Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/FE049DEA388A11F183CE8CB4BD833773.roa
File: FE049DEA388A11F183CE8CB4BD833773.roa (raw, json)
Hash identifier: ihQgR3KK/IXO+CWwsgVaMfQ8YEeYA8kjSIVVgjb52Gg=
Subject key identifier: DE:D6:33:79:35:4C:F4:B9:20:1D:8A:02:85:58:C5:FE:F4:C6:A2:83
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 08B1
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/FE049DEA388A11F183CE8CB4BD833773.roa
Signing time: Tue 05 May 2026 02:26:21 +0000
ROA not before: Tue 05 May 2026 02:26:21 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 9790
IP address blocks: 60.234.0.0/16 maxlen: 20
101.98.0.0/16 maxlen: 20
101.100.128.0/19 maxlen: 24
103.224.128.0/22 maxlen: 24
103.237.40.0/22 maxlen: 24
110.44.16.0/22 maxlen: 24
118.148.0.0/15 maxlen: 15
118.148.64.0/20 maxlen: 24
118.148.80.0/20 maxlen: 24
118.148.96.0/20 maxlen: 24
118.148.112.0/20 maxlen: 24
118.148.128.0/21 maxlen: 24
118.148.136.0/22 maxlen: 24
118.148.192.0/22 maxlen: 24
118.149.64.0/20 maxlen: 24
118.149.80.0/20 maxlen: 24
118.149.96.0/20 maxlen: 24
118.149.112.0/20 maxlen: 24
119.224.0.0/18 maxlen: 22
119.224.64.0/19 maxlen: 22
119.224.128.0/20 maxlen: 20
121.98.0.0/15 maxlen: 20
202.50.170.0/24 maxlen: 24
202.53.176.0/20 maxlen: 20
202.180.64.0/18 maxlen: 20
202.189.160.0/20 maxlen: 20
202.191.32.0/20 maxlen: 20
203.184.0.0/18 maxlen: 20
2400:4800::/32 maxlen: 32
2402:6000::/32 maxlen: 32
2402:8200::/32 maxlen: 32
2404:4400::/28 maxlen: 36
2406:e000:201::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2225 (0x8b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: May 5 02:26:21 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69f9554d-ac9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:44:1b:4c:ed:b3:50:3e:a2:c3:08:1c:01:
f6:1a:31:7b:6d:f2:14:ee:28:ab:6b:b8:62:ec:ff:
b5:58:21:37:82:e7:2f:be:f7:9f:1f:d4:c0:2b:c5:
39:97:c2:a4:96:6d:0d:33:96:76:7a:5e:03:2c:7f:
14:63:92:9e:43:54:00:57:94:a2:91:b3:2c:9d:1e:
30:1d:82:0e:86:31:86:f3:53:a1:b5:10:7b:f4:cd:
2c:33:e2:b9:64:03:1a:f0:8a:bb:d9:b8:45:e4:ca:
63:ad:1d:f6:a4:31:09:bf:79:8c:54:d3:52:65:21:
6a:db:37:70:a6:0d:ef:39:a2:ad:86:55:5f:65:2e:
ca:ba:04:22:14:60:a3:ff:f8:c4:c6:03:df:45:dc:
42:99:57:81:28:c4:01:1b:96:4c:a3:db:40:a5:80:
21:a4:5f:30:08:a6:4e:55:48:76:91:41:33:aa:b6:
01:a4:35:8e:6a:49:78:6c:c4:77:70:e3:03:9c:95:
c9:c8:e6:ea:50:ee:80:42:14:a1:a7:e4:ab:e2:eb:
5b:8f:57:e3:5e:76:6b:a2:47:1e:77:79:db:75:8a:
9b:d2:2c:57:a2:68:1a:50:6d:b2:c9:17:38:5d:25:
0b:cf:dd:6e:d5:f4:87:58:34:06:f6:74:5c:b4:2e:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D6:33:79:35:4C:F4:B9:20:1D:8A:02:85:58:C5:FE:F4:C6:A2:83
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/FE049DEA388A11F183CE8CB4BD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
60.234.0.0/16
101.98.0.0/16
101.100.128.0/19
103.224.128.0/22
103.237.40.0/22
110.44.16.0/22
118.148.0.0/15
119.224.0.0-119.224.95.255
119.224.128.0/20
121.98.0.0/15
202.50.170.0/24
202.53.176.0/20
202.180.64.0/18
202.189.160.0/20
202.191.32.0/20
203.184.0.0/18
IPv6:
2400:4800::/32
2402:6000::/32
2402:8200::/32
2404:4400::/28
2406:e000:201::/48
Signature Algorithm: sha256WithRSAEncryption
69:19:fb:53:82:45:4d:93:aa:59:fa:8a:02:2f:78:ee:7a:47:
11:bb:73:32:44:49:f8:2b:b2:a2:77:47:77:90:a6:93:3c:f0:
a2:7b:63:99:78:87:07:f3:f3:59:e6:94:c7:f1:b2:b6:c6:9d:
33:1e:7a:cf:cf:2f:93:9b:a6:0b:1e:ad:c3:03:5c:99:21:72:
9e:ed:78:eb:c4:98:b5:f2:89:11:71:de:08:3e:8d:78:4e:38:
e4:f4:a9:0d:f6:9e:63:7d:69:36:13:d3:97:99:ca:49:38:b7:
9f:f9:3c:69:25:7e:0c:3b:37:8f:e4:56:45:22:d8:00:9f:2b:
68:a8:3f:b5:aa:96:dd:9b:36:70:a2:f5:cc:c2:5d:58:7c:3c:
32:79:89:50:a7:53:ed:91:0d:ad:0f:fd:36:6c:61:91:01:29:
ce:46:99:3a:81:d3:c7:4f:02:2c:ce:e8:0b:10:7e:f5:81:b9:
66:51:8d:cf:b4:95:d6:5e:7e:74:01:62:92:f7:db:52:43:eb:
bb:31:be:cd:92:dd:b3:65:c4:b2:c3:6c:3b:c9:b6:d5:64:bd:
c0:26:0b:44:b7:37:8c:f9:9c:ba:b4:c2:99:c9:ed:22:38:98:
ac:36:a2:cd:a8:f8:f0:75:46:9c:47:c3:cb:04:ef:59:b3:9b:
79:06:90:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:46 2026 by rpki-client