Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D81EE456600211F1A83A51818247A888.roa
File: D81EE456600211F1A83A51818247A888.roa (raw, json)
Hash identifier: xT5/MXe5YWiQcTBrK7XyP3ZJ8Yt3WkQUZICbIpLKpvQ=
Subject key identifier: 7C:CE:A4:01:42:49:44:8A:D3:B0:07:22:CF:5B:AD:32:3A:8A:35:73
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 373E
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D81EE456600211F1A83A51818247A888.roa
Signing time: Thu 04 Jun 2026 10:47:56 +0000
ROA not before: Thu 04 Jun 2026 10:47:56 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 23750
IP address blocks: 103.207.86.0/24 maxlen: 24
103.207.87.0/24 maxlen: 24
116.90.100.0/24 maxlen: 24
116.90.106.0/24 maxlen: 24
116.90.107.0/24 maxlen: 24
116.90.108.0/24 maxlen: 24
116.90.109.0/24 maxlen: 24
116.90.110.0/24 maxlen: 24
116.90.111.0/24 maxlen: 24
116.90.120.0/24 maxlen: 24
116.90.123.0/24 maxlen: 24
116.90.124.0/24 maxlen: 24
116.90.125.0/24 maxlen: 24
116.90.126.0/24 maxlen: 24
116.90.127.0/24 maxlen: 24
121.46.65.0/24 maxlen: 24
121.46.66.0/24 maxlen: 24
202.69.32.0/24 maxlen: 24
202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.35.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.37.0/24 maxlen: 24
202.69.38.0/24 maxlen: 24
202.69.39.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.44.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
202.69.48.0/24 maxlen: 24
202.69.49.0/24 maxlen: 24
202.69.50.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.69.52.0/24 maxlen: 24
202.69.53.0/24 maxlen: 24
202.69.54.0/24 maxlen: 24
202.69.55.0/24 maxlen: 24
202.69.56.0/24 maxlen: 24
202.69.57.0/24 maxlen: 24
202.69.58.0/24 maxlen: 24
202.69.59.0/24 maxlen: 24
202.69.60.0/24 maxlen: 24
202.69.61.0/24 maxlen: 24
202.69.62.0/24 maxlen: 24
202.69.63.0/24 maxlen: 24
202.142.144.0/24 maxlen: 24
202.142.145.0/24 maxlen: 24
202.142.146.0/24 maxlen: 24
202.142.147.0/24 maxlen: 24
202.142.148.0/24 maxlen: 24
202.142.149.0/24 maxlen: 24
202.142.150.0/24 maxlen: 24
202.142.152.0/24 maxlen: 24
202.142.153.0/24 maxlen: 24
202.142.154.0/24 maxlen: 24
202.142.156.0/24 maxlen: 24
202.142.157.0/24 maxlen: 24
202.142.158.0/24 maxlen: 24
202.142.159.0/24 maxlen: 24
2406:ac00:1::/48 maxlen: 48
2406:ac00:2::/48 maxlen: 48
2406:ac00:203::/48 maxlen: 48
2406:ac00:204::/48 maxlen: 48
2406:ac00:205::/48 maxlen: 48
2406:ac00:206::/48 maxlen: 48
2406:ac00:207::/48 maxlen: 48
2406:ac00:208::/48 maxlen: 48
2406:ac00:209::/48 maxlen: 48
2406:ac00:300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 14:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14142 (0x373e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Jun 4 10:47:56 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a2157dc-1a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:0e:cc:4f:8d:a5:75:e9:0c:66:cb:92:02:
37:83:38:65:a0:bf:d3:67:d0:9b:16:b5:90:70:a8:
f0:b8:68:a5:77:89:e9:ce:1c:2a:b8:f0:c0:ec:8a:
d1:53:2c:6e:23:03:66:f2:bd:ef:b5:76:ed:0a:34:
1f:24:e0:f3:fc:0d:25:59:63:21:d7:4e:e1:fd:54:
2f:ef:0c:73:56:b6:ed:2b:57:f2:89:44:04:9a:dc:
7f:e0:3f:7f:79:a4:7e:ba:11:74:4a:cb:8c:73:c4:
d8:65:5c:b8:70:1f:1e:19:37:c8:ee:19:3d:26:f8:
10:56:09:5a:09:44:1a:75:08:4b:e0:7c:54:ad:2c:
86:7b:ff:ab:48:36:5a:af:f5:2e:0f:57:36:a0:4a:
15:56:00:dd:c7:14:ba:86:01:fd:73:bd:f4:1a:27:
4c:93:ae:58:09:3f:de:40:dc:22:3f:57:41:89:4c:
a9:c5:d9:e5:9e:44:12:75:fb:a0:67:26:eb:97:03:
db:b3:f7:97:2b:d2:38:bf:a8:18:ae:57:37:a7:cc:
26:c9:28:06:20:d7:b4:73:75:70:3d:c4:e1:b2:5b:
30:f8:55:9c:25:0d:bd:92:93:73:7c:8f:1d:2e:d9:
da:0f:d0:f6:d9:31:27:4c:eb:dc:1d:67:4a:be:cf:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CE:A4:01:42:49:44:8A:D3:B0:07:22:CF:5B:AD:32:3A:8A:35:73
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D81EE456600211F1A83A51818247A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.86.0/23
116.90.100.0/24
116.90.106.0-116.90.111.255
116.90.120.0/24
116.90.123.0-116.90.127.255
121.46.65.0-121.46.66.255
202.69.32.0/19
202.142.144.0-202.142.150.255
202.142.152.0-202.142.154.255
202.142.156.0/22
IPv6:
2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff
2406:ac00:203::-2406:ac00:209:ffff:ffff:ffff:ffff:ffff
2406:ac00:300::/48
Signature Algorithm: sha256WithRSAEncryption
10:08:50:f3:fd:47:a0:d7:88:86:1b:24:f1:e1:eb:00:ea:f9:
2a:bb:cd:34:b0:d0:f6:ac:c7:2d:f4:8e:23:8e:11:2d:be:d0:
92:0f:f0:eb:c0:f5:9a:7c:ea:b5:50:d4:bb:94:b7:2f:ce:c2:
fb:1a:d2:b3:78:fc:5b:f2:11:d5:fe:44:6d:dc:19:13:67:3e:
49:21:58:d1:33:fa:9c:a2:67:63:f9:32:e8:a9:3d:62:7d:c3:
9f:78:b1:7e:af:cb:47:c3:18:75:9a:af:e2:67:d8:ae:b4:4b:
aa:07:ef:86:38:5e:86:9e:fd:47:99:06:47:4c:32:eb:3a:94:
78:b0:af:fd:a5:5c:72:67:98:33:83:a7:9e:3c:a7:e4:88:d0:
e5:c1:5b:c9:24:56:04:e3:9f:dd:de:cf:76:0f:66:96:ba:d9:
c7:0d:6b:aa:30:78:23:5c:1f:6c:1a:b8:dc:d8:1e:0c:f0:e8:
62:58:cf:e7:86:a8:b6:13:60:97:50:3a:06:7d:10:57:15:e1:
09:30:2b:33:4b:aa:3b:91:68:18:33:bb:5f:46:ee:0f:9b:a0:
d4:45:7b:3b:ec:f1:9e:7d:31:a4:a0:c8:a0:6d:8c:e2:a1:a3:
fb:78:a1:e2:75:52:aa:33:98:b6:b1:0a:6f:8d:48:c5:73:d7:
11:3f:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:15:45 2026 by rpki-client