Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1668BF0E0CBE11F1944739262E3D8C67.roa
File: 1668BF0E0CBE11F1944739262E3D8C67.roa (raw, json)
Hash identifier: fizQLUyyA5lBxhJ3C+a4bExrf+vHPt7t3rcq/u65KaY=
Subject key identifier: 1C:F8:3D:40:76:C4:62:B8:DE:2A:A0:D3:8E:9E:7A:6C:F2:76:83:30
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2D2E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1668BF0E0CBE11F1944739262E3D8C67.roa
Signing time: Sun 01 Mar 2026 21:27:21 +0000
ROA not before: Wed 18 Feb 2026 11:36:38 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138241
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.221.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.248.0/22 maxlen: 22
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.7.0/24 maxlen: 24
115.167.8.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.10.0/24 maxlen: 24
115.167.11.0/24 maxlen: 24
115.167.12.0/24 maxlen: 24
115.167.13.0/24 maxlen: 24
115.167.14.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.112.0/22 maxlen: 22
115.167.116.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.99.0/24 maxlen: 24
175.110.100.0/24 maxlen: 24
175.110.101.0/24 maxlen: 24
175.110.102.0/24 maxlen: 24
175.110.103.0/24 maxlen: 24
175.110.104.0/21 maxlen: 21
180.178.144.0/24 maxlen: 24
180.178.145.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
180.178.160.0/21 maxlen: 21
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/21 maxlen: 21
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.228.0/22 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 19:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11566 (0x2d2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 18 11:36:38 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4af39-cf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:b8:de:86:3f:b5:03:b7:df:63:20:86:b5:
7c:4b:45:74:49:c9:03:8c:b3:27:93:09:93:62:52:
9f:d4:d9:44:72:46:ce:30:e7:f2:6f:d3:6d:18:1c:
3c:b9:e1:2e:61:69:f0:97:3c:0f:10:66:de:f4:f7:
8d:3e:09:65:8f:8b:06:9b:46:c0:69:9f:bc:73:4f:
df:bf:b8:e9:e7:51:34:cf:45:97:8b:7c:dc:01:cf:
47:b5:0a:34:a9:7c:b1:2a:c7:a7:60:5f:60:61:c8:
31:85:17:44:d7:5a:6e:f9:e5:08:46:e9:07:03:a5:
79:3b:1b:a4:45:c2:3f:14:65:6f:63:dc:d3:18:37:
07:23:69:da:77:90:e2:31:17:82:8b:75:66:dd:0a:
cb:fc:54:8d:76:f1:88:a3:d3:cd:20:15:00:58:45:
8e:5d:09:6e:a8:9f:8a:ae:4b:6b:70:cb:d1:98:13:
a4:5d:d9:8b:57:1d:74:ce:8a:26:7a:c3:d1:33:15:
97:d1:7a:fa:a2:33:b2:1d:59:c2:35:15:7b:38:e1:
ee:31:8a:71:d6:cf:d9:0c:16:3b:36:f6:93:89:67:
3e:02:f7:24:17:38:8e:c3:5d:2f:94:8b:29:59:b2:
b9:56:30:b1:7e:98:71:b8:ac:0a:0c:93:04:43:19:
1a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F8:3D:40:76:C4:62:B8:DE:2A:A0:D3:8E:9E:7A:6C:F2:76:83:30
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1668BF0E0CBE11F1944739262E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/20
113.203.228.0/24
113.203.231.0/24
113.203.248.0/21
115.167.5.0-115.167.19.255
115.167.101.0-115.167.102.255
115.167.112.0-115.167.124.255
175.110.96.0/20
180.178.144.0-180.178.171.255
180.178.176.0/21
180.178.185.0-180.178.188.255
180.178.190.0/23
202.92.20.0/24
202.92.26.0/24
223.29.228.0/22
223.29.236.0/22
Signature Algorithm: sha256WithRSAEncryption
27:dc:4b:f0:e5:a1:b8:6e:22:51:95:7a:48:e6:f8:e4:d6:19:
93:a0:d1:f7:24:a3:bb:2d:0b:9d:4d:e1:7d:b5:4c:a1:29:8e:
f1:f6:be:a1:60:ce:be:47:99:cf:1f:1c:d8:83:69:78:72:0d:
e1:b0:fa:59:ae:e6:9e:da:a1:7c:4b:07:ea:07:20:39:69:10:
65:8f:df:d9:c5:6d:69:dc:85:bb:ce:1d:ad:bb:a5:63:7b:0d:
4c:1a:b1:16:90:ae:69:c8:b4:4c:8b:6b:51:fe:df:93:79:02:
ca:f0:2d:d7:b1:82:84:1d:16:9c:48:0d:28:e1:76:93:b0:54:
1e:3e:04:ec:d6:6d:ab:3b:98:ed:5a:d9:7c:2f:e4:d6:f5:25:
0e:08:f9:a4:55:37:8b:3c:14:40:56:f6:33:41:c7:a3:03:91:
5f:a0:5c:f7:fc:ad:ae:e4:6e:81:b8:b2:bf:2a:30:a8:ec:9d:
88:5d:6f:c9:d9:1f:03:7b:de:81:a2:04:58:f3:41:8c:96:43:
32:1b:d7:bd:2e:84:e6:6f:ef:f7:be:22:12:83:6b:2d:e4:cd:
27:48:5f:aa:53:fc:4d:8f:29:81:d6:d2:46:5b:fd:47:9c:07:
14:a1:12:10:db:4f:28:27:cc:4f:c6:de:7d:de:83:d5:2c:43:
43:08:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 05:15:17 2026 by rpki-client