Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/983FA0E8F68C11EC884BB16BC4F9AE02.roa
File: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (raw, json)
Hash identifier: JTfIQDzlma+BMDLHgBpGIyVgGKJ2u7QeJy1k4YDsRZ4=
Subject key identifier: A4:33:98:51:C3:56:DA:8E:4E:C5:FE:40:21:10:44:4F:4D:79:11:9E
Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial: 07AB
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/983FA0E8F68C11EC884BB16BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:56:18 +0000
ROA not before: Sat 10 May 2025 22:22:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10094
IP address blocks: 61.6.192.0/18 maxlen: 24
103.4.188.0/22 maxlen: 22
103.4.188.0/24 maxlen: 24
103.4.189.0/24 maxlen: 24
103.4.190.0/24 maxlen: 24
103.4.191.0/24 maxlen: 24
103.20.24.0/22 maxlen: 22
103.42.208.0/22 maxlen: 22
118.103.248.0/21 maxlen: 21
118.103.248.0/22 maxlen: 22
118.103.248.0/24 maxlen: 24
118.103.249.0/24 maxlen: 24
118.103.250.0/24 maxlen: 24
118.103.251.0/24 maxlen: 24
118.103.252.0/24 maxlen: 24
118.103.253.0/24 maxlen: 24
118.103.254.0/24 maxlen: 24
118.103.255.0/24 maxlen: 24
119.160.128.0/18 maxlen: 24
202.93.208.0/20 maxlen: 24
202.152.64.0/24 maxlen: 24
202.152.65.0/24 maxlen: 24
202.152.66.0/24 maxlen: 24
202.152.67.0/24 maxlen: 24
202.152.68.0/22 maxlen: 22
202.152.68.0/24 maxlen: 24
202.152.69.0/24 maxlen: 24
202.152.70.0/24 maxlen: 24
202.152.71.0/24 maxlen: 24
202.152.72.0/24 maxlen: 24
202.152.73.0/24 maxlen: 24
202.152.76.0/22 maxlen: 22
202.152.76.0/24 maxlen: 24
202.152.77.0/24 maxlen: 24
202.152.78.0/24 maxlen: 24
202.152.79.0/24 maxlen: 24
202.152.80.0/24 maxlen: 24
202.152.81.0/24 maxlen: 24
202.152.82.0/24 maxlen: 24
202.152.83.0/24 maxlen: 24
202.152.84.0/24 maxlen: 24
202.152.85.0/24 maxlen: 24
202.152.86.0/24 maxlen: 24
202.152.87.0/24 maxlen: 24
202.152.92.0/24 maxlen: 24
202.152.93.0/24 maxlen: 24
202.152.94.0/24 maxlen: 24
202.152.95.0/24 maxlen: 24
202.160.0.0/21 maxlen: 24
202.160.8.0/21 maxlen: 24
202.160.16.0/20 maxlen: 24
202.160.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1963 (0x7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Validity
Not Before: May 10 22:22:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a45391-ac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:70:8d:fa:57:f2:18:2d:a5:b8:f3:00:55:4c:
ef:aa:fe:78:96:d6:ae:52:33:f1:49:53:2f:c9:7f:
5b:f1:b8:74:b8:74:05:5c:3a:c7:e7:0c:43:7a:b8:
44:4e:23:a2:89:30:29:d8:40:24:a4:c2:f8:39:e3:
d5:04:d6:d2:d7:02:95:27:a5:3a:ef:b8:a6:1f:2a:
e9:63:66:3b:a2:07:17:8e:4b:b2:99:e3:ec:a9:d7:
9e:e1:0a:bd:ec:1b:e8:7f:ef:1a:8b:f0:1f:2c:03:
f3:05:ea:ae:6e:4c:79:c6:c1:68:c0:ca:c8:96:96:
95:71:9e:0d:40:6b:1f:26:7f:4d:d8:d7:1c:d5:60:
78:8e:c2:25:17:99:a6:d2:f4:d5:6b:c2:6a:a5:3f:
34:90:d1:d6:80:bf:53:07:57:37:25:f8:35:1c:f0:
a0:84:89:5b:ce:fe:47:e1:ec:af:92:1e:64:3e:6e:
f9:4e:8b:83:b7:5f:8c:8f:6d:da:8e:88:26:39:cc:
ae:86:81:fd:8b:25:a1:0f:7f:fe:e0:2c:7d:3a:7b:
4b:97:f4:a3:98:c7:ad:45:7b:5b:cf:82:58:7f:71:
6f:d6:70:55:57:11:3e:e7:c7:48:22:71:60:e2:30:
fa:fb:37:44:c5:83:b8:50:eb:79:93:3c:a5:a1:59:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:33:98:51:C3:56:DA:8E:4E:C5:FE:40:21:10:44:4F:4D:79:11:9E
X509v3 Authority Key Identifier:
keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/983FA0E8F68C11EC884BB16BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.6.192.0/18
103.4.188.0/22
103.20.24.0/22
103.42.208.0/22
118.103.248.0/21
119.160.128.0/18
202.93.208.0/20
202.152.64.0-202.152.73.255
202.152.76.0-202.152.87.255
202.152.92.0/22
202.160.0.0-202.160.47.255
Signature Algorithm: sha256WithRSAEncryption
63:f5:5f:f2:87:6c:f8:6c:c6:cd:32:4d:94:6c:bf:84:30:e1:
56:88:06:cc:41:12:ac:2d:8d:69:7b:aa:96:32:02:81:b9:5a:
aa:47:46:f7:ea:53:c6:8a:99:ee:61:fe:1b:c0:b0:0e:b7:bd:
17:91:60:d7:9a:3a:7b:44:c2:15:19:07:99:a9:47:b3:b6:02:
47:76:f7:90:45:33:21:b0:00:1c:d4:47:d2:d5:ba:9c:38:20:
f0:14:2a:ff:15:70:66:52:38:6b:3a:69:7f:30:b6:37:79:74:
a4:58:aa:5a:70:64:ae:67:4d:31:41:fd:0b:86:24:49:d9:18:
c7:ad:84:58:1a:3f:0d:e1:05:04:16:11:ec:43:5f:32:2e:b4:
9d:e6:50:ef:01:8a:a2:b5:2a:1d:00:5c:58:89:6e:84:25:2d:
f1:a3:7b:3f:32:23:c1:e1:df:c6:6b:8a:cc:cb:5f:31:0a:09:
4f:fd:0a:4e:71:66:64:ef:05:8e:6a:e7:84:4f:96:38:64:eb:
61:07:97:21:51:3c:55:9d:3e:81:37:73:e2:a2:5c:e2:50:1f:
b0:3f:72:87:75:68:97:6c:9e:58:b3:db:a5:01:e4:ef:ad:e8:
d8:9d:a1:2f:e4:b1:ca:7f:33:61:c1:c8:9b:44:2f:4b:1d:9d:
d0:27:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:34 2026 by rpki-client