Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
File: 20978DD270E411F08F40242AC4F9AE02.roa (raw, json)
Hash identifier: IbMmmhup2nMhXZmFWHq5lp8utxIKOLBYaus0i3g41OU=
Subject key identifier: 1A:D8:A9:DE:5E:93:DB:68:88:F0:5A:79:A4:8A:80:81:10:E0:A9:E1
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 03E7
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
Signing time: Mon 27 Apr 2026 02:52:03 +0000
ROA not before: Mon 27 Apr 2026 02:52:03 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139057
IP address blocks: 103.137.168.0/24 maxlen: 24
103.137.169.0/24 maxlen: 24
103.137.170.0/24 maxlen: 24
103.137.171.0/24 maxlen: 24
103.138.247.0/24 maxlen: 24
103.189.255.0/24 maxlen: 24
103.243.92.0/24 maxlen: 24
103.243.93.0/24 maxlen: 24
103.243.94.0/24 maxlen: 24
103.243.95.0/24 maxlen: 24
123.108.72.0/24 maxlen: 24
123.108.73.0/24 maxlen: 24
2407:2440:1::/48 maxlen: 48
2407:2440:2::/48 maxlen: 48
2407:2440:3::/48 maxlen: 48
2407:2440:4::/48 maxlen: 48
2407:2440:5::/48 maxlen: 48
2407:2440:6::/48 maxlen: 48
2407:2440:7::/48 maxlen: 48
2407:2440:8::/48 maxlen: 48
2407:2440:9::/48 maxlen: 48
2407:2440:a::/48 maxlen: 48
2407:2440:b::/48 maxlen: 48
2407:2440:c::/48 maxlen: 48
2407:2440:d::/48 maxlen: 48
2407:2440:e::/48 maxlen: 48
2407:2440:f::/48 maxlen: 48
2407:2440:10::/48 maxlen: 48
2407:2440:11::/48 maxlen: 48
2407:2440:12::/48 maxlen: 48
2407:2440:13::/48 maxlen: 48
2407:2440:14::/48 maxlen: 48
2407:2440:15::/48 maxlen: 48
2407:2440:16::/48 maxlen: 48
2407:2440:17::/48 maxlen: 48
2407:2440:18::/48 maxlen: 48
2407:2440:19::/48 maxlen: 48
2407:2440:1e::/48 maxlen: 48
2407:2440:1f::/48 maxlen: 48
2407:2440:20::/48 maxlen: 48
2407:2440:22::/48 maxlen: 48
2407:2440:23::/48 maxlen: 48
2407:2440:25::/48 maxlen: 48
2407:2440:28::/48 maxlen: 48
2407:2440:2a::/48 maxlen: 48
2407:2440:2b::/48 maxlen: 48
2407:2440:2c::/48 maxlen: 48
2407:2440:2d::/48 maxlen: 48
2407:2440:a001::/48 maxlen: 48
2407:2440:a002::/48 maxlen: 48
2407:2440:a003::/48 maxlen: 48
2407:2440:a004::/48 maxlen: 48
2407:2440:a005::/48 maxlen: 48
2407:2440:a006::/48 maxlen: 48
2407:2440:a007::/48 maxlen: 48
2407:2440:a008::/48 maxlen: 48
2407:2440:a009::/48 maxlen: 48
2407:2440:b001::/48 maxlen: 48
2407:2440:b002::/48 maxlen: 48
2407:2440:b003::/48 maxlen: 48
2407:2440:b004::/48 maxlen: 48
2407:2440:b005::/48 maxlen: 48
2407:2440:c001::/48 maxlen: 48
2407:2440:c003::/48 maxlen: 48
2407:2440:d001::/48 maxlen: 48
2407:2440:e001::/48 maxlen: 48
2407:2440:e002::/48 maxlen: 48
2407:2440:e003::/48 maxlen: 48
2407:2440:e004::/48 maxlen: 48
2407:2440:e006::/48 maxlen: 48
2407:2440:e007::/48 maxlen: 48
2407:2440:e008::/48 maxlen: 48
2407:2440:e009::/48 maxlen: 48
2407:2440:e00a::/48 maxlen: 48
2407:2440:e00b::/48 maxlen: 48
2407:2440:e00c::/48 maxlen: 48
2407:2440:e00d::/48 maxlen: 48
2407:2440:e00e::/48 maxlen: 48
2407:2440:e00f::/48 maxlen: 48
2407:2440:e010::/48 maxlen: 48
2407:2440:e011::/48 maxlen: 48
2407:2440:e012::/48 maxlen: 48
2407:2440:e013::/48 maxlen: 48
2407:2440:e014::/48 maxlen: 48
2407:2440:e015::/48 maxlen: 48
2407:2440:e016::/48 maxlen: 48
2407:2440:e017::/48 maxlen: 48
2407:2440:e018::/48 maxlen: 48
2407:2440:e040::/48 maxlen: 48
2407:2440:e041::/48 maxlen: 48
2407:2440:e042::/48 maxlen: 48
2407:2440:e043::/48 maxlen: 48
2407:2440:e044::/48 maxlen: 48
2407:2440:e045::/48 maxlen: 48
2407:2440:e050::/48 maxlen: 48
2407:2440:e051::/48 maxlen: 48
2407:2440:e052::/48 maxlen: 48
2407:2440:e053::/48 maxlen: 48
2407:2440:e054::/48 maxlen: 48
2407:2440:e055::/48 maxlen: 48
2407:2440:e071::/48 maxlen: 48
2407:2440:e072::/48 maxlen: 48
2407:2440:e073::/48 maxlen: 48
2407:2440:e074::/48 maxlen: 48
2407:2440:e075::/48 maxlen: 48
2407:2440:e081::/48 maxlen: 48
2407:2440:e082::/48 maxlen: 48
2407:2440:e083::/48 maxlen: 48
2407:2440:e084::/48 maxlen: 48
2407:2440:e085::/48 maxlen: 48
2407:2440:f001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 02:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Apr 27 02:52:03 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69eecf53-ebb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:9e:cd:e3:17:0d:be:45:a7:49:f1:8e:ab:
d1:ba:b0:49:b0:f8:5a:17:1d:42:6d:86:4d:ba:e0:
31:f3:f9:33:77:e8:ec:6d:39:57:7d:a8:f2:b6:47:
49:52:71:c6:6f:3d:4b:e6:2f:8f:81:e1:3f:cf:dd:
0d:20:50:e7:6f:aa:ad:b9:21:5e:9f:f3:16:c5:09:
b7:b2:a2:ec:41:43:f1:7d:11:21:48:37:93:19:f7:
8f:61:cd:ca:db:84:3d:3d:ed:10:de:dc:23:32:99:
db:70:b5:d1:92:17:31:4a:1f:7d:ed:a4:7e:e2:ed:
ac:ac:ed:e8:3f:75:0a:52:89:fb:8e:b4:8a:93:c9:
55:c4:50:cf:47:e9:a0:fd:4e:a8:88:aa:a6:55:32:
61:a3:63:33:f6:0f:8d:a2:28:b8:cc:7f:df:90:24:
d0:6e:9d:3c:17:50:dc:96:5d:67:69:e5:9a:29:82:
9c:fc:71:87:18:0f:f5:b8:23:07:cf:e7:03:50:23:
95:cf:df:28:19:2a:f5:7c:a9:d5:1a:24:4c:7e:ea:
9a:83:c0:51:ed:f4:f4:50:b0:78:9c:34:59:c7:4d:
e0:33:e9:cf:6f:f1:61:da:da:95:dd:aa:53:0b:76:
f4:1f:e6:5e:18:0a:b8:c6:d2:25:f1:50:ae:52:62:
d9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D8:A9:DE:5E:93:DB:68:88:F0:5A:79:A4:8A:80:81:10:E0:A9:E1
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.168.0/22
103.138.247.0/24
103.189.255.0/24
103.243.92.0/22
123.108.72.0/23
IPv6:
2407:2440:1::-2407:2440:19:ffff:ffff:ffff:ffff:ffff
2407:2440:1e::-2407:2440:20:ffff:ffff:ffff:ffff:ffff
2407:2440:22::/47
2407:2440:25::/48
2407:2440:28::/48
2407:2440:2a::-2407:2440:2d:ffff:ffff:ffff:ffff:ffff
2407:2440:a001::-2407:2440:a009:ffff:ffff:ffff:ffff:ffff
2407:2440:b001::-2407:2440:b005:ffff:ffff:ffff:ffff:ffff
2407:2440:c001::/48
2407:2440:c003::/48
2407:2440:d001::/48
2407:2440:e001::-2407:2440:e004:ffff:ffff:ffff:ffff:ffff
2407:2440:e006::-2407:2440:e018:ffff:ffff:ffff:ffff:ffff
2407:2440:e040::-2407:2440:e045:ffff:ffff:ffff:ffff:ffff
2407:2440:e050::-2407:2440:e055:ffff:ffff:ffff:ffff:ffff
2407:2440:e071::-2407:2440:e075:ffff:ffff:ffff:ffff:ffff
2407:2440:e081::-2407:2440:e085:ffff:ffff:ffff:ffff:ffff
2407:2440:f001::/48
Signature Algorithm: sha256WithRSAEncryption
b5:0b:0c:ce:c2:12:78:09:8b:99:4b:31:af:31:f2:6e:75:de:
83:77:30:6c:ea:85:b7:ce:ae:f2:ba:c7:52:d8:6d:cf:4c:71:
e3:2d:a9:41:81:12:a1:51:93:94:66:2d:86:10:56:6e:77:82:
97:04:54:fe:cf:8a:51:9b:5d:b8:2f:2e:7b:5e:0b:c1:21:4d:
81:24:5b:9d:3c:6e:aa:50:8f:e7:83:f1:83:60:c1:f8:12:e0:
8a:b6:56:44:db:76:8b:88:6e:cf:eb:00:9c:ff:96:4b:cb:2c:
f6:74:f1:b2:6b:96:d2:7f:28:23:31:3f:d4:64:15:83:d6:dc:
7c:57:ef:30:e2:45:13:e5:fe:1b:3f:82:2e:9e:e7:c4:11:de:
0a:e9:d4:b7:aa:49:47:21:06:1e:3f:9e:cd:cb:02:0b:46:02:
f7:c6:5b:e8:2a:29:67:f0:1b:62:31:8f:2f:5a:7e:c8:51:e8:
e9:ea:e7:1b:97:10:55:36:f8:40:a6:94:e7:05:2e:2c:70:de:
e4:78:26:6c:f1:a4:cb:9a:65:a9:1d:44:9c:c2:50:ba:0a:2a:
48:4a:16:d0:00:40:1d:07:18:ed:56:8e:f8:5c:5c:d5:5a:e9:
eb:59:75:19:8f:3e:48:fa:bc:3e:2a:9e:db:95:61:68:07:c8:
c4:05:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 10:09:53 2026 by rpki-client