Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F598E1D8345E11F08BA6AE6AC4F9AE02.roa
File: F598E1D8345E11F08BA6AE6AC4F9AE02.roa (raw, json)
Hash identifier: 6Jeqg2c6shS80j6h3hgt9E1EcYpj+1YnfqjGx3BFhOQ=
Subject key identifier: A8:8C:B0:21:31:0C:CF:6D:13:84:64:83:CC:AE:AD:4C:D9:92:A0:B8
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5E16
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F598E1D8345E11F08BA6AE6AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:16:42 +0000
ROA not before: Thu 28 Aug 2025 14:54:00 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140766
IP address blocks: 103.22.218.0/23 maxlen: 24
103.52.112.0/23 maxlen: 24
103.71.96.0/23 maxlen: 24
103.145.78.0/23 maxlen: 24
103.146.166.0/23 maxlen: 24
103.154.186.0/23 maxlen: 24
103.160.74.0/23 maxlen: 24
103.160.76.0/23 maxlen: 24
103.160.78.0/23 maxlen: 24
103.160.84.0/23 maxlen: 24
103.160.88.0/23 maxlen: 24
103.160.90.0/23 maxlen: 24
103.174.212.0/23 maxlen: 24
103.174.216.0/23 maxlen: 24
103.176.146.0/23 maxlen: 24
103.176.148.0/23 maxlen: 24
103.191.144.0/23 maxlen: 24
103.191.146.0/23 maxlen: 24
103.209.32.0/23 maxlen: 24
113.192.6.0/23 maxlen: 24
124.197.16.0/20 maxlen: 24
203.29.16.0/22 maxlen: 24
2001:df1:440::/48 maxlen: 48
2001:df1:4c0::/48 maxlen: 48
2001:df1:13c0::/48 maxlen: 48
2001:df1:2640::/48 maxlen: 48
2001:df2:4c40::/48 maxlen: 48
2001:df2:7c40::/48 maxlen: 48
2001:df3:4140::/48 maxlen: 48
2001:df3:5fc0::/48 maxlen: 48
2001:df3:abc0::/48 maxlen: 48
2001:df5:9980::/48 maxlen: 48
2400:15a0::/48 maxlen: 48
2400:1660::/48 maxlen: 48
2400:3320::/48 maxlen: 48
2400:3360::/48 maxlen: 48
2400:b8e0::/48 maxlen: 48
2400:ca60::/48 maxlen: 48
2400:f760::/48 maxlen: 48
2401:74e0::/48 maxlen: 48
2406:e4c0::/32 maxlen: 48
2406:e540::/48 maxlen: 48
2406:e640::/48 maxlen: 48
2406:e6c0::/48 maxlen: 48
2406:e740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24086 (0x5e16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:54:00 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60c4a-9e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:5a:dd:f4:ea:13:a4:0a:b3:57:71:99:5a:
7d:75:70:52:66:4f:d2:1f:55:8a:0a:68:ab:cb:e8:
9b:0c:b6:dc:92:d9:00:c7:60:14:4f:b9:75:49:c9:
72:f2:9b:77:55:bb:4a:01:95:cd:a1:42:1b:b3:35:
bf:da:c3:a2:13:67:6a:b5:d3:3f:18:af:c1:8a:dc:
1d:5e:50:12:62:e0:47:a0:3a:e1:43:2a:43:03:a5:
67:d7:20:df:36:b8:a1:76:fd:6e:b7:5f:fa:33:67:
b8:dd:16:27:ce:31:fd:68:2b:17:0c:e5:6e:96:91:
45:b7:dc:dd:49:5f:d5:21:77:a3:78:c6:a9:03:fb:
96:18:be:a7:84:08:eb:0e:95:61:f8:1a:9b:fd:71:
0c:08:e3:f4:0f:cb:24:37:87:33:7b:eb:6d:38:c3:
bf:d3:90:f5:e1:a6:f7:14:40:91:68:ea:f7:f8:4d:
c2:24:5b:9e:ca:8e:dc:6d:d4:94:ec:cd:69:41:26:
04:de:78:ed:09:65:d2:10:a4:5f:4c:44:b0:2e:64:
e1:1c:00:7d:03:6a:1e:65:33:d0:1b:cc:cb:4b:46:
ce:c2:1f:4a:a6:e9:04:8f:c1:45:72:e8:d9:9c:17:
74:8d:68:b2:56:26:b3:6f:99:5f:a2:4a:b0:d7:55:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8C:B0:21:31:0C:CF:6D:13:84:64:83:CC:AE:AD:4C:D9:92:A0:B8
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F598E1D8345E11F08BA6AE6AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.22.218.0/23
103.52.112.0/23
103.71.96.0/23
103.145.78.0/23
103.146.166.0/23
103.154.186.0/23
103.160.74.0-103.160.79.255
103.160.84.0/23
103.160.88.0/22
103.174.212.0/23
103.174.216.0/23
103.176.146.0-103.176.149.255
103.191.144.0/22
103.209.32.0/23
113.192.6.0/23
124.197.16.0/20
203.29.16.0/22
IPv6:
2001:df1:440::/48
2001:df1:4c0::/48
2001:df1:13c0::/48
2001:df1:2640::/48
2001:df2:4c40::/48
2001:df2:7c40::/48
2001:df3:4140::/48
2001:df3:5fc0::/48
2001:df3:abc0::/48
2001:df5:9980::/48
2400:15a0::/48
2400:1660::/48
2400:3320::/48
2400:3360::/48
2400:b8e0::/48
2400:ca60::/48
2400:f760::/48
2401:74e0::/48
2406:e4c0::/32
2406:e540::/48
2406:e640::/48
2406:e6c0::/48
2406:e740::/48
Signature Algorithm: sha256WithRSAEncryption
bb:2d:92:38:02:b9:a6:32:bd:29:46:b9:8e:53:31:13:c7:7e:
38:b5:fa:23:20:8e:75:84:f6:7a:25:62:12:b1:1d:65:66:a3:
db:d4:da:23:12:89:f7:23:8c:3e:99:8f:f6:c8:4f:d1:57:42:
d2:b9:54:8f:7e:fa:01:66:23:e1:17:1a:03:dd:e1:44:a9:42:
2e:bb:a6:c3:9c:7e:b7:f3:d2:ce:d8:4f:fa:c7:1c:86:7e:77:
b8:30:28:21:cf:4b:08:b1:6f:d9:43:6a:f2:1d:72:d8:b1:50:
bc:06:5d:92:28:05:87:e8:aa:b8:b6:04:94:cf:d2:42:b7:fa:
d9:d0:76:ac:11:0b:c0:6c:c6:98:2e:a7:ff:ad:c0:2f:54:fc:
8c:d2:11:b2:43:7a:bd:90:b4:62:21:88:5a:94:7e:f5:15:e1:
2e:62:01:d5:ea:48:0e:db:5e:33:79:8a:fe:5a:b2:38:73:04:
f1:47:9b:a4:33:7a:e2:14:69:10:a6:5b:a9:43:e7:44:0c:29:
ba:b2:5a:85:3c:84:40:af:88:6d:8b:ce:ea:46:0e:40:63:18:
54:c5:11:c3:cb:24:fc:b5:64:03:a9:72:57:07:d1:77:ac:02:
60:65:00:e6:94:a0:b8:50:4f:35:10:51:68:c7:e0:ab:0f:a7:
52:94:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:43:47 2026 by rpki-client