Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/242CDDFC920011F08F0B626AC4F9AE02.roa
File: 242CDDFC920011F08F0B626AC4F9AE02.roa (raw, json)
Hash identifier: 7pX82kFJshnkQ2z01NX3/k++UMt2sBwj/TNwTcl6SS0=
Subject key identifier: BD:31:A7:D3:9C:F0:54:C3:9C:AD:3A:46:16:64:E6:4E:44:0C:C5:6B
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 026E
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/242CDDFC920011F08F0B626AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:17:19 +0000
ROA not before: Wed 31 Dec 2025 04:24:47 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4621
IP address blocks: 103.1.160.0/22 maxlen: 22
202.28.2.0/24 maxlen: 24
202.28.3.0/24 maxlen: 24
202.28.20.0/24 maxlen: 24
202.28.21.0/24 maxlen: 24
202.28.22.0/24 maxlen: 24
202.28.36.0/24 maxlen: 24
202.28.37.0/24 maxlen: 24
202.28.38.0/24 maxlen: 24
202.28.39.0/24 maxlen: 24
202.28.52.0/24 maxlen: 24
202.28.56.0/24 maxlen: 24
202.28.63.0/24 maxlen: 24
202.28.82.0/24 maxlen: 24
202.28.83.0/24 maxlen: 24
202.28.84.0/24 maxlen: 24
202.28.86.0/24 maxlen: 24
202.28.108.0/24 maxlen: 24
202.28.120.0/24 maxlen: 24
202.28.194.0/24 maxlen: 24
202.28.198.0/24 maxlen: 24
202.28.253.0/24 maxlen: 24
202.29.3.0/24 maxlen: 24
202.29.5.0/24 maxlen: 24
202.29.7.0/24 maxlen: 24
202.29.13.0/24 maxlen: 24
202.29.14.0/24 maxlen: 24
202.29.15.0/24 maxlen: 24
202.29.34.0/24 maxlen: 24
202.29.38.0/24 maxlen: 24
202.29.48.0/24 maxlen: 24
202.29.50.0/24 maxlen: 24
202.29.51.0/24 maxlen: 24
202.29.54.0/24 maxlen: 24
202.29.55.0/24 maxlen: 24
202.29.56.0/24 maxlen: 24
202.29.62.0/24 maxlen: 24
202.29.68.0/24 maxlen: 24
202.29.75.0/24 maxlen: 24
202.29.76.0/24 maxlen: 24
202.29.79.0/24 maxlen: 24
202.29.90.0/24 maxlen: 24
202.29.92.0/24 maxlen: 24
202.29.129.0/24 maxlen: 24
202.29.153.0/24 maxlen: 24
202.44.138.0/24 maxlen: 24
202.44.139.0/24 maxlen: 24
203.159.128.0/17 maxlen: 17
203.159.129.0/24 maxlen: 24
203.159.134.0/24 maxlen: 24
203.159.135.0/24 maxlen: 24
203.159.142.0/24 maxlen: 24
203.159.144.0/24 maxlen: 24
203.159.147.0/24 maxlen: 24
203.159.148.0/24 maxlen: 24
203.159.149.0/24 maxlen: 24
203.159.150.0/24 maxlen: 24
203.159.151.0/24 maxlen: 24
203.159.153.0/24 maxlen: 24
203.159.155.0/24 maxlen: 24
203.159.156.0/24 maxlen: 24
203.159.158.0/24 maxlen: 24
203.159.159.0/24 maxlen: 24
203.159.161.0/24 maxlen: 24
203.159.163.0/24 maxlen: 24
203.159.165.0/24 maxlen: 24
203.159.166.0/24 maxlen: 24
203.159.167.0/24 maxlen: 24
203.159.168.0/24 maxlen: 24
203.159.169.0/24 maxlen: 24
203.159.170.0/24 maxlen: 24
203.159.172.0/24 maxlen: 24
203.159.173.0/24 maxlen: 24
203.159.176.0/24 maxlen: 24
203.159.177.0/24 maxlen: 24
203.159.180.0/24 maxlen: 24
203.159.182.0/24 maxlen: 24
203.159.185.0/24 maxlen: 24
203.159.186.0/24 maxlen: 24
203.159.187.0/24 maxlen: 24
203.159.188.0/24 maxlen: 24
203.159.189.0/24 maxlen: 24
203.159.190.0/24 maxlen: 24
203.159.194.0/24 maxlen: 24
203.159.195.0/24 maxlen: 24
203.159.197.0/24 maxlen: 24
203.159.198.0/24 maxlen: 24
203.159.199.0/24 maxlen: 24
203.159.200.0/24 maxlen: 24
203.159.201.0/24 maxlen: 24
203.159.202.0/24 maxlen: 24
203.159.203.0/24 maxlen: 24
203.159.204.0/24 maxlen: 24
203.159.209.0/24 maxlen: 24
203.159.210.0/24 maxlen: 24
203.159.212.0/24 maxlen: 24
203.159.213.0/24 maxlen: 24
203.159.214.0/24 maxlen: 24
203.159.216.0/24 maxlen: 24
203.159.218.0/24 maxlen: 24
203.159.219.0/24 maxlen: 24
203.159.221.0/24 maxlen: 24
203.159.222.0/24 maxlen: 24
203.159.224.0/24 maxlen: 24
203.159.225.0/24 maxlen: 24
203.159.226.0/24 maxlen: 24
203.159.227.0/24 maxlen: 24
203.159.228.0/24 maxlen: 24
203.159.230.0/24 maxlen: 24
203.159.231.0/24 maxlen: 24
203.159.238.0/24 maxlen: 24
203.159.239.0/24 maxlen: 24
203.159.240.0/24 maxlen: 24
203.159.241.0/24 maxlen: 24
203.159.242.0/24 maxlen: 24
203.159.243.0/24 maxlen: 24
203.159.244.0/24 maxlen: 24
203.159.245.0/24 maxlen: 24
203.159.246.0/24 maxlen: 24
203.159.247.0/24 maxlen: 24
203.159.248.0/21 maxlen: 21
2001:3c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:47 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a490bf-1757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:3f:b1:6c:17:56:a7:4e:d2:35:3d:c8:42:
d1:68:dd:a6:2c:03:4c:8d:4d:30:c9:b2:60:38:bc:
b1:e4:3d:94:8e:3f:06:e4:ce:38:50:8e:f1:bf:51:
65:fe:18:4b:45:b1:5f:ac:5f:65:73:7d:88:d6:06:
4a:f3:8a:f1:fa:11:80:12:53:cd:aa:ae:04:6d:40:
9e:76:6c:85:6d:0c:d3:a3:4a:b7:8a:13:63:f4:4c:
5c:2f:66:fe:34:61:58:e5:ce:b4:8c:40:15:00:24:
53:c3:59:64:da:7b:60:43:7b:5c:86:f0:bc:8b:27:
21:d0:c8:46:8f:d7:61:ea:63:c2:0d:9d:e1:a1:6e:
e5:0f:81:83:62:a0:41:bf:a8:24:b2:f8:75:09:41:
d7:39:aa:0b:ea:c1:b6:07:11:b8:4d:82:44:0d:19:
39:55:c1:da:49:59:08:ae:72:4e:87:c7:7b:2c:ca:
e9:04:35:f0:4c:d8:5a:9b:90:13:4e:5a:89:46:23:
fa:bf:da:ea:65:25:ec:a9:5f:69:4e:84:7c:a7:07:
d8:16:8c:2f:d3:de:42:f6:4e:d4:7a:aa:a2:65:d4:
50:a1:94:20:d9:e3:17:2f:3c:35:7c:05:1e:35:16:
91:af:e9:95:ff:1f:ae:e3:49:7c:90:ea:18:eb:4b:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:31:A7:D3:9C:F0:54:C3:9C:AD:3A:46:16:64:E6:4E:44:0C:C5:6B
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/242CDDFC920011F08F0B626AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.1.160.0/22
202.28.2.0/23
202.28.20.0-202.28.22.255
202.28.36.0/22
202.28.52.0/24
202.28.56.0/24
202.28.63.0/24
202.28.82.0-202.28.84.255
202.28.86.0/24
202.28.108.0/24
202.28.120.0/24
202.28.194.0/24
202.28.198.0/24
202.28.253.0/24
202.29.3.0/24
202.29.5.0/24
202.29.7.0/24
202.29.13.0-202.29.15.255
202.29.34.0/24
202.29.38.0/24
202.29.48.0/24
202.29.50.0/23
202.29.54.0-202.29.56.255
202.29.62.0/24
202.29.68.0/24
202.29.75.0-202.29.76.255
202.29.79.0/24
202.29.90.0/24
202.29.92.0/24
202.29.129.0/24
202.29.153.0/24
202.44.138.0/23
203.159.128.0/17
IPv6:
2001:3c8::/32
Signature Algorithm: sha256WithRSAEncryption
24:f8:ae:38:d3:bf:b1:dc:93:75:b8:5d:a5:1f:20:94:c3:e7:
19:fb:b8:b6:31:0a:ff:9f:07:bd:a0:93:f3:64:3b:96:08:4e:
fe:83:a8:13:d6:ef:c0:55:78:da:88:f1:af:08:a2:07:cb:f3:
64:01:44:fe:f2:9a:c2:f9:c3:1e:8f:7c:d5:68:ed:35:76:55:
ae:aa:84:b5:d1:7b:c9:c2:b2:81:55:84:4f:90:37:4a:41:e3:
6f:b5:99:d9:3f:08:6a:46:4e:3c:23:b5:80:2d:5d:ad:13:71:
cd:88:c0:20:cf:e1:72:8b:05:f4:3f:64:d2:0c:f7:97:32:ee:
f0:57:21:f6:c6:99:0a:ba:f5:e9:cc:7f:39:a4:01:41:9f:43:
38:4a:ff:d0:b4:74:7e:4b:14:e9:30:d9:53:74:0f:0e:74:52:
b6:a4:14:7b:a0:fb:34:dc:b8:74:7a:6c:45:7c:2e:ad:36:cb:
38:bb:0b:fb:2f:07:b5:61:fe:cf:cf:64:05:ae:8e:3f:5a:18:
d2:84:85:df:b9:2d:7e:4c:d6:fe:9c:da:e9:ab:8a:b9:51:85:
eb:f8:d6:bc:af:90:ec:36:9b:f2:e9:35:bf:d4:93:08:52:61:
f4:0a:92:a0:60:1d:80:f4:16:6a:7a:65:8c:03:66:f2:5c:d3:
bc:4c:a3:a2
-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB
MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDQ3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTBiZi0xNzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmw/sWwXVqdO0jU9yELRaN2mLANMjU0wybJgOLyx5D2Ujj8G5M44UI7xv1Fl
/hhLRbFfrF9lc32I1gZK84rx+hGAElPNqq4EbUCedmyFbQzTo0q3ihNj9ExcL2b+
NGFY5c60jEAVACRTw1lk2ntgQ3tchvC8iych0MhGj9dh6mPCDZ3hoW7lD4GDYqBB
v6gksvh1CUHXOaoL6sG2BxG4TYJEDRk5VcHaSVkIrnJOh8d7LMrpBDXwTNham5AT
TlqJRiP6v9rqZSXsqV9pToR8pwfYFowv095C9k7UeqqiZdRQoZQg2eMXLzw1fAUe
NRaRr+mV/x+u40l8kOoY60sbgQIDAQABo4IDXzCCA1swHQYDVR0OBBYEFL0xp9Oc
8FTDnK06RhZk5k5EDMVrMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF
ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvMjQyQ0RERkM5
MjAwMTFGMDhGMEI2MjZBQzRGOUFFMDIucm9hMIIBHAYIKwYBBQUHAQcBAf8EggEL
MIIBBzCB9QQCAAEwge4DBAJnAaADBAHKHAIwDAMEAsocFAMEAMocFgMEAsocJAME
AMocNAMEAMocOAMEAMocPzAMAwQByhxSAwQAyhxUAwQAyhxWAwQAyhxsAwQAyhx4
AwQAyhzCAwQAyhzGAwQAyhz9AwQAyh0DAwQAyh0FAwQAyh0HMAwDBADKHQ0DBATK
HQADBADKHSIDBADKHSYDBADKHTADBAHKHTIwDAMEAcodNgMEAModOAMEAModPgME
AModRDAMAwQAyh1LAwQAyh1MAwQAyh1PAwQAyh1aAwQAyh1cAwQAyh2BAwQAyh2Z
AwQByiyKAwQHy5+AMA0EAgACMAcDBQAgAQPIMA0GCSqGSIb3DQEBCwUAA4IBAQAk
+K4407+x3JN1uF2lHyCUw+cZ+7i2MQr/nwe9oJPzZDuWCE7+g6gT1u/AVXjaiPGv
CKIHy/NkAUT+8prC+cMej3zVaO01dlWuqoS10XvJwrKBVYRPkDdKQeNvtZnZPwhq
Rk48I7WALV2tE3HNiMAgz+FyiwX0P2TSDPeXMu7wVyH2xpkKuvXpzH85pAFBn0M4
Sv/QtHR+SxTpMNlTdA8OdFK2pBR7oPs03Lh0emxFfC6tNss4uwv7Lwe1Yf7Pz2QF
ro4/WhjShIXfuS1+TNb+nNrpq4q5UYXr+Na8r5DsNpvy6TW/1JMIUmH0CpKgYB2A
9BZqemWMA2byXNO8TKOi
-----END CERTIFICATE-----
Generated at Sun Mar 15 05:50:05 2026 by rpki-client