Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa
File: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (raw, json)
Hash identifier: wkggX/6qysF9Egk0xQyYTUInBulm7AKxdFFCyBP8GUk=
Subject key identifier: 4D:FA:37:5A:11:08:76:D1:7D:B0:97:D5:AA:1A:F4:5D:54:C9:04:D4
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: 01C9
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa
Signing time: Thu 16 Apr 2026 19:28:00 +0000
ROA not before: Thu 16 Apr 2026 19:28:00 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140077
IP address blocks: 103.148.50.0/24 maxlen: 24
103.148.51.0/24 maxlen: 24
2405:cbc0::/48 maxlen: 48
2405:cbc0:1::/48 maxlen: 48
2405:cbc0:2::/48 maxlen: 48
2405:cbc0:3::/48 maxlen: 48
2405:cbc0:4::/48 maxlen: 48
2405:cbc0:5::/48 maxlen: 48
2405:cbc0:6::/48 maxlen: 48
2405:cbc0:7::/48 maxlen: 48
2405:cbc0:8::/48 maxlen: 48
2405:cbc0:9::/48 maxlen: 48
2405:cbc0:10::/48 maxlen: 48
2405:cbc0:11::/48 maxlen: 48
2405:cbc0:12::/48 maxlen: 48
2405:cbc0:13::/48 maxlen: 48
2405:cbc0:14::/48 maxlen: 48
2405:cbc0:15::/48 maxlen: 48
2405:cbc0:16::/48 maxlen: 48
2405:cbc0:17::/48 maxlen: 48
2405:cbc0:18::/48 maxlen: 48
2405:cbc0:19::/48 maxlen: 48
2405:cbc0:20::/48 maxlen: 48
2405:cbc0:21::/48 maxlen: 48
2405:cbc0:22::/48 maxlen: 48
2405:cbc0:23::/48 maxlen: 48
2405:cbc0:24::/48 maxlen: 48
2405:cbc0:25::/48 maxlen: 48
2405:cbc0:26::/48 maxlen: 48
2405:cbc0:27::/48 maxlen: 48
2405:cbc0:28::/48 maxlen: 48
2405:cbc0:29::/48 maxlen: 48
2405:cbc0:8000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Apr 16 19:28:00 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69e13840-88f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:8c:95:7d:79:46:d8:5b:7e:9b:e4:91:40:
5e:8b:2c:28:02:c4:f7:e8:d4:23:fa:a5:48:5a:a3:
b9:e1:bf:56:13:8f:a3:0b:cb:0e:c1:11:bd:41:39:
3c:79:a0:78:ef:52:a6:ca:c6:ba:44:c4:11:09:b4:
77:55:11:63:8f:a6:28:e8:b8:e8:a4:2b:3c:6d:af:
2c:c4:e7:ca:a4:c7:42:f0:cc:99:df:9b:10:d0:3d:
37:db:eb:ae:ec:f1:19:7e:be:91:98:d6:5f:77:c5:
44:dc:69:27:85:6f:28:5b:af:8c:c7:d9:e8:05:6f:
4c:2d:ec:ba:d1:8e:f2:cf:fd:4a:08:89:fe:1c:a0:
3e:4b:ee:5c:85:51:4d:15:41:0f:f4:25:be:17:ad:
9d:d7:dc:1a:a6:e8:8c:85:a5:5a:c7:8a:97:95:d4:
8f:24:3c:d8:fa:34:16:10:93:a3:3b:11:85:3b:22:
89:b4:f7:3f:a0:79:fe:fd:3d:0b:7e:80:e6:00:c6:
f0:ae:9d:30:26:4f:fa:d4:71:bf:41:b6:3f:08:7a:
96:80:bd:f4:29:e1:b8:33:38:c3:e8:91:a7:ad:6b:
cf:bb:12:fc:3f:2a:96:e2:3b:03:e0:5f:47:48:32:
d4:97:40:51:54:ef:1f:23:9d:a8:c8:35:38:77:0f:
b5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FA:37:5A:11:08:76:D1:7D:B0:97:D5:AA:1A:F4:5D:54:C9:04:D4
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.50.0/23
IPv6:
2405:cbc0::-2405:cbc0:9:ffff:ffff:ffff:ffff:ffff
2405:cbc0:10::-2405:cbc0:19:ffff:ffff:ffff:ffff:ffff
2405:cbc0:20::-2405:cbc0:29:ffff:ffff:ffff:ffff:ffff
2405:cbc0:8000::/35
Signature Algorithm: sha256WithRSAEncryption
16:c6:0a:42:cc:a9:22:96:f7:3e:81:99:88:b6:b1:fe:83:3c:
08:e1:e1:aa:e1:87:ca:19:74:3c:04:1d:b8:cc:ec:76:44:48:
c6:df:55:b0:9b:4e:38:a5:eb:4a:3f:a5:bc:a5:b1:e0:2a:ca:
2c:24:c3:85:50:eb:f8:fe:b9:8e:d3:e8:f1:a7:c2:c9:d5:ee:
f8:06:08:a9:d6:3d:29:2d:c6:ba:c7:28:b0:59:d8:a7:71:f9:
09:9a:a6:84:ed:de:1a:8b:80:05:b3:79:ca:60:64:89:71:3f:
22:1c:82:24:c6:cb:78:8d:ad:82:a6:63:8e:13:36:3d:d0:a5:
52:04:91:a3:fa:d0:d0:d0:0f:17:8b:c7:1e:50:06:e7:3b:51:
d4:0f:cb:2e:75:79:a6:71:26:11:c7:1c:c0:af:20:66:bd:c5:
3c:0f:58:8a:29:78:dd:e0:69:70:40:af:b6:60:1d:7d:73:39:
5d:a0:80:d7:c4:88:c4:92:91:56:be:99:e0:21:38:c5:05:17:
4b:8f:a0:ff:69:9f:2e:72:fe:00:6e:72:56:af:20:97:13:ee:
3e:d4:3d:9c:40:24:89:b4:d8:d6:4d:24:a6:10:c1:02:22:0a:
c4:f6:61:7a:be:a1:92:a7:dd:82:a3:db:a7:e1:20:77:24:8c:
1e:96:9a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:16:02 2026 by rpki-client