Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/97C79A806C0511EF8B77D10EC4F9AE02.roa
File: 97C79A806C0511EF8B77D10EC4F9AE02.roa (raw, json)
Hash identifier: +RLs5CzvZXqI61CAHfurXr4hcnlLMlz6cCq54j5zw2Q=
Subject key identifier: E7:16:58:AC:CF:AC:E5:BF:89:75:33:63:01:BA:20:9A:AB:CE:D6:85
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 0802
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/97C79A806C0511EF8B77D10EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:26:22 +0000
ROA not before: Wed 28 Jan 2026 22:18:34 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 0
IP address blocks: 166.81.0.0/24 maxlen: 24
166.81.1.0/24 maxlen: 24
166.81.3.0/24 maxlen: 24
166.81.4.0/24 maxlen: 24
166.81.7.0/24 maxlen: 24
166.81.8.0/24 maxlen: 24
166.81.31.0/24 maxlen: 24
166.81.36.0/24 maxlen: 24
166.81.37.0/24 maxlen: 24
166.81.41.0/24 maxlen: 24
166.81.42.0/24 maxlen: 24
166.81.43.0/24 maxlen: 24
166.81.44.0/24 maxlen: 24
166.81.45.0/24 maxlen: 24
166.81.46.0/24 maxlen: 24
166.81.47.0/24 maxlen: 24
166.81.48.0/24 maxlen: 24
166.81.49.0/24 maxlen: 24
166.81.50.0/24 maxlen: 24
166.81.71.0/24 maxlen: 24
166.81.72.0/24 maxlen: 24
166.81.73.0/24 maxlen: 24
166.81.74.0/24 maxlen: 24
166.81.75.0/24 maxlen: 24
166.81.76.0/24 maxlen: 24
166.81.82.0/24 maxlen: 24
166.81.84.0/24 maxlen: 24
166.81.85.0/24 maxlen: 24
166.81.86.0/24 maxlen: 24
166.81.87.0/24 maxlen: 24
166.81.88.0/24 maxlen: 24
166.81.89.0/24 maxlen: 24
166.81.90.0/24 maxlen: 24
166.81.91.0/24 maxlen: 24
166.81.92.0/24 maxlen: 24
166.81.93.0/24 maxlen: 24
166.81.94.0/24 maxlen: 24
166.81.95.0/24 maxlen: 24
166.81.96.0/24 maxlen: 24
166.81.97.0/24 maxlen: 24
166.81.98.0/24 maxlen: 24
166.81.99.0/24 maxlen: 24
166.81.100.0/24 maxlen: 24
166.81.107.0/24 maxlen: 24
166.81.108.0/24 maxlen: 24
166.81.109.0/24 maxlen: 24
166.81.110.0/24 maxlen: 24
166.81.111.0/24 maxlen: 24
166.81.112.0/24 maxlen: 24
166.81.113.0/24 maxlen: 24
166.81.114.0/24 maxlen: 24
166.81.115.0/24 maxlen: 24
166.81.116.0/24 maxlen: 24
166.81.117.0/24 maxlen: 24
166.81.118.0/24 maxlen: 24
166.81.119.0/24 maxlen: 24
166.81.120.0/24 maxlen: 24
166.81.121.0/24 maxlen: 24
166.81.122.0/24 maxlen: 24
166.81.123.0/24 maxlen: 24
166.81.124.0/24 maxlen: 24
166.81.125.0/24 maxlen: 24
166.81.126.0/24 maxlen: 24
166.81.127.0/24 maxlen: 24
166.81.128.0/24 maxlen: 24
166.81.129.0/24 maxlen: 24
166.81.130.0/24 maxlen: 24
166.81.131.0/24 maxlen: 24
166.81.132.0/24 maxlen: 24
166.81.133.0/24 maxlen: 24
166.81.134.0/24 maxlen: 24
166.81.135.0/24 maxlen: 24
166.81.136.0/24 maxlen: 24
166.81.137.0/24 maxlen: 24
166.81.138.0/24 maxlen: 24
166.81.139.0/24 maxlen: 24
166.81.140.0/24 maxlen: 24
166.81.141.0/24 maxlen: 24
166.81.142.0/24 maxlen: 24
166.81.143.0/24 maxlen: 24
166.81.144.0/24 maxlen: 24
166.81.145.0/24 maxlen: 24
166.81.146.0/24 maxlen: 24
166.81.147.0/24 maxlen: 24
166.81.148.0/24 maxlen: 24
166.81.149.0/24 maxlen: 24
166.81.150.0/24 maxlen: 24
166.81.151.0/24 maxlen: 24
166.81.152.0/24 maxlen: 24
166.81.153.0/24 maxlen: 24
166.81.154.0/24 maxlen: 24
166.81.155.0/24 maxlen: 24
166.81.156.0/24 maxlen: 24
166.81.157.0/24 maxlen: 24
166.81.158.0/24 maxlen: 24
166.81.159.0/24 maxlen: 24
166.81.160.0/24 maxlen: 24
166.81.161.0/24 maxlen: 24
166.81.162.0/24 maxlen: 24
166.81.163.0/24 maxlen: 24
166.81.164.0/24 maxlen: 24
166.81.165.0/24 maxlen: 24
166.81.166.0/24 maxlen: 24
166.81.167.0/24 maxlen: 24
166.81.168.0/24 maxlen: 24
166.81.169.0/24 maxlen: 24
166.81.170.0/24 maxlen: 24
166.81.171.0/24 maxlen: 24
166.81.172.0/24 maxlen: 24
166.81.173.0/24 maxlen: 24
166.81.174.0/24 maxlen: 24
166.81.175.0/24 maxlen: 24
166.81.176.0/24 maxlen: 24
166.81.177.0/24 maxlen: 24
166.81.178.0/24 maxlen: 24
166.81.179.0/24 maxlen: 24
166.81.180.0/24 maxlen: 24
166.81.181.0/24 maxlen: 24
166.81.182.0/24 maxlen: 24
166.81.183.0/24 maxlen: 24
166.81.184.0/24 maxlen: 24
166.81.185.0/24 maxlen: 24
166.81.186.0/24 maxlen: 24
166.81.187.0/24 maxlen: 24
166.81.188.0/24 maxlen: 24
166.81.189.0/24 maxlen: 24
166.81.190.0/24 maxlen: 24
166.81.191.0/24 maxlen: 24
166.81.192.0/24 maxlen: 24
166.81.193.0/24 maxlen: 24
166.81.194.0/24 maxlen: 24
166.81.195.0/24 maxlen: 24
166.81.196.0/24 maxlen: 24
166.81.197.0/24 maxlen: 24
166.81.198.0/24 maxlen: 24
166.81.199.0/24 maxlen: 24
166.81.200.0/24 maxlen: 24
166.81.201.0/24 maxlen: 24
166.81.202.0/24 maxlen: 24
166.81.203.0/24 maxlen: 24
166.81.204.0/24 maxlen: 24
166.81.205.0/24 maxlen: 24
166.81.206.0/24 maxlen: 24
166.81.207.0/24 maxlen: 24
166.81.208.0/24 maxlen: 24
166.81.209.0/24 maxlen: 24
166.81.210.0/24 maxlen: 24
166.81.211.0/24 maxlen: 24
166.81.212.0/24 maxlen: 24
166.81.213.0/24 maxlen: 24
166.81.214.0/24 maxlen: 24
166.81.215.0/24 maxlen: 24
166.81.216.0/24 maxlen: 24
166.81.217.0/24 maxlen: 24
166.81.218.0/24 maxlen: 24
166.81.219.0/24 maxlen: 24
166.81.220.0/24 maxlen: 24
166.81.221.0/24 maxlen: 24
166.81.222.0/24 maxlen: 24
166.81.223.0/24 maxlen: 24
166.81.224.0/24 maxlen: 24
166.81.225.0/24 maxlen: 24
166.81.226.0/24 maxlen: 24
166.81.227.0/24 maxlen: 24
166.81.228.0/24 maxlen: 24
166.81.229.0/24 maxlen: 24
166.81.230.0/24 maxlen: 24
166.81.231.0/24 maxlen: 24
166.81.232.0/24 maxlen: 24
166.81.233.0/24 maxlen: 24
166.81.234.0/24 maxlen: 24
166.81.235.0/24 maxlen: 24
166.81.236.0/24 maxlen: 24
166.81.237.0/24 maxlen: 24
166.81.238.0/24 maxlen: 24
166.81.239.0/24 maxlen: 24
166.81.240.0/24 maxlen: 24
166.81.241.0/24 maxlen: 24
166.81.242.0/24 maxlen: 24
166.81.243.0/24 maxlen: 24
166.81.244.0/24 maxlen: 24
166.81.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 21:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Jan 28 22:18:34 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a484ce-678b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:72:db:4a:39:04:28:40:7f:c1:a1:d9:b2:
35:f1:ec:1d:50:8a:35:0f:99:95:d7:b6:6e:4c:14:
d6:46:a8:a7:0d:97:0f:b8:cf:11:c5:ba:e0:29:99:
a3:1b:16:fb:f1:97:84:89:00:39:2c:22:37:b9:7c:
25:85:68:7f:de:b5:1b:69:50:93:9f:2c:ff:c7:93:
5c:44:b4:8f:98:8b:c4:d0:5d:25:52:6a:c4:85:dd:
d9:52:cd:34:fd:52:d3:34:83:c4:17:00:76:8d:48:
54:05:6e:e8:e0:2e:cc:9f:25:1b:c7:6c:ce:71:a8:
fb:44:67:ed:8b:02:62:c7:0e:1d:41:7f:e4:6c:44:
cd:b9:22:03:9e:7e:46:7f:73:31:db:53:01:b4:51:
f3:9f:3b:87:ff:32:a6:1a:0f:a6:3f:a0:73:ae:73:
af:b6:04:65:2d:eb:63:77:05:07:be:d2:d4:e5:6b:
d8:89:15:24:8d:ea:6e:bc:a3:6f:c3:27:df:63:36:
aa:0d:a1:b5:57:c2:d1:4f:a9:77:ce:fc:3d:9b:18:
c0:21:26:2b:f5:3b:9c:7f:49:4f:ab:e7:2a:76:f9:
75:12:48:92:08:98:b7:55:b9:7c:0f:40:9a:2b:90:
65:ce:da:e7:7f:81:28:11:29:cb:d1:84:77:ae:c0:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:16:58:AC:CF:AC:E5:BF:89:75:33:63:01:BA:20:9A:AB:CE:D6:85
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/97C79A806C0511EF8B77D10EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
166.81.0.0/23
166.81.3.0-166.81.4.255
166.81.7.0-166.81.8.255
166.81.31.0/24
166.81.36.0/23
166.81.41.0-166.81.50.255
166.81.71.0-166.81.76.255
166.81.82.0/24
166.81.84.0-166.81.100.255
166.81.107.0-166.81.245.255
Signature Algorithm: sha256WithRSAEncryption
51:3d:e1:ff:5c:6a:be:4b:4d:6f:02:74:92:12:33:82:b2:3d:
be:8d:25:62:f5:62:3f:a3:35:4e:e8:01:04:67:5b:28:f3:41:
94:bb:01:2d:b1:06:3f:a2:b7:84:60:cc:bd:cc:63:79:6c:97:
f5:9b:83:5f:3d:cf:53:f2:f4:b9:7a:60:0e:96:43:7a:89:b1:
ef:17:27:4d:a1:98:e0:74:5b:bd:f5:5c:5b:11:fb:62:1e:18:
38:68:37:23:e1:c7:ca:ed:75:74:54:78:4e:f9:84:d5:95:3b:
d3:b6:fd:0f:e7:44:ba:d2:a7:29:bc:59:36:0c:d9:c9:39:dc:
14:a4:be:05:e4:f9:2a:d0:ed:28:e7:fe:1e:28:0b:f5:68:91:
c9:38:c7:eb:f5:fd:d3:c3:0c:0a:54:dd:f6:02:73:0c:e6:2c:
5f:b6:86:c6:de:c1:46:2a:a0:54:1a:da:4a:ac:dd:4f:28:de:
47:78:e5:25:82:bf:f0:5a:d9:80:44:d8:a1:77:26:6d:ea:e5:
39:3c:3d:7d:9f:0f:c9:95:0c:60:d7:d3:09:73:c1:17:91:7b:
ab:fb:58:90:ed:da:bd:06:17:70:8a:ce:c9:79:51:e6:50:f9:
28:d5:c2:a7:bf:97:c0:16:d9:fc:29:d4:5a:39:6c:ee:d0:94:
65:57:99:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 20:48:22 2026 by rpki-client