Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
File: 20978DD270E411F08F40242AC4F9AE02.roa (raw, json)
Hash identifier: kFcoxrKGWpIKg8g23iYW3mbj9XQ00Q2dftXuCp6SY2Y=
Subject key identifier: D0:CF:E7:E0:A3:9D:03:6A:1B:DB:6D:74:4F:36:D4:C6:31:F1:B5:09
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 03C1
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:55:53 +0000
ROA not before: Fri 27 Feb 2026 06:55:32 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139057
IP address blocks: 103.137.168.0/24 maxlen: 24
103.137.169.0/24 maxlen: 24
103.137.170.0/24 maxlen: 24
103.137.171.0/24 maxlen: 24
103.138.247.0/24 maxlen: 24
103.189.255.0/24 maxlen: 24
103.243.92.0/24 maxlen: 24
103.243.93.0/24 maxlen: 24
103.243.94.0/24 maxlen: 24
103.243.95.0/24 maxlen: 24
123.108.72.0/24 maxlen: 24
123.108.73.0/24 maxlen: 24
2407:2440:1::/48 maxlen: 48
2407:2440:2::/48 maxlen: 48
2407:2440:3::/48 maxlen: 48
2407:2440:4::/48 maxlen: 48
2407:2440:5::/48 maxlen: 48
2407:2440:6::/48 maxlen: 48
2407:2440:7::/48 maxlen: 48
2407:2440:8::/48 maxlen: 48
2407:2440:9::/48 maxlen: 48
2407:2440:a::/48 maxlen: 48
2407:2440:b::/48 maxlen: 48
2407:2440:c::/48 maxlen: 48
2407:2440:d::/48 maxlen: 48
2407:2440:e::/48 maxlen: 48
2407:2440:f::/48 maxlen: 48
2407:2440:10::/48 maxlen: 48
2407:2440:11::/48 maxlen: 48
2407:2440:12::/48 maxlen: 48
2407:2440:13::/48 maxlen: 48
2407:2440:14::/48 maxlen: 48
2407:2440:15::/48 maxlen: 48
2407:2440:16::/48 maxlen: 48
2407:2440:17::/48 maxlen: 48
2407:2440:18::/48 maxlen: 48
2407:2440:19::/48 maxlen: 48
2407:2440:1e::/48 maxlen: 48
2407:2440:1f::/48 maxlen: 48
2407:2440:20::/48 maxlen: 48
2407:2440:22::/48 maxlen: 48
2407:2440:23::/48 maxlen: 48
2407:2440:25::/48 maxlen: 48
2407:2440:28::/48 maxlen: 48
2407:2440:2a::/48 maxlen: 48
2407:2440:2b::/48 maxlen: 48
2407:2440:2c::/48 maxlen: 48
2407:2440:2d::/48 maxlen: 48
2407:2440:a001::/48 maxlen: 48
2407:2440:a002::/48 maxlen: 48
2407:2440:a003::/48 maxlen: 48
2407:2440:a004::/48 maxlen: 48
2407:2440:a005::/48 maxlen: 48
2407:2440:a007::/48 maxlen: 48
2407:2440:a008::/48 maxlen: 48
2407:2440:a009::/48 maxlen: 48
2407:2440:b001::/48 maxlen: 48
2407:2440:b002::/48 maxlen: 48
2407:2440:b003::/48 maxlen: 48
2407:2440:b004::/48 maxlen: 48
2407:2440:b005::/48 maxlen: 48
2407:2440:c001::/48 maxlen: 48
2407:2440:d001::/48 maxlen: 48
2407:2440:e001::/48 maxlen: 48
2407:2440:e002::/48 maxlen: 48
2407:2440:e003::/48 maxlen: 48
2407:2440:e004::/48 maxlen: 48
2407:2440:e007::/48 maxlen: 48
2407:2440:e008::/48 maxlen: 48
2407:2440:e009::/48 maxlen: 48
2407:2440:e00a::/48 maxlen: 48
2407:2440:e00b::/48 maxlen: 48
2407:2440:e00c::/48 maxlen: 48
2407:2440:e00d::/48 maxlen: 48
2407:2440:e00e::/48 maxlen: 48
2407:2440:e00f::/48 maxlen: 48
2407:2440:e010::/48 maxlen: 48
2407:2440:e011::/48 maxlen: 48
2407:2440:e012::/48 maxlen: 48
2407:2440:e013::/48 maxlen: 48
2407:2440:e014::/48 maxlen: 48
2407:2440:e015::/48 maxlen: 48
2407:2440:e016::/48 maxlen: 48
2407:2440:e017::/48 maxlen: 48
2407:2440:e018::/48 maxlen: 48
2407:2440:e040::/48 maxlen: 48
2407:2440:e041::/48 maxlen: 48
2407:2440:e042::/48 maxlen: 48
2407:2440:e043::/48 maxlen: 48
2407:2440:e044::/48 maxlen: 48
2407:2440:e045::/48 maxlen: 48
2407:2440:e050::/48 maxlen: 48
2407:2440:e051::/48 maxlen: 48
2407:2440:e052::/48 maxlen: 48
2407:2440:e053::/48 maxlen: 48
2407:2440:e054::/48 maxlen: 48
2407:2440:e055::/48 maxlen: 48
2407:2440:e071::/48 maxlen: 48
2407:2440:e072::/48 maxlen: 48
2407:2440:e073::/48 maxlen: 48
2407:2440:e074::/48 maxlen: 48
2407:2440:e075::/48 maxlen: 48
2407:2440:e081::/48 maxlen: 48
2407:2440:e082::/48 maxlen: 48
2407:2440:e083::/48 maxlen: 48
2407:2440:e084::/48 maxlen: 48
2407:2440:e085::/48 maxlen: 48
2407:2440:f001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 00:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 961 (0x3c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Feb 27 06:55:32 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a588d9-5a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:93:1e:75:75:96:9d:8a:87:e0:13:dd:38:
58:05:05:09:82:df:d0:fa:bb:28:6c:95:54:fd:4c:
25:93:3b:e7:01:43:73:b7:6e:ce:3c:05:b3:09:15:
eb:63:f8:da:28:fe:89:a7:1f:8a:86:a4:ff:46:1e:
3e:06:37:63:37:98:1f:92:dc:99:f8:f5:9c:1c:54:
fb:18:7b:fb:8b:ae:80:ab:52:08:7a:c9:8c:80:51:
3b:f6:90:e5:4d:f5:05:8d:98:a6:60:ce:a8:01:19:
74:69:8d:84:a8:44:20:d4:06:f2:99:47:4a:73:c9:
51:62:4e:df:a8:8d:88:9e:cb:bc:2b:c9:45:57:70:
f8:d2:81:60:3d:65:5a:98:9d:ad:5c:df:3a:29:98:
7c:3a:41:9a:3f:1b:c0:d6:11:78:03:d8:7e:cb:5b:
ad:e8:84:07:b0:67:9e:67:16:b8:62:18:bd:d1:c6:
aa:3c:16:f0:04:c9:be:90:2d:5a:b8:ef:7d:fd:b1:
d7:5c:34:c6:e0:44:b3:37:b2:31:13:bc:dc:34:db:
58:9b:e4:0a:13:5d:3d:38:3f:05:72:f9:a6:ea:b7:
39:c1:5d:d1:0b:8d:5e:f0:28:39:3a:39:eb:07:60:
0c:d1:4b:bc:23:1a:62:b9:d9:7f:5a:8d:22:7f:e1:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CF:E7:E0:A3:9D:03:6A:1B:DB:6D:74:4F:36:D4:C6:31:F1:B5:09
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.168.0/22
103.138.247.0/24
103.189.255.0/24
103.243.92.0/22
123.108.72.0/23
IPv6:
2407:2440:1::-2407:2440:19:ffff:ffff:ffff:ffff:ffff
2407:2440:1e::-2407:2440:20:ffff:ffff:ffff:ffff:ffff
2407:2440:22::/47
2407:2440:25::/48
2407:2440:28::/48
2407:2440:2a::-2407:2440:2d:ffff:ffff:ffff:ffff:ffff
2407:2440:a001::-2407:2440:a005:ffff:ffff:ffff:ffff:ffff
2407:2440:a007::-2407:2440:a009:ffff:ffff:ffff:ffff:ffff
2407:2440:b001::-2407:2440:b005:ffff:ffff:ffff:ffff:ffff
2407:2440:c001::/48
2407:2440:d001::/48
2407:2440:e001::-2407:2440:e004:ffff:ffff:ffff:ffff:ffff
2407:2440:e007::-2407:2440:e018:ffff:ffff:ffff:ffff:ffff
2407:2440:e040::-2407:2440:e045:ffff:ffff:ffff:ffff:ffff
2407:2440:e050::-2407:2440:e055:ffff:ffff:ffff:ffff:ffff
2407:2440:e071::-2407:2440:e075:ffff:ffff:ffff:ffff:ffff
2407:2440:e081::-2407:2440:e085:ffff:ffff:ffff:ffff:ffff
2407:2440:f001::/48
Signature Algorithm: sha256WithRSAEncryption
13:50:b3:11:00:2f:df:3a:20:1a:2d:78:2c:af:54:51:9e:b7:
c3:7c:e2:f0:80:1a:d5:7c:65:ad:e3:cc:94:d9:85:68:34:98:
cc:8c:cc:e5:9e:b5:fc:dc:59:a4:94:84:c1:5b:14:f2:99:49:
39:3a:f7:0b:44:7c:72:7f:47:4f:86:1c:ae:34:f7:03:1e:41:
76:c5:fe:0b:d4:49:92:1d:fa:8b:fd:ab:1f:d0:22:3d:19:63:
78:3b:fa:95:35:66:53:ce:fc:5f:39:c3:e2:dd:fe:95:50:10:
ec:40:f8:13:9b:21:19:ca:48:e9:55:c5:77:ea:dc:0a:2b:b5:
d3:8e:b0:32:3a:dc:42:63:7c:72:f0:6b:6c:b4:6a:f0:c5:a3:
d9:d1:7a:28:9f:fb:d7:7a:d1:16:61:17:8b:54:a7:fe:6c:b7:
00:4b:a0:66:7b:1f:e2:ba:4b:93:1f:e2:d9:e2:d9:e4:a7:76:
0f:c1:eb:28:cb:50:4f:5d:fd:ca:76:1e:99:f6:1d:22:fc:a3:
08:52:3e:28:9a:55:74:73:1f:6c:6e:21:c8:39:ce:3c:27:90:
d6:44:5c:c9:8d:55:44:5f:b7:b8:e5:6d:9d:a6:8b:32:13:b3:
b7:32:1b:e1:e5:ae:bd:67:04:c6:b8:3d:b7:58:35:c3:10:1c:
f8:aa:0c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:17:46 2026 by rpki-client