Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/F23138DA130911F1BB5ACCD1163D8C67.roa
File: F23138DA130911F1BB5ACCD1163D8C67.roa (raw, json)
Hash identifier: 3krA2VVM2VSyD5c5SaXNVQ6mPlMlAN+DOdKC6XE2BGo=
Subject key identifier: 72:48:D5:DB:5E:56:5A:63:20:D6:1B:47:7F:FE:03:92:EA:B0:E6:4B
Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial: 0C85
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/F23138DA130911F1BB5ACCD1163D8C67.roa
Signing time: Thu 26 Feb 2026 11:54:46 +0000
ROA not before: Thu 26 Feb 2026 11:54:46 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
103.11.61.0/24 maxlen: 24
103.11.62.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.140.0/24 maxlen: 24
180.178.141.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.143.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
2401:4100::/32 maxlen: 32
2401:4100::/33 maxlen: 33
2401:4100:8000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3205 (0xc85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Validity
Not Before: Feb 26 11:54:46 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a03486-9f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:8d:31:3a:3f:6c:3a:83:32:b4:4c:f7:34:
ad:15:9c:e3:e6:5a:33:10:85:8a:31:ab:7a:5c:d8:
e7:ff:74:8d:b0:1e:5c:cc:2e:4f:ab:ce:c0:d0:60:
7e:e9:5d:e5:4b:b4:ce:7f:f3:72:c6:ba:86:55:2c:
82:49:c8:8f:6c:63:4b:79:cd:c4:56:19:be:f7:81:
1c:05:c8:d1:30:fb:bf:7f:13:ac:db:87:1b:22:83:
ce:73:2f:4c:fe:7a:ef:10:51:1a:e2:1d:db:34:d2:
2c:4a:58:ce:94:30:15:00:8f:59:e7:e7:c0:93:bc:
e3:bd:bd:ef:2e:68:80:49:4c:e5:09:ed:9a:68:53:
d2:5d:25:00:1a:90:72:77:8b:79:35:70:58:74:d5:
e1:b9:12:36:e2:ac:77:2c:76:af:23:0e:f5:ee:3e:
e3:eb:8c:bb:47:35:19:a0:48:16:a9:ba:d0:ee:ac:
c0:81:f2:03:83:22:03:4b:0f:c3:a3:62:d9:9d:29:
19:ec:38:1f:44:52:ca:0b:92:fa:1b:21:3e:3d:fd:
86:52:31:9b:b2:bd:22:5e:87:f8:6f:85:34:9f:6e:
92:aa:e6:d1:68:85:59:97:15:f7:e8:89:f6:6d:32:
17:b9:de:8a:1f:b1:c7:89:7e:12:53:55:2c:87:4d:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:48:D5:DB:5E:56:5A:63:20:D6:1B:47:7F:FE:03:92:EA:B0:E6:4B
X509v3 Authority Key Identifier:
keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/F23138DA130911F1BB5ACCD1163D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/22
113.203.233.0-113.203.240.255
180.178.128.0/23
180.178.132.0-180.178.143.255
180.178.172.0/24
180.178.174.0/23
IPv6:
2401:4100::/32
Signature Algorithm: sha256WithRSAEncryption
21:94:f7:df:1e:ad:cb:1b:ed:50:c5:fd:12:8f:6c:67:98:37:
0c:25:28:75:78:a9:ae:0a:36:70:eb:4e:89:94:35:ec:1a:0c:
c4:22:1c:14:9e:0d:20:a3:b6:e8:07:b0:ad:6f:71:00:e9:76:
69:58:e2:36:6f:4d:7d:4c:b4:33:93:45:ca:1f:29:04:ef:10:
3c:e8:7d:b5:57:80:fb:2c:59:9d:20:64:0a:c8:7c:35:52:71:
3e:a9:02:75:db:f7:42:a2:28:26:6e:a8:d1:9c:2d:21:4d:58:
bc:60:fa:5b:94:c4:4f:3a:0c:24:99:c7:a8:f3:b4:27:d9:86:
84:db:e7:9b:d2:c3:2d:48:a6:4c:5d:b4:80:4d:2c:0d:7a:e3:
27:92:d0:1e:73:54:65:8b:66:a2:2f:83:61:da:d8:eb:66:d1:
f5:4e:f0:c6:c5:26:32:e1:7b:9f:47:bb:90:dc:a0:47:b1:46:
4f:66:21:b9:c1:e0:4b:4d:f6:35:28:d7:50:78:c6:af:a2:e8:
e1:6b:b1:50:a3:15:56:46:c1:50:9e:75:00:0d:80:a9:2c:e1:
c2:9b:c2:17:0f:8b:c5:db:ae:c6:ca:dc:fb:bc:02:71:16:c5:
f9:47:0c:12:cd:99:e0:cd:41:7b:35:74:46:b5:a4:ca:94:49:
86:1c:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:10 2026 by rpki-client