Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/91F58C74CD6B11F185B490F22166CEF9.roa
File: 91F58C74CD6B11F185B490F22166CEF9.roa (raw, json)
Hash identifier: MX788Qzt2JELfz5FGawBmM7KVbDDmge5BlnI/8rPf8c=
Subject key identifier: 4B:5C:F3:0D:D6:22:C3:8F:E9:49:87:ED:69:90:F2:49:3B:9D:AB:1F
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 1103
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/91F58C74CD6B11F185B490F22166CEF9.roa
Signing time: Wed 21 Oct 2026 16:22:12 +0000
ROA not before: Wed 21 Oct 2026 16:22:12 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 202
IP address blocks: 202.53.197.0/24 maxlen: 24
2401:df00:1::/48 maxlen: 48
2401:df00:2::/48 maxlen: 48
2401:df00:7::/48 maxlen: 48
2401:df00:11::/48 maxlen: 48
2401:df00:12::/48 maxlen: 48
2401:df00:21::/48 maxlen: 48
2401:df00:22::/48 maxlen: 48
2401:df00:27::/48 maxlen: 48
2401:df00:31::/48 maxlen: 48
2401:df00:32::/48 maxlen: 48
2401:df00:41::/48 maxlen: 48
2401:df00:42::/48 maxlen: 48
2401:df00:47::/48 maxlen: 48
2401:df00:51::/48 maxlen: 48
2401:df00:52::/48 maxlen: 48
2401:df00:57::/48 maxlen: 48
2401:df00:61::/48 maxlen: 48
2401:df00:62::/48 maxlen: 48
2401:df00:181::/48 maxlen: 48
2401:df00:182::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 17:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4355 (0x1103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Oct 21 16:22:12 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ad8e6b4-e05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:50:24:6a:7d:b3:14:97:e4:ba:4c:18:df:
4e:d4:5e:25:f3:81:57:86:ee:fe:02:2a:0b:b0:b1:
92:e2:d8:00:d6:12:78:d5:77:9f:43:c1:a4:05:87:
6a:69:bf:b0:54:0a:05:be:50:01:73:96:45:01:32:
f8:66:42:5e:d3:f6:19:d6:98:a4:a3:31:2d:f9:bf:
30:ce:60:2d:1a:6d:06:af:4d:4d:98:69:8f:cf:92:
c8:cc:c1:b2:ab:e1:70:40:2a:0a:54:a5:13:d5:8b:
60:22:b2:1d:cb:5d:ae:81:65:a4:eb:6f:9a:d2:58:
f3:d3:3b:4a:3e:ef:53:30:9f:95:3e:d3:49:06:9e:
c3:90:ed:3e:3c:da:5e:27:17:2e:a2:fc:94:5b:c5:
49:ca:2b:d7:90:02:0a:dc:33:81:18:69:7a:9e:4a:
87:32:db:d2:bf:b0:84:3e:2c:08:4a:80:57:c7:d0:
97:bc:d1:95:68:10:eb:a4:3f:0f:9f:2e:da:75:5c:
99:7a:29:59:82:ad:6b:9e:0e:85:2a:f0:2d:b7:45:
a2:d5:18:ba:f0:f3:dd:1b:d0:26:f0:9d:62:20:ec:
f1:15:77:12:ec:0a:9a:52:90:e5:f3:8f:52:9e:28:
42:24:c8:7b:7b:0c:a7:29:b3:ec:34:71:1d:96:97:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:F3:0D:D6:22:C3:8F:E9:49:87:ED:69:90:F2:49:3B:9D:AB:1F
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/91F58C74CD6B11F185B490F22166CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
202.53.197.0/24
IPv6:
2401:df00:1::-2401:df00:2:ffff:ffff:ffff:ffff:ffff
2401:df00:7::/48
2401:df00:11::-2401:df00:12:ffff:ffff:ffff:ffff:ffff
2401:df00:21::-2401:df00:22:ffff:ffff:ffff:ffff:ffff
2401:df00:27::/48
2401:df00:31::-2401:df00:32:ffff:ffff:ffff:ffff:ffff
2401:df00:41::-2401:df00:42:ffff:ffff:ffff:ffff:ffff
2401:df00:47::/48
2401:df00:51::-2401:df00:52:ffff:ffff:ffff:ffff:ffff
2401:df00:57::/48
2401:df00:61::-2401:df00:62:ffff:ffff:ffff:ffff:ffff
2401:df00:181::-2401:df00:182:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
62:1e:77:30:5c:e3:73:ff:01:43:9a:53:78:c6:e6:31:9d:77:
dd:c9:62:75:de:5c:00:b1:da:94:fa:e0:40:67:40:fb:d3:1d:
2a:7a:14:0a:8b:6d:5d:b9:ed:15:0b:fa:52:d8:e4:6d:2f:1a:
0d:fe:1f:ae:95:78:57:ff:ea:00:2c:a5:7b:40:54:de:41:a2:
52:e7:16:9f:2b:1a:7d:3c:1f:04:f1:de:fa:81:fb:c0:8f:ff:
1e:d1:0a:c9:52:02:b0:67:0f:fd:42:b0:77:85:c9:d6:15:2b:
6c:9d:be:49:37:6c:cb:07:49:2e:57:ac:d0:4e:17:74:73:c9:
27:ed:ec:d5:04:8a:0a:76:63:c0:1f:56:f3:ab:52:ee:d4:78:
17:9b:2f:7d:f9:7d:8e:32:0b:be:7d:d1:57:51:ea:27:3e:49:
f7:d4:6e:fb:83:f4:aa:c7:ea:53:a1:14:69:29:a5:65:c2:ad:
ae:ff:61:bf:4d:0f:15:91:0a:72:86:9b:f7:fe:d5:1c:a6:01:
26:0a:cf:a9:07:33:ec:91:0d:70:39:3b:99:59:96:e0:fa:a3:
12:23:54:1b:1b:bb:de:0f:1c:8a:b7:37:f3:5b:cc:41:67:17:
bc:06:eb:31:4b:5e:cd:25:be:62:33:66:c6:10:64:61:72:03:
d8:5e:51:bf
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgICEQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw
MUYxOEZGNDkwHhcNMjYxMDIxMTYyMjEyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQ4ZTZiNC1lMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAod5QJGp9sxSX5LpMGN9O1F4l84FXhu7+AioLsLGS4tgA1hJ41XefQ8GkBYdq
ab+wVAoFvlABc5ZFATL4ZkJe0/YZ1pikozEt+b8wzmAtGm0Gr01NmGmPz5LIzMGy
q+FwQCoKVKUT1YtgIrIdy12ugWWk62+a0ljz0ztKPu9TMJ+VPtNJBp7DkO0+PNpe
JxcuovyUW8VJyivXkAIK3DOBGGl6nkqHMtvSv7CEPiwISoBXx9CXvNGVaBDrpD8P
ny7adVyZeilZgq1rng6FKvAtt0Wi1Ri68PPdG9Am8J1iIOzxFXcS7AqaUpDl849S
nihCJMh7ewynKbPsNHEdlpdpbQIDAQABo4IDMTCCAy0wHQYDVR0OBBYEFEtc8w3W
IsOP6UmH7WmQ8kk7nasfMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC
MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJDQzcvNzkxQzZBMzQ3QjM4MTFFOUJDMEQzQjMyQzRGOUFFMDIvOTFGNThDNzRD
RDZCMTFGMTg1QjQ5MEYyMjE2NkNFRjkucm9hMIHvBggrBgEFBQcBBwEB/wSB3zCB
3DAMBAIAATAGAwQAyjXFMIHLBAIAAjCBxDASAwcAJAHfAAABAwcAJAHfAAACAwcA
JAHfAAAHMBIDBwAkAd8AABEDBwAkAd8AABIwEgMHACQB3wAAIQMHACQB3wAAIgMH
ACQB3wAAJzASAwcAJAHfAAAxAwcAJAHfAAAyMBIDBwAkAd8AAEEDBwAkAd8AAEID
BwAkAd8AAEcwEgMHACQB3wAAUQMHACQB3wAAUgMHACQB3wAAVzASAwcAJAHfAABh
AwcAJAHfAABiMBIDBwAkAd8AAYEDBwAkAd8AAYIwDQYJKoZIhvcNAQELBQADggEB
AGIedzBc43P/AUOaU3jG5jGdd93JYnXeXACx2pT64EBnQPvTHSp6FAqLbV257RUL
+lLY5G0vGg3+H66VeFf/6gAspXtAVN5BolLnFp8rGn08HwTx3vqB+8CP/x7RCslS
ArBnD/1CsHeFydYVK2ydvkk3bMsHSS5XrNBOF3RzySft7NUEigp2Y8AfVvOrUu7U
eBebL335fY4yC7590VdR6ic+SffUbvuD9KrH6lOhFGkppWXCra7/Yb9NDxWRCnKG
m/f+1RymASYKz6kHM+yRDXA5O5lZluD6oxIjVBsbu94PHIq3N/NbzEFnF7wG6zFL
Xs0lvmIzZsYQZGFyA9heUb8=
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:15:23 2026 by rpki-client