Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E942068764511EDAB3DDE6EC4F9AE02.roa
File: 7E942068764511EDAB3DDE6EC4F9AE02.roa (raw, json)
Hash identifier: mQmmTrJL33KLKyffOpLbOqramFzSOMvO6CZb0XA/S9A=
Subject key identifier: 6B:89:BF:49:37:82:22:C6:45:75:13:A5:FA:E5:67:EC:73:C3:C3:7A
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F53
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E942068764511EDAB3DDE6EC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:38:18 +0000
ROA not before: Fri 02 Oct 2026 15:38:18 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 7643
IP address blocks: 103.171.92.0/24 maxlen: 24
103.171.93.0/24 maxlen: 24
123.30.70.0/23 maxlen: 24
123.30.72.0/23 maxlen: 24
123.30.94.0/23 maxlen: 24
123.30.104.0/23 maxlen: 24
123.30.108.0/23 maxlen: 24
123.30.127.0/24 maxlen: 24
123.30.128.0/23 maxlen: 24
123.30.132.0/22 maxlen: 24
123.30.136.0/22 maxlen: 24
123.30.140.0/24 maxlen: 24
123.30.142.0/23 maxlen: 24
123.30.160.0/23 maxlen: 24
123.30.163.0/24 maxlen: 24
123.30.164.0/23 maxlen: 24
123.30.230.0/24 maxlen: 24
123.30.244.0/24 maxlen: 24
123.30.250.0/24 maxlen: 24
123.30.253.0/24 maxlen: 24
203.162.2.0/24 maxlen: 24
203.162.36.0/23 maxlen: 23
203.162.36.0/24 maxlen: 24
203.162.37.0/24 maxlen: 24
203.162.49.0/24 maxlen: 24
203.162.51.0/24 maxlen: 24
203.162.53.0/24 maxlen: 24
203.162.55.0/24 maxlen: 24
203.162.56.0/24 maxlen: 24
203.162.59.0/24 maxlen: 24
203.162.68.0/23 maxlen: 23
203.162.68.0/24 maxlen: 24
203.162.69.0/24 maxlen: 24
203.162.76.0/23 maxlen: 24
203.162.78.0/23 maxlen: 24
203.162.80.0/23 maxlen: 24
203.162.96.0/24 maxlen: 24
203.162.100.0/23 maxlen: 24
203.162.102.0/23 maxlen: 24
203.162.153.0/24 maxlen: 24
203.162.155.0/24 maxlen: 24
203.162.163.0/24 maxlen: 24
222.255.102.0/23 maxlen: 24
222.255.121.0/24 maxlen: 24
222.255.122.0/24 maxlen: 24
222.255.210.0/24 maxlen: 24
222.255.211.0/24 maxlen: 24
222.255.234.0/23 maxlen: 24
222.255.237.0/24 maxlen: 24
222.255.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28499 (0x6f53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:38:18 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcfea-2410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:a3:56:33:bf:ea:c3:c4:00:ca:d9:c3:b6:
ce:85:91:11:ff:f3:08:fe:91:2e:32:26:01:67:85:
8a:cd:db:d2:1a:b7:58:e2:17:83:2d:c2:f0:3d:d0:
73:aa:42:a3:fe:3e:da:aa:58:dd:65:eb:5e:d9:c2:
f8:27:a4:8b:7b:22:7e:99:fc:06:a8:ec:18:15:51:
21:df:a8:f4:06:71:17:1a:43:3b:3a:3d:94:fc:2e:
8d:74:d3:63:3b:c7:07:6e:c3:5e:e9:78:b7:f6:39:
83:81:11:7a:b7:60:31:d8:f7:95:dd:cf:44:46:37:
a6:27:66:65:53:b8:9f:78:cf:ca:e4:9d:19:38:71:
60:17:bb:72:6d:63:6a:cc:28:a6:36:23:62:9e:79:
53:a0:57:da:41:e9:44:05:7e:c4:9a:df:9a:f9:81:
58:f6:9c:5d:9a:58:ec:db:da:53:6c:87:c2:5c:f2:
d1:fb:92:35:3c:b6:51:4c:8e:23:0a:7f:3e:27:ed:
68:69:b1:b4:3e:c0:20:a8:b5:ac:62:7a:07:3f:1f:
0e:4c:c8:1c:6c:d1:9f:8c:45:17:d4:2b:4e:b6:67:
fc:41:8b:95:b3:1f:23:53:3e:75:03:24:ea:ca:b0:
82:41:41:32:29:ed:9c:85:31:9e:d1:df:fa:b6:ce:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:89:BF:49:37:82:22:C6:45:75:13:A5:FA:E5:67:EC:73:C3:C3:7A
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E942068764511EDAB3DDE6EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.92.0/23
123.30.70.0-123.30.73.255
123.30.94.0/23
123.30.104.0/23
123.30.108.0/23
123.30.127.0-123.30.129.255
123.30.132.0-123.30.140.255
123.30.142.0/23
123.30.160.0/23
123.30.163.0-123.30.165.255
123.30.230.0/24
123.30.244.0/24
123.30.250.0/24
123.30.253.0/24
203.162.2.0/24
203.162.36.0/23
203.162.49.0/24
203.162.51.0/24
203.162.53.0/24
203.162.55.0-203.162.56.255
203.162.59.0/24
203.162.68.0/23
203.162.76.0-203.162.81.255
203.162.96.0/24
203.162.100.0/22
203.162.153.0/24
203.162.155.0/24
203.162.163.0/24
222.255.102.0/23
222.255.121.0-222.255.122.255
222.255.210.0/23
222.255.234.0/23
222.255.237.0/24
222.255.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:fe:40:0b:0d:52:c0:c6:27:ce:73:fd:c0:3f:c7:94:75:ac:
31:91:58:41:5e:10:b0:03:b1:8e:3b:48:c6:bb:ea:d9:3b:b2:
eb:13:e8:a7:56:45:eb:40:f4:fe:b9:15:a0:f2:dd:2c:dc:3a:
24:92:f4:56:99:11:26:71:8c:34:28:7d:f7:31:92:e7:27:bf:
e4:3e:b6:53:a6:dc:72:d5:54:2c:04:0d:27:e1:35:fe:db:7f:
ed:1f:a8:73:04:41:0d:c0:02:eb:2a:8b:b1:23:25:f0:5d:4b:
c8:95:5e:92:ee:ba:a8:cc:ad:95:f4:12:7e:39:f1:c3:f2:28:
85:42:5c:f5:6b:4d:47:69:3e:28:f2:97:2d:39:c0:2a:c6:0c:
60:b4:b2:3f:3e:c5:5f:97:fe:44:68:a3:35:24:f6:94:9d:e4:
9b:6a:a5:38:91:a8:21:3b:0a:41:dc:42:c0:50:91:58:40:2b:
9d:6b:48:db:8d:b0:b2:06:08:b1:65:01:9d:02:72:f2:11:76:
df:ba:94:28:81:a8:40:bc:ec:2f:59:b2:97:10:60:0d:bd:4a:
42:74:ab:6f:04:1b:5f:a7:a3:ff:5f:84:fb:de:68:bd:a0:b4:
17:16:64:b1:1b:dd:d9:05:72:5b:07:1f:a1:19:e5:6c:61:ae:
73:d2:d3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:57 2026 by rpki-client