Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
File: 3C30815CABB611ED8370AB5DC4F9AE02.roa (raw, json)
Hash identifier: EC/58nmUolZ3LIXF3vrt74fFqUzQRHOfq1reVqrqRkk=
Subject key identifier: 20:83:59:79:13:5F:45:E3:6F:C3:CE:DD:77:0D:EC:C8:D5:02:75:B1
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 08DF
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
Signing time: Thu 23 Jul 2026 22:59:55 +0000
ROA not before: Thu 23 Jul 2026 22:59:55 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 140220
IP address blocks: 60.234.7.0/24 maxlen: 24
60.234.8.0/24 maxlen: 24
60.234.10.0/24 maxlen: 24
60.234.11.0/24 maxlen: 24
60.234.12.0/24 maxlen: 24
60.234.13.0/24 maxlen: 24
60.234.14.0/24 maxlen: 24
60.234.15.0/24 maxlen: 24
60.234.31.0/24 maxlen: 24
60.234.32.0/24 maxlen: 24
60.234.33.0/24 maxlen: 24
60.234.39.0/24 maxlen: 24
60.234.40.0/23 maxlen: 24
60.234.46.0/24 maxlen: 24
60.234.50.0/24 maxlen: 24
60.234.51.0/24 maxlen: 24
60.234.52.0/24 maxlen: 24
60.234.53.0/24 maxlen: 24
60.234.63.0/24 maxlen: 24
60.234.68.0/24 maxlen: 24
60.234.72.0/24 maxlen: 24
60.234.73.0/24 maxlen: 24
60.234.75.0/24 maxlen: 24
60.234.82.0/23 maxlen: 24
60.234.84.0/22 maxlen: 24
60.234.88.0/24 maxlen: 24
60.234.89.0/24 maxlen: 24
60.234.90.0/23 maxlen: 24
60.234.92.0/23 maxlen: 24
60.234.94.0/24 maxlen: 24
60.234.95.0/24 maxlen: 24
60.234.96.0/24 maxlen: 24
60.234.98.0/24 maxlen: 24
60.234.99.0/24 maxlen: 24
60.234.100.0/23 maxlen: 24
60.234.102.0/23 maxlen: 24
60.234.104.0/22 maxlen: 24
60.234.108.0/24 maxlen: 24
60.234.109.0/24 maxlen: 24
60.234.110.0/24 maxlen: 24
60.234.111.0/24 maxlen: 24
60.234.112.0/24 maxlen: 24
60.234.113.0/24 maxlen: 24
60.234.114.0/24 maxlen: 24
60.234.115.0/24 maxlen: 24
60.234.116.0/23 maxlen: 24
60.234.118.0/24 maxlen: 24
60.234.119.0/24 maxlen: 24
60.234.120.0/24 maxlen: 24
60.234.121.0/24 maxlen: 24
60.234.122.0/23 maxlen: 24
60.234.124.0/24 maxlen: 24
60.234.125.0/24 maxlen: 24
60.234.126.0/24 maxlen: 24
60.234.127.0/24 maxlen: 24
60.234.128.0/24 maxlen: 24
60.234.129.0/24 maxlen: 24
60.234.130.0/24 maxlen: 24
60.234.131.0/24 maxlen: 24
60.234.132.0/24 maxlen: 24
60.234.133.0/24 maxlen: 24
60.234.134.0/24 maxlen: 24
60.234.135.0/24 maxlen: 24
60.234.136.0/24 maxlen: 24
60.234.137.0/24 maxlen: 24
60.234.138.0/24 maxlen: 24
60.234.139.0/24 maxlen: 24
60.234.140.0/24 maxlen: 24
60.234.141.0/24 maxlen: 24
60.234.142.0/24 maxlen: 24
60.234.143.0/24 maxlen: 24
60.234.144.0/23 maxlen: 24
60.234.146.0/23 maxlen: 24
60.234.148.0/24 maxlen: 24
60.234.149.0/24 maxlen: 24
60.234.150.0/23 maxlen: 24
60.234.152.0/21 maxlen: 24
60.234.160.0/24 maxlen: 24
60.234.161.0/24 maxlen: 24
60.234.162.0/23 maxlen: 24
60.234.164.0/24 maxlen: 24
60.234.165.0/24 maxlen: 24
60.234.166.0/24 maxlen: 24
60.234.167.0/24 maxlen: 24
60.234.168.0/24 maxlen: 24
60.234.169.0/24 maxlen: 24
60.234.170.0/24 maxlen: 24
60.234.171.0/24 maxlen: 24
60.234.172.0/24 maxlen: 24
60.234.173.0/24 maxlen: 24
60.234.174.0/24 maxlen: 24
60.234.175.0/24 maxlen: 24
60.234.176.0/24 maxlen: 24
60.234.178.0/24 maxlen: 24
60.234.181.0/24 maxlen: 24
60.234.182.0/23 maxlen: 24
60.234.184.0/23 maxlen: 24
60.234.186.0/24 maxlen: 24
60.234.187.0/24 maxlen: 24
60.234.188.0/24 maxlen: 24
60.234.189.0/24 maxlen: 24
60.234.190.0/24 maxlen: 24
60.234.191.0/24 maxlen: 24
60.234.192.0/24 maxlen: 24
60.234.193.0/24 maxlen: 24
60.234.194.0/23 maxlen: 24
60.234.196.0/23 maxlen: 24
60.234.198.0/23 maxlen: 24
60.234.201.0/24 maxlen: 24
60.234.202.0/23 maxlen: 24
60.234.204.0/24 maxlen: 24
60.234.205.0/24 maxlen: 24
60.234.206.0/24 maxlen: 24
60.234.207.0/24 maxlen: 24
60.234.208.0/20 maxlen: 24
60.234.224.0/19 maxlen: 24
121.98.32.0/24 maxlen: 24
121.98.33.0/24 maxlen: 24
121.98.34.0/23 maxlen: 24
121.98.36.0/22 maxlen: 24
121.98.40.0/23 maxlen: 24
121.98.42.0/23 maxlen: 24
121.98.44.0/24 maxlen: 24
121.98.45.0/24 maxlen: 24
121.98.46.0/23 maxlen: 24
121.98.124.0/23 maxlen: 24
202.127.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 22:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271 (0x8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Jul 23 22:59:55 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a629cea-ffce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:12:6e:04:45:00:1b:c8:99:fd:14:26:6a:
49:48:ef:e0:63:cd:74:9e:ab:c1:f4:7e:e9:02:d1:
4e:78:7d:a5:01:9e:88:fb:0f:57:33:3b:36:9d:d1:
e8:7e:43:df:a7:f0:20:24:09:b1:d1:94:82:20:71:
7b:cf:9e:6a:89:20:11:28:0d:38:e7:fe:11:2c:94:
5d:64:09:1f:7f:7a:98:e4:9f:bb:e5:3d:9c:c5:3d:
04:cc:1a:17:95:73:ea:97:85:96:35:48:4d:da:47:
c3:ea:5a:5a:77:ab:c7:ed:fb:8d:d7:03:46:2b:47:
d1:51:68:77:28:5c:a8:f5:2c:00:e9:e1:4c:b6:14:
ab:c1:af:e8:7a:e3:ca:1a:70:5a:d8:92:8a:51:5e:
fe:ac:fa:09:f2:e6:f0:05:9c:19:f8:ec:0d:10:0c:
b6:80:36:82:58:6d:6d:98:83:3b:36:5e:bd:a3:ff:
fd:08:c1:5f:bf:fe:1d:3f:05:2d:f3:c2:e7:bb:4e:
c7:f2:c8:35:ef:9a:0d:2a:b4:bf:98:4b:51:1c:60:
c6:4b:c8:32:1a:11:fd:cb:91:25:2d:31:04:76:da:
3b:f1:0a:4a:40:8d:c0:f9:dd:a6:78:59:69:d9:89:
b5:24:d3:b1:03:56:4b:b8:64:e4:b5:32:7f:42:19:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:83:59:79:13:5F:45:E3:6F:C3:CE:DD:77:0D:EC:C8:D5:02:75:B1
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
60.234.7.0-60.234.8.255
60.234.10.0-60.234.15.255
60.234.31.0-60.234.33.255
60.234.39.0-60.234.41.255
60.234.46.0/24
60.234.50.0-60.234.53.255
60.234.63.0/24
60.234.68.0/24
60.234.72.0/23
60.234.75.0/24
60.234.82.0-60.234.96.255
60.234.98.0-60.234.176.255
60.234.178.0/24
60.234.181.0-60.234.199.255
60.234.201.0-60.234.255.255
121.98.32.0/20
121.98.124.0/23
202.127.8.0/22
Signature Algorithm: sha256WithRSAEncryption
67:49:e0:ea:55:fd:08:f6:e7:11:77:f4:ce:06:b9:4d:78:38:
0f:1d:e2:4c:97:e2:88:18:31:66:d1:37:d6:e7:fd:60:79:2a:
e8:b5:fe:8b:4d:b3:d8:8e:8b:f7:45:e2:b0:82:af:c7:0d:3d:
9a:1f:8a:d5:d3:34:42:e5:75:75:6e:89:b3:c4:63:ab:1f:2a:
3f:b5:d8:70:32:0f:89:a4:d8:ef:70:b3:22:04:ba:10:e4:60:
28:0d:2c:05:b0:ed:5c:2e:78:b8:aa:67:f5:f6:f4:12:fa:ca:
ea:60:3a:19:18:7e:9c:3c:ef:a2:7a:a1:2c:94:42:ca:64:0d:
d8:87:bb:25:54:d1:f9:bd:fd:b5:99:ca:55:b1:79:0e:bf:08:
25:93:e0:b0:9d:fb:4f:83:6f:6e:35:c0:e2:e9:c4:4e:cf:fe:
59:c6:5e:8e:5a:2e:64:74:09:0f:ca:da:ec:7a:92:1b:eb:bf:
1c:72:6c:6b:50:f4:e2:48:e6:42:f4:c2:ac:d7:f6:8d:ce:e9:
18:1d:91:d3:7c:09:d0:37:b8:ad:fa:43:a5:2c:09:a9:e5:b1:
8e:d1:cd:74:de:e6:6c:b7:3b:ac:85:f0:00:15:c5:d5:9f:98:
1a:a4:9d:7f:44:85:b2:18:c3:2a:0d:df:f3:72:9d:ca:2c:85:
cc:ce:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:11 2026 by rpki-client