Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/735B2BD0609611F1B8BC3DA77347A888.roa
File: 735B2BD0609611F1B8BC3DA77347A888.roa (raw, json)
Hash identifier: rao6UW1c6b6dD18LW8U//wHDv+vNv68gJWyESv5xORs=
Subject key identifier: 50:95:38:38:7C:B6:82:A3:C6:0D:3E:0B:27:16:C4:09:28:A5:68:FA
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6C9F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/735B2BD0609611F1B8BC3DA77347A888.roa
Signing time: Fri 05 Jun 2026 04:24:32 +0000
ROA not before: Fri 05 Jun 2026 04:24:32 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151858
IP address blocks: 36.50.54.0/23 maxlen: 23
36.50.176.0/23 maxlen: 23
103.14.48.0/23 maxlen: 23
103.20.96.0/23 maxlen: 23
103.20.102.0/23 maxlen: 23
103.75.180.0/22 maxlen: 23
103.77.208.0/23 maxlen: 23
103.106.104.0/23 maxlen: 24
103.116.8.0/23 maxlen: 23
103.118.28.0/23 maxlen: 23
103.167.88.0/23 maxlen: 23
103.169.34.0/23 maxlen: 23
103.169.34.0/24 maxlen: 24
103.169.35.0/24 maxlen: 24
103.171.90.0/23 maxlen: 23
103.173.226.0/23 maxlen: 23
103.175.248.0/23 maxlen: 23
103.175.248.0/24 maxlen: 24
103.175.249.0/24 maxlen: 24
103.180.136.0/23 maxlen: 23
103.180.140.0/23 maxlen: 23
103.182.22.0/23 maxlen: 23
103.186.64.0/23 maxlen: 23
103.188.166.0/23 maxlen: 23
103.195.236.0/22 maxlen: 22
103.240.6.0/23 maxlen: 23
103.245.236.0/23 maxlen: 23
202.158.248.0/23 maxlen: 23
2001:df3:53c0::/48 maxlen: 48
2001:df4:e40::/48 maxlen: 48
2001:df4:5740::/48 maxlen: 48
2001:df4:7dc0::/48 maxlen: 48
2001:df4:da40::/48 maxlen: 48
2400:1da0::/48 maxlen: 48
2400:6ea0::/48 maxlen: 48
2400:82a0::/32 maxlen: 48
2400:e6e0::/48 maxlen: 48
2400:eea0::/48 maxlen: 48
2401:1e60::/48 maxlen: 48
2401:2b20::/48 maxlen: 48
2401:4120::/48 maxlen: 48
2401:44e0::/48 maxlen: 48
2401:4660::/48 maxlen: 48
2401:5ce0::/48 maxlen: 48
2401:8260::/48 maxlen: 48
2407:66c0::/48 maxlen: 48
2407:9940::/48 maxlen: 48
2407:f140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 06:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27807 (0x6c9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jun 5 04:24:32 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a224f80-38db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:40:73:ad:35:96:fd:c0:f1:f2:df:90:1a:
aa:3c:0b:17:e1:e1:b2:36:8e:ec:df:6d:96:50:f9:
1a:0a:f9:2b:e2:f4:73:b7:77:b3:a2:f8:d9:64:9b:
96:af:26:9d:d8:3c:55:64:6e:0f:40:5d:cb:6f:02:
a2:e8:f3:f2:fc:db:9e:eb:ec:2d:79:a3:da:dc:74:
4e:56:b0:24:3c:54:11:b5:82:3f:e4:9c:18:56:ce:
97:4d:6b:67:e9:4a:be:b6:8f:ca:6e:0e:73:58:57:
84:48:6e:12:a9:8b:88:99:9b:09:68:2f:13:51:f7:
2c:70:e2:d4:c7:7b:5f:42:15:93:c2:be:4c:c3:6d:
2f:63:2e:b6:2a:6e:2e:d8:73:7a:58:2b:fe:99:d8:
8f:eb:75:ac:9d:30:e6:7a:46:8b:d2:36:88:56:4b:
10:14:60:00:c2:07:ef:af:64:8f:be:52:44:84:fc:
16:ee:88:18:ba:63:cd:38:19:b8:9c:b9:3f:29:86:
fb:bd:f1:e7:40:43:eb:77:b6:6f:c1:68:4a:d3:2c:
b3:9b:87:09:9a:8e:1e:c4:fb:fd:ec:ad:79:d0:61:
6b:d2:4f:62:a7:e7:9a:3e:cd:ba:82:2c:f9:e5:d5:
80:5e:00:c3:23:32:cf:b2:91:ac:a7:f9:88:c1:d1:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:95:38:38:7C:B6:82:A3:C6:0D:3E:0B:27:16:C4:09:28:A5:68:FA
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/735B2BD0609611F1B8BC3DA77347A888.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.54.0/23
36.50.176.0/23
103.14.48.0/23
103.20.96.0/23
103.20.102.0/23
103.75.180.0/22
103.77.208.0/23
103.106.104.0/23
103.116.8.0/23
103.118.28.0/23
103.167.88.0/23
103.169.34.0/23
103.171.90.0/23
103.173.226.0/23
103.175.248.0/23
103.180.136.0/23
103.180.140.0/23
103.182.22.0/23
103.186.64.0/23
103.188.166.0/23
103.195.236.0/22
103.240.6.0/23
103.245.236.0/23
202.158.248.0/23
IPv6:
2001:df3:53c0::/48
2001:df4:e40::/48
2001:df4:5740::/48
2001:df4:7dc0::/48
2001:df4:da40::/48
2400:1da0::/48
2400:6ea0::/48
2400:82a0::/32
2400:e6e0::/48
2400:eea0::/48
2401:1e60::/48
2401:2b20::/48
2401:4120::/48
2401:44e0::/48
2401:4660::/48
2401:5ce0::/48
2401:8260::/48
2407:66c0::/48
2407:9940::/48
2407:f140::/48
Signature Algorithm: sha256WithRSAEncryption
6a:ab:d4:b8:47:ab:df:52:73:c5:09:7e:df:28:43:07:ba:ab:
e7:b8:00:c7:f6:d5:71:ca:93:a1:f1:a9:33:ad:ba:33:c0:b0:
e8:57:d0:5a:92:d4:5a:0c:ee:24:bb:ac:6f:2d:fe:ec:80:ad:
24:45:bc:14:fb:13:0e:52:b0:78:84:10:23:21:57:85:be:fc:
a0:10:b8:b5:12:35:39:89:ea:03:37:8d:dd:e1:d3:d2:4a:d7:
32:56:30:15:17:f3:46:6a:ce:82:fb:82:29:0f:41:1c:59:d4:
de:68:0d:ae:0d:0f:aa:98:0c:67:30:57:3a:65:3e:dc:4e:54:
51:b9:7f:cc:33:cd:c7:5c:94:b6:1c:ef:59:a8:60:62:af:f4:
de:0e:63:b8:f7:bc:e3:6c:12:37:02:26:52:85:3e:78:6f:a1:
42:e5:ad:75:9e:25:6a:e3:74:61:84:f1:6e:7f:44:86:da:1a:
a8:fb:16:83:81:33:2e:5b:b4:22:bd:3f:15:c1:ae:2c:44:a7:
40:f7:5c:74:a7:8f:ed:32:c0:44:57:2f:d3:21:40:33:c3:94:
c7:67:87:3d:cc:4c:4e:b6:47:19:aa:6d:56:40:83:3f:c1:56:
78:1d:c4:99:04:c2:24:34:79:92:94:d5:4f:6d:4c:9c:ff:48:
a7:b9:67:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:17:01 2026 by rpki-client