Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1F4DFC16768511F199B9825161A30FBC.roa
File: 1F4DFC16768511F199B9825161A30FBC.roa (raw, json)
Hash identifier: iJNTPD61eNSJ+9YFly+WpyodmiFcgzz7X/R7IoVOu54=
Subject key identifier: 0E:FB:4D:95:E6:71:34:EC:71:94:30:04:CC:DD:58:7B:FD:58:76:B5
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6D2E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1F4DFC16768511F199B9825161A30FBC.roa
Signing time: Tue 25 Aug 2026 10:04:33 +0000
ROA not before: Tue 25 Aug 2026 10:04:33 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150895
IP address blocks: 36.50.26.0/24 maxlen: 24
36.50.27.0/24 maxlen: 24
103.20.102.0/23 maxlen: 24
103.67.162.0/23 maxlen: 23
103.72.56.0/23 maxlen: 23
103.75.76.0/23 maxlen: 23
103.77.208.0/23 maxlen: 24
103.78.2.0/23 maxlen: 23
103.116.52.0/23 maxlen: 24
103.152.164.0/23 maxlen: 24
103.161.172.0/24 maxlen: 24
103.173.66.0/23 maxlen: 24
103.237.86.0/23 maxlen: 24
163.61.72.0/23 maxlen: 24
163.223.210.0/23 maxlen: 23
2001:df3:e4c0::/48 maxlen: 48
2401:2be0::/48 maxlen: 48
2401:3560::/48 maxlen: 48
2401:37e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27950 (0x6d2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 25 10:04:33 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a8d68b1-4442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:6f:67:6e:e1:40:cd:d1:36:a2:fd:fc:4d:
76:57:a6:1c:b5:f0:4a:cd:ea:9e:5a:bd:3c:d7:30:
24:1b:8e:2f:6b:b6:87:27:d0:c3:e0:2f:4b:b3:f6:
ab:d8:43:7b:da:f8:41:b6:1f:70:3c:ed:0d:93:4d:
db:76:28:3c:c7:a8:a5:30:15:f9:7d:81:63:c8:3f:
c9:b7:4d:1e:ee:8f:f7:94:b3:c3:f8:a8:9c:31:bf:
1d:83:80:96:89:ba:cc:9e:92:1c:c1:36:1a:6a:8b:
7d:e2:74:a0:de:26:4b:4a:4d:8e:e3:f6:7c:67:8f:
82:76:8d:de:2c:f8:10:9b:98:f4:1d:d5:f7:f1:30:
a7:37:9f:a3:d2:62:c9:03:d0:cc:85:24:cd:48:b6:
ec:31:0f:5f:a1:c4:a9:81:1e:96:f9:24:01:3a:bd:
06:d1:bd:5d:37:34:a2:08:72:47:8f:e0:da:64:99:
bc:15:ca:4e:07:dc:ec:cf:65:68:c4:09:26:ec:72:
e4:32:34:3a:0e:68:b9:c8:6c:cf:ea:6d:8c:da:7f:
ff:38:69:20:cd:8b:82:95:bb:5c:9b:43:22:a6:2a:
4a:34:70:e7:1d:84:ed:86:ae:fb:b3:6e:2d:24:a3:
aa:c2:70:c1:10:da:20:cc:11:ea:50:fa:09:b2:46:
28:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FB:4D:95:E6:71:34:EC:71:94:30:04:CC:DD:58:7B:FD:58:76:B5
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1F4DFC16768511F199B9825161A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.26.0/23
103.20.102.0/23
103.67.162.0/23
103.72.56.0/23
103.75.76.0/23
103.77.208.0/23
103.78.2.0/23
103.116.52.0/23
103.152.164.0/23
103.161.172.0/24
103.173.66.0/23
103.237.86.0/23
163.61.72.0/23
163.223.210.0/23
IPv6:
2001:df3:e4c0::/48
2401:2be0::/48
2401:3560::/48
2401:37e0::/48
Signature Algorithm: sha256WithRSAEncryption
a9:a1:fb:c9:59:2e:15:23:55:77:eb:e8:f8:22:04:5b:b3:07:
23:47:31:3d:17:f9:00:80:01:eb:1b:25:ba:4b:fd:cd:a0:6f:
4b:e1:e0:86:70:90:f5:26:9d:f2:9f:1a:25:5a:64:30:d3:d7:
a6:7c:a0:6c:e3:62:cf:8d:70:42:ce:be:80:ce:96:76:52:48:
b8:be:81:5a:8c:ce:5b:ed:b5:c9:d8:79:25:82:69:67:a8:57:
cc:43:80:e1:c7:af:2f:fb:ad:52:6d:41:85:82:b5:25:b3:eb:
e6:ff:4b:94:14:9f:0c:cf:2a:c2:9b:97:27:cd:94:92:50:7c:
0f:18:79:0d:2a:fc:d6:76:e4:55:ff:3c:9b:d4:32:4c:41:f2:
f2:ae:78:18:40:84:5d:c2:e8:8f:bc:5a:ea:a5:b5:e5:4a:dd:
82:14:27:64:41:fb:73:7c:6e:0f:69:20:2c:e1:cd:d6:0c:45:
5b:cf:b5:eb:25:dc:2d:c6:07:47:71:2f:53:22:91:6d:6b:97:
d6:5a:23:40:ba:9c:79:2e:0e:b9:17:57:43:7f:c1:fb:69:81:
51:30:e5:bb:b3:46:41:52:3c:e8:73:a0:29:bf:d4:62:a8:58:
a0:a7:31:b9:4c:a9:7c:3b:f5:00:46:e1:7a:80:a0:cb:51:ab:
ad:26:72:36
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgICbS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYwODI1MTAwNDMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThkNjhiMS00NDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiZxvZ27hQM3RNqL9/E12V6YctfBKzeqeWr081zAkG44va7aHJ9DD4C9Ls/ar
2EN72vhBth9wPO0Nk03bdig8x6ilMBX5fYFjyD/Jt00e7o/3lLPD+KicMb8dg4CW
ibrMnpIcwTYaaot94nSg3iZLSk2O4/Z8Z4+Cdo3eLPgQm5j0HdX38TCnN5+j0mLJ
A9DMhSTNSLbsMQ9focSpgR6W+SQBOr0G0b1dNzSiCHJHj+DaZJm8FcpOB9zsz2Vo
xAkm7HLkMjQ6Dmi5yGzP6m2M2n//OGkgzYuClbtcm0MipipKNHDnHYTthq77s24t
JKOqwnDBENogzBHqUPoJskYoHwIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFA77TZXm
cTTscZQwBMzdWHv9WHa1MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMUY0REZDMTY3
Njg1MTFGMTk5Qjk4MjUxNjFBMzBGQkMucm9hMIGbBggrBgEFBQcBBwEB/wSBizCB
iDBaBAIAATBUAwQBJDIaAwQBZxRmAwQBZ0OiAwQBZ0g4AwQBZ0tMAwQBZ03QAwQB
Z04CAwQBZ3Q0AwQBZ5ikAwQAZ6GsAwQBZ61CAwQBZ+1WAwQBoz1IAwQBo9/SMCoE
AgACMCQDBwAgAQ3z5MADBwAkASvgAAADBwAkATVgAAADBwAkATfgAAAwDQYJKoZI
hvcNAQELBQADggEBAKmh+8lZLhUjVXfr6PgiBFuzByNHMT0X+QCAAesbJbpL/c2g
b0vh4IZwkPUmnfKfGiVaZDDT16Z8oGzjYs+NcELOvoDOlnZSSLi+gVqMzlvttcnY
eSWCaWeoV8xDgOHHry/7rVJtQYWCtSWz6+b/S5QUnwzPKsKblyfNlJJQfA8YeQ0q
/NZ25FX/PJvUMkxB8vKueBhAhF3C6I+8WuqlteVK3YIUJ2RB+3N8bg9pICzhzdYM
RVvPtesl3C3GB0dxL1MikW1rl9ZaI0C6nHkuDrkXV0N/wftpgVEw5buzRkFSPOhz
oCm/1GKoWKCnMblMqXw79QBG4XqAoMtRq60mcjY=
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:22:18 2026 by rpki-client