Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EF44FD8768A11F18379E3C263A30FBC.roa
File: 9EF44FD8768A11F18379E3C263A30FBC.roa (raw, json)
Hash identifier: StLWgUvXSyq+cwILrP2MqeZFJVogMqBw3TkmPS/zVXI=
Subject key identifier: 6C:31:C6:F2:9B:3C:86:79:BB:C4:7C:35:17:45:04:74:F9:F6:1F:52
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E82
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EF44FD8768A11F18379E3C263A30FBC.roa
Signing time: Fri 02 Oct 2026 15:30:46 +0000
ROA not before: Fri 02 Oct 2026 15:30:45 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 151858
IP address blocks: 36.50.54.0/23 maxlen: 23
36.50.176.0/23 maxlen: 23
103.14.48.0/23 maxlen: 23
103.20.96.0/23 maxlen: 23
103.20.102.0/23 maxlen: 23
103.75.180.0/22 maxlen: 23
103.77.208.0/23 maxlen: 23
103.106.104.0/23 maxlen: 24
103.116.8.0/23 maxlen: 23
103.118.28.0/23 maxlen: 23
103.167.88.0/23 maxlen: 23
103.169.34.0/23 maxlen: 23
103.169.34.0/24 maxlen: 24
103.169.35.0/24 maxlen: 24
103.171.90.0/23 maxlen: 23
103.173.226.0/23 maxlen: 23
103.175.248.0/23 maxlen: 23
103.175.248.0/24 maxlen: 24
103.175.249.0/24 maxlen: 24
103.180.136.0/23 maxlen: 23
103.180.140.0/23 maxlen: 23
103.182.22.0/23 maxlen: 23
103.186.64.0/23 maxlen: 23
103.188.166.0/23 maxlen: 23
103.195.236.0/22 maxlen: 22
103.195.236.0/23 maxlen: 23
103.195.238.0/23 maxlen: 23
103.240.6.0/23 maxlen: 23
103.245.236.0/23 maxlen: 23
163.52.144.0/24 maxlen: 24
202.158.248.0/23 maxlen: 23
2001:df3:53c0::/48 maxlen: 48
2001:df4:e40::/48 maxlen: 48
2001:df4:5740::/48 maxlen: 48
2001:df4:7dc0::/48 maxlen: 48
2001:df7:79c0::/48 maxlen: 48
2400:1da0::/48 maxlen: 48
2400:6ea0::/48 maxlen: 48
2400:82a0::/32 maxlen: 48
2400:e6e0::/48 maxlen: 48
2400:eea0::/48 maxlen: 48
2401:1e60::/48 maxlen: 48
2401:2b20::/48 maxlen: 48
2401:4120::/48 maxlen: 48
2401:44e0::/48 maxlen: 48
2401:4660::/48 maxlen: 48
2401:5ce0::/48 maxlen: 48
2401:8260::/48 maxlen: 48
2407:66c0::/48 maxlen: 48
2407:9940::/48 maxlen: 48
2407:f140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28290 (0x6e82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:30:45 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfce25-b27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:70:91:fe:b1:72:19:3a:34:5d:6c:58:58:
a7:1b:13:54:a4:c6:63:85:76:dc:72:c9:c6:18:8c:
05:92:55:fd:45:21:50:56:40:ff:d5:bb:3f:40:f6:
15:a8:f1:0e:0f:aa:9e:b1:11:96:d2:bb:75:2c:3f:
77:a4:e4:82:54:fd:3d:4c:84:6e:c3:23:e5:36:0d:
2b:58:62:be:e5:1f:ae:1c:07:cb:19:45:4c:6e:18:
f8:2b:60:d5:55:3b:a6:50:e6:c6:60:89:49:ce:09:
d8:70:e0:02:01:29:c6:23:00:bc:62:a2:ea:74:0d:
89:d8:98:1c:e9:9b:f6:c7:79:dd:7e:27:2e:1e:13:
7f:cc:84:54:98:b7:7a:14:cf:90:88:06:51:78:dc:
13:2d:c6:20:d0:cc:e8:d9:d2:7d:c2:95:28:d8:49:
03:49:11:e2:46:c9:47:87:58:41:a2:c8:54:d8:87:
8d:ca:67:a2:c0:0a:13:64:87:fa:0b:a8:bb:c8:67:
17:97:cf:7a:bb:49:dc:27:31:38:9a:30:38:52:01:
bb:44:3d:fa:00:e3:0b:08:c3:c7:01:5e:0c:cd:14:
64:cb:52:28:2a:60:94:f8:6a:fd:24:5c:43:92:d1:
56:9b:a0:ae:7f:cc:bb:e4:a1:cd:e8:25:76:94:c9:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:31:C6:F2:9B:3C:86:79:BB:C4:7C:35:17:45:04:74:F9:F6:1F:52
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EF44FD8768A11F18379E3C263A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.54.0/23
36.50.176.0/23
103.14.48.0/23
103.20.96.0/23
103.20.102.0/23
103.75.180.0/22
103.77.208.0/23
103.106.104.0/23
103.116.8.0/23
103.118.28.0/23
103.167.88.0/23
103.169.34.0/23
103.171.90.0/23
103.173.226.0/23
103.175.248.0/23
103.180.136.0/23
103.180.140.0/23
103.182.22.0/23
103.186.64.0/23
103.188.166.0/23
103.195.236.0/22
103.240.6.0/23
103.245.236.0/23
163.52.144.0/24
202.158.248.0/23
IPv6:
2001:df3:53c0::/48
2001:df4:e40::/48
2001:df4:5740::/48
2001:df4:7dc0::/48
2001:df7:79c0::/48
2400:1da0::/48
2400:6ea0::/48
2400:82a0::/32
2400:e6e0::/48
2400:eea0::/48
2401:1e60::/48
2401:2b20::/48
2401:4120::/48
2401:44e0::/48
2401:4660::/48
2401:5ce0::/48
2401:8260::/48
2407:66c0::/48
2407:9940::/48
2407:f140::/48
Signature Algorithm: sha256WithRSAEncryption
41:c0:22:56:2a:bc:ba:d4:60:67:df:47:d5:4f:52:2d:2a:4f:
fc:58:b6:9b:85:26:07:11:d0:61:0f:91:fb:a4:dc:7e:b8:e1:
1d:0c:06:9a:e2:0f:8d:d6:87:cc:44:03:3c:c5:5c:c4:6b:00:
4b:2d:72:2b:d1:17:3f:14:ca:59:bd:ad:91:6d:99:fe:a9:db:
5b:94:38:09:69:af:92:bc:ee:a1:aa:e8:10:c0:6e:ba:06:0f:
17:09:b2:f0:23:bc:ed:01:2b:fe:ba:13:11:db:70:6b:92:11:
87:7b:bc:2e:0d:0c:48:9a:aa:07:e4:22:bf:51:37:f3:4d:b0:
e5:7c:e1:53:15:8c:d2:2e:cc:1b:46:a9:6e:fe:ea:06:dc:7e:
51:2e:2e:71:b0:f7:d0:65:21:bc:ba:d0:b3:e7:24:ca:a9:b2:
5c:fb:71:8e:f0:ab:55:05:b9:c1:19:a0:fc:83:85:5a:1c:89:
c7:98:3f:33:8c:4d:c7:68:0e:4e:88:b5:13:ab:60:6c:8f:0d:
2c:50:dd:77:72:65:1d:a1:ef:7e:56:7f:ec:6a:07:aa:f0:51:
77:8e:50:91:36:9f:0d:b8:7a:a6:44:76:99:4c:4f:77:cc:2e:
6c:d3:63:df:1d:37:ad:34:70:3e:ed:2b:66:7c:7f:69:af:e9:
03:4b:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:29 2026 by rpki-client