Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/61865C96599711F1904BB35BB3833773.roa
File: 61865C96599711F1904BB35BB3833773.roa (raw, json)
Hash identifier: /vPD2rboGjpW08t8CapLPVEieqRd8PO34obZkOuMvvI=
Subject key identifier: 00:9F:45:02:A5:B1:01:E2:A9:2D:6E:EE:F8:A0:AC:19:42:2E:8D:5F
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0DC3
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/61865C96599711F1904BB35BB3833773.roa
Signing time: Tue 06 Oct 2026 01:16:17 +0000
ROA not before: Tue 06 Oct 2026 01:16:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10214
IP address blocks: 103.6.208.0/22 maxlen: 23
103.6.208.0/24 maxlen: 24
103.6.210.0/24 maxlen: 24
103.46.212.0/22 maxlen: 22
103.46.212.0/24 maxlen: 24
103.46.213.0/24 maxlen: 24
103.46.214.0/24 maxlen: 24
103.46.215.0/24 maxlen: 24
103.89.80.0/22 maxlen: 24
103.225.228.0/22 maxlen: 24
113.30.224.0/22 maxlen: 23
113.30.225.0/24 maxlen: 24
113.30.226.0/23 maxlen: 24
121.200.32.0/20 maxlen: 20
121.200.32.0/21 maxlen: 24
121.200.40.0/22 maxlen: 24
121.200.44.0/24 maxlen: 24
121.200.46.0/23 maxlen: 24
160.20.72.0/22 maxlen: 24
163.47.56.0/22 maxlen: 22
163.47.56.0/24 maxlen: 24
163.47.57.0/24 maxlen: 24
163.47.58.0/24 maxlen: 24
163.47.59.0/24 maxlen: 24
203.57.126.0/23 maxlen: 24
2001:df1:b400::/48 maxlen: 48
2400:ec40::/32 maxlen: 32
2400:ec40::/36 maxlen: 36
2400:ec40:1000::/36 maxlen: 36
2400:ec40:2000::/36 maxlen: 36
2400:ec40:3000::/36 maxlen: 36
2400:ec40:4000::/36 maxlen: 36
2400:ec40:4000::/40 maxlen: 40
2400:ec40:5000::/36 maxlen: 36
2400:ec40:5100::/40 maxlen: 40
2400:ec40:5200::/40 maxlen: 40
2400:ec40:6000::/36 maxlen: 36
2400:ec40:7000::/36 maxlen: 36
2400:ec40:8000::/36 maxlen: 36
2400:ec40:9000::/36 maxlen: 36
2400:ec40:a000::/36 maxlen: 36
2400:ec40:b000::/36 maxlen: 36
2400:ec40:c000::/36 maxlen: 36
2400:ec40:d000::/36 maxlen: 36
2400:ec40:e000::/36 maxlen: 36
2400:ec40:f000::/36 maxlen: 36
2400:ec40:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 18:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3523 (0xdc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: Oct 6 01:16:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ac44be1-1507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:77:aa:84:a8:5b:ad:f5:8f:64:46:8e:04:f4:
4c:07:e7:f5:09:5c:1c:35:04:20:b7:d0:72:98:66:
f0:03:62:49:5b:23:e8:d6:12:63:93:f8:28:de:f4:
49:7b:f6:e2:8a:fa:08:3e:d2:e5:74:45:4e:65:2e:
60:64:ea:e2:e7:bd:36:b5:b3:07:6a:e4:29:e8:68:
27:23:81:68:ab:e0:41:59:da:d1:71:11:e6:4b:a9:
83:8b:75:62:26:e4:90:51:e9:44:56:4e:97:f0:bb:
8a:b1:bf:35:3e:2e:78:9c:ae:1c:ba:6c:02:66:1e:
12:ec:eb:83:11:57:5d:df:14:5c:68:58:56:5e:f3:
71:dc:98:d8:7e:46:7f:03:57:0c:73:5f:63:3e:d9:
bf:99:31:bf:bc:c2:3e:c2:02:8f:40:42:78:db:a7:
72:02:92:9d:e1:0a:6b:0f:7c:f8:b4:0b:62:6d:dc:
2f:01:6e:70:4b:27:8c:00:c5:65:7a:3b:28:ce:7f:
7f:a3:01:21:40:61:5f:0f:8b:06:bc:e1:c5:9b:87:
ab:bb:1a:e3:fd:20:c7:79:56:c2:f7:56:dd:da:80:
1b:d5:05:cf:83:c1:0b:31:c9:9c:01:71:84:cb:86:
7d:40:58:57:20:8d:03:cd:dc:c5:a7:bb:65:74:3e:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:45:02:A5:B1:01:E2:A9:2D:6E:EE:F8:A0:AC:19:42:2E:8D:5F
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/61865C96599711F1904BB35BB3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.208.0/22
103.46.212.0/22
103.89.80.0/22
103.225.228.0/22
113.30.224.0/22
121.200.32.0/20
160.20.72.0/22
163.47.56.0/22
203.57.126.0/23
IPv6:
2001:df1:b400::/48
2400:ec40::/32
Signature Algorithm: sha256WithRSAEncryption
32:71:f1:e3:14:ea:95:5c:7a:7f:1c:51:c8:43:de:4d:ae:9d:
bd:cc:5a:54:8f:8b:f8:50:4d:2f:e7:10:89:be:11:b0:42:d8:
d0:e8:aa:7f:8f:04:f3:9d:3f:a3:ae:65:75:c3:b6:13:4b:bd:
16:4b:38:de:53:d8:c8:57:5d:8f:88:17:cd:1d:54:24:65:76:
fa:5b:55:e0:83:4d:72:bc:9c:d6:40:1b:33:0f:e4:ea:f0:86:
7b:aa:b4:5d:ce:34:20:98:9e:f9:75:aa:20:22:e8:01:b6:f9:
bf:c0:2d:5e:91:a7:d3:24:ce:a5:02:38:60:de:6b:d1:71:ff:
13:e2:75:b9:4b:16:10:99:26:42:2b:d3:c4:1a:a6:54:94:55:
1c:9d:e5:6b:5b:85:b7:0f:2d:a6:5a:23:57:23:cf:3d:2d:90:
b3:a2:6f:c5:e2:14:2c:40:3e:64:38:2f:0d:7c:43:a8:79:61:
b4:d0:2d:75:20:c7:35:a6:08:84:91:e0:16:c7:6d:12:86:ed:
a4:8f:28:cf:89:dd:b0:48:d0:e6:26:46:7b:c3:c1:00:42:65:
58:1e:6c:aa:7b:f2:9f:fb:01:86:9f:85:52:82:7a:0f:96:e8:
94:9c:40:0b:1d:6a:80:f0:0e:24:56:86:06:2b:13:ca:1e:1b:
a4:ef:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:42:08 2026 by rpki-client