Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E108D92ECDDD11EDAB222013C4F9AE02.roa
File: E108D92ECDDD11EDAB222013C4F9AE02.roa (raw, json)
Hash identifier: atwEdqgwMYyWKMXagR6kFvTjjEnTPyHLVB9xHTk/QUg=
Subject key identifier: B2:BA:98:17:B1:9E:19:DB:20:3D:B3:5A:CC:EF:0B:59:1C:E2:BD:C5
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DA2
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E108D92ECDDD11EDAB222013C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:23:29 +0000
ROA not before: Fri 02 Oct 2026 15:23:29 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131429
IP address blocks: 42.1.64.0/18 maxlen: 24
45.117.156.0/22 maxlen: 22
45.121.24.0/22 maxlen: 24
59.153.220.0/22 maxlen: 24
59.153.224.0/22 maxlen: 24
59.153.228.0/22 maxlen: 24
59.153.232.0/22 maxlen: 24
59.153.236.0/22 maxlen: 24
59.153.240.0/22 maxlen: 24
59.153.244.0/22 maxlen: 24
59.153.248.0/22 maxlen: 24
59.153.252.0/22 maxlen: 24
103.7.174.0/23 maxlen: 24
103.10.44.0/22 maxlen: 22
103.53.252.0/22 maxlen: 24
103.156.0.0/23 maxlen: 23
103.156.0.0/24 maxlen: 24
103.156.1.0/24 maxlen: 24
103.156.2.0/23 maxlen: 23
103.156.2.0/24 maxlen: 24
103.156.3.0/24 maxlen: 24
103.156.4.0/23 maxlen: 23
103.156.4.0/24 maxlen: 24
103.156.5.0/24 maxlen: 24
103.156.6.0/24 maxlen: 24
103.156.7.0/24 maxlen: 24
103.156.8.0/24 maxlen: 24
103.156.9.0/24 maxlen: 24
103.156.38.0/24 maxlen: 24
103.156.39.0/24 maxlen: 24
103.156.40.0/24 maxlen: 24
103.156.41.0/24 maxlen: 24
103.156.42.0/24 maxlen: 24
103.156.43.0/24 maxlen: 24
103.156.44.0/24 maxlen: 24
103.156.45.0/24 maxlen: 24
103.156.46.0/24 maxlen: 24
103.156.47.0/24 maxlen: 24
103.156.48.0/24 maxlen: 24
103.156.49.0/24 maxlen: 24
103.156.58.0/24 maxlen: 24
103.156.59.0/24 maxlen: 24
103.156.60.0/24 maxlen: 24
103.156.61.0/24 maxlen: 24
103.162.20.0/24 maxlen: 24
103.199.20.0/22 maxlen: 24
103.199.24.0/22 maxlen: 24
103.199.28.0/22 maxlen: 24
103.199.32.0/22 maxlen: 24
103.199.36.0/22 maxlen: 24
103.199.40.0/22 maxlen: 24
103.199.44.0/22 maxlen: 24
103.199.48.0/22 maxlen: 24
103.199.52.0/22 maxlen: 24
103.199.56.0/22 maxlen: 24
103.199.60.0/22 maxlen: 24
103.199.64.0/22 maxlen: 24
103.199.68.0/22 maxlen: 24
103.199.72.0/22 maxlen: 24
103.199.76.0/22 maxlen: 24
103.238.80.0/22 maxlen: 22
137.59.24.0/22 maxlen: 24
137.59.28.0/22 maxlen: 24
137.59.32.0/22 maxlen: 24
137.59.36.0/22 maxlen: 24
137.59.40.0/22 maxlen: 24
137.59.44.0/22 maxlen: 24
203.160.132.0/22 maxlen: 22
2402:9d80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28066 (0x6da2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:23:29 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcc70-2503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:c3:8f:45:c6:ac:c8:94:0a:09:a9:34:a8:
83:82:ee:df:db:b7:23:ba:60:41:cd:0f:08:cf:3d:
01:ae:bf:cc:b0:ba:41:1d:f5:5d:58:ff:56:2c:75:
3a:22:b1:ce:c8:da:41:55:c2:91:7f:62:e0:82:06:
dc:2e:c1:6f:32:f4:52:08:14:c2:33:2f:22:4f:c6:
e0:0a:85:13:10:f7:7e:72:4a:2d:99:d3:e0:a6:ba:
c6:52:97:5e:4e:9a:3e:9d:6f:58:69:82:59:a5:a7:
a0:ff:6e:e2:58:83:d5:24:e8:de:d1:3f:ae:ae:2f:
95:1e:03:a7:50:21:e8:a9:0a:d9:10:39:74:34:7f:
44:6f:9a:d5:a9:e2:19:75:cb:e4:0d:79:2f:c5:47:
3e:75:eb:ba:ae:f0:fc:fe:62:a0:24:0e:f3:9b:46:
dc:1e:b6:ca:3c:c9:fc:fe:10:a3:43:a9:93:27:20:
c6:08:b4:25:32:6a:d4:98:24:c0:70:3f:de:4a:c1:
1e:62:6f:77:50:34:35:8d:68:f1:c9:82:73:f5:91:
67:da:0e:02:f2:c4:c6:9a:77:48:d7:e9:c1:c6:44:
16:f9:de:d9:03:ec:36:e4:db:a2:ff:da:0b:54:c1:
09:88:cd:60:4a:db:ee:ee:4f:20:bf:a2:6a:51:0b:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BA:98:17:B1:9E:19:DB:20:3D:B3:5A:CC:EF:0B:59:1C:E2:BD:C5
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E108D92ECDDD11EDAB222013C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
42.1.64.0/18
45.117.156.0/22
45.121.24.0/22
59.153.220.0-59.153.255.255
103.7.174.0/23
103.10.44.0/22
103.53.252.0/22
103.156.0.0-103.156.9.255
103.156.38.0-103.156.49.255
103.156.58.0-103.156.61.255
103.162.20.0/24
103.199.20.0-103.199.79.255
103.238.80.0/22
137.59.24.0-137.59.47.255
203.160.132.0/22
IPv6:
2402:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
be:20:c1:41:21:76:ab:39:75:8d:65:18:cf:2a:a7:fa:fa:e3:
a2:e3:90:f6:01:29:bd:95:11:aa:60:e9:a3:e1:8a:2e:6b:89:
a5:6a:09:ea:4b:36:f8:81:a7:45:80:4f:82:4b:2b:0a:9f:52:
62:7b:0c:7f:5e:76:e7:34:fc:07:5c:7b:8b:a1:c9:1d:0b:f8:
98:c7:08:3c:25:f7:35:cf:6a:08:64:6b:7d:e4:81:79:35:a6:
59:65:fe:a2:4e:c6:39:3d:45:63:73:a2:86:df:dc:28:0e:f8:
d3:8c:cf:11:d7:a8:10:e8:f5:7e:4d:57:ca:63:03:22:39:56:
13:2b:57:5b:83:39:cf:8d:a5:fc:da:8a:e2:38:46:76:49:bf:
38:61:1b:2e:ff:ec:b8:d4:12:7c:34:7c:6f:e9:4c:37:c8:87:
60:51:61:24:43:bb:87:57:db:17:3b:87:bb:fe:f0:5b:b0:ac:
37:b3:9b:a7:fe:e2:18:47:4e:49:bf:92:93:93:b7:93:ae:8f:
94:55:75:46:f5:d5:48:42:4d:18:a5:c9:13:04:15:36:f5:bb:
85:9b:b6:bc:3c:1b:1c:ff:6e:83:02:df:8a:cc:16:f4:90:fe:
27:99:5e:0a:45:40:de:cf:41:fc:e9:5b:b2:4d:36:9b:a6:cd:
80:77:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:43:58 2026 by rpki-client