Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa
File: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (raw, json)
Hash identifier: we25kl2harwRFRptkMWi5jOknFeMwGjZwdMBiO25rJk=
Subject key identifier: 34:76:8A:78:BA:D7:EA:04:C2:0A:91:6C:1D:FF:13:B3:BF:E4:A0:DD
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: 01A6
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:02:53 +0000
ROA not before: Tue 18 Mar 2025 19:39:22 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140077
IP address blocks: 103.148.50.0/24 maxlen: 24
103.148.51.0/24 maxlen: 24
2405:cbc0::/48 maxlen: 48
2405:cbc0:1::/48 maxlen: 48
2405:cbc0:2::/48 maxlen: 48
2405:cbc0:3::/48 maxlen: 48
2405:cbc0:4::/48 maxlen: 48
2405:cbc0:5::/48 maxlen: 48
2405:cbc0:6::/48 maxlen: 48
2405:cbc0:7::/48 maxlen: 48
2405:cbc0:8::/48 maxlen: 48
2405:cbc0:9::/48 maxlen: 48
2405:cbc0:10::/48 maxlen: 48
2405:cbc0:11::/48 maxlen: 48
2405:cbc0:12::/48 maxlen: 48
2405:cbc0:13::/48 maxlen: 48
2405:cbc0:14::/48 maxlen: 48
2405:cbc0:15::/48 maxlen: 48
2405:cbc0:16::/48 maxlen: 48
2405:cbc0:17::/48 maxlen: 48
2405:cbc0:18::/48 maxlen: 48
2405:cbc0:19::/48 maxlen: 48
2405:cbc0:20::/48 maxlen: 48
2405:cbc0:21::/48 maxlen: 48
2405:cbc0:22::/48 maxlen: 48
2405:cbc0:23::/48 maxlen: 48
2405:cbc0:24::/48 maxlen: 48
2405:cbc0:25::/48 maxlen: 48
2405:cbc0:26::/48 maxlen: 48
2405:cbc0:27::/48 maxlen: 48
2405:cbc0:28::/48 maxlen: 48
2405:cbc0:29::/48 maxlen: 48
2405:cbc0:8000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Validity
Not Before: Mar 18 19:39:22 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a48d5d-e05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:9a:29:ea:a7:6b:d5:55:a6:6f:55:bb:6f:
23:94:1c:22:fe:f9:b5:9c:25:92:15:b6:1c:44:31:
c2:c8:c4:29:1e:27:5b:f8:c2:9c:48:60:6a:7c:2a:
33:ac:33:42:a9:40:2a:1f:8d:cb:4d:e3:8d:d6:8c:
56:18:9b:e1:52:04:15:d6:36:0a:ce:37:65:c6:59:
49:26:be:2c:4c:f5:64:08:f2:2e:03:60:dc:46:f2:
89:2c:77:63:49:7b:1c:58:28:0f:a2:0c:5f:fa:53:
05:d0:b1:39:6c:0a:9b:25:b5:23:a4:7d:cd:69:11:
d9:03:24:aa:c8:c4:9b:55:5f:a5:7b:3c:a9:0d:58:
a6:f5:5f:48:da:24:71:94:a3:3c:e4:f2:50:e8:56:
36:37:48:63:5c:84:3d:d7:02:a4:49:58:b7:5d:9f:
d2:1e:0a:2d:86:a9:47:f2:64:29:4a:12:d9:9f:bb:
3e:ce:7d:99:2c:bf:67:b5:58:4a:36:18:11:82:06:
61:a1:19:1a:50:fd:94:ad:89:75:4c:8d:10:07:a8:
4a:8b:6c:a8:53:c9:df:86:16:86:e1:dd:ae:2d:9a:
f8:5c:c9:0f:1d:bc:3c:0d:73:44:0b:f7:76:bb:70:
7c:99:61:0f:36:12:93:ce:3a:fc:79:e2:17:69:b9:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:76:8A:78:BA:D7:EA:04:C2:0A:91:6C:1D:FF:13:B3:BF:E4:A0:DD
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.50.0/23
IPv6:
2405:cbc0::-2405:cbc0:9:ffff:ffff:ffff:ffff:ffff
2405:cbc0:10::-2405:cbc0:19:ffff:ffff:ffff:ffff:ffff
2405:cbc0:20::-2405:cbc0:29:ffff:ffff:ffff:ffff:ffff
2405:cbc0:8000::/35
Signature Algorithm: sha256WithRSAEncryption
79:dc:f0:af:25:eb:0d:76:1b:3f:a4:62:8f:47:82:d1:2c:55:
9f:f0:fa:8b:48:38:1d:47:20:69:ec:17:ad:02:0a:28:57:ee:
de:a0:d9:a2:d9:64:f7:15:97:7f:dd:32:9c:0f:c3:62:72:e9:
ef:ff:02:bb:13:25:44:a8:d1:a5:d3:f9:13:75:b8:ea:45:56:
69:9c:6c:26:b4:2e:00:f3:86:28:9b:c0:6e:ae:b6:4b:5d:e4:
07:eb:bd:bb:0c:f4:4a:14:d6:2f:8e:09:1e:02:24:be:74:68:
be:f5:d3:aa:c5:93:ff:01:b0:cc:20:71:91:d2:fd:b8:e7:92:
ef:79:83:15:6e:52:71:f9:33:f6:97:57:12:7a:2b:b8:b8:41:
82:d4:5b:56:63:3d:e1:ea:fc:c3:5a:5a:70:cd:68:02:d6:5d:
47:94:93:40:15:9a:ea:4b:2c:b9:ec:89:8e:68:cd:41:51:6c:
36:ac:cf:b9:bf:a1:df:2b:f1:c4:58:6a:d6:15:7e:8c:42:ab:
00:5d:2f:8e:3d:bf:eb:34:6b:7e:1c:82:d4:af:c8:e1:59:d7:
25:36:c4:ab:f0:b3:d6:df:e7:ac:8b:7c:ba:ab:51:fc:42:34:
43:d0:84:ce:26:3e:ac:a8:b0:85:35:2d:46:b9:25:77:33:76:
5e:e6:29:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:41 2026 by rpki-client