Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/90606AD670AA11ED8DAE4C5AC4F9AE02.roa
File: 90606AD670AA11ED8DAE4C5AC4F9AE02.roa (raw, json)
Hash identifier: slq0Wyqnx6iAofRexHMploP6lzx1Y7iMjxAKRH4brB0=
Subject key identifier: 83:20:69:6E:98:30:07:A4:3F:63:F3:A2:A3:6C:3E:C0:DB:0C:EF:14
Certificate issuer: /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Certificate serial: 09AB
Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/90606AD670AA11ED8DAE4C5AC4F9AE02.roa
Signing time: Wed 26 Aug 2026 20:40:23 +0000
ROA not before: Wed 26 Aug 2026 20:40:23 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 17563
IP address blocks: 103.184.58.0/23 maxlen: 24
116.58.0.0/17 maxlen: 23
116.58.0.0/24 maxlen: 24
116.58.1.0/24 maxlen: 24
116.58.2.0/24 maxlen: 24
116.58.3.0/24 maxlen: 24
116.58.4.0/24 maxlen: 24
116.58.5.0/24 maxlen: 24
116.58.6.0/24 maxlen: 24
116.58.7.0/24 maxlen: 24
116.58.8.0/24 maxlen: 24
116.58.9.0/24 maxlen: 24
116.58.10.0/24 maxlen: 24
116.58.11.0/24 maxlen: 24
116.58.12.0/24 maxlen: 24
116.58.13.0/24 maxlen: 24
116.58.14.0/24 maxlen: 24
116.58.15.0/24 maxlen: 24
116.58.16.0/24 maxlen: 24
116.58.17.0/24 maxlen: 24
116.58.18.0/24 maxlen: 24
116.58.19.0/24 maxlen: 24
116.58.20.0/24 maxlen: 24
116.58.21.0/24 maxlen: 24
116.58.22.0/24 maxlen: 24
116.58.23.0/24 maxlen: 24
116.58.24.0/24 maxlen: 24
116.58.25.0/24 maxlen: 24
116.58.26.0/24 maxlen: 24
116.58.27.0/24 maxlen: 24
116.58.28.0/24 maxlen: 24
116.58.29.0/24 maxlen: 24
116.58.30.0/24 maxlen: 24
116.58.31.0/24 maxlen: 24
116.58.32.0/24 maxlen: 24
116.58.33.0/24 maxlen: 24
116.58.34.0/24 maxlen: 24
116.58.35.0/24 maxlen: 24
116.58.36.0/24 maxlen: 24
116.58.37.0/24 maxlen: 24
116.58.38.0/24 maxlen: 24
116.58.39.0/24 maxlen: 24
116.58.40.0/24 maxlen: 24
116.58.41.0/24 maxlen: 24
116.58.42.0/24 maxlen: 24
116.58.43.0/24 maxlen: 24
116.58.44.0/24 maxlen: 24
116.58.45.0/24 maxlen: 24
116.58.46.0/24 maxlen: 24
116.58.47.0/24 maxlen: 24
116.58.48.0/24 maxlen: 24
116.58.49.0/24 maxlen: 24
116.58.50.0/24 maxlen: 24
116.58.51.0/24 maxlen: 24
116.58.52.0/24 maxlen: 24
116.58.53.0/24 maxlen: 24
116.58.54.0/24 maxlen: 24
116.58.55.0/24 maxlen: 24
116.58.56.0/24 maxlen: 24
116.58.57.0/24 maxlen: 24
116.58.58.0/24 maxlen: 24
116.58.59.0/24 maxlen: 24
116.58.60.0/24 maxlen: 24
116.58.61.0/24 maxlen: 24
116.58.62.0/24 maxlen: 24
116.58.63.0/24 maxlen: 24
116.58.64.0/24 maxlen: 24
116.58.65.0/24 maxlen: 24
116.58.66.0/24 maxlen: 24
116.58.67.0/24 maxlen: 24
116.58.68.0/24 maxlen: 24
116.58.69.0/24 maxlen: 24
116.58.70.0/24 maxlen: 24
116.58.71.0/24 maxlen: 24
116.58.72.0/24 maxlen: 24
116.58.73.0/24 maxlen: 24
116.58.74.0/24 maxlen: 24
116.58.75.0/24 maxlen: 24
116.58.76.0/24 maxlen: 24
116.58.77.0/24 maxlen: 24
116.58.78.0/24 maxlen: 24
116.58.79.0/24 maxlen: 24
116.58.80.0/24 maxlen: 24
116.58.81.0/24 maxlen: 24
116.58.82.0/24 maxlen: 24
116.58.83.0/24 maxlen: 24
116.58.84.0/24 maxlen: 24
116.58.85.0/24 maxlen: 24
116.58.86.0/24 maxlen: 24
116.58.87.0/24 maxlen: 24
116.58.88.0/24 maxlen: 24
116.58.89.0/24 maxlen: 24
116.58.90.0/24 maxlen: 24
116.58.91.0/24 maxlen: 24
116.58.92.0/24 maxlen: 24
116.58.93.0/24 maxlen: 24
116.58.94.0/24 maxlen: 24
116.58.95.0/24 maxlen: 24
116.58.96.0/24 maxlen: 24
116.58.97.0/24 maxlen: 24
116.58.98.0/24 maxlen: 24
116.58.99.0/24 maxlen: 24
116.58.100.0/24 maxlen: 24
116.58.101.0/24 maxlen: 24
116.58.102.0/24 maxlen: 24
116.58.103.0/24 maxlen: 24
116.58.104.0/24 maxlen: 24
116.58.105.0/24 maxlen: 24
116.58.106.0/24 maxlen: 24
116.58.107.0/24 maxlen: 24
116.58.108.0/24 maxlen: 24
116.58.109.0/24 maxlen: 24
116.58.110.0/24 maxlen: 24
116.58.111.0/24 maxlen: 24
116.58.112.0/24 maxlen: 24
116.58.113.0/24 maxlen: 24
116.58.114.0/24 maxlen: 24
116.58.115.0/24 maxlen: 24
116.58.116.0/24 maxlen: 24
116.58.117.0/24 maxlen: 24
116.58.118.0/24 maxlen: 24
116.58.119.0/24 maxlen: 24
116.58.120.0/24 maxlen: 24
116.58.121.0/24 maxlen: 24
116.58.122.0/24 maxlen: 24
116.58.123.0/24 maxlen: 24
116.58.124.0/24 maxlen: 24
116.58.125.0/24 maxlen: 24
116.58.126.0/24 maxlen: 24
116.58.127.0/24 maxlen: 24
202.59.64.0/19 maxlen: 23
202.59.64.0/24 maxlen: 24
202.59.65.0/24 maxlen: 24
202.59.66.0/24 maxlen: 24
202.59.67.0/24 maxlen: 24
202.59.68.0/24 maxlen: 24
202.59.69.0/24 maxlen: 24
202.59.70.0/24 maxlen: 24
202.59.71.0/24 maxlen: 24
202.59.72.0/24 maxlen: 24
202.59.73.0/24 maxlen: 24
202.59.74.0/24 maxlen: 24
202.59.75.0/24 maxlen: 24
202.59.76.0/24 maxlen: 24
202.59.77.0/24 maxlen: 24
202.59.78.0/24 maxlen: 24
202.59.79.0/24 maxlen: 24
202.59.80.0/24 maxlen: 24
202.59.81.0/24 maxlen: 24
202.59.82.0/24 maxlen: 24
202.59.83.0/24 maxlen: 24
202.59.84.0/24 maxlen: 24
202.59.85.0/24 maxlen: 24
202.59.86.0/24 maxlen: 24
202.59.87.0/24 maxlen: 24
202.59.88.0/24 maxlen: 24
202.59.89.0/24 maxlen: 24
202.59.90.0/24 maxlen: 24
202.59.91.0/24 maxlen: 24
202.59.92.0/24 maxlen: 24
202.59.93.0/24 maxlen: 24
202.59.94.0/24 maxlen: 24
202.59.95.0/24 maxlen: 24
2400:68a0::/32 maxlen: 40
2400:68a0::/41 maxlen: 48
2400:68a0:80::/41 maxlen: 48
2400:68a0:100::/41 maxlen: 48
2400:68a0:180::/41 maxlen: 48
2400:68a0:200::/41 maxlen: 48
2400:68a0:280::/41 maxlen: 48
2400:68a0:300::/41 maxlen: 48
2400:68a0:380::/41 maxlen: 48
2400:68a0:a000::/41 maxlen: 48
2400:68a0:a580::/41 maxlen: 48
2400:68a0:af80::/41 maxlen: 48
2400:68a0:f000::/41 maxlen: 48
2400:68a0:fa00::/41 maxlen: 48
2400:68a0:ff80::/41 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl
rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2475 (0x9ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A0B, serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Validity
Not Before: Aug 26 20:40:23 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8f4f36-ce5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f0:4e:8f:c0:3d:f4:03:66:d4:c0:17:27:68:
88:c1:41:f2:5b:ab:63:27:53:17:6a:dc:fb:d7:95:
c1:d2:f5:dc:ac:fb:ff:3c:93:2f:00:be:6f:66:be:
08:27:ca:bc:b1:01:2c:3b:3a:7d:22:13:af:7e:1b:
15:28:3e:67:5e:d1:e7:52:89:54:fb:74:a9:16:d2:
5b:ab:ee:56:ec:25:f2:67:4f:d2:a9:ca:66:10:ee:
80:43:72:fc:2d:39:f8:34:d6:98:b5:ec:0a:95:a7:
81:89:c0:a8:4f:64:5e:45:3a:6e:43:9f:0c:01:23:
9c:d7:18:b9:b4:6e:a1:c9:15:57:58:7d:15:42:9b:
6f:84:e2:63:3d:7c:34:4d:fd:d2:af:29:e4:4a:1b:
83:54:db:25:85:66:54:4e:96:e6:b1:00:30:d8:35:
50:9e:86:11:3b:57:cc:bc:34:0f:04:39:77:2b:68:
32:ef:3d:1b:b0:5d:92:14:e0:f1:38:30:a4:bd:32:
df:fd:23:69:fd:18:63:4c:a3:7d:2a:ec:48:20:82:
75:fc:9f:01:19:02:68:ab:3f:e9:43:27:c9:a4:68:
dd:98:70:1a:bb:a7:9e:64:ff:40:0f:db:4d:24:f0:
62:a3:d7:57:67:5b:c8:9f:4c:0b:95:76:45:9d:e2:
60:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:69:6E:98:30:07:A4:3F:63:F3:A2:A3:6C:3E:C0:DB:0C:EF:14
X509v3 Authority Key Identifier:
keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/90606AD670AA11ED8DAE4C5AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.184.58.0/23
116.58.0.0/17
202.59.64.0/19
IPv6:
2400:68a0::/32
Signature Algorithm: sha256WithRSAEncryption
b0:7c:73:b8:73:73:3a:a3:a7:5d:b4:06:37:98:ca:47:bb:a1:
b4:58:7c:dd:22:3d:61:d1:64:ab:73:f4:7a:dc:20:dd:42:8b:
9f:21:0f:fb:2c:5d:35:6a:5e:ca:de:90:62:b7:c1:d6:68:c2:
b1:c6:86:80:b0:c1:b5:b1:5a:d7:18:ec:fb:e2:e2:b1:6f:c2:
7a:5a:6c:06:0f:cb:86:a7:03:89:ae:07:23:18:f0:44:e3:4a:
81:45:73:f5:8c:75:09:c9:94:3f:5f:da:84:83:dc:4b:73:0d:
e5:19:09:68:ee:2f:f7:0d:8b:af:2d:8f:8a:e6:5e:e4:d7:27:
e2:6c:24:9a:ea:aa:eb:92:46:9b:bc:f7:3f:13:5c:05:40:00:
27:31:da:1a:19:e6:e0:0f:7a:c8:13:2b:d2:19:81:06:6c:df:
44:22:0e:a9:14:2f:1a:c9:12:1c:28:19:c7:48:f8:70:91:9b:
92:59:f7:00:36:36:d4:88:6b:88:09:97:56:e8:87:94:b1:28:
7b:20:12:43:8c:28:5b:76:8b:19:82:0f:9b:8b:0e:9f:4b:52:
c4:83:78:ee:be:67:57:c5:7d:ba:78:dc:0c:60:dd:47:e8:57:
75:a2:06:ad:3a:35:b8:68:d1:53:64:3d:d5:0a:55:e1:a2:27:
14:d8:cc:f3
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjVBMEIxMTAvBgNVBAUTKDcxQUE1OENERjFCNkJEN0MyNkU2MUE3NTE4QTREMEFE
MkM5RjFBMTQwHhcNMjYwODI2MjA0MDIzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThmNGYzNi1jZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmPBOj8A99ANm1MAXJ2iIwUHyW6tjJ1MXatz715XB0vXcrPv/PJMvAL5vZr4I
J8q8sQEsOzp9IhOvfhsVKD5nXtHnUolU+3SpFtJbq+5W7CXyZ0/SqcpmEO6AQ3L8
LTn4NNaYtewKlaeBicCoT2ReRTpuQ58MASOc1xi5tG6hyRVXWH0VQptvhOJjPXw0
Tf3SrynkShuDVNslhWZUTpbmsQAw2DVQnoYRO1fMvDQPBDl3K2gy7z0bsF2SFODx
ODCkvTLf/SNp/RhjTKN9KuxIIIJ1/J8BGQJoqz/pQyfJpGjdmHAau6eeZP9AD9tN
JPBio9dXZ1vIn0wLlXZFneJgWwIDAQABo4ICezCCAncwHQYDVR0OBBYEFIMgaW6Y
MAekP2PzoqNsPsDbDO8UMB8GA1UdIwQYMBaAFHGqWM3xtr18JuYadRik0K0snxoU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUEwQi8xNTU4NkY0MkM0
RjgxMUVBOEI5QjRDMTNDNEY5QUUwMi9jYXBZemZHMnZYd201aHAxR0tUUXJTeWZH
aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NhcFl6Zkcydlh3bTVocDFHS1RRclN5ZkdoUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjVBMEIvMTU1ODZGNDJDNEY4MTFFQThCOUI0QzEzQzRGOUFFMDIvOTA2MDZBRDY3
MEFBMTFFRDhEQUU0QzVBQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY
BAIAATASAwQBZ7g6AwQHdDoAAwQFyjtAMA0EAgACMAcDBQAkAGigMA0GCSqGSIb3
DQEBCwUAA4IBAQCwfHO4c3M6o6ddtAY3mMpHu6G0WHzdIj1h0WSrc/R63CDdQouf
IQ/7LF01al7K3pBit8HWaMKxxoaAsMG1sVrXGOz74uKxb8J6WmwGD8uGpwOJrgcj
GPBE40qBRXP1jHUJyZQ/X9qEg9xLcw3lGQlo7i/3DYuvLY+K5l7k1yfibCSa6qrr
kkabvPc/E1wFQAAnMdoaGebgD3rIEyvSGYEGbN9EIg6pFC8ayRIcKBnHSPhwkZuS
WfcANjbUiGuICZdW6IeUsSh7IBJDjChbdosZgg+biw6fS1LEg3juvmdXxX26eNwM
YN1H6Fd1ogatOjW4aNFTZD3VClXhoicU2Mzz
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:33:43 2026 by rpki-client