Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/E69AF38AB11C11EAACC28D2EC4F9AE02.roa
File: E69AF38AB11C11EAACC28D2EC4F9AE02.roa (raw, json)
Hash identifier: 8GqRcBdeIrCjHp76PdQs0lq30x3d/NDBmszoGklxVM4=
Subject key identifier: 2E:55:5D:53:D0:93:52:58:78:E5:4B:5F:58:2D:A5:3C:46:37:74:7A
Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76
Certificate serial: 0E3E
Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/E69AF38AB11C11EAACC28D2EC4F9AE02.roa
Signing time: Tue 24 Feb 2026 18:15:23 +0000
ROA not before: Tue 24 Feb 2026 18:15:23 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 19905
IP address blocks: 203.121.14.0/24 maxlen: 24
203.121.19.0/24 maxlen: 24
203.121.24.0/24 maxlen: 24
203.121.27.0/24 maxlen: 24
203.121.30.0/24 maxlen: 24
203.121.44.0/24 maxlen: 24
203.121.69.0/24 maxlen: 24
203.121.70.0/24 maxlen: 24
203.121.73.0/24 maxlen: 24
203.121.81.0/24 maxlen: 24
203.121.91.0/24 maxlen: 24
203.121.98.0/24 maxlen: 24
203.121.113.0/24 maxlen: 24
203.121.117.0/24 maxlen: 24
210.19.5.0/24 maxlen: 24
210.19.13.0/24 maxlen: 24
210.19.16.0/24 maxlen: 24
210.19.19.0/24 maxlen: 24
210.19.32.0/24 maxlen: 24
210.19.41.0/24 maxlen: 24
210.19.49.0/24 maxlen: 24
210.19.52.0/24 maxlen: 24
210.19.53.0/24 maxlen: 24
210.19.55.0/24 maxlen: 24
210.19.77.0/24 maxlen: 24
210.19.90.0/24 maxlen: 24
210.19.102.0/24 maxlen: 24
210.19.103.0/24 maxlen: 24
210.19.105.0/24 maxlen: 24
210.19.119.0/24 maxlen: 24
210.19.131.0/24 maxlen: 24
210.19.137.0/24 maxlen: 24
210.19.162.0/24 maxlen: 24
210.19.163.0/24 maxlen: 24
210.19.164.0/24 maxlen: 24
210.19.165.0/24 maxlen: 24
210.19.171.0/24 maxlen: 24
210.19.172.0/24 maxlen: 24
210.19.173.0/24 maxlen: 24
210.19.174.0/24 maxlen: 24
210.19.179.0/24 maxlen: 24
210.19.183.0/24 maxlen: 24
210.19.184.0/24 maxlen: 24
210.19.189.0/24 maxlen: 24
210.19.190.0/24 maxlen: 24
210.19.214.0/24 maxlen: 24
210.19.216.0/24 maxlen: 24
210.19.218.0/24 maxlen: 24
210.19.222.0/24 maxlen: 24
210.19.235.0/24 maxlen: 24
210.19.243.0/24 maxlen: 24
210.19.244.0/24 maxlen: 24
210.19.249.0/24 maxlen: 24
211.24.0.0/24 maxlen: 24
211.24.1.0/24 maxlen: 24
211.24.16.0/24 maxlen: 24
211.24.18.0/24 maxlen: 24
211.24.19.0/24 maxlen: 24
211.24.22.0/24 maxlen: 24
211.24.25.0/24 maxlen: 24
211.24.26.0/24 maxlen: 24
211.24.31.0/24 maxlen: 24
211.24.203.0/24 maxlen: 24
211.24.216.0/24 maxlen: 24
211.24.219.0/24 maxlen: 24
211.24.223.0/24 maxlen: 24
211.24.228.0/24 maxlen: 24
211.24.235.0/24 maxlen: 24
211.24.241.0/24 maxlen: 24
211.24.246.0/24 maxlen: 24
211.24.251.0/24 maxlen: 24
211.24.252.0/24 maxlen: 24
211.24.255.0/24 maxlen: 24
211.25.29.0/24 maxlen: 24
211.25.44.0/24 maxlen: 24
211.25.53.0/24 maxlen: 24
211.25.61.0/24 maxlen: 24
211.25.77.0/24 maxlen: 24
211.25.80.0/24 maxlen: 24
211.25.82.0/24 maxlen: 24
211.25.84.0/24 maxlen: 24
211.25.90.0/24 maxlen: 24
211.25.91.0/24 maxlen: 24
211.25.93.0/24 maxlen: 24
211.25.113.0/24 maxlen: 24
211.25.115.0/24 maxlen: 24
211.25.116.0/24 maxlen: 24
211.25.117.0/24 maxlen: 24
211.25.133.0/24 maxlen: 24
211.25.139.0/24 maxlen: 24
211.25.141.0/24 maxlen: 24
211.25.150.0/24 maxlen: 24
211.25.153.0/24 maxlen: 24
211.25.178.0/24 maxlen: 24
211.25.183.0/24 maxlen: 24
211.25.187.0/24 maxlen: 24
211.25.188.0/24 maxlen: 24
211.25.190.0/24 maxlen: 24
211.25.203.0/24 maxlen: 24
211.25.209.0/24 maxlen: 24
211.25.222.0/24 maxlen: 24
211.25.223.0/24 maxlen: 24
211.25.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl
rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3646 (0xe3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76
Validity
Not Before: Feb 24 18:15:23 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=699deabb-bd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:cf:ce:1a:f0:65:44:40:05:85:7a:1f:c7:
3e:2d:ef:39:4e:cf:8a:6d:ed:ca:48:03:6c:ea:6a:
38:63:a3:94:07:4b:c0:6d:e8:44:9b:76:76:6c:40:
4c:ce:75:bb:5a:98:75:c4:33:c8:35:dd:1c:a9:a7:
b9:7a:b3:cd:55:32:09:e4:a9:6d:21:80:a6:a7:e1:
46:40:ae:cb:4c:ab:a2:50:12:22:57:70:d7:2b:1d:
20:7d:33:db:62:4b:a0:31:31:7c:49:cf:da:82:3a:
f5:4f:27:4d:1f:08:21:9b:d7:f2:ae:72:60:4b:7c:
c6:f5:b3:f4:27:54:5d:f0:fb:ad:f8:97:26:f5:4c:
f1:08:ca:dd:89:c1:81:db:7f:12:64:70:e1:db:d0:
bf:bc:7f:81:54:f1:99:ff:70:b2:6c:e1:69:b1:b6:
d2:a6:7e:de:49:03:b8:34:c6:53:5e:f0:cf:c5:00:
b9:96:15:2b:3b:fb:41:1f:c4:45:98:3c:e7:dc:3a:
ca:32:d3:12:41:67:74:ce:15:bc:19:76:43:57:ea:
f3:cc:c1:c5:ff:cc:5f:0f:c3:58:0c:40:19:b3:63:
24:80:2f:e4:23:dc:dd:a2:80:8a:8a:35:3a:98:62:
60:a8:66:59:75:cd:9a:fa:ee:e9:d8:c9:1b:63:10:
5a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:55:5D:53:D0:93:52:58:78:E5:4B:5F:58:2D:A5:3C:46:37:74:7A
X509v3 Authority Key Identifier:
keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/E69AF38AB11C11EAACC28D2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.121.14.0/24
203.121.19.0/24
203.121.24.0/24
203.121.27.0/24
203.121.30.0/24
203.121.44.0/24
203.121.69.0-203.121.70.255
203.121.73.0/24
203.121.81.0/24
203.121.91.0/24
203.121.98.0/24
203.121.113.0/24
203.121.117.0/24
210.19.5.0/24
210.19.13.0/24
210.19.16.0/24
210.19.19.0/24
210.19.32.0/24
210.19.41.0/24
210.19.49.0/24
210.19.52.0/23
210.19.55.0/24
210.19.77.0/24
210.19.90.0/24
210.19.102.0/23
210.19.105.0/24
210.19.119.0/24
210.19.131.0/24
210.19.137.0/24
210.19.162.0-210.19.165.255
210.19.171.0-210.19.174.255
210.19.179.0/24
210.19.183.0-210.19.184.255
210.19.189.0-210.19.190.255
210.19.214.0/24
210.19.216.0/24
210.19.218.0/24
210.19.222.0/24
210.19.235.0/24
210.19.243.0-210.19.244.255
210.19.249.0/24
211.24.0.0/23
211.24.16.0/24
211.24.18.0/23
211.24.22.0/24
211.24.25.0-211.24.26.255
211.24.31.0/24
211.24.203.0/24
211.24.216.0/24
211.24.219.0/24
211.24.223.0/24
211.24.228.0/24
211.24.235.0/24
211.24.241.0/24
211.24.246.0/24
211.24.251.0-211.24.252.255
211.24.255.0/24
211.25.29.0/24
211.25.44.0/24
211.25.53.0/24
211.25.61.0/24
211.25.77.0/24
211.25.80.0/24
211.25.82.0/24
211.25.84.0/24
211.25.90.0/23
211.25.93.0/24
211.25.113.0/24
211.25.115.0-211.25.117.255
211.25.133.0/24
211.25.139.0/24
211.25.141.0/24
211.25.150.0/24
211.25.153.0/24
211.25.178.0/24
211.25.183.0/24
211.25.187.0-211.25.188.255
211.25.190.0/24
211.25.203.0/24
211.25.209.0/24
211.25.222.0/23
211.25.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:13:c0:f8:36:c5:f0:2c:51:f9:7e:07:fb:fd:13:85:a8:02:
c4:1c:1d:6c:e3:c4:59:87:50:dd:fc:da:9a:42:7d:5d:ad:e3:
92:04:40:77:10:d9:7f:08:d6:bf:93:57:88:60:4d:37:8d:25:
da:d0:02:e5:8e:a8:30:aa:b1:58:7d:2c:25:ed:72:46:4f:20:
57:fd:a4:f1:3d:e8:cf:97:04:b3:bf:27:19:87:58:7b:6c:be:
22:f1:68:36:4f:92:cb:5c:a2:8b:9a:c3:fd:d0:ba:d3:42:31:
a5:bf:d6:bf:7e:ee:ae:de:48:e9:d6:c2:a4:06:04:8a:85:a6:
99:14:22:fb:9d:ed:4e:ed:8b:51:b4:01:0b:6d:c5:f9:59:1d:
6e:7c:d8:cc:fd:02:aa:e8:c1:7a:2c:c6:1f:41:69:dd:2e:95:
71:40:97:0d:7d:e1:29:57:34:bc:00:ec:94:24:79:2a:a0:a0:
44:a1:8a:54:29:34:82:19:71:38:5d:5d:1b:ae:38:63:ce:fa:
fb:41:ab:eb:a2:3d:24:e6:90:63:7d:23:7f:cf:f9:dc:86:2d:
ad:e7:bf:31:eb:f5:ac:82:52:fb:f0:48:f3:9e:8b:9f:2c:08:
97:bc:02:24:9f:92:d2:8f:df:56:70:a9:60:c2:73:5a:69:12:
68:59:03:de
-----BEGIN CERTIFICATE-----
MIIHsTCCBpmgAwIBAgICDj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3
MEQ1N0JENzYwHhcNMjYwMjI0MTgxNTIzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTlkZWFiYi1iZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuA/PzhrwZURABYV6H8c+Le85Ts+Kbe3KSANs6mo4Y6OUB0vAbehEm3Z2bEBM
znW7Wph1xDPINd0cqae5erPNVTIJ5KltIYCmp+FGQK7LTKuiUBIiV3DXKx0gfTPb
YkugMTF8Sc/agjr1TydNHwghm9fyrnJgS3zG9bP0J1Rd8Put+Jcm9UzxCMrdicGB
238SZHDh29C/vH+BVPGZ/3CybOFpsbbSpn7eSQO4NMZTXvDPxQC5lhUrO/tBH8RF
mDzn3DrKMtMSQWd0zhW8GXZDV+rzzMHF/8xfD8NYDEAZs2MkgC/kI9zdooCKijU6
mGJgqGZZdc2a+u7p2MkbYxBaawIDAQABo4IE1TCCBNEwHQYDVR0OBBYEFC5VXVPQ
k1JYeOVLX1gtpTxGN3R6MB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1
MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2
WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTdCQzQvMkQxQTU5NUFENTBEMTFFOUJBRDZDMjI2QzRGOUFFMDIvRTY5QUYzOEFC
MTFDMTFFQUFDQzI4RDJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggJdBggrBgEFBQcBBwEB
/wSCAkwwggJIMIICRAQCAAEwggI8AwQAy3kOAwQAy3kTAwQAy3kYAwQAy3kbAwQA
y3keAwQAy3ksMAwDBADLeUUDBADLeUYDBADLeUkDBADLeVEDBADLeVsDBADLeWID
BADLeXEDBADLeXUDBADSEwUDBADSEw0DBADSExADBADSExMDBADSEyADBADSEykD
BADSEzEDBAHSEzQDBADSEzcDBADSE00DBADSE1oDBAHSE2YDBADSE2kDBADSE3cD
BADSE4MDBADSE4kwDAMEAdITogMEAdITpDAMAwQA0hOrAwQA0hOuAwQA0hOzMAwD
BADSE7cDBADSE7gwDAMEANITvQMEANITvgMEANIT1gMEANIT2AMEANIT2gMEANIT
3gMEANIT6zAMAwQA0hPzAwQA0hP0AwQA0hP5AwQB0xgAAwQA0xgQAwQB0xgSAwQA
0xgWMAwDBADTGBkDBADTGBoDBADTGB8DBADTGMsDBADTGNgDBADTGNsDBADTGN8D
BADTGOQDBADTGOsDBADTGPEDBADTGPYwDAMEANMY+wMEANMY/AMEANMY/wMEANMZ
HQMEANMZLAMEANMZNQMEANMZPQMEANMZTQMEANMZUAMEANMZUgMEANMZVAMEAdMZ
WgMEANMZXQMEANMZcTAMAwQA0xlzAwQB0xl0AwQA0xmFAwQA0xmLAwQA0xmNAwQA
0xmWAwQA0xmZAwQA0xmyAwQA0xm3MAwDBADTGbsDBADTGbwDBADTGb4DBADTGcsD
BADTGdEDBAHTGd4DBADTGegwDQYJKoZIhvcNAQELBQADggEBAH8TwPg2xfAsUfl+
B/v9E4WoAsQcHWzjxFmHUN382ppCfV2t45IEQHcQ2X8I1r+TV4hgTTeNJdrQAuWO
qDCqsVh9LCXtckZPIFf9pPE96M+XBLO/JxmHWHtsviLxaDZPkstcoouaw/3QutNC
MaW/1r9+7q7eSOnWwqQGBIqFppkUIvud7U7ti1G0AQttxflZHW582Mz9AqrowXos
xh9Bad0ulXFAlw194SlXNLwA7JQkeSqgoEShilQpNIIZcThdXRuuOGPO+vtBq+ui
PSTmkGN9I3/P+dyGLa3nvzHr9ayCUvvwSPOei58sCJe8AiSfktKP31ZwqWDCc1pp
EmhZA94=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:06 2026 by rpki-client