Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/58AAED74E1E211ED8F1ACF4DC4F9AE02.roa
File: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (raw, json)
Hash identifier: 9bpV/+u0Lxmdmvw92vqNBEhX/NmRGJoX2MiASyHYnqU=
Subject key identifier: 23:BC:72:23:52:DE:6F:65:58:01:D0:6C:45:A4:DD:03:6E:41:0F:6A
Certificate issuer: /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4
Certificate serial: 05D9
Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/58AAED74E1E211ED8F1ACF4DC4F9AE02.roa
Signing time: Mon 02 Feb 2026 23:19:22 +0000
ROA not before: Mon 02 Feb 2026 23:19:22 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 141676
IP address blocks: 103.161.240.0/23 maxlen: 23
103.161.240.0/24 maxlen: 24
103.161.241.0/24 maxlen: 24
2001:df5:d680::/48 maxlen: 48
2400:78a0::/32 maxlen: 32
2400:78a0::/36 maxlen: 36
2400:78a0::/40 maxlen: 40
2400:78a0::/44 maxlen: 44
2400:78a0::/48 maxlen: 48
2400:78a0:10::/44 maxlen: 44
2400:78a0:1000::/36 maxlen: 36
2400:78a0:1000::/40 maxlen: 40
2400:78a0:1100::/40 maxlen: 40
2400:78a0:1100::/44 maxlen: 44
2400:78a0:1110::/44 maxlen: 44
2400:78a0:1110::/47 maxlen: 47
2400:78a0:1112::/47 maxlen: 47
2400:78a0:1114::/47 maxlen: 47
2400:78a0:1116::/47 maxlen: 47
2400:78a0:1118::/47 maxlen: 47
2400:78a0:111a::/47 maxlen: 47
2400:78a0:111c::/47 maxlen: 47
2400:78a0:111e::/47 maxlen: 47
2400:78a0:1120::/44 maxlen: 44
2400:78a0:1120::/47 maxlen: 47
2400:78a0:1122::/47 maxlen: 47
2400:78a0:1124::/47 maxlen: 47
2400:78a0:1126::/47 maxlen: 47
2400:78a0:1128::/47 maxlen: 47
2400:78a0:112a::/47 maxlen: 47
2400:78a0:112c::/47 maxlen: 47
2400:78a0:112e::/47 maxlen: 47
2400:78a0:1200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl
rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 22:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1497 (0x5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182545, serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4
Validity
Not Before: Feb 2 23:19:22 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=698130fa-9b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:0f:28:a9:92:1f:f7:8d:b8:e6:ae:b3:87:
b1:6d:31:1e:1b:11:5f:a7:65:e3:b9:ea:0e:a6:54:
69:6a:8d:d1:58:24:da:1a:ae:4a:53:e1:32:00:07:
76:0e:73:0f:63:dd:63:ee:b3:02:4c:64:cf:3a:4e:
ef:7b:45:58:f9:db:f1:a2:98:38:0f:af:c1:2c:d4:
bf:e7:2c:af:c5:84:ba:10:2b:8f:30:82:56:e7:ff:
99:fc:a5:6d:1d:d7:ae:ff:78:d0:aa:46:03:14:87:
3b:70:bb:59:88:ab:c7:85:ab:6e:8a:98:a2:8e:ba:
64:fa:f6:9d:d3:d3:bb:bd:9d:4e:3c:ea:fb:c2:6f:
3e:d2:ed:11:d0:53:f5:94:63:cb:f2:c7:b2:c8:68:
2d:f7:a7:68:61:99:03:f6:c6:60:b1:7e:fa:a7:10:
b9:0e:61:a2:fc:cf:c5:58:3a:e8:8e:1e:b3:8e:4d:
c2:3e:c1:fe:8b:05:c6:8b:fe:8b:62:97:63:1f:b2:
a0:7e:c5:5c:bb:91:0d:5d:8d:de:0a:f8:fd:9c:fe:
77:6e:81:65:47:fd:e4:17:3b:04:c5:17:3c:ff:c3:
2c:6e:94:02:af:f4:cd:69:d1:26:bc:c0:d0:37:0a:
ba:df:2b:f8:ae:47:b2:f7:e2:15:9e:c5:06:4e:05:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BC:72:23:52:DE:6F:65:58:01:D0:6C:45:A4:DD:03:6E:41:0F:6A
X509v3 Authority Key Identifier:
keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/58AAED74E1E211ED8F1ACF4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.240.0/23
IPv6:
2001:df5:d680::/48
2400:78a0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:16:92:d8:ee:73:b2:f3:4d:19:ee:52:a6:8d:ce:c6:70:98:
cc:27:81:9f:71:34:dc:ce:14:e1:eb:b7:32:87:41:c6:c3:ee:
db:1b:ec:bb:da:69:46:ef:89:71:43:34:1b:c7:30:ca:82:33:
18:39:81:f0:b6:21:a0:11:ad:03:43:c6:85:ae:4f:7e:e1:f4:
74:71:8c:1b:22:63:51:b5:d3:5c:b7:30:75:19:fa:35:7b:b8:
aa:1e:b2:5e:54:88:99:0a:dc:71:50:22:04:f3:45:94:10:41:
0f:47:40:e7:0e:a5:b4:08:33:2c:13:69:e1:e7:87:22:da:db:
d6:48:b9:05:3b:40:c9:82:f5:1c:e8:de:7a:bc:97:8f:34:f9:
ce:dd:24:53:eb:05:ad:dc:8c:70:5b:89:d9:27:5e:d4:36:86:
6b:49:cd:a9:68:38:95:4e:c4:0f:59:76:ef:e0:2e:53:35:4f:
b1:f0:b0:5a:1c:09:8c:f6:70:46:09:2c:78:d1:a8:43:53:45:
52:a4:31:ef:d9:4d:a3:88:f6:c2:27:ad:b0:97:04:ec:68:65:
97:bb:4d:d9:85:4d:db:65:80:ba:d2:04:09:a1:3b:a5:58:70:
e2:22:91:23:80:93:8c:d5:39:bd:36:ba:a3:05:21:1b:94:c3:
d5:3a:23:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:32:04 2026 by rpki-client