Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/6954A6281D1811F1BB26F0200F3D8C67.roa
File: 6954A6281D1811F1BB26F0200F3D8C67.roa (raw, json)
Hash identifier: XaZxQTLDnl290/y+szeICXl7GWwhkzid0/spMdScM1w=
Subject key identifier: 42:5D:04:79:53:0F:49:82:44:BA:9E:FD:F5:EA:2F:A0:6D:6F:49:28
Certificate issuer: /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial: 06D9
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/6954A6281D1811F1BB26F0200F3D8C67.roa
Signing time: Sun 09 Aug 2026 10:52:08 +0000
ROA not before: Sun 09 Aug 2026 10:52:08 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 13150
IP address blocks: 103.203.220.0/24 maxlen: 24
103.203.221.0/24 maxlen: 24
103.203.222.0/24 maxlen: 24
103.203.223.0/24 maxlen: 24
113.30.128.0/24 maxlen: 24
113.30.130.0/24 maxlen: 24
113.30.131.0/24 maxlen: 24
113.30.132.0/24 maxlen: 24
113.30.133.0/24 maxlen: 24
113.30.134.0/24 maxlen: 24
113.30.135.0/24 maxlen: 24
113.30.136.0/24 maxlen: 24
113.30.137.0/24 maxlen: 24
113.30.138.0/24 maxlen: 24
113.30.139.0/24 maxlen: 24
113.30.140.0/24 maxlen: 24
113.30.141.0/24 maxlen: 24
123.253.152.0/24 maxlen: 24
123.253.153.0/24 maxlen: 24
123.253.154.0/24 maxlen: 24
123.253.155.0/24 maxlen: 24
150.195.208.0/24 maxlen: 24
150.195.209.0/24 maxlen: 24
150.195.210.0/24 maxlen: 24
150.195.211.0/24 maxlen: 24
150.195.212.0/24 maxlen: 24
150.195.214.0/24 maxlen: 24
150.195.217.0/24 maxlen: 24
150.195.218.0/24 maxlen: 24
150.195.219.0/24 maxlen: 24
150.195.220.0/24 maxlen: 24
150.195.221.0/24 maxlen: 24
150.195.222.0/24 maxlen: 24
150.195.223.0/24 maxlen: 24
202.75.240.0/24 maxlen: 24
202.75.242.0/24 maxlen: 24
202.75.243.0/24 maxlen: 24
202.75.244.0/24 maxlen: 24
202.75.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1753 (0x6d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Validity
Not Before: Aug 9 10:52:08 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a785bd7-0ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:55:46:a5:16:e6:60:10:7d:4f:2d:60:32:54:
a0:74:ce:58:13:68:c1:67:3b:64:f5:ce:1d:11:04:
73:f6:a6:4e:64:30:7f:89:95:f3:91:6f:b3:0c:95:
c0:0c:71:4b:8f:05:7e:8c:41:d2:2a:14:2d:7d:9b:
0d:0e:67:9a:95:c1:86:bb:cc:0c:4c:c1:47:4c:29:
9c:9c:ae:13:a6:2e:b8:25:0b:5a:cd:38:83:60:23:
81:2d:55:37:ab:91:4c:9c:64:76:ea:7c:79:ba:85:
e6:48:66:21:0f:fd:d1:da:cb:e6:24:fa:b9:d1:5e:
e6:30:ac:64:4d:8a:09:12:2a:a9:64:83:e9:d7:d4:
17:b4:43:99:96:50:88:0b:b5:56:91:5b:86:25:16:
0f:73:5c:9f:eb:e0:fc:f9:b8:d8:d2:86:01:6f:26:
5c:8f:b4:a1:2c:2a:67:7d:60:6b:9c:53:10:01:85:
94:9c:11:7b:df:b9:27:36:07:6b:1f:4b:a0:b4:05:
d8:31:19:5c:9d:1a:a2:78:1f:5a:91:d2:dc:5d:d2:
8a:57:2b:28:46:df:6f:63:b2:57:98:88:d9:fd:e7:
a8:d1:ac:3c:19:10:8c:c6:43:08:3f:b0:6d:69:1d:
a5:c9:ef:05:b2:17:3d:c1:34:c3:e1:65:a3:7a:11:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5D:04:79:53:0F:49:82:44:BA:9E:FD:F5:EA:2F:A0:6D:6F:49:28
X509v3 Authority Key Identifier:
keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/6954A6281D1811F1BB26F0200F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.203.220.0/22
113.30.128.0/24
113.30.130.0-113.30.141.255
123.253.152.0/22
150.195.208.0-150.195.212.255
150.195.214.0/24
150.195.217.0-150.195.223.255
202.75.240.0/24
202.75.242.0-202.75.244.255
202.75.246.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:04:e1:d2:70:48:5f:f6:54:ab:fd:5d:72:00:35:80:4b:58:
df:82:7b:03:6a:dc:f2:23:c0:9e:00:13:c1:ce:6b:94:5a:34:
94:aa:c8:46:c2:8d:0d:0a:4f:b4:e4:65:60:7d:37:73:f6:af:
b3:15:80:c3:7a:f1:62:16:4b:81:85:85:01:0c:f2:5a:cf:16:
31:33:02:04:01:36:b6:26:95:56:51:b2:7b:c9:7a:24:1c:56:
f3:6a:c0:1a:21:39:62:b6:e7:1f:37:1a:c6:25:61:5c:69:c2:
de:e3:47:ea:c0:82:92:64:e4:ab:3d:6b:f1:14:32:7f:f5:b0:
4e:a1:04:44:1c:ae:80:91:4a:50:48:26:19:0d:65:cc:32:e2:
d9:bc:29:6a:c7:67:ff:bb:41:42:00:85:74:51:13:63:26:d2:
8d:c9:a5:4d:42:d5:c1:28:08:3c:90:78:12:ca:98:b8:e4:57:
31:eb:ab:5a:75:66:19:be:b6:83:91:30:29:b3:58:fb:c9:d5:
7c:14:ad:f4:cd:d5:0a:b3:80:12:4c:10:b6:17:c7:bf:64:7f:
19:6f:d9:ac:3f:ff:73:11:32:fa:b0:a1:cc:d0:d9:37:38:12:
ba:c4:0e:bf:f4:95:e6:c0:a5:1d:66:79:8b:38:ef:e5:c7:bc:
09:37:07:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:35 2026 by rpki-client