Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1668BF0E0CBE11F1944739262E3D8C67.roa
File: 1668BF0E0CBE11F1944739262E3D8C67.roa (raw, json)
Hash identifier: 7iz8WziYht1PKOY4KokbxkjNLG5C+qhdMQuQBQwgxQQ=
Subject key identifier: C8:59:DC:87:51:AB:D5:F8:CD:EB:AF:8B:27:F8:99:29:24:65:2E:16
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2D0C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1668BF0E0CBE11F1944739262E3D8C67.roa
Signing time: Wed 18 Feb 2026 11:36:38 +0000
ROA not before: Wed 18 Feb 2026 11:36:38 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138241
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.221.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.248.0/22 maxlen: 22
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.7.0/24 maxlen: 24
115.167.8.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.10.0/24 maxlen: 24
115.167.11.0/24 maxlen: 24
115.167.12.0/24 maxlen: 24
115.167.13.0/24 maxlen: 24
115.167.14.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.112.0/22 maxlen: 22
115.167.116.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.99.0/24 maxlen: 24
175.110.100.0/24 maxlen: 24
175.110.101.0/24 maxlen: 24
175.110.102.0/24 maxlen: 24
175.110.103.0/24 maxlen: 24
175.110.104.0/21 maxlen: 21
180.178.144.0/24 maxlen: 24
180.178.145.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
180.178.160.0/21 maxlen: 21
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/21 maxlen: 21
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.228.0/22 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11532 (0x2d0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 18 11:36:38 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6995a446-5ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:3a:9c:e3:44:9a:c5:56:b7:60:b7:c2:69:
3a:ff:93:55:3d:a1:99:3f:7c:fa:43:4a:2b:9b:44:
2d:de:74:98:1c:12:f6:20:2c:20:68:d1:ad:f0:53:
28:32:a9:be:77:98:35:ee:79:b3:5b:5a:b2:93:7a:
5e:c8:e1:18:d0:36:c9:f0:20:67:5d:e5:57:49:bb:
4d:99:70:da:c9:17:3e:63:36:f5:e1:77:7b:81:6b:
df:1b:11:a3:99:9d:aa:2a:f1:c6:86:9c:e9:30:1b:
ad:fe:0d:a9:e5:dc:51:a8:08:ac:01:78:8a:cd:9a:
45:20:75:98:9e:63:8f:ef:99:6e:3b:b0:66:af:bf:
d2:37:ec:d1:37:e7:a3:b7:06:17:d6:23:bc:f8:12:
75:39:27:07:a5:07:2a:1e:33:ef:3e:b3:33:a4:e0:
a6:00:c6:40:db:43:28:b3:5a:41:69:47:ac:71:82:
c9:69:47:0a:f8:33:f7:7b:86:2e:08:f4:35:35:84:
89:3c:7d:c0:ff:55:72:be:fb:cc:e9:92:9c:a0:99:
56:b3:f3:46:c3:3d:b1:12:f0:f2:f2:86:e8:51:a8:
1a:67:f9:c5:c9:f2:76:a2:2c:8d:f9:2e:2e:b4:7e:
4b:a8:81:68:96:a6:8a:94:d1:4a:b6:47:e8:73:ad:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:DC:87:51:AB:D5:F8:CD:EB:AF:8B:27:F8:99:29:24:65:2E:16
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1668BF0E0CBE11F1944739262E3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/20
113.203.228.0/24
113.203.231.0/24
113.203.248.0/21
115.167.5.0-115.167.19.255
115.167.101.0-115.167.102.255
115.167.112.0-115.167.124.255
175.110.96.0/20
180.178.144.0-180.178.171.255
180.178.176.0/21
180.178.185.0-180.178.188.255
180.178.190.0/23
202.92.20.0/24
202.92.26.0/24
223.29.228.0/22
223.29.236.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:3f:6d:89:76:e3:bc:91:07:a6:80:f6:59:9e:e2:4f:a2:48:
c5:8b:f1:d3:55:e6:1d:e6:fe:43:19:0a:c1:27:43:77:c9:c7:
1d:10:8c:f4:15:0b:47:97:c7:5a:30:1e:7f:66:a7:52:48:86:
13:ba:8c:2a:6a:9e:50:a3:d4:14:8d:1f:51:61:f4:65:76:17:
4a:84:02:ef:d1:9d:06:26:e3:73:cc:d4:70:14:e9:25:7c:94:
01:d4:47:86:5f:69:9b:65:4c:2e:83:26:20:3f:f0:89:7d:ff:
e0:61:91:02:f0:20:ae:27:a5:87:9f:9d:70:a7:43:48:48:bd:
b4:de:09:6e:bb:97:63:b7:1e:2d:8c:76:d1:37:93:79:ea:8e:
56:35:b1:e4:95:ef:8f:62:32:43:4c:1f:1f:56:68:71:7b:3a:
c4:5f:0a:f4:6e:b1:8f:e6:ce:70:70:8d:64:6b:1a:0d:77:bd:
a5:f2:56:06:db:b0:f0:2a:a4:83:63:de:02:4f:87:b0:8d:25:
b2:dc:c0:02:90:fc:a1:4d:0f:55:6d:c5:84:d6:3e:df:d4:a3:
29:17:2e:61:5d:db:d5:b8:8a:32:c0:11:52:66:30:1d:5e:55:
ff:4a:27:8b:01:39:d6:ed:70:4b:d9:0b:20:f0:36:76:c6:5a:
51:1b:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:33 2026 by rpki-client