Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C277F1007F3911F193096D0490A30FBC.roa
File: C277F1007F3911F193096D0490A30FBC.roa (raw, json)
Hash identifier: m8MOMeDZoSqivz3379m/+UGX08lslSKjh6CV/cNREPs=
Subject key identifier: C8:2C:D2:8A:58:10:35:DF:C9:08:CC:75:B2:50:FC:71:8B:0D:2E:D1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DB9
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C277F1007F3911F193096D0490A30FBC.roa
Signing time: Fri 02 Oct 2026 15:24:14 +0000
ROA not before: Fri 02 Oct 2026 15:24:14 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135918
IP address blocks: 42.96.0.0/22 maxlen: 22
45.117.164.0/24 maxlen: 24
45.117.165.0/24 maxlen: 24
45.117.166.0/24 maxlen: 24
49.236.208.0/22 maxlen: 22
103.14.224.0/23 maxlen: 23
103.28.32.0/22 maxlen: 22
103.65.234.0/23 maxlen: 23
103.67.196.0/23 maxlen: 23
103.67.198.0/23 maxlen: 23
103.68.84.0/23 maxlen: 23
103.69.86.0/23 maxlen: 23
103.69.96.0/23 maxlen: 23
103.74.100.0/22 maxlen: 24
103.95.196.0/22 maxlen: 22
103.110.32.0/23 maxlen: 23
103.129.126.0/23 maxlen: 23
103.139.154.0/23 maxlen: 23
103.149.252.0/23 maxlen: 23
103.151.52.0/23 maxlen: 23
103.151.238.0/23 maxlen: 23
103.153.64.0/23 maxlen: 23
103.157.204.0/23 maxlen: 23
103.160.2.0/23 maxlen: 23
103.161.96.0/23 maxlen: 23
103.161.112.0/23 maxlen: 23
103.161.118.0/23 maxlen: 23
103.161.170.0/23 maxlen: 23
103.161.173.0/24 maxlen: 24
103.161.180.0/23 maxlen: 23
103.162.24.0/23 maxlen: 24
103.176.22.0/23 maxlen: 23
103.176.24.0/23 maxlen: 23
103.176.250.0/23 maxlen: 24
103.177.34.0/23 maxlen: 23
103.178.230.0/23 maxlen: 23
103.178.232.0/23 maxlen: 23
103.179.174.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.183.120.0/23 maxlen: 23
103.188.82.0/23 maxlen: 23
103.188.242.0/23 maxlen: 23
103.190.120.0/23 maxlen: 23
103.211.200.0/23 maxlen: 23
103.211.206.0/23 maxlen: 23
103.218.122.0/23 maxlen: 23
103.228.36.0/23 maxlen: 23
103.228.74.0/23 maxlen: 23
103.229.52.0/23 maxlen: 23
103.231.248.0/23 maxlen: 23
103.239.66.0/23 maxlen: 23
103.252.92.0/23 maxlen: 23
103.252.94.0/23 maxlen: 23
110.172.28.0/23 maxlen: 23
125.253.114.0/24 maxlen: 24
163.61.110.0/23 maxlen: 23
163.61.182.0/23 maxlen: 23
163.223.8.0/23 maxlen: 23
163.223.224.0/23 maxlen: 23
202.158.244.0/22 maxlen: 22
2001:df5:e6c0::/48 maxlen: 48
2401:5ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28089 (0x6db9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:24:14 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcc9e-48c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:e0:ab:cb:cf:0d:52:24:19:73:d9:17:8f:
80:a2:7d:4c:be:ae:46:24:fb:7f:e3:1a:41:9d:4e:
08:49:9c:84:d2:70:9c:9d:ad:13:c6:4a:fc:12:73:
cc:dc:ee:e8:93:e1:54:ab:1e:59:f3:1a:6e:46:86:
da:b3:90:cf:03:4b:9d:07:f0:58:89:06:b7:9a:06:
9e:51:ec:d6:71:3e:76:7e:52:40:92:67:a6:77:48:
4c:a0:de:10:8c:51:c4:28:91:42:55:2a:a8:f2:4d:
b0:b5:54:e1:dc:aa:4d:57:1d:91:34:54:f5:52:53:
58:0c:29:83:17:b0:27:26:28:3d:e5:15:53:7a:53:
cb:7e:80:d2:71:e6:37:b8:b0:6c:c6:7a:6f:7f:76:
b3:7e:c2:9a:d6:98:e2:d0:1e:bc:e1:76:38:fd:c8:
8d:d0:03:1a:62:e7:94:0f:c6:55:44:b7:3f:8a:59:
41:d6:ac:15:9f:b2:52:d2:17:59:ba:4a:01:6c:88:
20:72:91:ec:41:d9:44:d5:61:e4:d5:6e:f5:13:83:
4c:97:d6:9f:0c:b4:19:c8:d7:60:39:c9:fb:a2:3c:
01:95:78:c9:77:94:bd:2d:ac:d7:0c:b2:d1:04:18:
8a:d4:95:9a:a0:e4:e9:fa:66:71:00:c8:47:22:67:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2C:D2:8A:58:10:35:DF:C9:08:CC:75:B2:50:FC:71:8B:0D:2E:D1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C277F1007F3911F193096D0490A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.0.0/22
45.117.164.0-45.117.166.255
49.236.208.0/22
103.14.224.0/23
103.28.32.0/22
103.65.234.0/23
103.67.196.0/22
103.68.84.0/23
103.69.86.0/23
103.69.96.0/23
103.74.100.0/22
103.95.196.0/22
103.110.32.0/23
103.129.126.0/23
103.139.154.0/23
103.149.252.0/23
103.151.52.0/23
103.151.238.0/23
103.153.64.0/23
103.157.204.0/23
103.160.2.0/23
103.161.96.0/23
103.161.112.0/23
103.161.118.0/23
103.161.170.0/23
103.161.173.0/24
103.161.180.0/23
103.162.24.0/23
103.176.22.0-103.176.25.255
103.176.250.0/23
103.177.34.0/23
103.178.230.0-103.178.233.255
103.179.174.0/23
103.180.138.0/23
103.183.120.0/23
103.188.82.0/23
103.188.242.0/23
103.190.120.0/23
103.211.200.0/23
103.211.206.0/23
103.218.122.0/23
103.228.36.0/23
103.228.74.0/23
103.229.52.0/23
103.231.248.0/23
103.239.66.0/23
103.252.92.0/22
110.172.28.0/23
125.253.114.0/24
163.61.110.0/23
163.61.182.0/23
163.223.8.0/23
163.223.224.0/23
202.158.244.0/22
IPv6:
2001:df5:e6c0::/48
2401:5ec0::/48
Signature Algorithm: sha256WithRSAEncryption
2c:a2:8f:cd:04:57:ac:6f:27:c0:ab:0f:ad:61:57:3a:06:dd:
71:ec:4f:33:7e:9d:93:e5:cf:22:a0:0d:4c:4b:f8:ed:8c:f4:
38:e1:95:e5:3e:3f:39:dc:34:c5:83:fe:e7:40:a4:e3:a8:01:
98:e6:b1:66:37:b0:b7:62:4f:4a:d2:42:1b:00:b6:4f:e8:8c:
47:84:cd:93:b5:00:79:e2:94:85:89:ae:88:71:39:01:a4:f3:
6e:8f:ab:f1:0d:0d:07:37:d6:62:bf:ce:f7:d7:60:07:29:f4:
5a:de:d6:8c:17:7e:26:f0:50:d7:05:58:c3:aa:7d:70:e9:a1:
14:2f:20:0c:47:13:02:9b:8a:63:24:1f:fb:88:83:77:e4:b9:
68:2b:55:62:d9:02:ad:70:3f:2a:94:83:c3:85:3f:28:dd:fb:
7c:a5:b0:af:81:5b:8c:06:26:54:a8:20:bc:85:ee:9a:b2:02:
ca:50:f7:cf:23:62:37:3b:a4:df:8f:76:2e:33:b0:fd:48:b6:
ea:19:36:19:dc:72:41:72:85:4f:dc:af:35:42:a4:cf:b9:19:
2b:de:1f:4b:f7:97:8b:c0:ae:d1:4c:56:ef:43:a2:e6:5c:68:
54:15:cf:92:97:0d:a9:df:08:9b:14:4f:a8:46:b6:81:b4:5c:
33:85:43:71
-----BEGIN CERTIFICATE-----
MIIGtjCCBZ6gAwIBAgICbbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyNDE0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2M5ZS00OGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2crgq8vPDVIkGXPZF4+Aon1Mvq5GJPt/4xpBnU4ISZyE0nCcna0Txkr8EnPM
3O7ok+FUqx5Z8xpuRobas5DPA0udB/BYiQa3mgaeUezWcT52flJAkmemd0hMoN4Q
jFHEKJFCVSqo8k2wtVTh3KpNVx2RNFT1UlNYDCmDF7AnJig95RVTelPLfoDSceY3
uLBsxnpvf3azfsKa1pji0B684XY4/ciN0AMaYueUD8ZVRLc/illB1qwVn7JS0hdZ
ukoBbIggcpHsQdlE1WHk1W71E4NMl9afDLQZyNdgOcn7ojwBlXjJd5S9LazXDLLR
BBiK1JWaoOTp+mZxAMhHImeYqQIDAQABo4ID2jCCA9YwHQYDVR0OBBYEFMgs0opY
EDXfyQjMdbJQ/HGLDS7RMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzI3N0YxMDA3
RjM5MTFGMTkzMDk2RDA0OTBBMzBGQkMucm9hMIIBlwYIKwYBBQUHAQcBAf8EggGG
MIIBgjCCAWQEAgABMIIBXAMEAipgADAMAwQCLXWkAwQALXWmAwQCMezQAwQBZw7g
AwQCZxwgAwQBZ0HqAwQCZ0PEAwQBZ0RUAwQBZ0VWAwQBZ0VgAwQCZ0pkAwQCZ1/E
AwQBZ24gAwQBZ4F+AwQBZ4uaAwQBZ5X8AwQBZ5c0AwQBZ5fuAwQBZ5lAAwQBZ53M
AwQBZ6ACAwQBZ6FgAwQBZ6FwAwQBZ6F2AwQBZ6GqAwQAZ6GtAwQBZ6G0AwQBZ6IY
MAwDBAFnsBYDBAFnsBgDBAFnsPoDBAFnsSIwDAMEAWey5gMEAWey6AMEAWezrgME
AWe0igMEAWe3eAMEAWe8UgMEAWe88gMEAWe+eAMEAWfTyAMEAWfTzgMEAWfaegME
AWfkJAMEAWfkSgMEAWflNAMEAWfn+AMEAWfvQgMEAmf8XAMEAW6sHAMEAH39cgME
AaM9bgMEAaM9tgMEAaPfCAMEAaPf4AMEAsqe9DAYBAIAAjASAwcAIAEN9ebAAwcA
JAFewAAAMA0GCSqGSIb3DQEBCwUAA4IBAQAsoo/NBFesbyfAqw+tYVc6Bt1x7E8z
fp2T5c8ioA1MS/jtjPQ44ZXlPj853DTFg/7nQKTjqAGY5rFmN7C3Yk9K0kIbALZP
6IxHhM2TtQB54pSFia6IcTkBpPNuj6vxDQ0HN9Ziv87312AHKfRa3taMF34m8FDX
BVjDqn1w6aEULyAMRxMCm4pjJB/7iIN35LloK1Vi2QKtcD8qlIPDhT8o3ft8pbCv
gVuMBiZUqCC8he6asgLKUPfPI2I3O6Tfj3YuM7D9SLbqGTYZ3HJBcoVP3K81QqTP
uRkr3h9L95eLwK7RTFbvQ6LmXGhUFc+Slw2p3wibFE+oRraBtFwzhUNx
-----END CERTIFICATE-----
Generated at Sat Oct 24 17:34:17 2026 by rpki-client