Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/EBD5A3CA6B8711EFB0476280C4F9AE02.roa
File: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (raw, json)
Hash identifier: 1nNYytPUh1I02DJvpauOI7ouJq6g/LEJ1tFSi6IALFU=
Subject key identifier: DD:01:D3:92:DB:59:2F:87:FF:AD:31:3C:FA:B9:8B:31:18:E0:D3:68
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 370A
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/EBD5A3CA6B8711EFB0476280C4F9AE02.roa
Signing time: Thu 30 Jul 2026 15:11:40 +0000
ROA not before: Thu 30 Jul 2026 15:11:40 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 7693
IP address blocks: 58.181.128.0/17 maxlen: 17
58.181.128.0/20 maxlen: 20
58.181.144.0/20 maxlen: 20
58.181.146.0/23 maxlen: 23
58.181.160.0/20 maxlen: 20
58.181.176.0/20 maxlen: 20
58.181.192.0/20 maxlen: 20
58.181.200.0/24 maxlen: 24
58.181.208.0/20 maxlen: 20
58.181.212.0/24 maxlen: 24
58.181.224.0/20 maxlen: 20
58.181.225.0/24 maxlen: 24
58.181.240.0/20 maxlen: 20
58.181.248.0/23 maxlen: 23
58.181.252.0/22 maxlen: 22
103.19.104.0/22 maxlen: 22
202.44.144.0/24 maxlen: 24
202.149.96.0/19 maxlen: 19
202.149.96.0/20 maxlen: 20
202.149.112.0/20 maxlen: 20
203.107.128.0/17 maxlen: 17
203.107.128.0/20 maxlen: 20
203.107.129.0/24 maxlen: 24
203.107.130.0/24 maxlen: 24
203.107.144.0/20 maxlen: 20
203.107.160.0/20 maxlen: 20
203.107.176.0/20 maxlen: 20
203.107.192.0/20 maxlen: 20
203.107.192.0/24 maxlen: 24
203.107.208.0/20 maxlen: 20
203.107.224.0/20 maxlen: 20
203.107.231.0/24 maxlen: 24
203.107.240.0/20 maxlen: 20
203.107.255.0/24 maxlen: 24
203.155.0.0/16 maxlen: 16
203.155.0.0/20 maxlen: 20
203.155.0.0/23 maxlen: 23
203.155.16.0/20 maxlen: 20
203.155.32.0/20 maxlen: 20
203.155.42.0/24 maxlen: 24
203.155.48.0/20 maxlen: 20
203.155.54.0/23 maxlen: 23
203.155.64.0/20 maxlen: 20
203.155.66.0/24 maxlen: 24
203.155.77.0/24 maxlen: 24
203.155.80.0/20 maxlen: 20
203.155.96.0/20 maxlen: 20
203.155.112.0/20 maxlen: 20
203.155.128.0/20 maxlen: 20
203.155.144.0/20 maxlen: 20
203.155.160.0/20 maxlen: 20
203.155.176.0/20 maxlen: 20
203.155.192.0/20 maxlen: 20
203.155.208.0/20 maxlen: 20
203.155.219.0/24 maxlen: 24
203.155.224.0/20 maxlen: 20
203.155.240.0/20 maxlen: 20
203.155.253.0/24 maxlen: 24
203.155.255.0/24 maxlen: 24
203.188.0.0/18 maxlen: 18
203.188.0.0/20 maxlen: 24
203.188.32.0/20 maxlen: 24
203.195.96.0/20 maxlen: 20
203.195.105.0/24 maxlen: 24
203.209.0.0/18 maxlen: 18
203.209.0.0/20 maxlen: 20
203.209.16.0/20 maxlen: 20
203.209.32.0/20 maxlen: 20
203.209.48.0/20 maxlen: 20
203.209.64.0/18 maxlen: 18
203.209.64.0/20 maxlen: 20
203.209.75.0/24 maxlen: 24
203.209.80.0/20 maxlen: 20
203.209.93.0/24 maxlen: 24
203.209.96.0/20 maxlen: 20
203.209.112.0/20 maxlen: 20
203.209.122.0/24 maxlen: 24
203.209.123.0/24 maxlen: 24
203.209.125.0/24 maxlen: 24
2405:a000::/32 maxlen: 32
2405:a000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Aug 2026 14:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14090 (0x370a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Jul 30 15:11:40 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6b69ac-0145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:34:6b:5c:0e:c2:fd:e8:ae:80:86:82:b5:
bb:46:e3:89:3b:0f:aa:41:35:ca:74:01:00:a0:4a:
6b:04:95:64:0c:08:19:e6:f0:85:42:ee:34:b8:a5:
73:d5:2e:e4:ae:d1:ab:04:8e:4d:3c:19:44:aa:9d:
5a:13:0c:38:a8:37:72:12:88:8a:a7:4d:93:d6:56:
cc:81:20:6c:e0:76:23:47:d1:b2:a9:53:cd:5a:63:
fd:df:c4:6b:3c:d4:6b:cf:dc:72:e8:20:ed:71:5c:
38:f2:3c:4d:d9:c2:99:3f:2c:50:3e:67:5e:3e:d0:
61:58:e9:9e:5e:51:64:a7:cc:17:57:f1:52:22:76:
0a:41:6b:ae:40:fc:82:7c:e2:e8:30:14:86:20:09:
91:54:a9:1f:27:b3:b8:3c:a2:3f:53:84:7e:31:36:
48:96:d0:d6:40:41:32:12:cd:91:61:53:b5:54:ed:
53:f7:26:e8:58:9f:79:f0:88:77:21:36:ee:aa:a7:
ac:94:6e:9c:81:c6:fe:86:50:ea:a7:ec:0c:c1:61:
c8:65:3c:01:92:ab:ce:05:a4:7d:30:8d:f1:e7:30:
52:4a:db:77:16:f7:29:39:99:e5:e5:c4:98:a1:69:
51:d1:df:76:10:5a:94:61:58:c8:57:c5:46:39:a8:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:01:D3:92:DB:59:2F:87:FF:AD:31:3C:FA:B9:8B:31:18:E0:D3:68
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/EBD5A3CA6B8711EFB0476280C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.181.128.0/17
103.19.104.0/22
202.44.144.0/24
202.149.96.0/19
203.107.128.0/17
203.155.0.0/16
203.188.0.0/18
203.195.96.0/20
203.209.0.0/17
IPv6:
2405:a000::/32
Signature Algorithm: sha256WithRSAEncryption
b1:3c:f0:87:38:d9:84:e0:80:29:27:c7:7e:14:0a:60:11:04:
6c:08:ba:3b:a2:5c:24:9f:e6:71:7e:e2:9b:d7:c0:7b:67:c5:
dc:bb:45:82:86:bb:07:4a:72:64:2d:50:d6:00:20:02:b5:0a:
50:d0:87:00:65:37:ed:d9:51:ba:a9:95:56:13:f4:ce:4d:bc:
47:29:9e:71:58:a3:10:28:f5:e1:6e:cc:3f:dd:36:4a:14:2a:
08:bc:4b:d6:79:1b:df:a5:f7:b0:44:be:42:cc:ca:4d:6d:1d:
a2:23:fe:c5:47:88:e9:60:01:84:03:67:ea:eb:85:f1:3f:77:
c6:45:57:18:c9:df:7f:7e:d8:1d:01:67:92:3c:02:d5:5b:76:
6c:ad:ee:e7:68:f0:f4:37:65:8f:17:b8:5b:77:db:76:97:c5:
03:dd:02:45:7c:d3:6d:4d:f3:7d:d5:45:5d:65:e7:f6:96:2f:
5b:50:94:78:7f:b1:7a:82:c8:ae:d6:48:69:b6:f1:f8:85:ca:
8f:d8:31:b0:97:b4:bf:f4:66:f5:e7:9d:bd:8b:62:6c:c7:04:
6c:25:51:5a:d2:bb:6d:fb:93:f5:1b:84:da:0b:52:13:4d:b3:
77:21:4c:88:d7:9e:59:ca:92:45:23:19:c3:c3:30:75:67:8f:
35:1d:0a:13
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgICNwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw
OTU2QTk4MkEwHhcNMjYwNzMwMTUxMTQwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZiNjlhYy0wMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtts0a1wOwv3oroCGgrW7RuOJOw+qQTXKdAEAoEprBJVkDAgZ5vCFQu40uKVz
1S7krtGrBI5NPBlEqp1aEww4qDdyEoiKp02T1lbMgSBs4HYjR9GyqVPNWmP938Rr
PNRrz9xy6CDtcVw48jxN2cKZPyxQPmdePtBhWOmeXlFkp8wXV/FSInYKQWuuQPyC
fOLoMBSGIAmRVKkfJ7O4PKI/U4R+MTZIltDWQEEyEs2RYVO1VO1T9yboWJ958Ih3
ITbuqqeslG6cgcb+hlDqp+wMwWHIZTwBkqvOBaR9MI3x5zBSStt3FvcpOZnl5cSY
oWlR0d92EFqUYVjIV8VGOahU8QIDAQABo4ICnjCCApowHQYDVR0OBBYEFN0B05Lb
WS+H/60xPPq5izEY4NNoMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE
ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvRUJENUEzQ0E2
Qjg3MTFFRkIwNDc2MjgwQzRGOUFFMDIucm9hMF0GCCsGAQUFBwEHAQH/BE4wTDA7
BAIAATA1AwQHOrWAAwQCZxNoAwQAyiyQAwQFypVgAwQHy2uAAwMAy5sDBAbLvAAD
BATLw2ADBAfL0QAwDQQCAAIwBwMFACQFoAAwDQYJKoZIhvcNAQELBQADggEBALE8
8Ic42YTggCknx34UCmARBGwIujuiXCSf5nF+4pvXwHtnxdy7RYKGuwdKcmQtUNYA
IAK1ClDQhwBlN+3ZUbqplVYT9M5NvEcpnnFYoxAo9eFuzD/dNkoUKgi8S9Z5G9+l
97BEvkLMyk1tHaIj/sVHiOlgAYQDZ+rrhfE/d8ZFVxjJ339+2B0BZ5I8AtVbdmyt
7udo8PQ3ZY8XuFt323aXxQPdAkV8021N833VRV1l5/aWL1tQlHh/sXqCyK7WSGm2
8fiFyo/YMbCXtL/0ZvXnnb2LYmzHBGwlUVrSu237k/UbhNoLUhNNs3chTIjXnlnK
kkUjGcPDMHVnjzUdChM=
-----END CERTIFICATE-----
Generated at Tue Aug 4 19:53:51 2026 by rpki-client