Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DD5934D2205011F0B603CD60C4F9AE02.roa
File: DD5934D2205011F0B603CD60C4F9AE02.roa (raw, json)
Hash identifier: IpiqhD0UNzqKNns21uU+8sWUC8i9MhU5+dySXqNl00U=
Subject key identifier: 48:C9:E7:99:48:79:9D:D9:EA:C3:35:32:3F:32:78:93:3E:5A:0A:DF
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6E44
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DD5934D2205011F0B603CD60C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:28:36 +0000
ROA not before: Fri 02 Oct 2026 15:28:36 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149147
IP address blocks: 103.37.60.0/23 maxlen: 24
103.78.4.0/23 maxlen: 23
103.166.176.0/23 maxlen: 23
103.168.36.0/23 maxlen: 23
103.186.24.0/23 maxlen: 23
103.213.8.0/23 maxlen: 23
103.213.12.0/23 maxlen: 23
103.213.216.0/23 maxlen: 23
103.248.230.0/23 maxlen: 23
113.192.18.0/23 maxlen: 23
163.227.116.0/23 maxlen: 23
2001:df4:cfc0::/48 maxlen: 48
2001:df5:6640::/48 maxlen: 48
2401:2160::/48 maxlen: 48
2401:3820::/48 maxlen: 48
2401:3e20::/48 maxlen: 48
2401:3e60::/48 maxlen: 48
2401:3ee0::/48 maxlen: 48
2401:5820::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28228 (0x6e44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:28:36 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcda4-26fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:da:e8:32:3a:75:6c:8b:51:b4:99:c0:d0:
67:54:f5:d9:6b:22:d5:fb:a1:97:4c:ab:43:04:ec:
db:5e:15:69:89:69:fa:58:1f:86:b5:fd:8e:97:e1:
0e:da:71:9f:c8:f7:db:7e:8f:f7:e0:c0:c9:ec:de:
07:bd:81:0b:fc:ab:a6:6b:ae:28:b2:28:0b:37:78:
df:50:a1:91:3b:48:16:57:bb:3c:3f:11:bd:b6:39:
6a:e8:ae:57:28:3b:95:0a:f2:93:ba:3b:a4:62:02:
c2:43:3b:06:4b:31:d4:b2:bb:5b:04:76:f1:10:49:
a1:a1:33:51:9e:ee:56:21:77:00:12:41:a5:e7:99:
ff:47:18:d3:f5:3d:d9:b9:1b:51:29:8d:09:1b:69:
42:4e:d7:fe:2d:ee:35:0f:ee:b8:6c:b5:15:76:ad:
bf:c3:be:df:5a:fe:9b:7b:e7:6f:d2:47:ac:e0:6d:
16:3a:99:5f:49:08:3d:b9:47:bf:4e:b3:a9:84:5f:
a4:c4:1a:e1:6a:ff:5d:4c:8e:ee:25:7e:8c:16:d8:
dc:62:e9:18:b4:37:15:d2:4c:76:ab:97:c8:f1:29:
47:1b:b2:ae:59:3a:c3:60:ee:fb:42:10:f3:ec:4e:
69:e9:81:b7:4f:10:82:34:52:ef:dd:6e:2e:e0:0f:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C9:E7:99:48:79:9D:D9:EA:C3:35:32:3F:32:78:93:3E:5A:0A:DF
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/DD5934D2205011F0B603CD60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.37.60.0/23
103.78.4.0/23
103.166.176.0/23
103.168.36.0/23
103.186.24.0/23
103.213.8.0/23
103.213.12.0/23
103.213.216.0/23
103.248.230.0/23
113.192.18.0/23
163.227.116.0/23
IPv6:
2001:df4:cfc0::/48
2001:df5:6640::/48
2401:2160::/48
2401:3820::/48
2401:3e20::/48
2401:3e60::/48
2401:3ee0::/48
2401:5820::/48
Signature Algorithm: sha256WithRSAEncryption
91:e7:2e:bd:84:cf:65:15:96:97:1c:a1:cd:9b:9b:6c:3e:8e:
4d:d2:8e:af:89:48:85:f8:8f:e8:0c:7e:12:7a:6c:ec:eb:87:
a8:ff:06:6a:e2:52:83:a6:9c:84:af:53:b7:69:51:fb:d2:ff:
0f:0a:6d:83:95:ac:cd:35:fb:ca:51:1f:49:4c:c6:76:70:fa:
fb:18:9a:0f:03:e7:53:db:9a:79:88:fa:c8:91:aa:3e:e2:7e:
7b:4b:2f:67:31:86:f2:2c:b8:d6:a2:14:63:b3:30:73:e9:22:
c5:ca:3f:33:71:4c:dd:8f:34:3c:56:db:14:c3:e7:f0:5f:a7:
04:3c:64:64:31:6a:83:77:8e:47:bb:a6:84:c7:11:bd:c6:e3:
d5:c5:38:ce:1b:15:09:1a:13:0a:33:16:a6:04:a0:2d:aa:10:
75:98:71:24:3f:41:9c:73:4a:43:52:fe:31:b3:5e:22:6c:6f:
67:3d:d0:2a:b8:25:1d:a0:6a:96:6a:03:75:c4:9d:af:ec:dc:
4f:8f:90:65:00:2e:0c:43:08:6a:06:55:77:97:b4:59:8e:db:
65:d4:69:cb:33:e2:28:16:a9:71:15:a6:e0:45:fb:5f:48:db:
7e:cb:40:62:fb:6b:7d:7b:e4:a0:2f:c5:c5:d7:4e:30:d4:63:
9d:c8:4c:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 24 17:30:55 2026 by rpki-client