Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41BFDB0854D411F09579E61BC4F9AE02.roa
File: 41BFDB0854D411F09579E61BC4F9AE02.roa (raw, json)
Hash identifier: LGfWUAxM/3kWIQkz6AZhwqogU9sgsLpwL+HU7CH5cmo=
Subject key identifier: 47:23:21:29:F2:C6:26:61:AA:AC:2F:51:72:B4:58:50:1B:89:35:BC
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6BE1
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41BFDB0854D411F09579E61BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:31:15 +0000
ROA not before: Thu 11 Sep 2025 11:17:23 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135918
IP address blocks: 42.96.0.0/22 maxlen: 22
45.117.164.0/24 maxlen: 24
45.117.165.0/24 maxlen: 24
45.117.166.0/24 maxlen: 24
49.236.208.0/22 maxlen: 22
103.14.224.0/23 maxlen: 23
103.28.32.0/22 maxlen: 22
103.65.234.0/23 maxlen: 23
103.67.196.0/23 maxlen: 23
103.67.198.0/23 maxlen: 23
103.68.84.0/23 maxlen: 23
103.69.86.0/23 maxlen: 23
103.69.96.0/23 maxlen: 23
103.74.100.0/22 maxlen: 22
103.95.196.0/22 maxlen: 22
103.110.32.0/23 maxlen: 23
103.129.126.0/23 maxlen: 23
103.139.154.0/23 maxlen: 23
103.149.252.0/23 maxlen: 23
103.151.52.0/23 maxlen: 23
103.151.238.0/23 maxlen: 23
103.153.64.0/23 maxlen: 23
103.157.204.0/23 maxlen: 23
103.160.2.0/23 maxlen: 23
103.161.96.0/23 maxlen: 23
103.161.112.0/23 maxlen: 23
103.161.118.0/23 maxlen: 23
103.161.170.0/23 maxlen: 23
103.161.173.0/24 maxlen: 24
103.161.180.0/23 maxlen: 23
103.162.24.0/23 maxlen: 24
103.176.22.0/23 maxlen: 23
103.176.24.0/23 maxlen: 23
103.176.250.0/23 maxlen: 24
103.177.34.0/23 maxlen: 23
103.178.230.0/23 maxlen: 23
103.178.232.0/23 maxlen: 23
103.179.174.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.183.120.0/23 maxlen: 23
103.188.82.0/23 maxlen: 23
103.188.242.0/23 maxlen: 23
103.190.120.0/23 maxlen: 23
103.211.200.0/23 maxlen: 23
103.211.206.0/23 maxlen: 23
103.218.122.0/23 maxlen: 23
103.228.36.0/23 maxlen: 23
103.228.74.0/23 maxlen: 23
103.229.52.0/23 maxlen: 23
103.231.248.0/23 maxlen: 23
103.239.66.0/23 maxlen: 23
103.252.92.0/23 maxlen: 23
103.252.94.0/23 maxlen: 23
110.172.28.0/23 maxlen: 23
125.253.114.0/24 maxlen: 24
163.61.110.0/23 maxlen: 23
163.61.182.0/23 maxlen: 23
163.223.8.0/23 maxlen: 23
163.223.224.0/23 maxlen: 23
202.158.244.0/22 maxlen: 22
2001:df5:e6c0::/48 maxlen: 48
2401:5ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27617 (0x6be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 11 11:17:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61dc3-8e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:42:08:ac:49:ee:54:a7:fe:b1:f2:6d:3c:
51:af:a1:dd:11:25:17:4b:1e:c6:e9:83:47:77:df:
ff:e0:78:ab:09:eb:42:af:ae:ac:8b:80:64:27:6c:
57:39:22:c6:a8:ec:66:cb:76:de:c2:0e:a8:32:2e:
a9:22:61:2f:ca:00:3f:a7:23:5b:ea:d2:66:37:b1:
b4:8c:63:7d:ac:ec:05:bc:38:e2:ec:ad:c6:6e:f1:
ad:1e:b9:11:f9:52:12:3c:19:44:a6:f5:70:a2:5f:
5e:e7:2c:b9:b8:4f:08:e0:bf:26:a5:a2:0e:e4:2e:
ac:c3:a6:54:56:c7:fe:cb:a7:ca:43:0d:26:75:87:
24:00:6c:5d:23:46:6f:ef:ee:29:ce:5a:d2:22:c3:
d5:28:9d:ad:2b:26:77:0f:f1:a8:72:62:63:b3:e8:
6d:93:b6:9f:2a:a6:99:dc:5f:af:96:f9:a7:4d:b8:
13:6a:e7:4c:39:e5:3a:89:18:75:6d:ec:00:ef:0a:
4e:c2:ca:b8:ab:29:dc:30:3b:5c:d6:d0:f4:60:f2:
15:e8:be:45:e6:0d:f0:68:86:ec:c0:ba:f6:fa:9d:
df:3f:14:b6:ee:55:f7:b4:97:0b:63:55:b6:f9:1e:
37:40:fc:74:d1:d7:98:c9:e5:fb:83:7f:c9:2d:d1:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:23:21:29:F2:C6:26:61:AA:AC:2F:51:72:B4:58:50:1B:89:35:BC
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41BFDB0854D411F09579E61BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.0.0/22
45.117.164.0-45.117.166.255
49.236.208.0/22
103.14.224.0/23
103.28.32.0/22
103.65.234.0/23
103.67.196.0/22
103.68.84.0/23
103.69.86.0/23
103.69.96.0/23
103.74.100.0/22
103.95.196.0/22
103.110.32.0/23
103.129.126.0/23
103.139.154.0/23
103.149.252.0/23
103.151.52.0/23
103.151.238.0/23
103.153.64.0/23
103.157.204.0/23
103.160.2.0/23
103.161.96.0/23
103.161.112.0/23
103.161.118.0/23
103.161.170.0/23
103.161.173.0/24
103.161.180.0/23
103.162.24.0/23
103.176.22.0-103.176.25.255
103.176.250.0/23
103.177.34.0/23
103.178.230.0-103.178.233.255
103.179.174.0/23
103.180.138.0/23
103.183.120.0/23
103.188.82.0/23
103.188.242.0/23
103.190.120.0/23
103.211.200.0/23
103.211.206.0/23
103.218.122.0/23
103.228.36.0/23
103.228.74.0/23
103.229.52.0/23
103.231.248.0/23
103.239.66.0/23
103.252.92.0/22
110.172.28.0/23
125.253.114.0/24
163.61.110.0/23
163.61.182.0/23
163.223.8.0/23
163.223.224.0/23
202.158.244.0/22
IPv6:
2001:df5:e6c0::/48
2401:5ec0::/48
Signature Algorithm: sha256WithRSAEncryption
0b:c7:09:bd:e2:49:f2:4e:8c:ce:e7:e2:71:99:40:4a:09:a1:
38:71:ac:2d:bf:ac:21:fe:b6:e6:b1:a0:4b:a9:93:34:3d:91:
38:86:5f:23:08:52:ca:43:1e:e6:d3:9a:4b:00:00:a6:4f:b4:
fc:57:1f:98:93:71:e6:5d:67:75:35:1e:8b:0b:88:69:6e:dd:
d9:c7:69:ec:17:4c:87:e4:22:2d:93:4a:92:dd:21:28:f1:d5:
38:17:8a:ff:f0:9e:fb:58:a1:c5:f7:e5:6e:db:f6:24:9b:a4:
61:ff:19:6f:b5:ef:6a:30:08:a7:b0:3c:79:c0:66:08:ee:f2:
d0:bc:6e:ad:f8:20:5b:50:2f:5c:01:e3:66:a6:a5:1c:04:82:
ed:ce:98:9f:42:c5:bf:20:18:69:6a:5e:70:af:e4:40:b3:2e:
36:b5:cb:61:c7:00:ac:fd:9c:d8:bc:86:16:2a:0b:c3:bc:84:
c4:9b:68:81:59:df:de:56:dc:5c:ea:a6:af:8c:c2:8d:e7:ca:
cd:15:71:7e:34:b3:58:ac:b0:bc:33:b0:d2:12:cb:3e:08:f4:
ce:c1:57:2f:11:6b:cf:2c:4e:83:b7:48:a4:36:be:0e:57:02:
1c:b3:0f:d9:b5:6c:cb:b3:f2:f1:79:9f:00:58:7b:a6:c8:28:
22:b0:ee:4e
-----BEGIN CERTIFICATE-----
MIIGtjCCBZ6gAwIBAgICa+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwOTExMTExNzIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWRjMy04ZTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwp9CCKxJ7lSn/rHybTxRr6HdESUXSx7G6YNHd9//4HirCetCr66si4BkJ2xX
OSLGqOxmy3bewg6oMi6pImEvygA/pyNb6tJmN7G0jGN9rOwFvDji7K3GbvGtHrkR
+VISPBlEpvVwol9e5yy5uE8I4L8mpaIO5C6sw6ZUVsf+y6fKQw0mdYckAGxdI0Zv
7+4pzlrSIsPVKJ2tKyZ3D/GocmJjs+htk7afKqaZ3F+vlvmnTbgTaudMOeU6iRh1
bewA7wpOwsq4qyncMDtc1tD0YPIV6L5F5g3waIbswLr2+p3fPxS27lX3tJcLY1W2
+R43QPx00deYyeX7g3/JLdGjEwIDAQABo4ID2jCCA9YwHQYDVR0OBBYEFEcjISny
xiZhqqwvUXK0WFAbiTW8MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDFCRkRCMDg1
NEQ0MTFGMDk1NzlFNjFCQzRGOUFFMDIucm9hMIIBlwYIKwYBBQUHAQcBAf8EggGG
MIIBgjCCAWQEAgABMIIBXAMEAipgADAMAwQCLXWkAwQALXWmAwQCMezQAwQBZw7g
AwQCZxwgAwQBZ0HqAwQCZ0PEAwQBZ0RUAwQBZ0VWAwQBZ0VgAwQCZ0pkAwQCZ1/E
AwQBZ24gAwQBZ4F+AwQBZ4uaAwQBZ5X8AwQBZ5c0AwQBZ5fuAwQBZ5lAAwQBZ53M
AwQBZ6ACAwQBZ6FgAwQBZ6FwAwQBZ6F2AwQBZ6GqAwQAZ6GtAwQBZ6G0AwQBZ6IY
MAwDBAFnsBYDBAFnsBgDBAFnsPoDBAFnsSIwDAMEAWey5gMEAWey6AMEAWezrgME
AWe0igMEAWe3eAMEAWe8UgMEAWe88gMEAWe+eAMEAWfTyAMEAWfTzgMEAWfaegME
AWfkJAMEAWfkSgMEAWflNAMEAWfn+AMEAWfvQgMEAmf8XAMEAW6sHAMEAH39cgME
AaM9bgMEAaM9tgMEAaPfCAMEAaPf4AMEAsqe9DAYBAIAAjASAwcAIAEN9ebAAwcA
JAFewAAAMA0GCSqGSIb3DQEBCwUAA4IBAQALxwm94knyTozO5+JxmUBKCaE4cawt
v6wh/rbmsaBLqZM0PZE4hl8jCFLKQx7m05pLAACmT7T8Vx+Yk3HmXWd1NR6LC4hp
bt3Zx2nsF0yH5CItk0qS3SEo8dU4F4r/8J77WKHF9+Vu2/Ykm6Rh/xlvte9qMAin
sDx5wGYI7vLQvG6t+CBbUC9cAeNmpqUcBILtzpifQsW/IBhpal5wr+RAsy42tcth
xwCs/ZzYvIYWKgvDvITEm2iBWd/eVtxc6qavjMKN58rNFXF+NLNYrLC8M7DSEss+
CPTOwVcvEWvPLE6Dt0ikNr4OVwIcsw/ZtWzLs/LxeZ8AWHumyCgisO5O
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:06 2026 by rpki-client