Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/C28841A201DB11EDA4B7F257C4F9AE02.roa
File: C28841A201DB11EDA4B7F257C4F9AE02.roa (raw, json)
Hash identifier: hCuzbMp3eP4dYgPKB5Jynen/PaRt4sGzjsZJDP5fAZY=
Subject key identifier: EA:1A:A7:5C:07:F1:3C:77:C0:67:AC:11:CA:39:52:57:2C:14:DA:55
Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
Certificate serial: 06FC
Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/C28841A201DB11EDA4B7F257C4F9AE02.roa
Signing time: Mon 02 Feb 2026 22:18:39 +0000
ROA not before: Mon 02 Feb 2026 22:18:39 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 38583
IP address blocks: 43.243.236.0/24 maxlen: 24
43.243.237.0/24 maxlen: 24
103.24.240.0/23 maxlen: 24
103.39.60.0/22 maxlen: 22
103.224.208.0/24 maxlen: 24
103.224.209.0/24 maxlen: 24
103.224.211.0/24 maxlen: 24
103.249.127.0/24 maxlen: 24
113.29.244.0/22 maxlen: 24
125.214.88.0/21 maxlen: 24
175.184.193.0/24 maxlen: 24
175.184.195.0/24 maxlen: 24
175.184.196.0/24 maxlen: 24
175.184.197.0/24 maxlen: 24
175.184.199.0/24 maxlen: 24
175.184.216.0/24 maxlen: 24
175.184.217.0/24 maxlen: 24
175.184.221.0/24 maxlen: 24
175.184.222.0/24 maxlen: 24
175.184.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl
rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1788 (0x6fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
Validity
Not Before: Feb 2 22:18:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=698122bf-da38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:38:a6:87:6d:0d:38:23:51:1e:08:54:79:cf:
ee:b7:08:ab:d6:b1:f7:a5:1f:9d:11:0c:25:7d:fc:
cb:f1:84:06:0d:ba:38:d1:1f:3d:5f:31:35:60:60:
ab:9c:f2:98:d2:0a:74:6b:f1:36:50:f6:2b:3b:d0:
c9:cc:ad:52:ac:de:1b:4e:ce:ab:2e:28:f0:45:ef:
68:ff:cf:b8:70:ad:e1:90:11:b9:f8:7e:5a:3b:7f:
7f:53:74:86:c6:e3:9e:70:8f:ac:7c:25:c8:3b:cb:
4a:78:3e:6e:e8:e0:33:f1:25:c8:df:08:0a:dc:4a:
1f:45:cb:8b:fc:31:c4:b8:28:48:aa:26:74:0b:d7:
54:b8:be:87:44:41:63:8b:64:15:88:0b:ab:92:b4:
31:4a:df:1f:b0:90:1b:8e:e3:83:ea:7e:63:ce:7f:
d3:0c:07:18:2a:4e:37:14:70:a2:fd:a7:15:5c:f6:
e3:f0:7b:e9:d5:1f:d0:9f:a9:bf:0f:69:73:19:b9:
ea:d1:f1:d7:1b:a3:65:be:fa:ce:19:57:ef:b3:ba:
a3:58:ff:56:34:06:2a:80:d9:b8:18:cf:be:a1:f5:
d2:1e:76:65:87:73:f0:fe:07:b8:6f:10:57:bd:64:
a8:0f:14:64:59:63:01:db:5f:5e:06:8e:77:5b:05:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1A:A7:5C:07:F1:3C:77:C0:67:AC:11:CA:39:52:57:2C:14:DA:55
X509v3 Authority Key Identifier:
keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/C28841A201DB11EDA4B7F257C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.236.0/23
103.24.240.0/23
103.39.60.0/22
103.224.208.0/23
103.224.211.0/24
103.249.127.0/24
113.29.244.0/22
125.214.88.0/21
175.184.193.0/24
175.184.195.0-175.184.197.255
175.184.199.0/24
175.184.216.0/23
175.184.221.0-175.184.223.255
Signature Algorithm: sha256WithRSAEncryption
6b:a2:2b:3c:37:b6:b8:a7:79:bb:2d:45:46:5b:e1:16:c9:ac:
b5:ea:a8:f9:48:dd:73:97:18:2e:b4:da:c9:0e:f9:4e:b2:a6:
7a:3b:e4:85:e0:d5:1d:b8:d3:9e:fd:10:06:00:ec:56:2d:1a:
15:a1:33:08:48:da:1a:a8:da:36:98:82:7f:17:42:fe:25:37:
36:51:75:a9:24:a9:79:2f:05:58:02:b0:77:c1:c7:63:fd:60:
77:c1:9c:0f:a1:01:9b:7f:fd:8c:7e:1b:e0:68:0e:33:6c:19:
c4:9e:b4:12:81:d4:d6:3f:46:7a:d2:4b:94:a8:06:45:a6:3d:
11:09:68:7c:24:e4:c5:b6:79:f0:7a:60:fe:ae:ae:be:a6:d7:
f1:5e:4a:4f:63:73:d9:66:41:37:b9:50:37:32:7b:0a:25:7e:
2f:7a:b3:2d:bd:31:8b:a4:91:e6:50:a8:f8:68:82:6f:d7:20:
a5:c8:4c:8b:dc:f3:5a:cc:54:68:d1:39:6f:87:67:c9:7a:82:
0b:c4:fc:13:51:d1:30:06:e2:72:80:ef:f9:cc:7c:73:1d:37:
4d:3f:20:f9:6e:b2:09:f3:d4:9b:ee:16:74:0c:3f:f2:17:de:
34:0f:39:f3:c9:f8:81:ae:0b:fb:e3:7a:53:27:f1:db:65:b7:
a2:d9:02:50
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0
RjlGNkE5M0UwHhcNMjYwMjAyMjIxODM5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTgxMjJiZi1kYTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2zimh20NOCNRHghUec/utwir1rH3pR+dEQwlffzL8YQGDbo40R89XzE1YGCr
nPKY0gp0a/E2UPYrO9DJzK1SrN4bTs6rLijwRe9o/8+4cK3hkBG5+H5aO39/U3SG
xuOecI+sfCXIO8tKeD5u6OAz8SXI3wgK3EofRcuL/DHEuChIqiZ0C9dUuL6HREFj
i2QViAurkrQxSt8fsJAbjuOD6n5jzn/TDAcYKk43FHCi/acVXPbj8Hvp1R/Qn6m/
D2lzGbnq0fHXG6NlvvrOGVfvs7qjWP9WNAYqgNm4GM++ofXSHnZlh3Pw/ge4bxBX
vWSoDxRkWWMB219eBo53WwUagQIDAQABo4IC7TCCAukwHQYDVR0OBBYEFOoap1wH
8Tx3wGesEco5UlcsFNpVMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB
QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx
VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE5RUQvNTRCOTdBMjY4QUI2MTFFQjgzMkYwMzE0QzRGOUFFMDIvQzI4ODQxQTIw
MURCMTFFREE0QjdGMjU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdwYIKwYBBQUHAQcBAf8E
aDBmMGQEAgABMF4DBAEr8+wDBAFnGPADBAJnJzwDBAFn4NADBABn4NMDBABn+X8D
BAJxHfQDBAN91lgDBACvuMEwDAMEAK+4wwMEAa+4xAMEAK+4xwMEAa+42DAMAwQA
r7jdAwQFr7jAMA0GCSqGSIb3DQEBCwUAA4IBAQBrois8N7a4p3m7LUVGW+EWyay1
6qj5SN1zlxgutNrJDvlOsqZ6O+SF4NUduNOe/RAGAOxWLRoVoTMISNoaqNo2mIJ/
F0L+JTc2UXWpJKl5LwVYArB3wcdj/WB3wZwPoQGbf/2MfhvgaA4zbBnEnrQSgdTW
P0Z60kuUqAZFpj0RCWh8JOTFtnnwemD+rq6+ptfxXkpPY3PZZkE3uVA3MnsKJX4v
erMtvTGLpJHmUKj4aIJv1yClyEyL3PNazFRo0Tlvh2fJeoILxPwTUdEwBuJygO/5
zHxzHTdNPyD5brIJ89Sb7hZ0DD/yF940DznzyfiBrgv743pTJ/HbZbei2QJQ
-----END CERTIFICATE-----
Generated at Thu Feb 19 20:34:41 2026 by rpki-client