Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/266D297AF93911EEABC35878C4F9AE02.roa
File: 266D297AF93911EEABC35878C4F9AE02.roa (raw, json)
Hash identifier: 8Ls3pzhbNcqC3PGz8+c7k7s9VDitC5masIYecsiyjHU=
Subject key identifier: 58:B6:C6:9D:84:D5:C1:B2:72:87:EB:85:F8:71:CD:8A:D7:3C:41:16
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5ED2
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/266D297AF93911EEABC35878C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:19:50 +0000
ROA not before: Thu 28 Aug 2025 14:56:46 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 18403
IP address blocks: 1.52.0.0/14 maxlen: 24
42.112.0.0/13 maxlen: 24
43.239.148.0/22 maxlen: 24
58.186.0.0/15 maxlen: 24
103.35.64.0/22 maxlen: 24
103.39.92.0/22 maxlen: 24
103.156.10.0/23 maxlen: 24
103.156.12.0/23 maxlen: 24
103.156.30.0/23 maxlen: 24
103.156.32.0/23 maxlen: 24
103.156.34.0/23 maxlen: 24
113.22.0.0/16 maxlen: 24
113.23.0.0/17 maxlen: 24
118.68.0.0/14 maxlen: 24
144.48.20.0/22 maxlen: 24
183.80.0.0/16 maxlen: 24
183.81.0.0/17 maxlen: 24
203.191.8.0/21 maxlen: 24
210.245.0.0/17 maxlen: 24
2405:4800::/30 maxlen: 31
2405:4800::/32 maxlen: 48
2405:4801::/32 maxlen: 48
2405:4802::/32 maxlen: 48
2405:4803::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24274 (0x5ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:56:46 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60d06-f549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4c:3b:b8:35:db:d1:14:dc:b9:32:72:30:b1:
a8:15:3d:43:69:ed:71:a3:fd:c5:14:ae:ac:9f:da:
3e:e9:f9:95:ce:20:0c:6d:7e:16:b9:24:33:68:a3:
19:21:be:c1:04:37:46:5e:ad:ed:3b:63:6a:b2:57:
11:95:ad:95:9b:2b:7d:67:30:46:07:10:15:bc:f5:
bf:e8:96:5e:01:d3:61:63:ef:cc:37:31:e5:e8:76:
b8:6a:13:7e:76:20:54:87:6d:40:4b:17:3f:77:5b:
99:04:41:5d:9e:d3:6a:a4:2e:28:58:a5:83:0c:9d:
f7:c4:24:1a:0a:be:cd:fc:a0:e4:a3:6f:6c:ed:f5:
1a:c6:f0:1e:d0:f9:3d:12:4f:b6:61:55:bb:65:21:
75:02:d8:ee:8c:8e:00:36:97:49:44:6d:db:86:2f:
ec:62:d3:45:54:2e:ac:f6:7d:e2:e0:9a:5c:92:86:
52:66:37:34:73:98:25:92:d8:23:b6:9d:3d:11:fd:
38:f1:40:a2:99:74:50:dd:ae:de:82:83:31:4d:55:
10:56:c3:c5:1b:c0:07:77:a4:44:13:17:5d:3b:ef:
08:74:fa:b1:35:6b:73:ca:cb:10:26:e2:54:e2:65:
06:2c:e1:13:de:f0:e8:76:ed:87:54:0c:3d:00:17:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B6:C6:9D:84:D5:C1:B2:72:87:EB:85:F8:71:CD:8A:D7:3C:41:16
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/266D297AF93911EEABC35878C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.52.0.0/14
42.112.0.0/13
43.239.148.0/22
58.186.0.0/15
103.35.64.0/22
103.39.92.0/22
103.156.10.0-103.156.13.255
103.156.30.0-103.156.35.255
113.22.0.0-113.23.127.255
118.68.0.0/14
144.48.20.0/22
183.80.0.0-183.81.127.255
203.191.8.0/21
210.245.0.0/17
IPv6:
2405:4800::/30
Signature Algorithm: sha256WithRSAEncryption
46:93:48:a6:00:83:ed:8f:30:5f:df:b0:a0:e4:0d:67:79:d2:
38:01:07:10:55:a6:dd:36:5e:a2:2a:c4:08:1c:05:16:e0:91:
7a:11:22:93:e1:fd:cf:04:e4:1d:d7:3e:27:c8:20:a8:de:42:
09:5e:56:c2:33:df:8c:6e:06:03:22:f5:d4:e6:81:cf:f1:ec:
cd:0c:dc:d2:f2:a2:47:cc:28:be:30:8f:50:85:93:b6:91:33:
42:96:ee:a1:ad:5c:4b:f2:e7:8a:71:56:18:bc:f7:f1:2d:2b:
43:ba:a4:dd:81:1c:e7:bb:b9:7f:5a:b5:6d:b5:3c:94:ba:24:
dd:f2:22:c7:05:92:53:4a:03:d2:80:35:71:21:34:79:bd:a1:
b3:ee:db:1e:7a:7b:ec:10:08:94:9f:94:4d:2b:e6:53:39:49:
f1:cf:85:91:01:8b:5a:f6:f7:73:5a:67:3d:2d:79:1c:6b:01:
dd:65:40:91:2b:32:6d:6e:c0:c4:33:29:6e:a4:e2:9c:e9:8c:
93:be:42:44:f3:a5:f2:7b:58:d7:7c:a7:9f:93:c6:5a:3f:15:
4c:8d:7e:fa:80:87:26:f3:0d:aa:4e:ac:95:48:b6:4e:7f:dd:
24:9f:67:7f:7b:ea:84:50:39:89:b5:f0:28:a5:e5:32:b7:df:
5d:35:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:31:41 2026 by rpki-client