Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/A5307E284CEF11F092F69C81C4F9AE02.roa
File: A5307E284CEF11F092F69C81C4F9AE02.roa (raw, json)
Hash identifier: QGlHH+ju7tlOXYuuHHLFlLqQaIyiEhbULfPuUxMjGXg=
Subject key identifier: BF:C3:48:23:DA:F7:B8:1D:79:9A:92:AA:78:A7:4E:17:6A:70:51:09
Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial: 0877
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/A5307E284CEF11F092F69C81C4F9AE02.roa
Signing time: Sun 23 Aug 2026 08:58:41 +0000
ROA not before: Sun 23 Aug 2026 08:58:41 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 139009
IP address blocks: 14.1.100.0/24 maxlen: 24
14.1.101.0/24 maxlen: 24
14.1.102.0/23 maxlen: 23
14.1.102.0/24 maxlen: 24
14.1.103.0/24 maxlen: 24
103.126.150.0/24 maxlen: 24
103.138.30.0/23 maxlen: 23
103.138.30.0/24 maxlen: 24
103.138.31.0/24 maxlen: 24
103.161.168.0/23 maxlen: 24
202.173.120.0/22 maxlen: 22
202.173.120.0/23 maxlen: 23
202.173.120.0/24 maxlen: 24
202.173.121.0/24 maxlen: 24
202.173.122.0/23 maxlen: 23
202.173.122.0/24 maxlen: 24
202.173.123.0/24 maxlen: 24
2407:d40::/32 maxlen: 32
2407:d40::/36 maxlen: 36
2407:d40::/48 maxlen: 48
2407:d40:f::/48 maxlen: 48
2407:d40:100::/48 maxlen: 48
2407:d40:101::/48 maxlen: 48
2407:d40:102::/48 maxlen: 48
2407:d40:103::/48 maxlen: 48
2407:d40:106::/48 maxlen: 48
2407:d40:107::/48 maxlen: 48
2407:d40:108::/48 maxlen: 48
2407:d40:109::/48 maxlen: 48
2407:d40:10f::/48 maxlen: 48
2407:d40:114::/48 maxlen: 48
2407:d40:122::/48 maxlen: 48
2407:d40:126::/48 maxlen: 48
2407:d40:140::/48 maxlen: 48
2407:d40:142::/48 maxlen: 48
2407:d40:201::/48 maxlen: 48
2407:d40:202::/48 maxlen: 48
2407:d40:203::/48 maxlen: 48
2407:d40:204::/48 maxlen: 48
2407:d40:205::/48 maxlen: 48
2407:d40:206::/48 maxlen: 48
2407:d40:207::/48 maxlen: 48
2407:d40:208::/48 maxlen: 48
2407:d40:222::/48 maxlen: 48
2407:d40:8000::/48 maxlen: 48
2407:d40:8004::/48 maxlen: 48
2407:d40:8007::/48 maxlen: 48
2407:d40:8009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 21:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2167 (0x877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Validity
Not Before: Aug 23 08:58:41 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a8ab641-aa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:54:24:c4:49:4f:e2:d5:0c:ad:d4:b8:47:
b2:0d:be:47:f5:53:fb:65:85:be:c4:3c:1e:30:36:
f0:5c:68:5f:d1:bb:92:25:29:41:23:31:4b:2c:a9:
53:87:cd:96:63:77:39:e4:e3:7e:81:b8:1a:d9:f9:
c8:b4:3f:9b:6f:78:98:72:d0:7e:b1:36:a9:02:d0:
91:52:7d:49:ef:c8:56:38:de:89:ad:19:0e:cf:98:
01:4d:9d:de:a2:16:21:c4:a2:22:8f:37:66:0c:9b:
53:df:cf:25:d0:ce:4a:79:f7:cd:33:5e:18:1e:47:
9c:a1:6b:19:64:70:03:31:3c:0f:3a:b7:e8:ae:79:
20:ad:62:6f:be:2d:7b:49:88:19:8e:af:be:e8:45:
25:0b:b0:1e:6c:3a:83:9e:e4:af:50:47:51:9d:fa:
e4:52:17:43:82:60:98:a2:35:d9:ef:2b:fc:d9:4a:
a8:07:b4:72:13:48:e0:d0:19:49:b2:d4:c8:d9:bd:
1d:9a:ba:e8:e7:80:29:c2:c7:e9:b3:c1:b0:d3:43:
2c:32:3f:35:6c:2b:bc:34:c9:55:f6:20:e9:f6:2e:
a9:44:65:a1:26:a8:92:26:8a:a9:8d:a8:39:e1:e5:
5f:1e:8d:1c:48:41:57:08:21:21:85:d4:ac:82:91:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C3:48:23:DA:F7:B8:1D:79:9A:92:AA:78:A7:4E:17:6A:70:51:09
X509v3 Authority Key Identifier:
keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/A5307E284CEF11F092F69C81C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.1.100.0/22
103.126.150.0/24
103.138.30.0/23
103.161.168.0/23
202.173.120.0/22
IPv6:
2407:d40::/32
Signature Algorithm: sha256WithRSAEncryption
2a:89:2a:28:f3:4f:55:d3:d9:6c:24:f0:4c:ab:f1:a2:aa:38:
1f:c3:8f:59:84:08:be:49:c2:5d:6e:2b:8f:55:44:26:77:b7:
1d:a2:ce:bd:39:55:db:48:aa:3b:4b:1f:e1:aa:6f:11:6c:ca:
48:4b:4e:17:d5:21:eb:b1:79:8d:d8:dd:47:06:9d:8c:a5:f9:
06:1d:ac:21:e3:93:19:d1:91:c7:9b:92:94:34:e0:8e:4a:0c:
82:a0:35:75:16:b0:5c:d7:ee:d1:29:75:8c:37:77:a8:99:9a:
a1:78:7e:2c:aa:17:93:25:e3:aa:ca:7c:8e:3d:a9:e6:da:09:
fa:cb:6e:4f:7e:2a:64:54:4d:57:cd:bb:35:2c:40:15:9f:07:
32:80:98:d0:f3:0e:b6:17:08:11:2e:4f:e0:d1:cc:89:e5:3a:
60:93:ac:07:bd:d0:c6:a0:1e:d8:b9:85:ca:cc:96:18:79:93:
a5:00:96:00:f7:09:fd:2f:6b:b3:e5:cd:b2:01:56:ce:91:f8:
9b:2b:21:02:71:d1:c0:96:ee:18:09:34:05:0e:fc:ad:65:a4:
31:91:18:bf:7b:bf:75:77:ca:fb:e5:92:20:0f:95:92:41:1c:
d2:85:0a:1b:d3:29:31:f3:af:57:58:93:01:e4:9a:93:41:9e:
69:03:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:22 2026 by rpki-client