Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
File: ECBAA694826F11ED963DD626C4F9AE02.roa (raw, json)
Hash identifier: ApiYcYNz/eVMk9Wk/G7rZ6P0vQlTdPAdp+J7oKej75g=
Subject key identifier: B6:24:50:37:80:86:0B:19:93:55:E0:97:3B:23:30:95:A2:EA:EC:59
Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial: 14D3
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:17:47 +0000
ROA not before: Tue 14 Jan 2025 17:05:14 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136210
IP address blocks: 103.83.188.0/22 maxlen: 22
103.83.188.0/24 maxlen: 24
103.83.189.0/24 maxlen: 24
103.83.190.0/24 maxlen: 24
103.83.191.0/24 maxlen: 24
202.157.190.0/23 maxlen: 23
202.157.190.0/24 maxlen: 24
202.157.191.0/24 maxlen: 24
2400:ecc0::/32 maxlen: 32
2400:ecc0::/36 maxlen: 36
2400:ecc0:1000::/36 maxlen: 36
2400:ecc0:1000::/48 maxlen: 48
2400:ecc0:1001::/48 maxlen: 48
2400:ecc0:1002::/48 maxlen: 48
2400:ecc0:1003::/48 maxlen: 48
2400:ecc0:1004::/48 maxlen: 48
2400:ecc0:1005::/48 maxlen: 48
2400:ecc0:1006::/48 maxlen: 48
2400:ecc0:1007::/48 maxlen: 48
2400:ecc0:1008::/48 maxlen: 48
2400:ecc0:1009::/48 maxlen: 48
2400:ecc0:100a::/48 maxlen: 48
2400:ecc0:100b::/48 maxlen: 48
2400:ecc0:100c::/48 maxlen: 48
2400:ecc0:100d::/48 maxlen: 48
2400:ecc0:100e::/48 maxlen: 48
2400:ecc0:100f::/48 maxlen: 48
2400:ecc0:19fe::/48 maxlen: 48
2400:ecc0:19ff::/48 maxlen: 48
2400:ecc0:2000::/36 maxlen: 36
2400:ecc0:3000::/36 maxlen: 36
2400:ecc0:4000::/36 maxlen: 36
2400:ecc0:5000::/36 maxlen: 36
2400:ecc0:6000::/36 maxlen: 36
2400:ecc0:7000::/36 maxlen: 36
2400:ecc0:8000::/36 maxlen: 36
2400:ecc0:9000::/36 maxlen: 36
2400:ecc0:9000::/48 maxlen: 48
2400:ecc0:9001::/48 maxlen: 48
2400:ecc0:9002::/48 maxlen: 48
2400:ecc0:9003::/48 maxlen: 48
2400:ecc0:9004::/48 maxlen: 48
2400:ecc0:9005::/48 maxlen: 48
2400:ecc0:9006::/48 maxlen: 48
2400:ecc0:903f::/48 maxlen: 48
2400:ecc0:a000::/36 maxlen: 36
2400:ecc0:b000::/36 maxlen: 36
2400:ecc0:c000::/36 maxlen: 36
2400:ecc0:d000::/36 maxlen: 36
2400:ecc0:e000::/36 maxlen: 36
2400:ecc0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5331 (0x14d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Validity
Not Before: Jan 14 17:05:14 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a4043a-836e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9e:04:12:eb:72:e7:3d:c6:82:81:00:98:b8:
da:0f:f6:ed:ba:03:a4:5d:20:de:00:af:04:96:18:
6d:67:91:4d:78:f9:98:dc:7d:88:99:08:6b:3c:93:
35:64:09:94:2a:74:37:e1:ad:64:3c:a1:29:89:de:
20:81:87:2e:53:d1:6f:95:5d:a8:14:11:3e:ce:7c:
ce:f1:c1:aa:4b:97:80:1c:cb:1a:14:ea:19:db:73:
c3:ad:14:19:cf:f8:d4:fa:71:b3:c3:a5:f6:bc:53:
1a:d5:0b:72:f4:6e:a2:e0:58:ab:d7:92:00:27:1a:
88:3e:3b:cf:c4:3f:df:72:40:2b:8b:51:00:3b:ea:
ee:3a:7f:fb:8a:1d:2c:ed:f9:b7:01:bd:bd:78:4f:
0e:30:5b:d4:ff:10:89:78:fa:6d:9d:f8:ca:85:26:
92:60:7b:e5:15:a7:dc:ca:a3:d4:97:cf:22:b4:54:
1f:91:77:96:d0:90:9c:f2:97:c2:95:4f:13:8b:84:
00:06:03:bc:9d:45:3f:67:15:d0:87:b5:fc:6e:90:
09:c0:dd:4c:8a:39:ab:d0:00:fe:7d:37:a8:fc:5a:
16:f5:49:b7:34:24:f7:85:95:77:19:cc:b2:64:73:
bc:88:f3:be:9b:6b:99:37:4c:24:05:bb:32:00:23:
1a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:50:37:80:86:0B:19:93:55:E0:97:3B:23:30:95:A2:EA:EC:59
X509v3 Authority Key Identifier:
keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.188.0/22
202.157.190.0/23
IPv6:
2400:ecc0::/32
Signature Algorithm: sha256WithRSAEncryption
6a:9e:9a:9f:f0:d0:0d:2e:28:a8:57:d2:66:f1:f6:02:5e:79:
38:af:9c:fe:9d:39:14:7a:5c:f3:41:1f:9e:2e:ad:9e:73:00:
99:fb:f1:a2:3c:5d:56:96:37:6b:fa:b1:df:77:a9:6a:2e:70:
e9:ea:a8:86:ee:48:7d:5a:05:95:22:39:8a:3a:59:89:21:80:
02:ba:16:67:d1:e3:f7:01:e9:94:9a:7b:2b:d8:8a:e6:ff:05:
0f:5f:e9:80:85:96:2c:0f:19:26:66:9f:b1:db:13:3a:e1:58:
b0:56:2f:79:8e:37:bd:2c:66:bd:06:df:e5:2d:58:87:33:ed:
1a:68:77:57:78:49:75:c5:0a:20:ec:9d:45:7f:6a:5c:13:c4:
41:7c:83:60:b8:ea:64:08:39:d0:bc:8c:b0:d5:63:1a:bd:8b:
6c:b5:e3:bf:34:33:88:d8:73:2a:d4:c3:a1:fc:ee:04:c1:7a:
7d:73:38:a3:1c:c1:83:ec:c3:09:93:de:78:a4:82:38:a7:e7:
3e:5b:79:40:ea:ed:98:a2:62:26:c9:18:23:67:fa:84:92:51:
6b:c5:7a:b4:51:88:18:d0:6c:82:2f:99:fe:64:74:dd:49:fd:
8c:92:d8:47:a5:c5:5d:8b:b0:b8:b4:de:a7:16:76:6e:99:08:
df:44:5f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:17 2026 by rpki-client