Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/266D297AF93911EEABC35878C4F9AE02.roa
File: 266D297AF93911EEABC35878C4F9AE02.roa (raw, json)
Hash identifier: hMOQewenAS+h8UcVCgXnS4KfQYXGL3+dMVeJ6boyY/Q=
Subject key identifier: 31:B1:FB:86:35:37:6E:27:45:4D:12:8E:03:2C:E4:BF:B7:8D:6C:8C
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6EED
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/266D297AF93911EEABC35878C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:34:39 +0000
ROA not before: Fri 02 Oct 2026 15:34:39 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 18403
IP address blocks: 1.52.0.0/14 maxlen: 24
42.112.0.0/13 maxlen: 24
43.239.148.0/22 maxlen: 24
58.186.0.0/15 maxlen: 24
103.35.64.0/22 maxlen: 24
103.39.92.0/22 maxlen: 24
103.156.10.0/23 maxlen: 24
103.156.12.0/23 maxlen: 24
103.156.30.0/23 maxlen: 24
103.156.32.0/23 maxlen: 24
103.156.34.0/23 maxlen: 24
113.22.0.0/16 maxlen: 24
113.23.0.0/17 maxlen: 24
118.68.0.0/14 maxlen: 24
144.48.20.0/22 maxlen: 24
183.80.0.0/16 maxlen: 24
183.81.0.0/17 maxlen: 24
203.191.8.0/21 maxlen: 24
210.245.0.0/17 maxlen: 24
2405:4800::/30 maxlen: 31
2405:4800::/32 maxlen: 48
2405:4801::/32 maxlen: 48
2405:4802::/32 maxlen: 48
2405:4803::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28397 (0x6eed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:34:39 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf0f-fb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:41:c4:48:b6:7d:c9:3b:2d:66:84:46:48:
1f:e2:f9:04:84:1d:47:78:a3:b6:0a:3b:07:c4:b6:
63:58:60:3f:10:06:db:28:37:43:67:d6:54:4b:30:
d5:d1:40:98:e1:e6:aa:e6:bb:35:c6:40:c6:b3:37:
96:7b:01:2a:ac:9c:61:e7:e3:7e:bb:45:5b:0c:65:
2f:dd:f1:e9:ed:61:c1:7c:35:e0:20:5a:85:d5:98:
b1:6d:7d:4a:f5:27:dd:25:ea:05:3d:da:4b:3a:6b:
a0:7f:93:f8:c4:d5:3c:09:ca:45:ba:c0:44:47:1d:
4d:0f:c0:cb:59:ba:52:b0:66:95:e0:e2:d2:4a:b1:
18:c5:e7:be:e5:d0:fe:e3:0d:de:b8:bf:6f:68:8d:
cc:14:73:f7:71:9b:da:78:2a:36:cf:85:f6:a9:a1:
a7:01:03:66:4e:47:4e:41:d1:a2:2b:70:57:58:c8:
03:fd:20:02:3e:4d:9f:6e:33:64:9f:15:5b:dd:a0:
32:ef:e1:e8:df:c3:d0:14:be:03:5e:a2:6f:a2:6d:
00:7e:b5:16:c8:88:bd:17:e9:13:0b:8e:d1:e7:20:
83:c4:c0:21:50:4b:95:e6:93:3d:e9:a1:b6:16:79:
c8:15:3d:ac:04:78:a7:29:cb:13:8c:99:9a:c0:22:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:FB:86:35:37:6E:27:45:4D:12:8E:03:2C:E4:BF:B7:8D:6C:8C
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/266D297AF93911EEABC35878C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.52.0.0/14
42.112.0.0/13
43.239.148.0/22
58.186.0.0/15
103.35.64.0/22
103.39.92.0/22
103.156.10.0-103.156.13.255
103.156.30.0-103.156.35.255
113.22.0.0-113.23.127.255
118.68.0.0/14
144.48.20.0/22
183.80.0.0-183.81.127.255
203.191.8.0/21
210.245.0.0/17
IPv6:
2405:4800::/30
Signature Algorithm: sha256WithRSAEncryption
53:70:04:e1:ef:ec:6c:0d:fc:34:bc:f6:36:41:09:d7:7f:db:
32:64:01:21:9b:a7:37:a8:c1:50:8d:fb:7d:14:80:ea:7d:56:
09:eb:13:01:5f:84:be:b4:6d:4a:09:b3:9b:69:85:9b:35:74:
b8:a3:85:0f:e6:26:40:c7:12:0a:d4:29:47:32:2c:e7:90:02:
00:57:d7:a0:5a:28:fd:b6:dd:ee:b0:b0:48:79:74:df:86:0c:
a2:22:86:85:78:74:a7:88:9b:61:21:fb:03:e8:42:dc:39:37:
3e:2e:9b:b8:91:45:c4:0a:fe:b2:e9:95:65:94:52:03:1d:0d:
95:57:6f:dd:86:dc:25:06:9d:e2:7c:04:ef:3b:f7:ed:f3:ff:
c5:db:10:7b:a9:47:73:04:c0:ed:49:21:c3:1d:46:33:35:13:
d8:e0:68:ab:21:48:93:e8:ad:3c:e8:8e:06:a9:b0:4d:e0:4d:
9d:6b:49:4b:e6:13:2a:01:b5:b9:c7:6c:f2:15:14:7a:e0:b8:
0c:cb:51:20:4b:22:0a:fe:48:1b:6c:f0:ed:2f:47:6b:3e:d0:
7d:0f:da:67:35:14:00:36:13:a6:4c:37:bc:75:9c:a6:b3:67:
a1:78:aa:9a:c7:e4:c8:05:4f:c6:88:f8:9c:70:ef:f2:d1:cc:
0e:d3:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 13:07:52 2026 by rpki-client