Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9DD52514768A11F18379E3C263A30FBC.roa
File: 9DD52514768A11F18379E3C263A30FBC.roa (raw, json)
Hash identifier: sOz7s/2U8UidVL0aMSXDmadjzuHqvW+HdyU/FE7FdwM=
Subject key identifier: 7A:DA:02:41:76:FB:96:10:3D:A3:FC:14:F8:0C:5C:D1:7B:84:18:94
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CD3
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9DD52514768A11F18379E3C263A30FBC.roa
Signing time: Fri 03 Jul 2026 02:55:15 +0000
ROA not before: Fri 03 Jul 2026 02:55:15 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140766
IP address blocks: 103.22.218.0/23 maxlen: 24
103.71.96.0/23 maxlen: 24
103.145.78.0/23 maxlen: 24
103.146.166.0/23 maxlen: 24
103.154.186.0/23 maxlen: 24
103.160.74.0/23 maxlen: 24
103.160.76.0/23 maxlen: 24
103.160.84.0/23 maxlen: 24
103.174.212.0/23 maxlen: 24
103.174.216.0/23 maxlen: 24
103.176.146.0/23 maxlen: 24
103.176.148.0/23 maxlen: 24
103.191.144.0/23 maxlen: 24
103.191.146.0/23 maxlen: 24
103.209.32.0/23 maxlen: 24
113.192.6.0/23 maxlen: 24
124.197.16.0/20 maxlen: 24
203.29.16.0/22 maxlen: 24
2001:df1:440::/48 maxlen: 48
2001:df1:4c0::/48 maxlen: 48
2001:df1:13c0::/48 maxlen: 48
2001:df1:2640::/48 maxlen: 48
2001:df2:4c40::/48 maxlen: 48
2001:df2:7c40::/48 maxlen: 48
2001:df3:4140::/48 maxlen: 48
2001:df3:5fc0::/48 maxlen: 48
2001:df3:abc0::/48 maxlen: 48
2001:df5:9980::/48 maxlen: 48
2400:15a0::/48 maxlen: 48
2400:1660::/48 maxlen: 48
2400:3320::/48 maxlen: 48
2400:3360::/48 maxlen: 48
2400:b8e0::/48 maxlen: 48
2400:f760::/48 maxlen: 48
2401:74e0::/48 maxlen: 48
2406:e4c0::/32 maxlen: 48
2406:e640::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27859 (0x6cd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 3 02:55:15 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a472493-757e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:1a:a0:ce:b3:ec:e3:75:6a:26:98:c9:f0:
a7:31:f4:57:8d:99:c7:df:9a:ac:b3:20:26:d6:8c:
3f:b5:fb:ea:f3:f1:08:de:02:4a:06:8f:3e:fc:08:
1e:b3:5c:2b:47:71:f6:b2:ad:7f:bc:da:ef:e7:c8:
5e:ba:4d:47:44:b3:35:0a:be:bb:d1:da:3a:e1:ab:
9c:40:ae:bb:2a:cb:13:8f:1f:95:05:73:6d:cd:ba:
33:34:a1:c7:6f:49:ed:68:a4:00:d1:1d:a6:4c:10:
ba:f3:07:14:d9:57:ad:e6:ca:98:72:bf:0a:92:24:
59:dd:06:6c:6b:70:00:5a:ee:bf:13:62:57:c7:80:
83:95:ef:63:71:6e:ab:c2:e9:75:ba:79:8f:92:99:
5e:73:6a:31:7f:bf:17:a4:8f:29:a0:fa:22:94:e9:
37:16:6e:43:a8:ba:9d:0e:3c:28:c2:e8:d7:91:57:
52:ff:54:8c:21:9b:17:c5:02:b3:0a:76:25:ea:ad:
50:d4:a3:71:95:7b:ec:4c:f3:37:42:96:65:c9:cd:
31:ed:03:a1:47:9c:41:03:a2:b6:ff:eb:0b:62:06:
b3:99:d4:bc:05:fc:ec:65:1f:cc:9a:1f:71:0b:b2:
06:9f:26:2d:a1:41:4b:09:5c:0c:9d:ce:73:23:1b:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DA:02:41:76:FB:96:10:3D:A3:FC:14:F8:0C:5C:D1:7B:84:18:94
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9DD52514768A11F18379E3C263A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.22.218.0/23
103.71.96.0/23
103.145.78.0/23
103.146.166.0/23
103.154.186.0/23
103.160.74.0-103.160.77.255
103.160.84.0/23
103.174.212.0/23
103.174.216.0/23
103.176.146.0-103.176.149.255
103.191.144.0/22
103.209.32.0/23
113.192.6.0/23
124.197.16.0/20
203.29.16.0/22
IPv6:
2001:df1:440::/48
2001:df1:4c0::/48
2001:df1:13c0::/48
2001:df1:2640::/48
2001:df2:4c40::/48
2001:df2:7c40::/48
2001:df3:4140::/48
2001:df3:5fc0::/48
2001:df3:abc0::/48
2001:df5:9980::/48
2400:15a0::/48
2400:1660::/48
2400:3320::/48
2400:3360::/48
2400:b8e0::/48
2400:f760::/48
2401:74e0::/48
2406:e4c0::/32
2406:e640::/48
Signature Algorithm: sha256WithRSAEncryption
40:08:7e:d1:4e:ec:90:bc:60:f7:85:44:16:c7:28:68:90:11:
a7:af:12:72:50:3a:41:a5:d0:df:d6:a2:74:09:47:07:33:c3:
02:46:ac:0c:10:cc:a4:f4:04:9d:5c:d5:14:07:9c:ed:be:83:
7a:97:ba:de:cd:73:f4:47:fd:d4:58:d2:d6:52:ff:b1:b5:45:
32:87:72:e6:f0:29:ac:69:cb:6b:79:ae:a4:6f:81:da:af:37:
9d:ca:5c:ad:b0:81:ec:58:ab:31:5e:b3:66:e7:15:50:6b:6f:
d0:5a:89:0f:68:a4:e5:45:51:45:9a:b7:2a:17:d1:47:e5:b0:
e8:6a:a1:83:c6:76:82:2b:6a:0d:c0:61:5b:eb:84:f9:8d:86:
11:5a:c1:ef:82:41:32:f1:5f:6b:b2:92:37:9d:8c:ea:e6:e0:
cd:51:30:ff:88:6c:7d:72:08:35:94:71:a7:3b:a9:73:a4:cf:
63:4d:ef:89:92:e9:37:d5:31:16:88:67:6c:13:51:d0:93:81:
35:20:74:72:b9:97:88:c7:64:c7:44:0a:76:f7:c0:e2:4f:d4:
30:56:b7:3e:b7:9a:f5:47:5e:ff:07:73:89:ac:f9:55:b8:a6:
0d:e9:98:1b:7d:91:09:a0:e6:2d:23:c8:be:ca:e5:34:70:e1:
4d:99:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:19 2026 by rpki-client