Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/98DD71780ECC11F0B8E48170C4F9AE02.roa
File: 98DD71780ECC11F0B8E48170C4F9AE02.roa (raw, json)
Hash identifier: vs8LiC2a7yfcHqx0F2jxfAS1octXGMx2IWNSmWMrwRs=
Subject key identifier: F1:7C:20:58:19:DC:4B:8F:26:67:B9:0C:BC:DF:DD:46:31:31:08:54
Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Certificate serial: 011C
Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/98DD71780ECC11F0B8E48170C4F9AE02.roa
Signing time: Mon 03 Aug 2026 06:36:15 +0000
ROA not before: Mon 03 Aug 2026 06:36:15 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 10099
IP address blocks: 43.251.12.0/22 maxlen: 24
43.252.84.0/22 maxlen: 24
43.255.168.0/22 maxlen: 24
103.1.64.0/22 maxlen: 24
103.69.184.0/22 maxlen: 24
103.77.20.0/22 maxlen: 24
103.86.12.0/22 maxlen: 24
103.95.176.0/22 maxlen: 24
103.107.88.0/22 maxlen: 24
103.118.36.0/22 maxlen: 24
103.203.184.0/22 maxlen: 24
103.214.64.0/22 maxlen: 24
103.228.68.0/22 maxlen: 24
103.229.244.0/22 maxlen: 24
103.239.176.0/22 maxlen: 24
119.252.136.0/21 maxlen: 24
121.46.116.0/22 maxlen: 24
121.91.88.0/21 maxlen: 24
121.91.136.0/21 maxlen: 24
202.77.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 06:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922
Validity
Not Before: Aug 3 06:36:15 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a7036df-dbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:0c:8a:4a:14:a5:23:5b:70:39:96:66:93:
c3:1c:61:6f:e6:e0:8d:70:c8:8e:a9:29:3c:5f:3d:
03:f0:c4:12:5e:7a:4d:73:0d:95:d8:00:85:f2:2b:
de:b7:30:56:16:38:43:6a:47:2b:62:b2:37:ae:72:
c3:02:3c:4b:05:e8:b3:27:ea:2e:cd:dc:b5:a9:d3:
23:ae:53:0a:58:53:53:e0:ae:b3:ab:38:24:fb:0f:
5b:24:71:ac:db:54:81:d9:77:ce:56:49:a3:2d:f1:
62:2a:65:e5:3d:e9:be:ab:ef:cd:28:8d:6a:88:30:
d1:ce:12:63:c6:3b:8e:f7:a2:aa:01:fe:94:9f:6c:
b6:90:b0:19:aa:11:29:1b:dc:89:cd:53:9e:dd:e2:
56:12:48:ee:ef:bd:8e:57:c4:91:88:5a:84:c4:56:
b1:ba:48:4d:71:50:d1:0d:49:ad:1c:f4:69:30:56:
fe:f4:b6:b0:c9:89:05:bc:69:90:54:93:23:35:4c:
46:28:d6:96:d0:47:5f:3a:10:5d:1d:a6:c5:68:22:
b2:20:a5:1a:e9:cc:60:55:37:b6:34:6c:5b:cb:5a:
d4:ce:9c:7d:d6:07:24:ff:b0:82:41:7e:7e:07:3c:
a9:57:75:7a:31:4a:bf:b8:f9:90:48:74:c4:37:de:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:20:58:19:DC:4B:8F:26:67:B9:0C:BC:DF:DD:46:31:31:08:54
X509v3 Authority Key Identifier:
keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/98DD71780ECC11F0B8E48170C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.251.12.0/22
43.252.84.0/22
43.255.168.0/22
103.1.64.0/22
103.69.184.0/22
103.77.20.0/22
103.86.12.0/22
103.95.176.0/22
103.107.88.0/22
103.118.36.0/22
103.203.184.0/22
103.214.64.0/22
103.228.68.0/22
103.229.244.0/22
103.239.176.0/22
119.252.136.0/21
121.46.116.0/22
121.91.88.0/21
121.91.136.0/21
202.77.16.0/21
Signature Algorithm: sha256WithRSAEncryption
27:14:6e:c7:26:05:dd:61:88:1b:d3:9f:ad:07:c9:6a:6a:e1:
53:e0:2e:c5:9f:0b:07:32:72:7a:32:10:5e:75:c9:a1:78:1d:
7e:d8:d4:0f:13:60:b5:fe:ef:e5:78:01:0e:e0:38:b3:11:7d:
60:54:fa:88:fa:ce:62:e4:e0:e1:12:cb:24:79:77:12:e6:ab:
68:5c:4d:b1:a7:fe:8d:f5:dd:21:fe:79:bd:6d:55:93:ce:56:
b7:74:3e:f2:fc:73:a4:a8:7f:b7:10:4c:51:e9:63:c3:b7:ac:
86:d7:1b:28:2a:1e:e3:c3:12:63:bc:14:c6:5a:f9:5d:30:f0:
e1:b3:a5:e1:a1:d0:6e:41:49:f3:92:27:55:87:77:a9:13:3e:
b3:97:8c:c4:72:a0:29:18:7e:8f:e5:de:b0:6d:15:bb:96:6f:
99:0e:73:fd:82:19:c9:01:70:9e:84:3e:c4:a7:d7:7b:4f:d0:
24:c2:77:ce:e5:68:ac:8d:27:0a:49:60:08:e8:5d:14:ad:f9:
c7:3a:76:7c:db:2b:38:2f:a7:30:11:20:d8:5f:7a:ba:d8:25:
05:0e:4c:b4:44:70:d7:37:be:e3:03:57:a7:e3:42:54:7b:33:
a3:f7:a2:81:e7:ab:37:5f:ae:39:00:bc:ce:60:31:00:a8:f7:
84:e4:20:b3
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ0QzkxMTAvBgNVBAUTKDk1NzQ1MjkzQzg4QTI3MjZFMTBBNTdENThGNDJDQzMx
NjlCN0M5MjIwHhcNMjYwODAzMDYzNjE1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcwMzZkZi1kYmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnNAMikoUpSNbcDmWZpPDHGFv5uCNcMiOqSk8Xz0D8MQSXnpNcw2V2ACF8ive
tzBWFjhDakcrYrI3rnLDAjxLBeizJ+ouzdy1qdMjrlMKWFNT4K6zqzgk+w9bJHGs
21SB2XfOVkmjLfFiKmXlPem+q+/NKI1qiDDRzhJjxjuO96KqAf6Un2y2kLAZqhEp
G9yJzVOe3eJWEkju772OV8SRiFqExFaxukhNcVDRDUmtHPRpMFb+9LawyYkFvGmQ
VJMjNUxGKNaW0EdfOhBdHabFaCKyIKUa6cxgVTe2NGxby1rUzpx91gck/7CCQX5+
BzypV3V6MUq/uPmQSHTEN97e3wIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFPF8IFgZ
3EuPJme5DLzf3UYxMQhUMB8GA1UdIwQYMBaAFJV0UpPIiicm4QpX1Y9CzDFpt8ki
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRDOS84NDJGOTg5NDBF
QzkxMUYwQTI2RkYxNDRDNEY5QUUwMi9sWFJTazhpS0p5YmhDbGZWajBMTU1XbTN5
U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lTSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTQ0QzkvODQyRjk4OTQwRUM5MTFGMEEyNkZGMTQ0QzRGOUFFMDIvOThERDcxNzgw
RUNDMTFGMEI4RTQ4MTcwQzRGOUFFMDIucm9hMIGTBggrBgEFBQcBBwEB/wSBgzCB
gDB+BAIAATB4AwQCK/sMAwQCK/xUAwQCK/+oAwQCZwFAAwQCZ0W4AwQCZ00UAwQC
Z1YMAwQCZ1+wAwQCZ2tYAwQCZ3YkAwQCZ8u4AwQCZ9ZAAwQCZ+REAwQCZ+X0AwQC
Z++wAwQDd/yIAwQCeS50AwQDeVtYAwQDeVuIAwQDyk0QMA0GCSqGSIb3DQEBCwUA
A4IBAQAnFG7HJgXdYYgb05+tB8lqauFT4C7FnwsHMnJ6MhBedcmheB1+2NQPE2C1
/u/leAEO4DizEX1gVPqI+s5i5ODhEsskeXcS5qtoXE2xp/6N9d0h/nm9bVWTzla3
dD7y/HOkqH+3EExR6WPDt6yG1xsoKh7jwxJjvBTGWvldMPDhs6XhodBuQUnzkidV
h3epEz6zl4zEcqApGH6P5d6wbRW7lm+ZDnP9ghnJAXCehD7Ep9d7T9AkwnfO5Wis
jScKSWAI6F0UrfnHOnZ82ys4L6cwESDYX3q62CUFDky0RHDXN77jA1en40JUezOj
96KB56s3X645ALzOYDEAqPeE5CCz
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:37 2026 by rpki-client