Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/1AC1982A8C6A11EB91832D52C4F9AE02.roa
File: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (raw, json)
Hash identifier: /VloqaD2cYppLRVsQe+SclqEcygp/xKvnqbJFHuyZMc=
Subject key identifier: 3C:1F:35:84:6B:CD:D0:36:F6:36:D2:55:9F:C2:50:41:D7:54:58:F5
Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Certificate serial: 06EE
Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/1AC1982A8C6A11EB91832D52C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:33:30 +0000
ROA not before: Mon 08 Dec 2025 21:33:14 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45499
IP address blocks: 103.5.60.0/22 maxlen: 22
103.5.60.0/24 maxlen: 24
103.5.61.0/24 maxlen: 24
103.5.62.0/24 maxlen: 24
103.5.63.0/24 maxlen: 24
110.5.64.0/21 maxlen: 21
110.5.64.0/24 maxlen: 24
110.5.65.0/24 maxlen: 24
110.5.66.0/24 maxlen: 24
110.5.67.0/24 maxlen: 24
110.5.68.0/24 maxlen: 24
110.5.69.0/24 maxlen: 24
110.5.70.0/24 maxlen: 24
110.5.71.0/24 maxlen: 24
111.235.80.0/20 maxlen: 20
111.235.80.0/24 maxlen: 24
111.235.81.0/24 maxlen: 24
111.235.82.0/24 maxlen: 24
111.235.83.0/24 maxlen: 24
111.235.84.0/24 maxlen: 24
111.235.85.0/24 maxlen: 24
111.235.86.0/24 maxlen: 24
111.235.87.0/24 maxlen: 24
111.235.88.0/24 maxlen: 24
111.235.89.0/24 maxlen: 24
111.235.90.0/24 maxlen: 24
111.235.91.0/24 maxlen: 24
111.235.92.0/24 maxlen: 24
111.235.93.0/24 maxlen: 24
111.235.94.0/24 maxlen: 24
111.235.95.0/24 maxlen: 24
116.206.224.0/22 maxlen: 22
116.206.224.0/24 maxlen: 24
116.206.225.0/24 maxlen: 24
116.206.226.0/24 maxlen: 24
116.206.227.0/24 maxlen: 24
203.118.244.0/22 maxlen: 22
203.118.244.0/24 maxlen: 24
203.118.245.0/24 maxlen: 24
203.118.246.0/24 maxlen: 24
203.118.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl
rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1774 (0x6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91293E9, serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Validity
Not Before: Dec 8 21:33:14 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4321a-2b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a9:4a:43:7d:bf:a0:00:d0:41:18:9a:51:4f:
64:79:3d:98:c5:8a:67:3c:5a:ed:11:4d:4c:60:a5:
e2:d2:49:4b:5c:a8:24:23:f2:b5:b5:6c:bb:a8:62:
7e:e1:cf:9b:e2:bc:e0:e4:fa:34:7a:69:a6:6a:60:
a8:04:57:b6:2a:b0:0f:31:ba:e3:54:23:d2:94:fb:
65:82:a2:d7:2e:73:33:06:0b:b3:a1:9e:1f:6f:a7:
ef:78:94:0d:33:9e:de:6f:e4:a6:6b:10:ed:12:68:
a6:53:c2:ef:3c:3c:0c:85:f2:f7:82:0c:24:bf:6e:
d4:5c:51:18:6e:3d:6e:57:01:f3:b9:a1:bb:ce:ec:
e6:5b:e7:1a:49:a1:50:72:f8:ae:0d:f6:d1:d4:f7:
5f:a6:72:b9:1d:09:eb:cb:e0:8d:d0:8a:fa:04:51:
4e:f6:07:6c:04:09:f0:e6:68:c5:21:d9:6e:ce:ff:
fd:31:86:51:c0:92:28:54:9c:d1:6c:01:de:da:de:
c1:3d:30:4d:76:de:19:b3:c3:ab:a6:90:35:d7:cc:
46:ea:f5:af:fd:c4:b2:d7:0f:b9:6f:36:64:06:f6:
c2:42:62:9e:19:a7:c3:5f:ff:1d:c5:02:cc:46:22:
a2:59:d3:3f:7d:ba:65:8c:0d:94:5b:7d:0f:1b:e6:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1F:35:84:6B:CD:D0:36:F6:36:D2:55:9F:C2:50:41:D7:54:58:F5
X509v3 Authority Key Identifier:
keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/1AC1982A8C6A11EB91832D52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.60.0/22
110.5.64.0/21
111.235.80.0/20
116.206.224.0/22
203.118.244.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:29:7a:f9:2a:fa:fd:b8:fd:2c:15:e0:c7:01:82:af:10:69:
68:e4:07:75:0e:5e:21:2d:79:7c:02:a4:27:c6:5c:d3:24:5c:
56:49:0e:11:6e:d4:d2:36:35:18:f6:d9:ef:43:c3:0c:66:f2:
70:67:23:33:43:9a:1b:4d:30:f2:67:b5:83:d2:2a:e6:11:b6:
4d:35:36:b2:09:aa:13:93:cf:a8:93:12:eb:1e:30:62:e8:98:
74:b4:32:ee:1c:08:9b:e3:54:bd:86:0d:e6:c2:5d:1c:bd:31:
0e:98:6a:a8:4a:0e:84:e3:30:c2:8b:52:37:ab:7c:28:74:4c:
30:af:13:e6:cc:76:e4:61:3e:5c:19:6f:9a:93:cd:40:62:a3:
1c:56:1c:d2:4d:14:9e:f1:82:db:e8:03:d7:b1:16:c3:bc:84:
79:3f:69:a6:b7:7a:82:e9:59:8d:64:e3:0c:10:49:89:53:12:
06:6e:54:a3:ea:58:eb:b3:de:36:74:88:50:b3:35:dc:b9:f7:
f0:89:2f:0e:dc:7b:09:ae:c4:36:23:20:91:2a:6c:51:cd:f8:
2f:98:9b:4e:73:ff:62:3d:e3:a6:22:37:0e:4d:94:f8:19:e6:
8e:eb:d1:43:53:fd:8e:f5:c3:7f:ca:76:da:65:2b:a7:55:db:
af:df:cb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:02 2026 by rpki-client