Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
File: 20978DD270E411F08F40242AC4F9AE02.roa (raw, json)
Hash identifier: R3SuPMnexdh7gybsYJg7tLaSKVa8pxRhjB4eo3WkAzM=
Subject key identifier: 04:50:67:98:7E:B3:17:1F:95:AC:E0:79:6B:C5:40:97:33:60:6A:C1
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 03A8
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
Signing time: Fri 27 Feb 2026 06:55:32 +0000
ROA not before: Fri 27 Feb 2026 06:55:32 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139057
IP address blocks: 103.137.168.0/24 maxlen: 24
103.137.169.0/24 maxlen: 24
103.137.170.0/24 maxlen: 24
103.137.171.0/24 maxlen: 24
103.138.247.0/24 maxlen: 24
103.189.255.0/24 maxlen: 24
103.243.92.0/24 maxlen: 24
103.243.93.0/24 maxlen: 24
103.243.94.0/24 maxlen: 24
103.243.95.0/24 maxlen: 24
123.108.72.0/24 maxlen: 24
123.108.73.0/24 maxlen: 24
2407:2440:1::/48 maxlen: 48
2407:2440:2::/48 maxlen: 48
2407:2440:3::/48 maxlen: 48
2407:2440:4::/48 maxlen: 48
2407:2440:5::/48 maxlen: 48
2407:2440:6::/48 maxlen: 48
2407:2440:7::/48 maxlen: 48
2407:2440:8::/48 maxlen: 48
2407:2440:9::/48 maxlen: 48
2407:2440:a::/48 maxlen: 48
2407:2440:b::/48 maxlen: 48
2407:2440:c::/48 maxlen: 48
2407:2440:d::/48 maxlen: 48
2407:2440:e::/48 maxlen: 48
2407:2440:f::/48 maxlen: 48
2407:2440:10::/48 maxlen: 48
2407:2440:11::/48 maxlen: 48
2407:2440:12::/48 maxlen: 48
2407:2440:13::/48 maxlen: 48
2407:2440:14::/48 maxlen: 48
2407:2440:15::/48 maxlen: 48
2407:2440:16::/48 maxlen: 48
2407:2440:17::/48 maxlen: 48
2407:2440:18::/48 maxlen: 48
2407:2440:19::/48 maxlen: 48
2407:2440:1e::/48 maxlen: 48
2407:2440:1f::/48 maxlen: 48
2407:2440:20::/48 maxlen: 48
2407:2440:22::/48 maxlen: 48
2407:2440:23::/48 maxlen: 48
2407:2440:25::/48 maxlen: 48
2407:2440:28::/48 maxlen: 48
2407:2440:2a::/48 maxlen: 48
2407:2440:2b::/48 maxlen: 48
2407:2440:2c::/48 maxlen: 48
2407:2440:2d::/48 maxlen: 48
2407:2440:a001::/48 maxlen: 48
2407:2440:a002::/48 maxlen: 48
2407:2440:a003::/48 maxlen: 48
2407:2440:a004::/48 maxlen: 48
2407:2440:a005::/48 maxlen: 48
2407:2440:a007::/48 maxlen: 48
2407:2440:a008::/48 maxlen: 48
2407:2440:a009::/48 maxlen: 48
2407:2440:b001::/48 maxlen: 48
2407:2440:b002::/48 maxlen: 48
2407:2440:b003::/48 maxlen: 48
2407:2440:b004::/48 maxlen: 48
2407:2440:b005::/48 maxlen: 48
2407:2440:c001::/48 maxlen: 48
2407:2440:d001::/48 maxlen: 48
2407:2440:e001::/48 maxlen: 48
2407:2440:e002::/48 maxlen: 48
2407:2440:e003::/48 maxlen: 48
2407:2440:e004::/48 maxlen: 48
2407:2440:e007::/48 maxlen: 48
2407:2440:e008::/48 maxlen: 48
2407:2440:e009::/48 maxlen: 48
2407:2440:e00a::/48 maxlen: 48
2407:2440:e00b::/48 maxlen: 48
2407:2440:e00c::/48 maxlen: 48
2407:2440:e00d::/48 maxlen: 48
2407:2440:e00e::/48 maxlen: 48
2407:2440:e00f::/48 maxlen: 48
2407:2440:e010::/48 maxlen: 48
2407:2440:e011::/48 maxlen: 48
2407:2440:e012::/48 maxlen: 48
2407:2440:e013::/48 maxlen: 48
2407:2440:e014::/48 maxlen: 48
2407:2440:e015::/48 maxlen: 48
2407:2440:e016::/48 maxlen: 48
2407:2440:e017::/48 maxlen: 48
2407:2440:e018::/48 maxlen: 48
2407:2440:e040::/48 maxlen: 48
2407:2440:e041::/48 maxlen: 48
2407:2440:e042::/48 maxlen: 48
2407:2440:e043::/48 maxlen: 48
2407:2440:e044::/48 maxlen: 48
2407:2440:e045::/48 maxlen: 48
2407:2440:e050::/48 maxlen: 48
2407:2440:e051::/48 maxlen: 48
2407:2440:e052::/48 maxlen: 48
2407:2440:e053::/48 maxlen: 48
2407:2440:e054::/48 maxlen: 48
2407:2440:e055::/48 maxlen: 48
2407:2440:e071::/48 maxlen: 48
2407:2440:e072::/48 maxlen: 48
2407:2440:e073::/48 maxlen: 48
2407:2440:e074::/48 maxlen: 48
2407:2440:e075::/48 maxlen: 48
2407:2440:e081::/48 maxlen: 48
2407:2440:e082::/48 maxlen: 48
2407:2440:e083::/48 maxlen: 48
2407:2440:e084::/48 maxlen: 48
2407:2440:e085::/48 maxlen: 48
2407:2440:f001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Feb 27 06:55:32 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a13fe4-8424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:c7:7d:9d:e3:c1:1f:d9:d5:e3:cd:90:a5:
0c:f5:a4:87:7a:fd:9b:32:7b:dd:e7:d1:f1:2e:4e:
03:24:1c:1d:6f:ff:10:86:d6:45:41:a1:00:68:af:
ef:3a:f1:7c:22:de:ed:2b:b0:90:11:f8:f3:6a:73:
79:83:aa:28:7a:eb:cf:4e:a8:c6:08:1a:f7:3b:13:
e9:ec:6d:10:41:9c:37:6a:4e:38:ad:ec:d3:ce:55:
dd:87:32:c3:16:b5:63:37:a6:5c:bb:98:ed:98:0a:
d2:35:5b:d8:95:12:60:8d:bf:e1:35:e0:2f:72:06:
1d:9f:4e:a6:8c:43:ce:43:34:68:d7:74:e7:97:d2:
c1:d7:7e:a7:54:2e:88:f8:b6:7a:be:07:91:8d:f0:
4d:f2:05:5e:05:01:86:f3:f6:b5:3e:09:83:6a:b7:
0c:3a:a3:2a:5a:52:a1:c8:62:07:4c:3f:f3:9d:32:
8a:1c:23:78:f8:2d:7c:02:93:92:69:c8:e2:0f:ca:
18:1b:34:45:e7:0e:23:3a:e5:93:0e:15:1a:55:c3:
e6:0a:ed:66:c8:d9:48:40:1b:ad:6a:bc:e1:5e:ca:
7f:d3:17:50:6f:e2:39:a0:0e:bf:ee:c1:4b:71:9a:
34:72:41:5e:a5:95:97:12:40:46:1f:52:e8:ae:5d:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:50:67:98:7E:B3:17:1F:95:AC:E0:79:6B:C5:40:97:33:60:6A:C1
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.168.0/22
103.138.247.0/24
103.189.255.0/24
103.243.92.0/22
123.108.72.0/23
IPv6:
2407:2440:1::-2407:2440:19:ffff:ffff:ffff:ffff:ffff
2407:2440:1e::-2407:2440:20:ffff:ffff:ffff:ffff:ffff
2407:2440:22::/47
2407:2440:25::/48
2407:2440:28::/48
2407:2440:2a::-2407:2440:2d:ffff:ffff:ffff:ffff:ffff
2407:2440:a001::-2407:2440:a005:ffff:ffff:ffff:ffff:ffff
2407:2440:a007::-2407:2440:a009:ffff:ffff:ffff:ffff:ffff
2407:2440:b001::-2407:2440:b005:ffff:ffff:ffff:ffff:ffff
2407:2440:c001::/48
2407:2440:d001::/48
2407:2440:e001::-2407:2440:e004:ffff:ffff:ffff:ffff:ffff
2407:2440:e007::-2407:2440:e018:ffff:ffff:ffff:ffff:ffff
2407:2440:e040::-2407:2440:e045:ffff:ffff:ffff:ffff:ffff
2407:2440:e050::-2407:2440:e055:ffff:ffff:ffff:ffff:ffff
2407:2440:e071::-2407:2440:e075:ffff:ffff:ffff:ffff:ffff
2407:2440:e081::-2407:2440:e085:ffff:ffff:ffff:ffff:ffff
2407:2440:f001::/48
Signature Algorithm: sha256WithRSAEncryption
96:6e:2b:39:b0:06:6c:7c:0a:82:55:7b:fb:ea:b0:91:47:f2:
80:8a:eb:40:41:26:f1:3c:9f:84:00:82:e3:5b:af:d0:53:5b:
41:01:21:23:69:68:d8:ce:fd:72:9d:d3:f9:98:85:88:29:d3:
ad:2f:14:4b:c1:ed:aa:70:5f:0c:d4:d3:c1:3c:ab:0e:52:db:
56:81:7f:7a:5d:ee:bc:5a:4d:7c:2f:c3:af:ad:0d:7c:9c:7a:
8d:b1:ed:a0:0e:77:7f:4d:0e:30:38:77:d3:a9:bf:4c:96:9d:
26:95:6d:71:2f:89:d4:7d:e4:b1:40:23:92:84:07:1b:87:ca:
c4:08:f1:e5:f5:77:cf:f7:d3:fd:24:87:e8:9f:fc:01:a4:95:
ea:25:1b:d8:de:ad:12:52:b8:8e:33:cd:2e:3b:09:77:d7:1c:
fd:81:fd:c1:9f:e2:a3:6c:89:99:c7:48:1b:5a:09:e7:e1:3b:
ed:de:4c:5b:fc:17:f3:8f:91:38:d9:8d:6c:21:f5:a6:bf:1f:
2d:a2:1e:9a:28:14:70:7f:84:83:23:8a:e1:1d:71:0d:d7:ee:
73:08:95:bc:4b:3d:65:d7:b1:ca:1a:6b:4f:a7:e4:c4:1f:9c:
da:0c:9b:30:f8:ad:97:78:b9:48:7c:5f:79:07:9e:22:87:79:
71:19:cf:c2
-----BEGIN CERTIFICATE-----
MIIGjDCCBXSgAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB
MEFDRDQ0N0YwHhcNMjYwMjI3MDY1NTMyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWExM2ZlNC04NDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyPLHfZ3jwR/Z1ePNkKUM9aSHev2bMnvd59HxLk4DJBwdb/8QhtZFQaEAaK/v
OvF8It7tK7CQEfjzanN5g6ooeuvPTqjGCBr3OxPp7G0QQZw3ak44rezTzlXdhzLD
FrVjN6Zcu5jtmArSNVvYlRJgjb/hNeAvcgYdn06mjEPOQzRo13Tnl9LB136nVC6I
+LZ6vgeRjfBN8gVeBQGG8/a1PgmDarcMOqMqWlKhyGIHTD/znTKKHCN4+C18ApOS
acjiD8oYGzRF5w4jOuWTDhUaVcPmCu1myNlIQButarzhXsp/0xdQb+I5oA6/7sFL
cZo0ckFepZWXEkBGH1Lorl2HzwIDAQABo4IDsDCCA6wwHQYDVR0OBBYEFARQZ5h+
sxcflazgeWvFQJczYGrBMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG
NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S
SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUIyQjgvM0Y0NENCQUUyRjREMTFFRDhGNUE2QTY0QzRGOUFFMDIvMjA5NzhERDI3
MEU0MTFGMDhGNDAyNDJBQzRGOUFFMDIucm9hMIIBbQYIKwYBBQUHAQcBAf8EggFc
MIIBWDAkBAIAATAeAwQCZ4moAwQAZ4r3AwQAZ73/AwQCZ/NcAwQBe2xIMIIBLgQC
AAIwggEmMBIDBwAkByRAAAEDBwEkByRAABgwEgMHASQHJEAAHgMHACQHJEAAIAMH
ASQHJEAAIgMHACQHJEAAJQMHACQHJEAAKDASAwcBJAckQAAqAwcBJAckQAAsMBID
BwAkByRAoAEDBwEkByRAoAQwEgMHACQHJECgBwMHASQHJECgCDASAwcAJAckQLAB
AwcBJAckQLAEAwcAJAckQMABAwcAJAckQNABMBIDBwAkByRA4AEDBwAkByRA4AQw
EgMHACQHJEDgBwMHACQHJEDgGDASAwcGJAckQOBAAwcBJAckQOBEMBIDBwQkByRA
4FADBwEkByRA4FQwEgMHACQHJEDgcQMHASQHJEDgdDASAwcAJAckQOCBAwcBJAck
QOCEAwcAJAckQPABMA0GCSqGSIb3DQEBCwUAA4IBAQCWbis5sAZsfAqCVXv76rCR
R/KAiutAQSbxPJ+EAILjW6/QU1tBASEjaWjYzv1yndP5mIWIKdOtLxRLwe2qcF8M
1NPBPKsOUttWgX96Xe68Wk18L8OvrQ18nHqNse2gDnd/TQ4wOHfTqb9Mlp0mlW1x
L4nUfeSxQCOShAcbh8rECPHl9XfP99P9JIfon/wBpJXqJRvY3q0SUriOM80uOwl3
1xz9gf3Bn+KjbImZx0gbWgnn4Tvt3kxb/Bfzj5E42Y1sIfWmvx8toh6aKBRwf4SD
I4rhHXEN1+5zCJW8Sz1l17HKGmtPp+TEH5zaDJsw+K2XeLlIfF95B54ih3lxGc/C
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:36 2026 by rpki-client