Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2836372A1C011EB9CD78934C4F9AE02.roa
File: A2836372A1C011EB9CD78934C4F9AE02.roa (raw, json)
Hash identifier: re97g8lrMRa/DIUp51I0ZMAL5YX9fGJ3lKYndNtF1tQ=
Subject key identifier: BD:36:E8:DD:7C:DB:46:7E:49:DF:02:E9:F2:9C:2D:2C:95:94:99:5B
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F3B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2836372A1C011EB9CD78934C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:37:27 +0000
ROA not before: Fri 02 Oct 2026 15:37:27 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 63737
IP address blocks: 36.50.52.0/23 maxlen: 23
42.96.10.0/23 maxlen: 23
103.14.154.0/23 maxlen: 23
103.14.224.0/23 maxlen: 23
103.15.94.0/23 maxlen: 23
103.30.10.0/23 maxlen: 23
103.39.124.0/23 maxlen: 23
103.57.128.0/23 maxlen: 23
103.57.130.0/23 maxlen: 24
103.74.100.0/22 maxlen: 24
103.74.104.0/22 maxlen: 22
103.122.140.0/23 maxlen: 23
103.140.250.0/23 maxlen: 23
103.149.136.0/23 maxlen: 23
103.167.84.0/23 maxlen: 23
103.167.90.0/23 maxlen: 23
103.167.92.0/23 maxlen: 23
103.170.254.0/23 maxlen: 23
103.171.0.0/23 maxlen: 23
103.176.110.0/23 maxlen: 23
103.176.112.0/23 maxlen: 23
103.177.108.0/23 maxlen: 23
103.180.150.0/23 maxlen: 23
103.180.152.0/23 maxlen: 23
103.182.18.0/23 maxlen: 23
103.183.114.0/23 maxlen: 23
103.183.118.0/23 maxlen: 23
103.186.66.0/23 maxlen: 23
103.187.4.0/23 maxlen: 23
103.190.80.0/23 maxlen: 23
103.209.60.0/23 maxlen: 23
103.231.248.0/23 maxlen: 23
103.232.52.0/22 maxlen: 22
103.253.22.0/23 maxlen: 24
202.55.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28475 (0x6f3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:37:27 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcfb7-2c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:53:3c:f3:6a:70:4e:5a:0c:4b:d8:45:00:
d4:e4:82:53:21:9b:6e:8d:23:18:91:29:34:b5:0f:
bc:42:7c:5d:33:24:c0:0f:42:d7:77:4d:23:17:66:
6f:71:88:fe:d0:02:f1:f9:6b:b8:3c:85:6b:bd:51:
4a:0d:e8:88:15:24:6d:75:b3:57:83:8a:65:4c:af:
ad:7a:91:7e:24:e1:6c:0e:23:89:c6:e6:e5:70:5c:
90:01:86:93:d7:32:81:d8:f4:7a:5b:c2:88:60:ef:
e5:10:cb:28:03:24:8c:75:5e:f0:78:81:c4:2e:be:
b6:74:ec:16:aa:df:08:5f:9e:b1:8c:e9:b9:27:3e:
2a:6c:66:5e:0d:22:f8:f6:d7:53:f1:10:52:01:f1:
c5:e7:df:83:d3:bc:f4:c1:07:aa:a6:3d:92:0c:68:
bb:97:db:61:de:27:51:e9:12:80:d7:8c:c9:45:54:
fe:97:5c:63:d2:e3:5d:39:2b:93:73:f3:86:05:86:
d0:bd:a9:99:74:0d:99:15:ab:f6:e1:89:1b:fa:33:
24:78:0f:32:c1:62:5b:f7:45:e9:3d:f7:55:eb:0e:
1b:61:5c:6c:2e:4b:56:ac:4e:2c:2d:5e:3b:91:13:
26:f4:f9:08:0e:ef:47:3d:66:7b:e1:91:b0:58:59:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:E8:DD:7C:DB:46:7E:49:DF:02:E9:F2:9C:2D:2C:95:94:99:5B
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2836372A1C011EB9CD78934C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.52.0/23
42.96.10.0/23
103.14.154.0/23
103.14.224.0/23
103.15.94.0/23
103.30.10.0/23
103.39.124.0/23
103.57.128.0/22
103.74.100.0-103.74.107.255
103.122.140.0/23
103.140.250.0/23
103.149.136.0/23
103.167.84.0/23
103.167.90.0-103.167.93.255
103.170.254.0-103.171.1.255
103.176.110.0-103.176.113.255
103.177.108.0/23
103.180.150.0-103.180.153.255
103.182.18.0/23
103.183.114.0/23
103.183.118.0/23
103.186.66.0/23
103.187.4.0/23
103.190.80.0/23
103.209.60.0/23
103.231.248.0/23
103.232.52.0/22
103.253.22.0/23
202.55.132.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:87:5b:88:7e:48:3b:53:23:28:7a:a1:de:60:4f:91:ba:0f:
b0:0e:c1:03:7a:b7:ff:4e:d2:40:27:87:1e:7b:37:60:87:34:
3b:8c:b2:95:da:a0:82:b2:01:92:0f:8b:b6:a5:7b:1f:7e:95:
ff:dd:41:36:17:3a:47:8e:95:a9:38:19:c4:57:a8:06:09:9f:
fc:86:a2:c9:be:43:3d:bb:77:1b:a7:23:82:9f:e8:49:f2:d3:
d9:96:fe:43:b1:66:b1:13:a1:dc:37:a0:2a:80:98:1b:e8:4a:
71:ef:03:8d:1b:57:e8:31:89:cb:e4:22:8f:49:7f:10:43:1f:
5c:85:71:54:00:2f:44:4a:f5:ba:a2:b3:1e:68:d0:06:26:58:
1d:5a:e7:43:a8:1f:eb:b5:e5:70:e2:64:f5:d6:7e:54:8e:ec:
15:3b:5c:5a:d9:6f:65:b8:f3:2a:a9:00:d1:47:ad:30:26:46:
50:3f:a2:31:3f:13:59:49:a5:36:b7:b7:49:87:f8:a7:4a:70:
73:3b:7c:f0:1b:62:a5:08:7e:bc:a2:9e:07:d5:9e:04:23:9b:
c4:21:04:d5:23:8f:a0:08:62:c5:f4:df:df:89:80:d9:bc:d1:
65:ee:7e:03:37:c4:0e:97:30:e3:a6:62:22:84:b3:2c:f8:d9:
ab:2d:0d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:09:44 2026 by rpki-client