Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BBF567AEB0F011E5A08A224DC4F9AE02.roa
File: BBF567AEB0F011E5A08A224DC4F9AE02.roa (raw, json)
Hash identifier: qkXdXLQp+uDmXhIoNcP8Qn/TVeC/aH88oGW781yxvcY=
Subject key identifier: 14:97:7D:A4:6F:74:7D:7E:7C:80:E1:0B:2B:5A:CA:90:59:28:1C:FF
Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial: 2884
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BBF567AEB0F011E5A08A224DC4F9AE02.roa
Signing time: Thu 06 Aug 2026 08:22:37 +0000
ROA not before: Thu 06 Aug 2026 08:22:37 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 17887
IP address blocks: 43.247.56.0/22 maxlen: 22
43.247.56.0/24 maxlen: 24
43.247.57.0/24 maxlen: 24
103.11.12.0/22 maxlen: 22
103.106.8.0/22 maxlen: 22
103.106.8.0/24 maxlen: 24
103.106.10.0/24 maxlen: 24
103.213.204.0/22 maxlen: 22
103.213.204.0/24 maxlen: 24
103.213.205.0/24 maxlen: 24
202.60.192.0/20 maxlen: 20
202.60.192.0/21 maxlen: 21
202.60.192.0/22 maxlen: 22
202.60.195.0/24 maxlen: 24
202.60.196.0/22 maxlen: 22
202.60.198.0/24 maxlen: 24
202.60.199.0/24 maxlen: 24
202.60.200.0/21 maxlen: 21
202.60.200.0/22 maxlen: 22
202.60.200.0/24 maxlen: 24
202.60.203.0/24 maxlen: 24
202.60.204.0/22 maxlen: 22
202.60.204.0/24 maxlen: 24
202.60.205.0/24 maxlen: 24
202.60.207.0/24 maxlen: 24
203.159.72.0/22 maxlen: 22
203.159.72.0/24 maxlen: 24
203.159.73.0/24 maxlen: 24
203.159.74.0/24 maxlen: 24
203.159.75.0/24 maxlen: 24
203.159.96.0/19 maxlen: 19
203.159.96.0/24 maxlen: 24
203.159.100.0/24 maxlen: 24
203.159.101.0/24 maxlen: 24
203.159.103.0/24 maxlen: 24
203.159.104.0/24 maxlen: 24
203.159.107.0/24 maxlen: 24
203.159.108.0/24 maxlen: 24
203.159.111.0/24 maxlen: 24
203.159.112.0/24 maxlen: 24
203.159.120.0/24 maxlen: 24
203.159.124.0/24 maxlen: 24
203.159.125.0/24 maxlen: 24
203.159.126.0/24 maxlen: 24
203.159.127.0/24 maxlen: 24
2405:6d00::/32 maxlen: 32
2405:6d00:100::/48 maxlen: 48
2405:6d00:101::/48 maxlen: 48
2405:6d00:104::/48 maxlen: 48
2405:6d00:105::/48 maxlen: 48
2405:6d00:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10372 (0x2884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Validity
Not Before: Aug 6 08:22:37 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74444d-be69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:92:37:27:bf:5c:a3:77:99:f5:f4:6c:78:
91:82:12:18:96:22:f4:f4:6e:58:6b:c4:b2:38:63:
d7:94:7f:53:fc:67:6e:39:77:6b:ce:48:a7:c1:67:
6e:53:02:59:51:51:38:eb:bb:75:b8:92:15:6f:17:
c8:d9:55:ee:b1:50:5b:d6:b5:e2:b5:8c:97:c4:06:
3c:71:39:19:2a:25:24:17:71:0b:89:8b:81:dd:6a:
ac:b9:d3:a9:58:43:18:fc:2e:ae:76:f1:c5:4a:4c:
51:65:10:0d:00:0b:50:e9:6b:7f:51:6b:b8:af:fd:
1c:e8:3c:d1:33:5a:ae:a7:7f:e3:48:25:72:18:7e:
fd:5b:6e:7d:c9:ca:02:33:9f:59:5b:7a:2e:8b:56:
6f:94:eb:bc:9d:ba:16:66:3f:0f:fb:7c:d9:28:01:
11:a6:e6:e3:80:b5:c1:68:d2:99:e9:94:b3:66:e3:
2b:f3:89:bc:74:fe:99:48:33:06:3a:02:5c:a4:1a:
72:8d:1e:89:3b:33:2a:ce:f7:ad:b8:4e:ef:30:f7:
a9:4f:fd:8e:57:1c:b5:9d:f1:c1:2a:ae:cd:fe:a4:
b0:3f:84:58:49:a8:99:a7:2e:db:1d:91:d3:7d:71:
55:a3:ad:05:b4:2e:52:87:4a:c0:42:bd:62:a5:0e:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:97:7D:A4:6F:74:7D:7E:7C:80:E1:0B:2B:5A:CA:90:59:28:1C:FF
X509v3 Authority Key Identifier:
keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BBF567AEB0F011E5A08A224DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.247.56.0/22
103.11.12.0/22
103.106.8.0/22
103.213.204.0/22
202.60.192.0/20
203.159.72.0/22
203.159.96.0/19
IPv6:
2405:6d00::/32
Signature Algorithm: sha256WithRSAEncryption
73:a1:ef:4a:11:cc:a9:9b:3c:75:ee:87:dd:46:30:5e:8a:96:
8c:3a:2a:34:ae:36:20:8a:11:49:60:cc:97:6e:74:7b:0f:e2:
22:df:86:f8:ef:03:76:15:6c:43:2d:e0:1a:04:20:a4:8b:77:
6f:a3:69:63:49:43:c4:23:34:67:ee:a8:01:63:7d:36:96:82:
d1:b0:20:18:f7:c7:05:90:2e:7e:a8:d8:92:00:2f:60:72:3f:
e5:fb:3d:be:20:13:8f:75:f3:9f:25:57:0c:b1:5a:fb:89:f9:
d7:03:bf:3a:5e:24:65:52:60:30:c8:69:79:8a:66:0c:02:f4:
af:6c:48:07:19:b3:dd:41:34:97:b7:0f:60:71:d6:84:7c:3b:
d0:56:c7:8c:a7:e9:bb:39:b5:91:3a:df:dc:f1:70:79:cd:d3:
89:60:b4:b9:9a:2a:b8:de:ef:1e:ed:aa:56:9e:75:cd:49:81:
46:52:aa:87:00:c0:2a:67:92:0d:29:25:46:61:3b:25:3f:2c:
81:f1:6b:cb:e7:f9:90:3c:75:1d:8c:02:74:22:df:10:da:25:
78:31:be:2b:d4:9a:f5:da:60:ca:f2:e3:1e:a9:78:ed:85:7c:
e0:80:3a:32:d6:e5:fe:1f:ef:3a:3a:4c:a2:e4:8a:35:56:29:
9f:7f:83:99
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgICKIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE
RjgwN0NEODEwHhcNMjYwODA2MDgyMjM3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc0NDQ0ZC1iZTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlDKSNye/XKN3mfX0bHiRghIYliL09G5Ya8SyOGPXlH9T/GduOXdrzkinwWdu
UwJZUVE467t1uJIVbxfI2VXusVBb1rXitYyXxAY8cTkZKiUkF3ELiYuB3WqsudOp
WEMY/C6udvHFSkxRZRANAAtQ6Wt/UWu4r/0c6DzRM1qup3/jSCVyGH79W259ycoC
M59ZW3oui1ZvlOu8nboWZj8P+3zZKAERpubjgLXBaNKZ6ZSzZuMr84m8dP6ZSDMG
OgJcpBpyjR6JOzMqzvetuE7vMPepT/2OVxy1nfHBKq7N/qSwP4RYSaiZpy7bHZHT
fXFVo60FtC5Sh0rAQr1ipQ736QIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFBSXfaRv
dH1+fIDhCytaypBZKBz/MB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3
Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6
WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFFNjAvRjE5OTY3MTJDN0NGMTFFNEIxM0JFMTIxQzRGOUFFMDIvQkJGNTY3QUVC
MEYwMTFFNUEwOEEyMjREQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw
BAIAATAqAwQCK/c4AwQCZwsMAwQCZ2oIAwQCZ9XMAwQEyjzAAwQCy59IAwQFy59g
MA0EAgACMAcDBQAkBW0AMA0GCSqGSIb3DQEBCwUAA4IBAQBzoe9KEcypmzx17ofd
RjBeipaMOio0rjYgihFJYMyXbnR7D+Ii34b47wN2FWxDLeAaBCCki3dvo2ljSUPE
IzRn7qgBY302loLRsCAY98cFkC5+qNiSAC9gcj/l+z2+IBOPdfOfJVcMsVr7ifnX
A786XiRlUmAwyGl5imYMAvSvbEgHGbPdQTSXtw9gcdaEfDvQVseMp+m7ObWROt/c
8XB5zdOJYLS5miq43u8e7apWnnXNSYFGUqqHAMAqZ5INKSVGYTslPyyB8WvL5/mQ
PHUdjAJ0It8Q2iV4Mb4r1Jr12mDK8uMeqXjthXzggDoy1uX+H+86Okyi5Io1Vimf
f4OZ
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:15 2026 by rpki-client