Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/CE7B5902AF3F11F186796EF16911F970.roa
File: CE7B5902AF3F11F186796EF16911F970.roa (raw, json)
Hash identifier: IHWM6RFhPrMmsqVLsW0iVew5UfTXyAVb0zZ4b4QqZQU=
Subject key identifier: BF:F8:7B:BC:13:49:18:C1:5B:EF:B5:AF:4D:6B:DE:2B:90:FD:F5:5B
Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial: 256C
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/CE7B5902AF3F11F186796EF16911F970.roa
Signing time: Sun 13 Sep 2026 06:53:21 +0000
ROA not before: Sun 13 Sep 2026 06:53:21 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 58923
IP address blocks: 36.255.68.0/22 maxlen: 22
36.255.68.0/24 maxlen: 24
36.255.69.0/24 maxlen: 24
36.255.70.0/24 maxlen: 24
36.255.71.0/24 maxlen: 24
103.23.40.0/22 maxlen: 22
103.23.40.0/24 maxlen: 24
103.23.41.0/24 maxlen: 24
103.23.42.0/24 maxlen: 24
103.23.43.0/24 maxlen: 24
103.209.40.0/22 maxlen: 23
103.248.12.0/22 maxlen: 24
118.67.208.0/20 maxlen: 20
118.67.208.0/24 maxlen: 24
118.67.209.0/24 maxlen: 24
118.67.210.0/24 maxlen: 24
118.67.211.0/24 maxlen: 24
118.67.212.0/24 maxlen: 24
118.67.213.0/24 maxlen: 24
118.67.214.0/24 maxlen: 24
118.67.215.0/24 maxlen: 24
118.67.216.0/24 maxlen: 24
118.67.217.0/24 maxlen: 24
118.67.218.0/24 maxlen: 24
118.67.219.0/24 maxlen: 24
118.67.220.0/24 maxlen: 24
118.67.221.0/24 maxlen: 24
118.67.222.0/24 maxlen: 24
118.67.223.0/24 maxlen: 24
163.53.149.0/24 maxlen: 24
163.53.150.0/24 maxlen: 24
163.53.151.0/24 maxlen: 24
2406:f100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9580 (0x256c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Validity
Not Before: Sep 13 06:53:21 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6aa64861-a056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ad:37:09:91:f0:c2:0e:63:1b:9a:72:10:19:
f5:6f:10:4a:f4:71:7c:e4:e5:72:a5:93:f9:ba:0d:
17:a6:7b:ca:19:56:f0:f2:08:1b:e2:de:f6:98:05:
dd:1b:52:90:69:44:9b:7a:f4:75:d7:9c:78:c8:8c:
20:1b:31:c2:bb:3c:25:e8:ea:0f:9c:f2:5a:38:fd:
07:31:57:f7:4d:6c:4d:1d:00:de:80:a0:43:f3:0e:
9b:33:d1:04:d0:85:31:e7:93:59:76:0a:e0:c7:5a:
88:c7:0a:f5:37:10:fc:01:31:37:88:01:e7:2d:62:
ee:87:91:51:a0:5f:47:d0:f2:33:b0:11:c2:ce:c2:
fa:f7:58:5e:1c:a1:44:f0:81:a1:3b:4e:4d:ab:d4:
b9:32:2a:4d:9d:59:94:7c:3d:c1:09:6e:0f:36:0d:
11:d8:b7:6a:df:8e:fb:46:ca:08:df:64:bc:5a:79:
2d:dd:2d:f6:90:32:46:68:a4:d9:12:03:39:0b:06:
7e:b9:28:7a:8e:99:bb:27:fd:c8:61:dd:30:88:62:
3a:a9:fe:ae:a5:f8:b6:ed:f9:b4:ed:92:cb:63:d2:
de:e6:2e:75:b7:20:00:8f:6c:57:30:69:f5:69:85:
13:e6:1c:7d:b0:65:06:fb:d5:88:a9:61:ac:4a:c7:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F8:7B:BC:13:49:18:C1:5B:EF:B5:AF:4D:6B:DE:2B:90:FD:F5:5B
X509v3 Authority Key Identifier:
keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/CE7B5902AF3F11F186796EF16911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.68.0/22
103.23.40.0/22
103.209.40.0/22
103.248.12.0/22
118.67.208.0/20
163.53.149.0-163.53.151.255
IPv6:
2406:f100::/32
Signature Algorithm: sha256WithRSAEncryption
73:28:67:01:e9:a7:2a:ad:17:79:9b:5d:84:de:12:03:d0:df:
03:22:9f:95:e0:a6:3f:9d:d3:3f:4f:89:9c:d4:5d:d5:31:2a:
60:fc:c5:5b:0e:a0:e1:2e:71:a8:9e:06:04:fd:52:e8:a1:53:
d8:29:16:19:87:07:0e:50:ec:28:71:78:4a:b8:7a:07:fa:58:
26:8e:02:4b:71:70:dc:47:78:4f:e9:cb:4d:79:38:ff:7a:7d:
a9:28:bc:18:4f:2b:cb:b5:c7:23:3b:c9:3d:e2:dc:6d:45:30:
db:ec:51:5e:2b:ad:8f:f6:a6:2d:78:ed:89:15:cd:43:ee:a9:
81:a1:76:f9:c0:ad:4d:48:30:1b:81:97:b5:f2:f7:4c:95:55:
f0:d5:ea:ba:a4:30:7f:5d:b5:bb:e9:1a:71:0c:10:de:e1:38:
3e:80:da:f0:d9:3a:cb:f2:96:9f:ad:27:4b:00:6f:5c:bb:f1:
d7:f7:0a:86:4a:8e:e7:b2:16:e3:12:e2:e9:69:ba:21:1d:d5:
b2:f7:93:c2:9c:ba:5f:63:b2:e9:7b:09:05:34:80:ca:db:51:
86:b3:a6:6e:c8:32:f5:ef:85:c5:3e:cf:fe:5e:8c:09:73:6d:
ae:1b:38:7d:50:ed:7f:f9:11:b4:96:1c:17:8a:c7:79:4f:a2:
46:99:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:22:57 2026 by rpki-client