Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/616518F0D12011F18791EE1A0166CEF9.roa
File: 616518F0D12011F18791EE1A0166CEF9.roa (raw, json)
Hash identifier: CAOFy2IlU8ZFdOfOqfvg6Ect/jW9LhQLnz47ndUjvcU=
Subject key identifier: 44:37:18:70:74:9D:58:44:EA:87:A3:BF:CF:9B:FD:34:BC:18:8A:A7
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 37A0
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/616518F0D12011F18791EE1A0166CEF9.roa
Signing time: Mon 26 Oct 2026 09:34:03 +0000
ROA not before: Mon 26 Oct 2026 09:34:03 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 23750
IP address blocks: 103.207.84.0/24 maxlen: 24
103.207.86.0/24 maxlen: 24
103.207.87.0/24 maxlen: 24
116.90.100.0/24 maxlen: 24
116.90.106.0/24 maxlen: 24
116.90.107.0/24 maxlen: 24
116.90.108.0/24 maxlen: 24
116.90.109.0/24 maxlen: 24
116.90.110.0/24 maxlen: 24
116.90.111.0/24 maxlen: 24
116.90.120.0/24 maxlen: 24
116.90.123.0/24 maxlen: 24
116.90.124.0/24 maxlen: 24
116.90.125.0/24 maxlen: 24
116.90.126.0/24 maxlen: 24
116.90.127.0/24 maxlen: 24
121.46.65.0/24 maxlen: 24
121.46.66.0/24 maxlen: 24
202.69.32.0/24 maxlen: 24
202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.35.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.37.0/24 maxlen: 24
202.69.38.0/24 maxlen: 24
202.69.39.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.44.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
202.69.48.0/24 maxlen: 24
202.69.49.0/24 maxlen: 24
202.69.50.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.69.52.0/24 maxlen: 24
202.69.53.0/24 maxlen: 24
202.69.54.0/24 maxlen: 24
202.69.55.0/24 maxlen: 24
202.69.56.0/24 maxlen: 24
202.69.57.0/24 maxlen: 24
202.69.58.0/24 maxlen: 24
202.69.59.0/24 maxlen: 24
202.69.60.0/24 maxlen: 24
202.69.61.0/24 maxlen: 24
202.69.62.0/24 maxlen: 24
202.69.63.0/24 maxlen: 24
202.142.144.0/24 maxlen: 24
202.142.145.0/24 maxlen: 24
202.142.146.0/24 maxlen: 24
202.142.147.0/24 maxlen: 24
202.142.148.0/24 maxlen: 24
202.142.149.0/24 maxlen: 24
202.142.150.0/24 maxlen: 24
202.142.152.0/24 maxlen: 24
202.142.153.0/24 maxlen: 24
202.142.154.0/24 maxlen: 24
202.142.156.0/24 maxlen: 24
202.142.157.0/24 maxlen: 24
202.142.158.0/24 maxlen: 24
202.142.159.0/24 maxlen: 24
2406:ac00:1::/48 maxlen: 48
2406:ac00:2::/48 maxlen: 48
2406:ac00:203::/48 maxlen: 48
2406:ac00:204::/48 maxlen: 48
2406:ac00:205::/48 maxlen: 48
2406:ac00:206::/48 maxlen: 48
2406:ac00:207::/48 maxlen: 48
2406:ac00:208::/48 maxlen: 48
2406:ac00:209::/48 maxlen: 48
2406:ac00:300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14240 (0x37a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Oct 26 09:34:03 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6adf1e8b-9be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:88:f5:72:61:21:c8:5b:c9:fb:43:2a:5c:
58:a3:3f:b0:2b:8c:b6:e9:20:4f:17:1b:96:d2:1b:
c4:ce:b8:fd:85:fb:03:23:cd:0c:bc:6e:0e:3a:74:
9f:9c:43:f9:1c:3a:74:90:7d:23:29:d3:4a:90:7e:
57:6c:db:07:e4:49:55:7d:b7:27:a5:6c:34:3a:58:
32:f9:08:9f:05:2b:7a:9d:9a:c5:89:7b:0b:52:43:
7e:86:af:8f:af:e7:4e:e5:5f:98:e8:93:18:f3:fd:
08:bd:a8:c3:a6:57:3a:bd:09:f7:6c:37:e4:25:42:
0f:2b:9a:2d:6f:0f:01:72:cc:05:5e:c3:8f:e3:06:
17:8a:53:f1:24:28:56:fb:94:76:a7:bb:48:c6:b3:
8c:82:13:0c:04:fa:b0:17:51:13:03:34:4d:ef:85:
6f:c5:ab:ad:87:55:00:1c:88:90:40:b5:74:0f:be:
b6:ae:96:74:58:f7:f6:dc:5c:b7:db:92:16:53:21:
ee:a6:3c:b2:f1:5a:b9:2f:e3:58:c5:12:8a:4a:38:
6b:ec:cf:57:0f:f5:ad:4e:66:57:59:47:ee:c5:3d:
b2:ca:f5:5f:c8:fc:f5:44:15:96:89:4d:d6:bd:96:
69:1b:54:f8:04:57:e0:15:bd:43:3b:f5:5c:ec:82:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:37:18:70:74:9D:58:44:EA:87:A3:BF:CF:9B:FD:34:BC:18:8A:A7
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/616518F0D12011F18791EE1A0166CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.84.0/24
103.207.86.0/23
116.90.100.0/24
116.90.106.0-116.90.111.255
116.90.120.0/24
116.90.123.0-116.90.127.255
121.46.65.0-121.46.66.255
202.69.32.0/19
202.142.144.0-202.142.150.255
202.142.152.0-202.142.154.255
202.142.156.0/22
IPv6:
2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff
2406:ac00:203::-2406:ac00:209:ffff:ffff:ffff:ffff:ffff
2406:ac00:300::/48
Signature Algorithm: sha256WithRSAEncryption
4b:88:4b:25:a6:bd:2a:8b:7a:9e:77:83:d4:8e:27:95:3c:23:
51:f3:2f:58:70:76:44:35:58:04:73:57:9d:bd:0c:bf:34:88:
06:1f:a2:c4:37:5e:d0:ef:dd:35:5d:8c:ee:51:dd:49:8d:bd:
03:6a:6d:cd:fb:ce:c0:74:92:75:6b:96:02:6c:87:fd:d3:a7:
8c:3d:e1:77:0d:1b:fb:ff:b9:65:74:48:d4:17:ee:bb:8d:8e:
bc:a6:83:81:4e:0e:61:04:fb:19:6d:27:9e:2d:30:8a:29:a9:
d5:54:b0:31:e3:cf:c8:c9:3e:35:15:24:99:82:b2:21:94:90:
bb:f2:ac:d7:2a:dc:e1:66:a0:24:92:34:62:ea:89:b6:6b:96:
bf:83:c9:68:52:b3:7d:b0:34:67:fd:b1:4d:28:6d:21:df:89:
f8:8f:3b:40:c6:db:3b:ef:c6:ea:b1:2d:ff:21:b2:c6:cf:41:
25:59:34:b2:a0:2b:c3:5b:71:8b:dc:a6:b0:f0:6b:de:61:7c:
42:9e:20:d6:32:ef:be:af:e3:92:44:88:5c:2d:e4:b9:28:3f:
01:71:6f:f9:15:3c:f5:e2:ae:d1:5d:5d:6f:91:8c:a1:e0:32:
9f:af:3b:23:55:5e:61:d1:3b:71:9b:da:d4:29:86:36:21:55:
83:14:80:d4
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgICN6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjYxMDI2MDkzNDAzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWRmMWU4Yi05YmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2YyI9XJhIchbyftDKlxYoz+wK4y26SBPFxuW0hvEzrj9hfsDI80MvG4OOnSf
nEP5HDp0kH0jKdNKkH5XbNsH5ElVfbcnpWw0Olgy+QifBSt6nZrFiXsLUkN+hq+P
r+dO5V+Y6JMY8/0IvajDplc6vQn3bDfkJUIPK5otbw8BcswFXsOP4wYXilPxJChW
+5R2p7tIxrOMghMMBPqwF1ETAzRN74Vvxauth1UAHIiQQLV0D762rpZ0WPf23Fy3
25IWUyHupjyy8Vq5L+NYxRKKSjhr7M9XD/WtTmZXWUfuxT2yyvVfyPz1RBWWiU3W
vZZpG1T4BFfgFb1DO/Vc7IJSgQIDAQABo4IDADCCAvwwHQYDVR0OBBYEFEQ3GHB0
nVhE6oejv8+b/TS8GIqnMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvNjE2NTE4RjBE
MTIwMTFGMTg3OTFFRTFBMDE2NkNFRjkucm9hMIG+BggrBgEFBQcBBwEB/wSBrjCB
qzBwBAIAATBqAwQAZ89UAwQBZ89WAwQAdFpkMAwDBAF0WmoDBAR0WmADBAB0Wngw
DAMEAHRaewMEB3RaADAMAwQAeS5BAwQAeS5CAwQFykUgMAwDBATKjpADBADKjpYw
DAMEA8qOmAMEAMqOmgMEAsqOnDA3BAIAAjAxMBIDBwAkBqwAAAEDBwAkBqwAAAIw
EgMHACQGrAACAwMHASQGrAACCAMHACQGrAADADANBgkqhkiG9w0BAQsFAAOCAQEA
S4hLJaa9Kot6nneD1I4nlTwjUfMvWHB2RDVYBHNXnb0MvzSIBh+ixDde0O/dNV2M
7lHdSY29A2ptzfvOwHSSdWuWAmyH/dOnjD3hdw0b+/+5ZXRI1Bfuu42OvKaDgU4O
YQT7GW0nni0wiimp1VSwMePPyMk+NRUkmYKyIZSQu/Ks1yrc4WagJJI0YuqJtmuW
v4PJaFKzfbA0Z/2xTShtId+J+I87QMbbO+/G6rEt/yGyxs9BJVk0sqArw1txi9ym
sPBr3mF8Qp4g1jLvvq/jkkSIXC3kuSg/AXFv+RU89eKu0V1db5GMoeAyn687I1Ve
YdE7cZva1CmGNiFVgxSA1A==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:44 2026 by rpki-client