Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E942068764511EDAB3DDE6EC4F9AE02.roa
File: 7E942068764511EDAB3DDE6EC4F9AE02.roa (raw, json)
Hash identifier: +22MvvbaXgXBbPb+pWG+OzPtuW1IHeuL63RS8TR7i/k=
Subject key identifier: 28:1F:2B:62:96:EF:8C:AD:BC:97:57:FB:DE:BA:A4:67:CF:C2:6B:09
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5F32
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E942068764511EDAB3DDE6EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:21:27 +0000
ROA not before: Thu 28 Aug 2025 14:58:16 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 7643
IP address blocks: 103.171.92.0/24 maxlen: 24
103.171.93.0/24 maxlen: 24
123.30.70.0/23 maxlen: 24
123.30.72.0/23 maxlen: 24
123.30.94.0/23 maxlen: 24
123.30.104.0/23 maxlen: 24
123.30.108.0/23 maxlen: 24
123.30.127.0/24 maxlen: 24
123.30.128.0/23 maxlen: 24
123.30.132.0/22 maxlen: 24
123.30.136.0/22 maxlen: 24
123.30.140.0/24 maxlen: 24
123.30.142.0/23 maxlen: 24
123.30.160.0/23 maxlen: 24
123.30.163.0/24 maxlen: 24
123.30.164.0/23 maxlen: 24
123.30.230.0/24 maxlen: 24
123.30.244.0/24 maxlen: 24
123.30.250.0/24 maxlen: 24
123.30.253.0/24 maxlen: 24
203.162.2.0/24 maxlen: 24
203.162.36.0/23 maxlen: 23
203.162.36.0/24 maxlen: 24
203.162.37.0/24 maxlen: 24
203.162.49.0/24 maxlen: 24
203.162.51.0/24 maxlen: 24
203.162.53.0/24 maxlen: 24
203.162.55.0/24 maxlen: 24
203.162.56.0/24 maxlen: 24
203.162.59.0/24 maxlen: 24
203.162.68.0/23 maxlen: 23
203.162.68.0/24 maxlen: 24
203.162.69.0/24 maxlen: 24
203.162.76.0/23 maxlen: 24
203.162.78.0/23 maxlen: 24
203.162.80.0/23 maxlen: 24
203.162.96.0/24 maxlen: 24
203.162.100.0/23 maxlen: 24
203.162.102.0/23 maxlen: 24
203.162.153.0/24 maxlen: 24
203.162.155.0/24 maxlen: 24
203.162.163.0/24 maxlen: 24
222.255.102.0/23 maxlen: 24
222.255.121.0/24 maxlen: 24
222.255.122.0/24 maxlen: 24
222.255.210.0/24 maxlen: 24
222.255.211.0/24 maxlen: 24
222.255.234.0/23 maxlen: 24
222.255.237.0/24 maxlen: 24
222.255.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24370 (0x5f32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:58:16 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60d67-2cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:91:01:f0:3d:48:47:7d:48:bd:00:23:0f:
62:1b:7a:a5:57:6b:88:c0:45:ca:81:77:03:0f:0b:
68:73:51:35:c8:44:a3:f3:16:16:ee:78:36:ef:f2:
c0:db:51:6a:88:e7:da:59:2c:c4:6b:05:be:1f:43:
1c:c4:fa:82:f2:9f:d8:db:b1:7b:89:fb:b1:5d:44:
a9:ea:85:f5:99:21:98:3e:dc:c5:de:67:7b:7a:7e:
4b:cf:67:da:e5:5e:74:07:b9:2c:ea:cd:96:63:9c:
85:6a:c9:e1:ce:c4:78:41:96:66:7f:4a:9b:a3:54:
c4:6b:dd:1c:5e:13:60:4a:c8:a8:05:d2:5f:f4:8b:
c3:90:6d:85:1c:a8:f2:5a:89:13:ae:13:49:01:1e:
3a:01:6d:9e:58:89:b2:4d:9b:d1:92:17:bc:93:61:
71:ea:85:8b:54:c6:e1:dc:2f:18:51:bb:20:34:e2:
a6:45:43:66:e1:37:3c:cb:f5:3d:dd:2a:e0:66:98:
1b:f8:be:01:05:da:17:5a:3d:6c:89:7c:c4:4e:4c:
ef:5b:0e:da:f9:c5:44:b8:2c:6e:35:6f:3f:e8:0e:
69:e6:bd:0e:e3:9b:b8:bd:78:68:0b:f9:9f:b9:f3:
43:2e:1e:e4:c5:c5:62:9e:d1:62:b2:37:c0:3b:54:
c4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1F:2B:62:96:EF:8C:AD:BC:97:57:FB:DE:BA:A4:67:CF:C2:6B:09
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E942068764511EDAB3DDE6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.92.0/23
123.30.70.0-123.30.73.255
123.30.94.0/23
123.30.104.0/23
123.30.108.0/23
123.30.127.0-123.30.129.255
123.30.132.0-123.30.140.255
123.30.142.0/23
123.30.160.0/23
123.30.163.0-123.30.165.255
123.30.230.0/24
123.30.244.0/24
123.30.250.0/24
123.30.253.0/24
203.162.2.0/24
203.162.36.0/23
203.162.49.0/24
203.162.51.0/24
203.162.53.0/24
203.162.55.0-203.162.56.255
203.162.59.0/24
203.162.68.0/23
203.162.76.0-203.162.81.255
203.162.96.0/24
203.162.100.0/22
203.162.153.0/24
203.162.155.0/24
203.162.163.0/24
222.255.102.0/23
222.255.121.0-222.255.122.255
222.255.210.0/23
222.255.234.0/23
222.255.237.0/24
222.255.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:0d:f1:9e:29:4f:81:a5:1c:ac:f2:15:d1:f2:2e:10:ca:4f:
98:27:26:3b:01:a9:aa:a0:a5:e8:dd:46:eb:90:1f:39:d3:c8:
76:f0:f5:f7:03:a0:34:31:43:06:89:77:1d:2b:93:17:4d:7f:
19:c5:a8:07:cb:08:d2:20:f4:5e:0f:53:1d:0f:6e:59:5a:41:
15:08:a1:92:52:f8:ff:21:59:be:29:ea:c9:9d:f9:11:4c:9c:
fc:5c:86:b7:10:94:ec:83:5e:60:39:df:8c:11:5f:8d:7b:f1:
6e:7d:87:45:8d:cf:79:eb:6a:7f:82:07:8c:12:d0:69:03:6f:
a5:da:5c:a1:8e:c8:66:84:8e:fc:47:de:8d:31:20:bb:15:fb:
d1:e1:79:68:b0:70:c1:13:78:5b:b2:36:a6:b3:3a:ff:79:20:
99:31:68:06:c6:d3:c9:9b:7d:61:1f:34:cf:a0:57:b0:fc:18:
0b:33:1c:de:91:b9:59:d9:cb:83:f0:a8:8a:0b:ee:75:b6:e4:
e8:9c:fb:18:9c:f9:d1:2b:45:27:b3:86:3e:aa:92:00:1a:83:
71:2c:5e:54:51:c3:4d:48:f7:01:67:8e:4a:72:4a:34:6c:1c:
74:ca:15:aa:8a:88:d5:00:12:09:c2:a0:b6:fc:3e:4e:de:75:
82:05:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:45:26 2026 by rpki-client