Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/991EB004BE8511EE960E5082C4F9AE02.roa
File: 991EB004BE8511EE960E5082C4F9AE02.roa (raw, json)
Hash identifier: rP4EBcoYjp/fb5drtfKj/6SrPS0+St4OmibSJgW68j8=
Subject key identifier: 4F:42:5F:DD:3E:B7:15:F0:40:D8:46:EB:64:03:A9:05:19:89:81:00
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 3591
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/991EB004BE8511EE960E5082C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:38:36 +0000
ROA not before: Wed 14 Jan 2026 15:10:58 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9304
IP address blocks: 103.247.231.0/24 maxlen: 24
112.137.16.0/24 maxlen: 24
112.137.21.0/24 maxlen: 24
114.134.80.0/21 maxlen: 22
114.134.80.0/22 maxlen: 24
114.134.84.0/23 maxlen: 23
114.134.84.0/24 maxlen: 24
114.134.86.0/24 maxlen: 24
175.100.192.0/20 maxlen: 20
175.100.192.0/24 maxlen: 24
175.100.193.0/24 maxlen: 24
175.100.194.0/24 maxlen: 24
175.100.195.0/24 maxlen: 24
175.100.196.0/24 maxlen: 24
175.100.197.0/24 maxlen: 24
175.100.198.0/24 maxlen: 24
175.100.199.0/24 maxlen: 24
175.100.200.0/24 maxlen: 24
175.100.206.0/24 maxlen: 24
2403:5000::/32 maxlen: 32
2403:5000:165::/48 maxlen: 48
2403:5000:171::/48 maxlen: 48
2403:5000:182::/48 maxlen: 48
2403:5000:183::/48 maxlen: 48
2403:5000:184::/48 maxlen: 48
2403:5000:185::/48 maxlen: 48
2403:5000:188::/48 maxlen: 48
2403:5000:299::/48 maxlen: 48
2403:5000:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 14:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13713 (0x3591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Jan 14 15:10:58 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4799c-83e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:0c:cb:c2:ee:cf:22:e4:e7:43:6b:2f:2d:
1b:25:7b:32:35:ac:2d:a5:3e:27:60:e1:0c:21:34:
43:e8:cb:a1:f1:39:bf:e1:72:43:a7:cf:e9:dd:ee:
c7:84:4b:14:22:98:7c:e3:50:2e:4c:6e:26:74:5c:
60:32:e5:ff:2f:af:75:b6:a6:13:fa:48:77:9f:2a:
57:a1:b6:5f:c3:f1:1b:f0:a6:58:de:6c:6c:0b:3a:
d3:44:8e:c2:df:49:65:d6:4a:a5:81:f5:57:13:a5:
93:1b:d4:a6:bd:2b:95:f4:2b:f8:6e:30:ee:cf:6c:
a0:cb:9b:70:bb:45:35:22:5d:de:b5:07:d5:a0:6f:
94:d9:ab:ad:82:84:99:22:41:96:8b:1d:31:b5:8a:
04:3c:8e:5a:37:ba:ff:92:aa:e0:a4:bc:f5:92:a8:
d9:89:9b:4c:fa:a7:27:01:ea:4a:bb:0f:ba:6d:65:
e3:74:a2:7a:62:ff:14:da:4e:75:a5:f8:a0:b0:c0:
ac:ad:f2:46:61:93:d4:f8:09:64:06:8e:ab:bb:d8:
79:41:11:33:35:ef:68:7c:70:6a:74:f8:20:42:d1:
73:bb:17:97:ec:59:ae:52:56:1b:08:a8:aa:f9:1e:
ef:0f:cf:d0:40:00:bc:dc:a6:2e:fd:25:d7:80:c2:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:42:5F:DD:3E:B7:15:F0:40:D8:46:EB:64:03:A9:05:19:89:81:00
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/991EB004BE8511EE960E5082C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.247.231.0/24
112.137.16.0/24
112.137.21.0/24
114.134.80.0/21
175.100.192.0/20
IPv6:
2403:5000::/32
Signature Algorithm: sha256WithRSAEncryption
3c:8c:45:f1:9f:0a:28:74:6c:80:7b:35:b1:41:af:d2:be:a0:
33:36:e0:7d:d1:ad:95:c8:0d:97:b5:40:67:42:3b:ca:7c:41:
5b:54:1c:a1:6c:33:df:ee:2d:5a:8b:78:06:88:7a:89:cf:80:
ee:ad:21:c5:2c:e0:07:da:7a:b0:28:83:d6:c9:48:4c:67:17:
35:c3:75:6e:74:ed:cb:24:f8:43:9e:c0:0d:ff:b0:ec:dd:29:
56:00:dd:4e:0c:b1:00:2b:85:34:71:74:c5:a5:89:c9:38:7b:
39:08:aa:84:eb:56:12:0e:dc:4b:bc:b3:9d:d2:c7:a7:9e:14:
ce:e8:40:aa:00:a4:54:a0:cb:85:e4:a5:81:89:46:fd:2c:e6:
79:46:9d:0d:e8:42:a0:aa:49:06:05:3a:36:cb:62:0f:65:57:
95:0c:40:f1:57:69:48:47:53:41:bd:40:12:45:26:6e:0e:95:
18:4c:7d:0e:13:c0:0e:b7:1b:11:86:23:11:aa:12:4d:37:06:
b4:5d:3d:dd:2f:c2:42:40:bd:4f:3a:4e:cc:4d:9d:a2:25:75:
8f:2b:52:97:79:7b:78:64:28:23:b7:d3:b0:9a:61:9c:68:b2:
37:34:8c:7b:f1:2c:84:d7:70:be:ae:24:21:87:c3:e4:47:33:
44:84:f2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:42:12 2026 by rpki-client