Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
File: ECBAA694826F11ED963DD626C4F9AE02.roa (raw, json)
Hash identifier: ri400EEfSt1Zr4saG3aAHE5et+UN5EhiVulgcbMnm8c=
Subject key identifier: 73:C2:D5:85:76:24:E5:52:0E:F8:D2:0D:33:F3:28:35:5F:A1:A3:5C
Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial: 14E7
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
Signing time: Tue 31 Mar 2026 17:21:02 +0000
ROA not before: Tue 31 Mar 2026 17:21:02 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 136210
IP address blocks: 103.83.188.0/22 maxlen: 22
103.83.188.0/24 maxlen: 24
103.83.189.0/24 maxlen: 24
103.83.190.0/24 maxlen: 24
103.83.191.0/24 maxlen: 24
202.157.190.0/23 maxlen: 23
202.157.190.0/24 maxlen: 24
202.157.191.0/24 maxlen: 24
2400:ecc0::/32 maxlen: 32
2400:ecc0::/36 maxlen: 36
2400:ecc0:1000::/36 maxlen: 36
2400:ecc0:1000::/48 maxlen: 48
2400:ecc0:1001::/48 maxlen: 48
2400:ecc0:1002::/48 maxlen: 48
2400:ecc0:1003::/48 maxlen: 48
2400:ecc0:1004::/48 maxlen: 48
2400:ecc0:1005::/48 maxlen: 48
2400:ecc0:1006::/48 maxlen: 48
2400:ecc0:1007::/48 maxlen: 48
2400:ecc0:1008::/48 maxlen: 48
2400:ecc0:1009::/48 maxlen: 48
2400:ecc0:100a::/48 maxlen: 48
2400:ecc0:100b::/48 maxlen: 48
2400:ecc0:100c::/48 maxlen: 48
2400:ecc0:100d::/48 maxlen: 48
2400:ecc0:100e::/48 maxlen: 48
2400:ecc0:100f::/48 maxlen: 48
2400:ecc0:19fe::/48 maxlen: 48
2400:ecc0:19ff::/48 maxlen: 48
2400:ecc0:2000::/36 maxlen: 36
2400:ecc0:3000::/36 maxlen: 36
2400:ecc0:4000::/36 maxlen: 36
2400:ecc0:5000::/36 maxlen: 36
2400:ecc0:6000::/36 maxlen: 36
2400:ecc0:7000::/36 maxlen: 36
2400:ecc0:8000::/36 maxlen: 36
2400:ecc0:9000::/36 maxlen: 36
2400:ecc0:9000::/48 maxlen: 48
2400:ecc0:9001::/48 maxlen: 48
2400:ecc0:9002::/48 maxlen: 48
2400:ecc0:9003::/48 maxlen: 48
2400:ecc0:9004::/48 maxlen: 48
2400:ecc0:9005::/48 maxlen: 48
2400:ecc0:9006::/48 maxlen: 48
2400:ecc0:903f::/48 maxlen: 48
2400:ecc0:a000::/36 maxlen: 36
2400:ecc0:b000::/36 maxlen: 36
2400:ecc0:c000::/36 maxlen: 36
2400:ecc0:d000::/36 maxlen: 36
2400:ecc0:e000::/36 maxlen: 36
2400:ecc0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5351 (0x14e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Validity
Not Before: Mar 31 17:21:02 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cc027d-8511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:a0:2f:19:e2:3e:82:29:0e:e2:f3:13:86:
b4:d8:2a:27:fd:33:c3:77:88:d7:3d:d4:61:47:49:
63:eb:33:7a:81:88:9a:49:54:9a:07:e0:ca:5a:1c:
3f:99:5b:ee:f5:ed:24:45:cc:e7:a1:8c:13:29:e9:
a0:dd:8e:c7:1e:af:23:f8:26:c0:5a:ef:ec:ea:5d:
66:2e:79:96:ed:64:b4:14:d6:03:d7:8e:86:65:ac:
a9:98:f4:24:54:9a:ee:9e:cb:c1:5d:ec:dc:29:05:
d5:99:e9:df:6a:c3:f7:91:e7:ac:7a:95:4e:9d:76:
9b:b4:5e:10:66:29:8d:e9:a5:2f:b6:ee:fd:a9:5b:
b4:34:de:6e:fb:15:93:54:a4:44:57:95:22:30:7d:
60:6c:f0:78:c9:6c:1b:40:8c:c8:cb:57:c9:f9:8a:
19:32:e2:7f:d3:57:cc:82:15:03:03:da:82:f8:2b:
a7:16:2c:3c:70:94:14:5f:9d:79:dd:99:67:66:ed:
17:0b:83:35:8a:1e:2f:3c:a6:69:86:84:15:ff:a3:
4a:35:2d:1f:f3:4a:5e:7a:e3:c8:29:b7:54:6e:19:
e5:9a:b5:dc:87:be:38:d6:2f:2b:23:95:d8:89:8b:
6b:19:74:c8:e6:ea:6a:a3:64:27:26:1c:75:7f:0f:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C2:D5:85:76:24:E5:52:0E:F8:D2:0D:33:F3:28:35:5F:A1:A3:5C
X509v3 Authority Key Identifier:
keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.188.0/22
202.157.190.0/23
IPv6:
2400:ecc0::/32
Signature Algorithm: sha256WithRSAEncryption
93:d3:d3:3d:9e:75:94:e1:7b:86:8a:31:29:3e:55:46:21:cc:
cc:ec:40:ff:48:b3:24:4b:a8:ff:20:90:12:d4:8b:e0:56:82:
89:3e:d6:cf:34:61:86:20:1a:0c:70:a0:7d:19:f1:d1:ed:6b:
61:43:c7:40:ad:03:62:15:8f:f5:d2:b2:03:b2:c4:c6:86:e0:
15:c8:7c:ef:81:21:98:fe:5f:15:af:7b:6e:32:d1:79:ed:60:
3d:a1:44:d9:6c:cf:19:1a:d0:0b:8f:b8:b1:27:17:5f:05:60:
3e:66:65:9b:d2:21:59:a6:82:8d:ab:41:f5:5c:c1:f0:1d:15:
5d:b4:fe:c1:ed:a3:4e:51:1f:b6:b7:5c:8f:41:85:be:f6:71:
ca:60:3f:34:6d:1e:1a:cd:74:0b:b1:85:2b:ac:45:d0:80:6c:
a3:bb:b3:73:36:01:14:fa:ff:d8:c6:8d:06:7c:71:02:41:f2:
7e:50:68:84:f4:19:3e:39:24:89:7e:be:83:b0:20:20:8b:56:
c1:7b:4f:a0:20:1f:5e:f0:b6:89:2e:cc:4d:1e:c9:3f:d0:83:
06:57:fc:68:8a:72:5e:8d:0a:11:74:92:d3:f9:35:3c:a8:7e:
e1:bb:e2:80:37:0c:f3:8f:ce:5b:f2:0a:41:20:2f:51:97:ae:
f4:7e:7b:3f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICFOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc2QjgxMTAvBgNVBAUTKDMwRTdERUIxQzUyMkU3OTE1OTg1OTJCNjQ1MzA4ODYz
Q0EwMDBFMTgwHhcNMjYwMzMxMTcyMTAyWhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNjMDI3ZC04NTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzrygLxniPoIpDuLzE4a02Con/TPDd4jXPdRhR0lj6zN6gYiaSVSaB+DKWhw/
mVvu9e0kRcznoYwTKemg3Y7HHq8j+CbAWu/s6l1mLnmW7WS0FNYD146GZaypmPQk
VJrunsvBXezcKQXVmenfasP3keesepVOnXabtF4QZimN6aUvtu79qVu0NN5u+xWT
VKREV5UiMH1gbPB4yWwbQIzIy1fJ+YoZMuJ/01fMghUDA9qC+CunFiw8cJQUX515
3ZlnZu0XC4M1ih4vPKZphoQV/6NKNS0f80peeuPIKbdUbhnlmrXch7441i8rI5XY
iYtrGXTI5upqo2QnJhx1fw9jiQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHPC1YV2
JOVSDvjSDTPzKDVfoaNcMB8GA1UdIwQYMBaAFDDn3rHFIueRWYWStkUwiGPKAA4Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzZCOC9GRjE1MDhFRTdF
OUExMUU4QjY5RkMwMkRDNEY5QUUwMi9NT2Zlc2NVaTU1RlpoWksyUlRDSVk4b0FE
aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PZmVzY1VpNTVGWmhaSzJSVENJWThvQURoZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTc2QjgvRkYxNTA4RUU3RTlBMTFFOEI2OUZDMDJEQzRGOUFFMDIvRUNCQUE2OTQ4
MjZGMTFFRDk2M0RENjI2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQCZ1O8AwQByp2+MA0EAgACMAcDBQAkAOzAMA0GCSqGSIb3DQEBCwUA
A4IBAQCT09M9nnWU4XuGijEpPlVGIczM7ED/SLMkS6j/IJAS1IvgVoKJPtbPNGGG
IBoMcKB9GfHR7WthQ8dArQNiFY/10rIDssTGhuAVyHzvgSGY/l8Vr3tuMtF57WA9
oUTZbM8ZGtALj7ixJxdfBWA+ZmWb0iFZpoKNq0H1XMHwHRVdtP7B7aNOUR+2t1yP
QYW+9nHKYD80bR4azXQLsYUrrEXQgGyju7NzNgEU+v/Yxo0GfHECQfJ+UGiE9Bk+
OSSJfr6DsCAgi1bBe0+gIB9e8LaJLsxNHsk/0IMGV/xoinJejQoRdJLT+TU8qH7h
u+KANwzzj85b8gpBIC9Rl670fns/
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:52 2026 by rpki-client