Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/1AC1982A8C6A11EB91832D52C4F9AE02.roa
File: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (raw, json)
Hash identifier: yNT65s+ZHoPIL3JOL1s/li7Ld0/LZuMqDxYj04bLRnI=
Subject key identifier: 4C:38:5E:98:F4:0D:46:9D:6D:A4:BA:D5:B7:32:50:2D:69:C2:79:70
Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Certificate serial: 0743
Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/1AC1982A8C6A11EB91832D52C4F9AE02.roa
Signing time: Fri 17 Jul 2026 02:39:57 +0000
ROA not before: Fri 17 Jul 2026 02:39:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45499
IP address blocks: 103.5.60.0/22 maxlen: 22
103.5.60.0/24 maxlen: 24
103.5.61.0/24 maxlen: 24
103.5.62.0/24 maxlen: 24
103.5.63.0/24 maxlen: 24
110.5.64.0/21 maxlen: 21
110.5.64.0/24 maxlen: 24
110.5.65.0/24 maxlen: 24
110.5.66.0/24 maxlen: 24
110.5.67.0/24 maxlen: 24
110.5.68.0/24 maxlen: 24
110.5.69.0/24 maxlen: 24
110.5.70.0/24 maxlen: 24
110.5.71.0/24 maxlen: 24
111.235.80.0/20 maxlen: 20
111.235.80.0/24 maxlen: 24
111.235.81.0/24 maxlen: 24
111.235.82.0/24 maxlen: 24
111.235.83.0/24 maxlen: 24
111.235.84.0/24 maxlen: 24
111.235.85.0/24 maxlen: 24
111.235.86.0/24 maxlen: 24
111.235.87.0/24 maxlen: 24
111.235.88.0/24 maxlen: 24
111.235.89.0/24 maxlen: 24
111.235.90.0/24 maxlen: 24
111.235.91.0/24 maxlen: 24
111.235.92.0/24 maxlen: 24
111.235.93.0/24 maxlen: 24
111.235.94.0/24 maxlen: 24
111.235.95.0/24 maxlen: 24
116.206.224.0/22 maxlen: 22
116.206.224.0/24 maxlen: 24
116.206.225.0/24 maxlen: 24
116.206.226.0/24 maxlen: 24
116.206.227.0/24 maxlen: 24
203.118.244.0/22 maxlen: 22
203.118.244.0/24 maxlen: 24
203.118.245.0/24 maxlen: 24
203.118.246.0/24 maxlen: 24
203.118.247.0/24 maxlen: 24
2401:bc00::/32 maxlen: 32
2401:bc00:1::/48 maxlen: 48
2401:bc00:2::/48 maxlen: 48
2401:bc00:3::/48 maxlen: 48
2401:bc00:4::/48 maxlen: 48
2401:bc00:5::/48 maxlen: 48
2401:bc00:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl
rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 02:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1859 (0x743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91293E9, serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Validity
Not Before: Jul 17 02:39:57 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a5995fd-5194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:a2:2a:4b:19:2a:64:ce:28:f0:a7:97:a0:
b5:64:3a:4c:56:b7:75:ee:a9:90:fa:33:ff:fd:48:
c3:8b:76:eb:b9:0c:90:d2:9b:65:c4:aa:d8:5d:c6:
99:28:da:62:81:cd:7d:0a:ce:03:ff:00:dd:ed:c4:
df:4b:5c:fc:a3:7e:bb:5c:f5:fb:24:4c:c0:d1:cf:
a5:df:9c:dc:e9:f1:41:e6:95:a8:99:27:37:42:b5:
e4:ff:8b:1e:4c:a3:62:ac:7e:77:af:4c:93:a5:b7:
c8:5d:68:19:94:a6:c8:78:ee:d8:fc:41:04:93:69:
58:a7:e6:33:f3:89:e7:bd:89:9f:7b:9c:5f:8a:16:
04:c5:22:20:a7:5d:b7:09:20:71:60:b5:bb:e2:9b:
4b:bc:fb:d1:91:ef:59:53:26:e5:5f:79:77:ba:d1:
fc:73:9d:27:7f:71:d5:50:40:74:a4:e8:24:40:52:
3f:7c:81:80:bb:46:9a:01:2e:e8:aa:21:3e:d5:34:
5a:95:d9:dc:0c:9c:b2:f0:87:9e:c9:27:68:a2:27:
64:1d:aa:9a:d5:1d:64:9f:45:fd:c1:9e:be:fc:21:
0c:7a:11:20:f2:03:01:22:1b:59:f7:da:f7:d8:96:
42:2e:48:76:cb:6d:c7:f2:76:23:4d:cc:6a:2b:3f:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:38:5E:98:F4:0D:46:9D:6D:A4:BA:D5:B7:32:50:2D:69:C2:79:70
X509v3 Authority Key Identifier:
keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/1AC1982A8C6A11EB91832D52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.60.0/22
110.5.64.0/21
111.235.80.0/20
116.206.224.0/22
203.118.244.0/22
IPv6:
2401:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
b9:a7:9b:40:43:d1:d4:d6:57:89:50:6b:7b:7c:9b:49:d1:50:
7d:90:6d:e7:b0:8d:4d:cd:09:81:c8:62:de:d8:61:95:e1:e5:
b2:99:11:3d:59:e3:4c:23:5b:90:44:a5:6e:9c:1a:bf:b8:4e:
f1:56:61:fd:a3:f0:5a:70:1b:cf:ea:31:c0:e3:41:1b:94:e9:
ae:b0:25:5f:c4:d4:dc:be:09:9d:a5:b6:2f:60:11:6b:54:b3:
9a:5a:a2:8c:55:89:a5:79:cf:20:30:ec:56:81:71:74:20:e2:
9f:13:9d:c4:05:4e:51:cb:d3:81:d4:39:10:9a:70:48:67:89:
84:44:e5:cf:d7:51:d8:74:4a:93:0b:9b:ba:b1:5a:d9:d1:85:
88:ff:64:11:4e:0f:55:ab:5b:94:d6:25:f0:b0:77:3c:81:48:
09:14:56:a9:bc:ec:cd:bf:1f:c7:85:2c:b1:d0:c6:86:7f:07:
74:be:d9:41:3a:e9:1c:b3:6f:94:12:4c:f0:1a:eb:f0:74:5e:
32:c6:9c:0e:4e:28:73:79:dc:51:75:09:1b:54:d8:4f:f6:85:
bf:38:24:d7:c3:b1:52:8b:d1:33:4b:06:30:e4:1e:e1:87:2f:
52:b0:f2:12:dd:50:c0:be:86:c6:11:32:94:e1:69:a9:74:80:
1f:86:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:23:20 2026 by rpki-client