Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/2FEF460CD41D11F09C0AFC45C4F9AE02.roa
File: 2FEF460CD41D11F09C0AFC45C4F9AE02.roa (raw, json)
Hash identifier: rdQn4B0Eo4gv/K/Yqr8j8ThR1Ni5qGM9wHTsGAWKsWQ=
Subject key identifier: 10:68:77:B5:A8:F4:4F:59:6E:DA:2F:61:48:E5:AA:C3:B0:B6:02:4F
Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
Certificate serial: 01BC
Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/2FEF460CD41D11F09C0AFC45C4F9AE02.roa
Signing time: Thu 05 Feb 2026 14:23:50 +0000
ROA not before: Thu 05 Feb 2026 14:23:50 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 24334
IP address blocks: 103.11.88.0/22 maxlen: 22
103.11.88.0/24 maxlen: 24
103.11.89.0/24 maxlen: 24
103.11.90.0/24 maxlen: 24
103.11.91.0/24 maxlen: 24
202.83.240.0/21 maxlen: 21
202.83.240.0/24 maxlen: 24
202.83.241.0/24 maxlen: 24
202.83.242.0/24 maxlen: 24
202.83.243.0/24 maxlen: 24
202.83.244.0/24 maxlen: 24
202.83.245.0/24 maxlen: 24
202.83.246.0/24 maxlen: 24
202.83.247.0/24 maxlen: 24
202.171.208.0/21 maxlen: 21
202.171.208.0/24 maxlen: 24
202.171.209.0/24 maxlen: 24
202.171.210.0/24 maxlen: 24
202.171.211.0/24 maxlen: 24
202.171.212.0/24 maxlen: 24
202.171.213.0/24 maxlen: 24
202.171.214.0/24 maxlen: 24
202.171.215.0/24 maxlen: 24
203.142.88.0/21 maxlen: 21
203.142.88.0/24 maxlen: 24
203.142.89.0/24 maxlen: 24
203.142.90.0/24 maxlen: 24
203.142.91.0/24 maxlen: 24
203.142.92.0/24 maxlen: 24
203.142.93.0/24 maxlen: 24
203.142.94.0/24 maxlen: 24
203.142.95.0/24 maxlen: 24
2404:1a0::/30 maxlen: 32
2404:1a0:1000::/46 maxlen: 46
2404:1a0:1000::/47 maxlen: 47
2404:1a0:1001::/48 maxlen: 48
2404:1a0:1002::/48 maxlen: 48
2404:1a0:2008::/48 maxlen: 48
2404:1a0:fffc::/46 maxlen: 46
2404:1a0:fffc::/47 maxlen: 47
2404:1a0:ffff::/48 maxlen: 48
2404:1a3:1000::/46 maxlen: 46
2404:1a3:1000::/47 maxlen: 47
2404:1a3:1001::/48 maxlen: 48
2404:1a3:fffc::/46 maxlen: 46
2404:1a3:fffc::/47 maxlen: 47
2404:1a3:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl
rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A
Validity
Not Before: Feb 5 14:23:50 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6984a7f6-e59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a2:2e:bf:00:a5:f1:e8:3b:b7:b2:18:2a:f8:
95:b5:80:a6:fb:f4:77:7b:c2:f8:05:10:a8:1a:7b:
89:49:54:d9:2c:03:d7:d6:6e:e3:c8:fe:26:fe:fe:
f3:17:32:09:47:bb:f2:14:66:d9:fe:1d:d2:91:cb:
ab:bf:14:5b:a6:de:c2:33:f9:8f:3f:de:e7:ab:38:
90:2e:68:71:28:e5:68:0f:a4:a5:cd:26:0f:5d:c2:
ac:05:0b:64:53:f7:7b:cd:2e:f0:87:1d:15:ad:2d:
32:1e:7a:1d:99:0b:16:7b:5c:8d:01:24:9e:ca:fa:
8f:2b:47:cb:80:cc:5c:e0:33:c6:11:02:28:66:2a:
81:ea:cc:c4:89:b6:12:d9:20:e9:eb:d5:b1:65:6d:
e7:ca:66:90:69:92:9d:25:08:a4:31:8a:67:2d:4b:
1b:e8:d5:14:7a:b0:aa:f9:0b:cb:cf:2f:6a:6d:8c:
f8:94:9c:2a:e0:c8:b4:c8:81:6b:67:b9:05:42:27:
d6:76:44:ff:d3:c5:21:52:e5:db:7e:3e:46:df:fd:
50:7a:f7:26:82:ba:32:34:71:b5:89:a3:45:01:1a:
9c:ef:a9:f9:d1:31:7f:8e:c8:68:08:b3:8a:06:e4:
04:7a:08:06:0c:6e:90:7e:56:91:02:09:c1:0a:14:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:68:77:B5:A8:F4:4F:59:6E:DA:2F:61:48:E5:AA:C3:B0:B6:02:4F
X509v3 Authority Key Identifier:
keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/2FEF460CD41D11F09C0AFC45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.88.0/22
202.83.240.0/21
202.171.208.0/21
203.142.88.0/21
IPv6:
2404:1a0::/30
Signature Algorithm: sha256WithRSAEncryption
9e:a4:95:d0:63:37:96:25:55:70:eb:00:18:2f:33:38:56:69:
b0:fe:32:1e:3a:1c:c5:8f:aa:3f:a8:eb:0b:0f:c8:1c:2d:f5:
fd:b6:a5:0a:3e:53:1d:b3:91:d1:5c:ec:4e:ae:e2:d7:ff:39:
9a:1c:ff:1e:5a:c9:45:f6:4c:7d:8c:fb:2c:fe:f6:21:d5:60:
5a:95:09:95:14:d4:5a:f7:a7:6d:6d:b2:80:f1:0e:6a:be:ce:
e5:90:f4:4a:94:d3:9d:83:c6:73:ba:b8:cd:49:a2:dd:6f:02:
f6:77:51:20:73:f3:33:84:3b:65:fd:63:9f:0b:2b:08:e4:c3:
74:e5:81:0a:07:49:fe:b6:1e:c8:32:fa:e7:58:5e:37:17:45:
f7:56:8e:d6:89:a8:4f:37:3c:29:11:f8:7e:b0:f2:b4:95:bc:
ba:ff:dc:50:f2:48:6e:c0:27:1b:85:0f:25:4d:72:fa:8f:d7:
e1:19:14:26:b7:f5:23:c3:3e:38:00:a0:3f:90:3b:d8:60:ee:
ce:c5:48:ff:a5:1f:b3:3f:78:0b:7f:67:34:bb:ab:85:27:21:
20:94:c0:bc:b0:c9:52:25:a6:cb:71:df:4d:08:d7:89:3b:b2:
21:07:cc:83:7b:4a:75:18:68:c1:bd:39:31:47:88:42:44:1a:
2d:c1:00:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:59:16 2026 by rpki-client