi4WXBVi6QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFLgpsLoR
noGB2e4jWuNYcuqE6YmJMB8GA1UdIwQYMBaAFKPycnUuxdnhKeTfyggLiNObeUlE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS81OTA5NDk5MDk2
MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9vX0p5ZFM3RjJlRXA1Tl9LQ0F1STA1dDVT
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29fSnlkUzdGMmVFcDVOX0tDQXVJMDV0NVNVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTUwNEUvNTkwOTQ5OTA5NjA4MTFFQ0EwNEEwMDg2QzRGOUFFMDIvNjA1MjNCRUEw
Q0E0MTFFRDk2OTM2RDc5QzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2
BAIAATAwAwQCK+EsAwQCK/AcAwQCK/IgAwQCLXdgAwQCZywcAwQCZzuQAwQCZ/ls
AwQCZ/6UMA0GCSqGSIb3DQEBCwUAA4IBAQCMWRsLlNg9jm0BcJ6gHxk8Ea0YQ5z0
clyJWid16FQlkXyrJO57IChsv7vgMu3+YiV972rqH9CgSTFxs8JL+HpdQ6lUVnrn
VIn2lx/r9lHnVx6M3P7iGh7jMKOCu3fq4TFfhSvTsAgawjJxBWTG4lttLxleQvPo
C4skjzjpz4OPzvkwbcMbZbuwGgpSfpwNClc+ymh6DYTClBFW9YHMl3OHpFJa2Q6n
5ZNS0iur3DqytVfD4lbeXsqaXhd+cA/4x3iAiineBStb7FR8WIAWNiQFQIS+MEaR
8WSOA4grL2+fw5J/DLOM78pXwxR1PsJCyV8OCNuDUyZRT3IrUc+Pl45w
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:56 2026 by rpki-client