Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/D69ADE2E950811F1B4E5C4874D11F970.roa
File: D69ADE2E950811F1B4E5C4874D11F970.roa (raw, json)
Hash identifier: GaawGgIHoBsVIGUfplw1aAxhJXVn5iSulMWuhoxhXK4=
Subject key identifier: 96:0B:AE:3E:24:EA:45:F9:57:14:66:09:32:2A:87:05:3E:23:5B:CD
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 08F1
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/D69ADE2E950811F1B4E5C4874D11F970.roa
Signing time: Mon 10 Aug 2026 22:14:49 +0000
ROA not before: Mon 10 Aug 2026 22:14:49 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 9790
IP address blocks: 60.234.0.0/16 maxlen: 20
101.98.0.0/16 maxlen: 20
101.100.128.0/19 maxlen: 24
103.224.128.0/22 maxlen: 24
103.237.40.0/22 maxlen: 24
110.44.16.0/22 maxlen: 24
118.148.0.0/15 maxlen: 15
118.148.64.0/20 maxlen: 24
118.148.80.0/20 maxlen: 24
118.148.96.0/20 maxlen: 24
118.148.112.0/20 maxlen: 24
118.148.128.0/21 maxlen: 24
118.148.136.0/22 maxlen: 24
118.148.192.0/22 maxlen: 24
118.149.64.0/20 maxlen: 24
118.149.80.0/20 maxlen: 24
118.149.96.0/20 maxlen: 24
118.149.112.0/20 maxlen: 24
119.224.0.0/18 maxlen: 22
119.224.64.0/19 maxlen: 22
119.224.128.0/20 maxlen: 20
121.98.0.0/15 maxlen: 20
202.50.170.0/24 maxlen: 24
202.53.176.0/20 maxlen: 20
202.180.64.0/18 maxlen: 20
202.189.160.0/20 maxlen: 20
202.191.32.0/20 maxlen: 20
203.184.0.0/18 maxlen: 20
2400:4800::/32 maxlen: 32
2402:6000::/32 maxlen: 32
2402:8200::/32 maxlen: 32
2404:4400::/28 maxlen: 36
2405:a400::/32 maxlen: 32
2406:e000:201::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Aug 10 22:14:49 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a7a4d59-68f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:4d:2f:26:c6:c2:aa:4e:70:9d:3a:a9:d6:
5e:0d:2e:a0:f8:55:12:91:a8:c2:7d:46:59:c3:17:
7d:ec:91:cc:90:f9:2f:34:e9:a7:3f:e3:a9:c6:f9:
7a:20:82:11:0f:ff:60:c2:23:54:c3:db:6c:a3:66:
21:95:35:f0:20:0c:d7:f0:cb:b4:1e:7a:60:56:aa:
c8:eb:45:c2:6d:5c:bd:1b:18:7f:21:cf:c4:2d:c3:
e4:d0:e8:63:2f:d9:2c:f1:92:bd:50:6d:6f:af:95:
ad:f6:e8:3e:f9:f6:6d:41:85:65:b2:d3:e4:1f:15:
f5:f2:4a:2b:e7:93:0d:93:62:5e:89:ba:7b:1e:06:
ad:0b:c1:fd:a5:45:c3:4b:6a:98:1d:9d:d8:e6:1b:
af:76:92:9e:f3:20:5d:e7:a6:77:07:b8:55:00:ad:
37:43:4d:7b:b0:0c:19:8b:49:87:66:cf:26:30:b6:
b4:10:12:8c:87:16:60:a9:e6:f5:60:f8:60:be:7d:
91:dd:7c:2f:dd:7c:81:85:bd:59:c7:d3:33:1f:8c:
42:4d:44:b7:27:8b:f2:e0:e3:d0:d7:5e:de:b8:f1:
12:ed:da:ae:9f:77:f9:f4:58:6c:67:fe:7e:84:19:
14:47:68:9f:8e:ea:2b:8b:c2:ff:4a:76:99:50:46:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0B:AE:3E:24:EA:45:F9:57:14:66:09:32:2A:87:05:3E:23:5B:CD
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/D69ADE2E950811F1B4E5C4874D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
60.234.0.0/16
101.98.0.0/16
101.100.128.0/19
103.224.128.0/22
103.237.40.0/22
110.44.16.0/22
118.148.0.0/15
119.224.0.0-119.224.95.255
119.224.128.0/20
121.98.0.0/15
202.50.170.0/24
202.53.176.0/20
202.180.64.0/18
202.189.160.0/20
202.191.32.0/20
203.184.0.0/18
IPv6:
2400:4800::/32
2402:6000::/32
2402:8200::/32
2404:4400::/28
2405:a400::/32
2406:e000:201::/48
Signature Algorithm: sha256WithRSAEncryption
7e:38:cf:ac:cf:21:b7:b0:17:db:97:00:ac:76:31:74:a1:3e:
61:9a:64:53:43:a0:4c:a6:8a:d9:99:08:7e:be:71:96:33:84:
7b:8e:23:26:dd:39:38:88:63:1f:f0:fb:67:03:1a:f5:27:ee:
4c:f4:9d:b9:01:f6:a6:c8:b5:6d:d7:ce:bc:1b:32:e1:d2:f5:
84:f8:d4:de:53:30:87:40:0e:7f:fa:0a:46:a5:8e:8f:6e:5f:
d1:b1:59:44:59:e1:b2:d7:56:11:8e:6f:5d:c3:1e:c4:6e:f7:
7c:08:7a:3c:a0:e1:b8:df:e5:6d:4a:c7:6d:9f:96:bd:52:3b:
02:e1:78:7a:a0:cb:01:0f:84:ee:30:1b:e8:20:75:85:ab:a6:
66:d2:41:0e:f2:03:49:a6:ff:fb:5a:36:bb:7e:e2:d7:6b:10:
14:f8:32:9b:bb:b1:77:a8:e3:e9:eb:3d:26:19:40:af:c1:12:
2c:0d:9b:ab:67:fc:c2:20:66:ff:4c:23:6f:e1:ad:c1:46:44:
d4:61:e5:7d:d6:22:d0:39:7f:a0:1e:12:bf:29:cc:7f:b8:80:
78:e4:50:b7:c8:84:3e:b2:3c:bb:2d:6e:3d:ef:d0:b2:d7:7b:
0e:0a:d0:15:14:55:0a:01:59:0f:3c:1e:b4:b0:52:75:eb:7f:
d9:61:92:b1
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC
NjBEQjFCMkMwHhcNMjYwODEwMjIxNDQ5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdhNGQ1OS02OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq9NNLybGwqpOcJ06qdZeDS6g+FUSkajCfUZZwxd97JHMkPkvNOmnP+Opxvl6
IIIRD/9gwiNUw9tso2YhlTXwIAzX8Mu0HnpgVqrI60XCbVy9Gxh/Ic/ELcPk0Ohj
L9ks8ZK9UG1vr5Wt9ug++fZtQYVlstPkHxX18kor55MNk2Jeibp7HgatC8H9pUXD
S2qYHZ3Y5huvdpKe8yBd56Z3B7hVAK03Q017sAwZi0mHZs8mMLa0EBKMhxZgqeb1
YPhgvn2R3Xwv3XyBhb1Zx9MzH4xCTUS3J4vy4OPQ117euPES7dqun3f59FhsZ/5+
hBkUR2ifjuori8L/SnaZUEZS2wIDAQABo4IC9DCCAvAwHQYDVR0OBBYEFJYLrj4k
6kX5VxRmCTIqhwU+I1vNMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2
QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvRDY5QURFMkU5
NTA4MTFGMUI0RTVDNDg3NEQxMUY5NzAucm9hMIGyBggrBgEFBQcBBwEB/wSBojCB
nzBpBAIAATBjAwMAPOoDAwBlYgMEBWVkgAMEAmfggAMEAmftKAMEAm4sEAMDAXaU
MAsDAwV34AMEBXfgQAMEBHfggAMDAXliAwQAyjKqAwQEyjWwAwQGyrRAAwQEyr2g
AwQEyr8gAwQGy7gAMDIEAgACMCwDBQAkAEgAAwUAJAJgAAMFACQCggADBQQkBEQA
AwUAJAWkAAMHACQG4AACATANBgkqhkiG9w0BAQsFAAOCAQEAfjjPrM8ht7AX25cA
rHYxdKE+YZpkU0OgTKaK2ZkIfr5xljOEe44jJt05OIhjH/D7ZwMa9SfuTPSduQH2
psi1bdfOvBsy4dL1hPjU3lMwh0AOf/oKRqWOj25f0bFZRFnhstdWEY5vXcMexG73
fAh6PKDhuN/lbUrHbZ+WvVI7AuF4eqDLAQ+E7jAb6CB1haumZtJBDvIDSab/+1o2
u37i12sQFPgym7uxd6jj6es9JhlAr8ESLA2bq2f8wiBm/0wjb+GtwUZE1GHlfdYi
0Dl/oB4SvynMf7iAeORQt8iEPrI8uy1uPe/Qstd7DgrQFRRVCgFZDzwetLBSdet/
2WGSsQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 04:00:12 2026 by rpki-client