Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/6A797774BDDF11F0B524BD85C4F9AE02.roa
File: 6A797774BDDF11F0B524BD85C4F9AE02.roa (raw, json)
Hash identifier: 8w/0YJBW6UK1DI6hNcDAiSGDGO9AI7vRgBVhPpRorOY=
Subject key identifier: 85:C1:B6:64:10:EC:0E:D6:94:16:32:71:6E:76:7F:4B:25:45:30:4E
Certificate issuer: /CN=A91E4700/serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38
Certificate serial: 68
Authority key identifier: 40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/6A797774BDDF11F0B524BD85C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:23:47 +0000
ROA not before: Wed 14 Jan 2026 22:01:31 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 63850
IP address blocks: 103.234.14.0/23 maxlen: 23
103.234.14.0/24 maxlen: 24
103.234.15.0/24 maxlen: 24
124.246.0.0/21 maxlen: 21
124.246.4.0/24 maxlen: 24
124.246.7.0/24 maxlen: 24
124.246.16.0/21 maxlen: 21
124.246.16.0/24 maxlen: 24
124.246.17.0/24 maxlen: 24
124.246.18.0/24 maxlen: 24
124.246.19.0/24 maxlen: 24
124.246.20.0/24 maxlen: 24
124.246.21.0/24 maxlen: 24
124.246.22.0/24 maxlen: 24
124.246.23.0/24 maxlen: 24
202.44.170.0/24 maxlen: 24
203.91.64.0/23 maxlen: 24
203.91.66.0/24 maxlen: 24
203.91.67.0/24 maxlen: 24
203.91.68.0/22 maxlen: 22
203.91.68.0/24 maxlen: 24
203.91.69.0/24 maxlen: 24
203.91.70.0/24 maxlen: 24
203.91.71.0/24 maxlen: 24
210.0.112.0/22 maxlen: 22
210.0.112.0/24 maxlen: 24
210.0.113.0/24 maxlen: 24
210.0.114.0/24 maxlen: 24
210.0.115.0/24 maxlen: 24
210.0.116.0/23 maxlen: 23
210.0.116.0/24 maxlen: 24
210.0.118.0/24 maxlen: 24
210.0.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl
rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4700, serialNumber=4063941F29A47179EE8FF51F301DF1EA411FBD38
Validity
Not Before: Jan 14 22:01:31 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a59d73-9139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:38:b6:5d:3e:d5:fe:29:c6:0a:e7:f1:a4:
39:36:f4:6d:7d:97:73:cf:ab:e7:f0:32:e9:bd:15:
c2:33:48:47:ca:02:d3:d9:b7:cc:ed:e3:1c:f7:5a:
c0:6d:b6:aa:9f:e0:9a:bd:95:88:e0:c4:9b:03:2b:
30:f9:d9:02:65:a7:75:53:5e:84:17:e3:9c:da:db:
87:5f:ae:82:11:c4:b5:d0:96:fd:69:8a:78:1c:13:
55:71:dd:d6:82:de:01:a1:88:53:63:ed:b5:b2:b3:
74:22:e3:e1:c5:09:38:a3:05:86:41:2c:6c:b4:76:
d7:80:34:b1:f6:6e:9d:57:42:f8:02:9c:04:27:56:
67:60:fc:e9:64:b9:00:22:43:c5:e2:d7:a4:f0:3b:
4c:ca:ec:ed:46:9a:08:11:37:5b:ce:e1:70:d6:7a:
4a:06:7f:d7:9e:bb:04:5f:ae:23:95:17:9e:cf:66:
85:84:c4:05:2a:fc:56:7e:5c:26:f5:ff:47:a6:10:
19:6f:fd:74:24:9b:cc:70:86:d7:cf:22:40:c2:66:
8e:02:07:81:a5:56:aa:66:7b:69:67:b0:42:7a:e9:
9d:48:24:38:01:06:9c:62:49:0b:4e:e2:33:66:aa:
d7:08:fc:4a:a2:2c:d8:d2:37:f8:8d:bc:70:b3:83:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C1:B6:64:10:EC:0E:D6:94:16:32:71:6E:76:7F:4B:25:45:30:4E
X509v3 Authority Key Identifier:
keyid:40:63:94:1F:29:A4:71:79:EE:8F:F5:1F:30:1D:F1:EA:41:1F:BD:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/QGOUHymkcXnuj_UfMB3x6kEfvTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGOUHymkcXnuj_UfMB3x6kEfvTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/42CC0D50B3BB11F0A931BA6FC4F9AE02/6A797774BDDF11F0B524BD85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.234.14.0/23
124.246.0.0/21
124.246.16.0/21
202.44.170.0/24
203.91.64.0/21
210.0.112.0/21
Signature Algorithm: sha256WithRSAEncryption
16:c3:97:4c:b7:0f:bf:96:00:0a:ec:00:34:98:72:15:13:c8:
3b:af:c1:f9:dc:f3:7f:7e:6a:a8:1e:e3:31:8b:72:52:d5:88:
94:dc:9f:60:e8:87:39:8d:e1:81:a4:43:5b:2d:aa:96:ab:62:
f0:87:4e:bc:2b:7e:73:8c:ea:dc:96:f7:ad:b6:fb:cd:b6:af:
17:4c:37:93:31:c4:cd:5c:ea:22:dc:ba:32:32:0f:1b:63:ff:
9c:8c:6f:45:a7:41:80:5a:64:cf:a5:f6:3a:4f:41:31:dc:d9:
f8:4f:88:2d:ed:22:c0:7d:f8:be:c6:ea:08:ff:3d:ce:e7:d8:
64:b4:b6:d6:b6:18:43:b3:8f:0d:f3:f4:f0:58:58:41:cc:8c:
27:fa:64:a0:1c:fc:fc:37:24:37:f7:ac:7b:5f:8a:3a:18:92:
65:c3:af:ad:ad:b0:31:08:fc:52:05:2f:70:34:a4:f6:37:12:
4e:0a:99:f8:94:3f:de:18:a0:b5:99:f5:9d:fe:8c:89:03:31:
aa:6d:33:f0:5c:f6:12:a9:ad:69:de:fc:fc:88:2c:4b:e3:e7:
ef:f5:7f:b6:03:eb:cf:7a:c0:36:54:a4:e0:52:7c:9d:f5:ef:
a9:3b:6f:3c:a5:03:f2:10:e5:79:78:de:55:1e:57:2c:6a:32:
98:4b:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 12:36:52 2026 by rpki-client