Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
File: 3C30815CABB611ED8370AB5DC4F9AE02.roa (raw, json)
Hash identifier: s9Tnookk9z0/qDfi/1wyU61gwP1H0Q+apw5B+6I+rvg=
Subject key identifier: 91:A0:33:08:19:A0:B4:D9:2D:CE:D3:99:5D:EC:F4:DA:F4:D7:6A:0A
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 0902
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
Signing time: Wed 09 Sep 2026 23:01:42 +0000
ROA not before: Wed 09 Sep 2026 23:01:42 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 140220
IP address blocks: 60.234.7.0/24 maxlen: 24
60.234.8.0/24 maxlen: 24
60.234.10.0/24 maxlen: 24
60.234.11.0/24 maxlen: 24
60.234.12.0/24 maxlen: 24
60.234.13.0/24 maxlen: 24
60.234.14.0/24 maxlen: 24
60.234.15.0/24 maxlen: 24
60.234.31.0/24 maxlen: 24
60.234.32.0/24 maxlen: 24
60.234.33.0/24 maxlen: 24
60.234.39.0/24 maxlen: 24
60.234.40.0/23 maxlen: 24
60.234.46.0/24 maxlen: 24
60.234.50.0/24 maxlen: 24
60.234.51.0/24 maxlen: 24
60.234.52.0/24 maxlen: 24
60.234.53.0/24 maxlen: 24
60.234.63.0/24 maxlen: 24
60.234.68.0/24 maxlen: 24
60.234.72.0/24 maxlen: 24
60.234.73.0/24 maxlen: 24
60.234.75.0/24 maxlen: 24
60.234.82.0/23 maxlen: 24
60.234.84.0/22 maxlen: 24
60.234.88.0/24 maxlen: 24
60.234.89.0/24 maxlen: 24
60.234.90.0/23 maxlen: 24
60.234.92.0/23 maxlen: 24
60.234.94.0/24 maxlen: 24
60.234.95.0/24 maxlen: 24
60.234.96.0/24 maxlen: 24
60.234.98.0/24 maxlen: 24
60.234.99.0/24 maxlen: 24
60.234.100.0/23 maxlen: 24
60.234.102.0/23 maxlen: 24
60.234.104.0/22 maxlen: 24
60.234.108.0/24 maxlen: 24
60.234.109.0/24 maxlen: 24
60.234.110.0/24 maxlen: 24
60.234.111.0/24 maxlen: 24
60.234.112.0/24 maxlen: 24
60.234.113.0/24 maxlen: 24
60.234.114.0/24 maxlen: 24
60.234.115.0/24 maxlen: 24
60.234.116.0/23 maxlen: 24
60.234.118.0/24 maxlen: 24
60.234.119.0/24 maxlen: 24
60.234.120.0/24 maxlen: 24
60.234.121.0/24 maxlen: 24
60.234.122.0/23 maxlen: 24
60.234.124.0/24 maxlen: 24
60.234.125.0/24 maxlen: 24
60.234.126.0/24 maxlen: 24
60.234.127.0/24 maxlen: 24
60.234.128.0/24 maxlen: 24
60.234.129.0/24 maxlen: 24
60.234.130.0/24 maxlen: 24
60.234.131.0/24 maxlen: 24
60.234.132.0/24 maxlen: 24
60.234.133.0/24 maxlen: 24
60.234.134.0/24 maxlen: 24
60.234.135.0/24 maxlen: 24
60.234.136.0/24 maxlen: 24
60.234.137.0/24 maxlen: 24
60.234.138.0/24 maxlen: 24
60.234.139.0/24 maxlen: 24
60.234.140.0/24 maxlen: 24
60.234.141.0/24 maxlen: 24
60.234.142.0/24 maxlen: 24
60.234.143.0/24 maxlen: 24
60.234.144.0/23 maxlen: 24
60.234.146.0/23 maxlen: 24
60.234.148.0/24 maxlen: 24
60.234.149.0/24 maxlen: 24
60.234.150.0/23 maxlen: 24
60.234.152.0/21 maxlen: 24
60.234.160.0/24 maxlen: 24
60.234.161.0/24 maxlen: 24
60.234.162.0/23 maxlen: 24
60.234.164.0/24 maxlen: 24
60.234.165.0/24 maxlen: 24
60.234.166.0/24 maxlen: 24
60.234.167.0/24 maxlen: 24
60.234.168.0/24 maxlen: 24
60.234.169.0/24 maxlen: 24
60.234.170.0/24 maxlen: 24
60.234.171.0/24 maxlen: 24
60.234.172.0/24 maxlen: 24
60.234.173.0/24 maxlen: 24
60.234.174.0/24 maxlen: 24
60.234.175.0/24 maxlen: 24
60.234.176.0/24 maxlen: 24
60.234.178.0/24 maxlen: 24
60.234.181.0/24 maxlen: 24
60.234.182.0/23 maxlen: 24
60.234.184.0/23 maxlen: 24
60.234.186.0/24 maxlen: 24
60.234.187.0/24 maxlen: 24
60.234.188.0/24 maxlen: 24
60.234.189.0/24 maxlen: 24
60.234.190.0/24 maxlen: 24
60.234.191.0/24 maxlen: 24
60.234.192.0/24 maxlen: 24
60.234.193.0/24 maxlen: 24
60.234.194.0/23 maxlen: 24
60.234.196.0/23 maxlen: 24
60.234.198.0/23 maxlen: 24
60.234.201.0/24 maxlen: 24
60.234.202.0/23 maxlen: 24
60.234.204.0/24 maxlen: 24
60.234.205.0/24 maxlen: 24
60.234.206.0/24 maxlen: 24
60.234.207.0/24 maxlen: 24
60.234.208.0/20 maxlen: 24
60.234.224.0/19 maxlen: 24
121.98.32.0/24 maxlen: 24
121.98.33.0/24 maxlen: 24
121.98.34.0/23 maxlen: 24
121.98.36.0/22 maxlen: 24
121.98.40.0/23 maxlen: 24
121.98.42.0/23 maxlen: 24
121.98.44.0/24 maxlen: 24
121.98.45.0/24 maxlen: 24
121.98.46.0/23 maxlen: 24
121.98.124.0/23 maxlen: 24
121.98.127.0/24 maxlen: 24
202.127.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306 (0x902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Sep 9 23:01:42 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6aa1e556-869a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:e8:9d:58:34:36:f2:bf:bb:b0:98:ea:68:
e6:b7:9b:45:2b:fd:ab:be:20:32:d6:fe:cd:27:1a:
d5:37:32:bc:43:90:ec:a7:6b:e4:7d:ee:31:04:e8:
63:cc:21:f0:3f:75:61:12:b8:df:5b:8c:53:0f:02:
0d:0c:01:26:ea:9f:f1:b7:df:49:ec:23:3a:7d:8a:
fd:3b:3f:30:a6:ed:1b:dc:7c:2d:36:f2:cd:a8:bb:
3c:68:d5:49:c7:29:e9:e8:10:bc:df:91:b8:4c:28:
27:79:57:b7:af:81:78:3e:b5:00:32:04:1c:c8:e5:
37:0b:52:63:fd:b3:1c:19:e1:f5:d1:73:69:d1:bc:
55:b2:0c:17:1a:2f:b1:8a:d1:a5:d2:37:94:09:d0:
b4:24:6f:ec:27:ac:e9:a5:54:da:1a:44:3b:a7:1e:
88:5a:50:9f:24:8b:0e:17:1b:5a:27:53:f3:4e:19:
3d:ba:91:79:6e:69:e6:bb:a0:cb:54:16:84:d0:a6:
0c:be:13:96:6e:92:a2:87:09:8b:df:a6:6c:75:5d:
0b:19:20:67:87:7a:99:e1:69:bb:3b:a1:7b:c0:47:
00:f1:d9:54:5c:90:c6:15:fb:b5:19:5a:15:9f:63:
1a:02:e2:d1:92:18:b6:23:e3:f4:f4:ec:98:92:55:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A0:33:08:19:A0:B4:D9:2D:CE:D3:99:5D:EC:F4:DA:F4:D7:6A:0A
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
60.234.7.0-60.234.8.255
60.234.10.0-60.234.15.255
60.234.31.0-60.234.33.255
60.234.39.0-60.234.41.255
60.234.46.0/24
60.234.50.0-60.234.53.255
60.234.63.0/24
60.234.68.0/24
60.234.72.0/23
60.234.75.0/24
60.234.82.0-60.234.96.255
60.234.98.0-60.234.176.255
60.234.178.0/24
60.234.181.0-60.234.199.255
60.234.201.0-60.234.255.255
121.98.32.0/20
121.98.124.0/23
121.98.127.0/24
202.127.8.0/22
Signature Algorithm: sha256WithRSAEncryption
42:48:6c:9e:bb:6d:da:db:43:06:b4:8e:db:50:af:5e:6d:b8:
ce:f4:f9:6e:5f:dc:3c:05:91:ef:9c:09:48:91:6e:ac:a9:9a:
c2:ad:c4:b2:90:85:13:85:ec:d8:d1:2d:d8:f2:df:d4:87:33:
9f:8b:37:e1:02:57:1d:92:1a:74:96:f4:50:95:be:a3:6e:54:
be:2a:7e:8c:ca:24:12:00:db:cf:95:a4:13:45:20:0e:9e:0c:
d5:4a:e9:c6:12:89:a8:c7:31:5d:7a:4d:d2:ec:94:b8:2f:1b:
f1:c8:88:5e:f9:f5:ff:d4:39:e8:00:68:29:a1:f8:c1:31:1a:
c3:81:2e:ab:64:60:bf:25:3d:5a:82:c4:8d:1c:c8:fb:68:4a:
58:5e:e5:fb:b5:68:49:e2:a2:cf:95:48:e1:77:9b:48:12:58:
0f:4a:14:45:dd:67:63:fc:7f:24:97:f7:4f:b4:d9:51:73:d7:
bf:23:77:17:e3:e0:e9:72:a9:22:28:0f:f2:56:0c:f4:2e:58:
a5:d0:b0:f1:06:b4:de:89:48:d2:f3:09:f5:cf:9a:43:3f:cc:
8f:bc:02:d9:89:56:99:08:1a:ac:1d:f3:99:a0:2f:7d:51:c6:
d4:3d:8b:59:90:94:8d:91:aa:ba:66:ce:10:fc:40:da:14:99:
fe:34:d5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:10:42 2026 by rpki-client