Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
File: ECBAA694826F11ED963DD626C4F9AE02.roa (raw, json)
Hash identifier: hNpWfzStSxoi1fPkxcbnh4V9DqsCkVyC0AQQMNFEtXk=
Subject key identifier: 01:7C:60:26:93:61:13:AC:D4:00:FB:BF:81:A6:0E:23:03:79:E3:F4
Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial: 1519
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
Signing time: Thu 02 Jul 2026 17:17:39 +0000
ROA not before: Thu 02 Jul 2026 17:17:39 +0000
ROA not after: Sun 01 Nov 2026 00:00:00 +0000
asID: 136210
IP address blocks: 103.83.188.0/22 maxlen: 22
103.83.188.0/24 maxlen: 24
103.83.189.0/24 maxlen: 24
103.83.190.0/24 maxlen: 24
103.83.191.0/24 maxlen: 24
202.157.190.0/23 maxlen: 23
202.157.190.0/24 maxlen: 24
202.157.191.0/24 maxlen: 24
2400:ecc0::/32 maxlen: 32
2400:ecc0::/36 maxlen: 36
2400:ecc0:1000::/36 maxlen: 36
2400:ecc0:1000::/48 maxlen: 48
2400:ecc0:1001::/48 maxlen: 48
2400:ecc0:1002::/48 maxlen: 48
2400:ecc0:1003::/48 maxlen: 48
2400:ecc0:1004::/48 maxlen: 48
2400:ecc0:1005::/48 maxlen: 48
2400:ecc0:1006::/48 maxlen: 48
2400:ecc0:1007::/48 maxlen: 48
2400:ecc0:1008::/48 maxlen: 48
2400:ecc0:1009::/48 maxlen: 48
2400:ecc0:100a::/48 maxlen: 48
2400:ecc0:100b::/48 maxlen: 48
2400:ecc0:100c::/48 maxlen: 48
2400:ecc0:100d::/48 maxlen: 48
2400:ecc0:100e::/48 maxlen: 48
2400:ecc0:100f::/48 maxlen: 48
2400:ecc0:19fe::/48 maxlen: 48
2400:ecc0:19ff::/48 maxlen: 48
2400:ecc0:2000::/36 maxlen: 36
2400:ecc0:3000::/36 maxlen: 36
2400:ecc0:4000::/36 maxlen: 36
2400:ecc0:5000::/36 maxlen: 36
2400:ecc0:6000::/36 maxlen: 36
2400:ecc0:7000::/36 maxlen: 36
2400:ecc0:8000::/36 maxlen: 36
2400:ecc0:9000::/36 maxlen: 36
2400:ecc0:9000::/48 maxlen: 48
2400:ecc0:9001::/48 maxlen: 48
2400:ecc0:9002::/48 maxlen: 48
2400:ecc0:9003::/48 maxlen: 48
2400:ecc0:9004::/48 maxlen: 48
2400:ecc0:9005::/48 maxlen: 48
2400:ecc0:9006::/48 maxlen: 48
2400:ecc0:903f::/48 maxlen: 48
2400:ecc0:a000::/36 maxlen: 36
2400:ecc0:b000::/36 maxlen: 36
2400:ecc0:c000::/36 maxlen: 36
2400:ecc0:d000::/36 maxlen: 36
2400:ecc0:e000::/36 maxlen: 36
2400:ecc0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 16:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5401 (0x1519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E76B8, serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Validity
Not Before: Jul 2 17:17:39 2026 GMT
Not After : Nov 1 00:00:00 2026 GMT
Subject: CN=6a469d33-f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:03:66:93:f5:c3:11:b7:72:e4:fb:2c:ce:
68:2c:d6:3c:16:23:71:cf:08:fe:34:97:24:4c:aa:
cb:f0:cf:44:95:75:6b:cd:02:e4:44:55:96:b0:8e:
5c:7d:2b:d6:c6:b8:1e:4b:28:69:57:b1:81:1d:06:
58:c4:b5:5b:62:95:ba:e5:e0:2e:cb:f1:de:bb:9d:
f4:f9:e0:70:c6:ad:de:a8:2d:92:ca:61:b5:11:16:
9e:21:d5:57:8e:b4:ca:9b:a7:d0:fc:c8:90:06:8a:
40:c6:c9:c8:0d:de:65:75:20:2d:42:37:73:93:96:
61:10:44:69:6c:eb:af:26:ec:c5:b2:5b:a9:f1:65:
bc:04:8f:a1:3e:8a:99:6f:de:fb:34:1c:12:09:95:
c7:f1:6d:30:40:75:af:5b:37:ee:f7:70:47:2c:74:
72:9e:7a:3c:05:c4:96:5f:b4:c4:56:f7:58:d9:9e:
8e:ad:8f:4f:0a:07:6f:96:5b:6e:99:af:ce:3b:ee:
e9:dc:cc:5b:60:2d:5f:6d:18:9e:04:10:e1:52:66:
c4:20:e2:23:a2:12:b5:5e:93:5c:fc:e7:cc:17:6d:
b2:49:1a:83:d4:2f:e2:f9:ba:84:c2:79:e3:19:47:
ec:b7:dd:53:95:45:9f:2c:8e:aa:fa:c7:61:11:48:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7C:60:26:93:61:13:AC:D4:00:FB:BF:81:A6:0E:23:03:79:E3:F4
X509v3 Authority Key Identifier:
keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.188.0/22
202.157.190.0/23
IPv6:
2400:ecc0::/32
Signature Algorithm: sha256WithRSAEncryption
75:4d:f1:a4:23:41:30:eb:93:79:70:09:19:47:b4:06:65:17:
91:62:ee:6c:0a:06:33:86:0d:20:7f:66:d6:0c:e2:6a:22:14:
83:aa:be:58:e9:a0:b1:58:1a:32:3d:d4:c4:b4:de:ad:50:f3:
4c:67:5d:9f:39:00:d6:da:56:52:ca:c4:06:2c:af:48:1d:80:
7f:4b:a2:38:5a:25:fd:f1:9c:ba:99:0b:dd:e7:5f:5c:1d:d8:
ca:7f:1e:e7:a2:07:a2:00:81:18:e1:4a:86:46:cd:0f:d0:9c:
b0:9d:a6:4a:1c:4c:1b:31:71:a9:d3:5e:dd:77:f8:f7:51:1d:
3d:01:59:37:89:b5:65:65:ff:eb:d4:58:fe:90:c7:5d:58:7d:
f1:7a:0a:0a:bf:f0:f9:4a:26:7d:cf:be:f8:61:d7:d9:51:27:
fa:c4:1f:f6:4d:64:24:b8:4d:0e:d2:58:1c:0d:c7:0e:33:43:
e7:01:2e:d2:5b:5b:7a:db:a4:03:cf:ff:fd:63:27:98:1d:80:
1a:36:63:ee:06:f3:60:ad:f6:77:75:a0:77:3d:47:f1:1f:83:
44:7d:a1:ea:c9:7a:7b:21:db:07:a3:07:90:55:92:22:52:73:
1b:0a:a5:1f:f2:92:0f:d2:92:35:f0:b0:bc:7e:38:4f:d1:64:
fd:5b:f7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:10:09 2026 by rpki-client