Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C88C8A6637FD11F1BAA48A5A90833773.roa
File: C88C8A6637FD11F1BAA48A5A90833773.roa (raw, json)
Hash identifier: A7brkl/4kjoX2oFu8URq2cJKjYrVLYBj8tbv9l599eg=
Subject key identifier: 8D:6C:A2:84:AB:B2:CB:BD:EE:9B:4A:E3:0A:59:EE:72:AE:1D:EC:DC
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2D71
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C88C8A6637FD11F1BAA48A5A90833773.roa
Signing time: Tue 14 Apr 2026 12:30:56 +0000
ROA not before: Tue 14 Apr 2026 12:30:56 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138241
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.221.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.248.0/22 maxlen: 22
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.7.0/24 maxlen: 24
115.167.8.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.10.0/24 maxlen: 24
115.167.11.0/24 maxlen: 24
115.167.12.0/24 maxlen: 24
115.167.13.0/24 maxlen: 24
115.167.14.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.112.0/22 maxlen: 22
115.167.116.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.99.0/24 maxlen: 24
175.110.100.0/24 maxlen: 24
175.110.101.0/24 maxlen: 24
175.110.102.0/24 maxlen: 24
175.110.103.0/24 maxlen: 24
175.110.104.0/21 maxlen: 21
180.178.144.0/24 maxlen: 24
180.178.145.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
180.178.160.0/21 maxlen: 21
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/21 maxlen: 21
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.228.0/23 maxlen: 23
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11633 (0x2d71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 14 12:30:56 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69de3380-2466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:04:73:1f:9e:b2:ae:1b:10:93:99:35:14:1a:
da:e2:7e:57:34:e3:22:a1:98:c4:6b:99:4c:07:b4:
ac:77:15:c8:2e:df:da:41:23:28:ba:5b:ae:82:92:
5a:00:c5:35:19:0a:c6:05:9d:ed:ba:ad:20:f8:e8:
fe:4c:d2:c3:94:08:d3:62:b5:5f:75:ea:24:12:e7:
0e:69:0e:c8:40:08:42:0d:b1:38:43:ce:18:27:6c:
a9:dd:52:fc:d7:cf:2b:f2:86:75:64:2d:b7:a7:88:
f6:a8:cd:64:f1:8e:ee:3d:5d:cb:5b:4e:7d:b8:6f:
7e:fa:fa:e9:db:44:07:67:92:2c:66:30:3c:25:55:
b9:05:2c:50:1c:79:52:cc:b5:33:18:c5:2f:53:7b:
14:e5:05:d3:be:ed:40:56:f4:61:02:e8:fe:0b:69:
01:3f:13:c1:d1:e2:c4:ec:80:cb:39:06:63:79:62:
e7:d7:91:d0:53:9a:c8:8a:7c:27:71:97:51:c7:9f:
b7:46:14:13:89:e5:65:1f:1f:5d:97:b4:ef:b6:27:
c5:28:e0:4f:d5:59:13:ec:9b:a2:9e:3e:f2:58:92:
a5:1f:f5:34:6c:a7:d8:31:33:49:2a:43:8f:1b:28:
ee:7a:0c:e1:01:a5:49:3d:b4:e5:21:f4:c9:58:e8:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6C:A2:84:AB:B2:CB:BD:EE:9B:4A:E3:0A:59:EE:72:AE:1D:EC:DC
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C88C8A6637FD11F1BAA48A5A90833773.roa
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/20
113.203.228.0/24
113.203.231.0/24
113.203.248.0/21
115.167.5.0-115.167.19.255
115.167.101.0-115.167.102.255
115.167.112.0-115.167.124.255
175.110.96.0/23
175.110.99.0-175.110.111.255
180.178.144.0-180.178.167.255
180.178.169.0-180.178.171.255
180.178.176.0/21
180.178.185.0-180.178.188.255
180.178.190.0/23
202.92.20.0/24
202.92.26.0/24
223.29.228.0/23
Signature Algorithm: sha256WithRSAEncryption
06:a1:7a:27:08:e8:b5:9e:c8:5f:3c:a1:ca:90:6a:25:ee:52:
19:bd:db:03:76:33:d2:93:0a:96:77:2e:8c:91:9d:eb:e2:c4:
ca:53:75:16:1b:c9:b5:ee:29:d6:12:d0:fa:e6:c0:ba:0f:d3:
6d:13:0b:74:67:39:3e:ea:51:91:53:12:22:92:1c:a9:5a:a7:
e5:7f:1f:78:8f:94:7e:c2:b0:3c:b8:5b:23:57:45:bd:e4:29:
42:5e:63:5e:e0:3a:28:cf:ce:2d:a9:06:32:66:03:f8:77:84:
02:8c:34:ec:67:ac:94:a0:8a:e1:3b:c2:37:10:1a:00:ab:74:
54:39:e1:a7:2f:72:bb:d8:5b:33:2e:d7:65:f9:6a:ce:3b:df:
5b:f4:a8:57:e1:71:fc:03:fc:05:8b:a5:f0:1d:88:62:36:52:
ad:de:3e:51:40:24:c8:90:81:fd:ab:85:18:33:34:bd:69:a4:
70:63:a9:3b:aa:a2:a6:0e:6c:d3:33:86:e2:d6:9d:86:59:0d:
82:19:b3:21:17:cf:dd:22:c1:a6:c9:ef:7f:67:8e:43:4a:02:
e2:5b:e9:d4:d6:29:3e:2d:86:2d:c7:79:0b:cf:5b:d5:dc:97:
09:fd:8a:70:0a:57:fd:c2:04:5e:5f:18:0f:fc:3c:45:9e:32:
b7:69:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:29:15 2026 by rpki-client