Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/8B2EE9667A0911EE934F1262C4F9AE02.roa
File: 8B2EE9667A0911EE934F1262C4F9AE02.roa (raw, json)
Hash identifier: f8X+npi+JLQaJzm85+PGyFP1DtvAuywwMt9O4+IYXEo=
Subject key identifier: 98:56:25:CD:73:C8:D1:51:13:E3:25:9C:14:B9:B0:FD:83:37:9F:72
Certificate issuer: /CN=A91743EF/serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
Certificate serial: 18CA
Authority key identifier: D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/8B2EE9667A0911EE934F1262C4F9AE02.roa
Signing time: Wed 06 May 2026 17:23:31 +0000
ROA not before: Wed 06 May 2026 17:23:31 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 17747
IP address blocks: 103.199.224.0/24 maxlen: 24
103.199.225.0/24 maxlen: 24
103.199.226.0/24 maxlen: 24
103.199.227.0/24 maxlen: 24
150.107.8.0/23 maxlen: 24
202.142.80.0/24 maxlen: 24
202.142.82.0/24 maxlen: 24
202.142.84.0/24 maxlen: 24
202.142.88.0/24 maxlen: 24
202.142.94.0/24 maxlen: 24
202.142.108.0/23 maxlen: 23
202.142.109.0/24 maxlen: 24
202.142.111.0/24 maxlen: 24
202.142.116.0/24 maxlen: 24
202.142.117.0/24 maxlen: 24
202.142.121.0/24 maxlen: 24
202.142.122.0/24 maxlen: 24
203.81.240.0/24 maxlen: 24
203.81.241.0/24 maxlen: 24
203.81.242.0/24 maxlen: 24
203.81.243.0/24 maxlen: 24
2402:ea80::/32 maxlen: 32
2402:ea80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl
rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6346 (0x18ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91743EF, serialNumber=D1D65C8A4324E287F6EA915B39F5D3602D1E37A6
Validity
Not Before: May 6 17:23:31 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69fb7913-82f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:73:82:c2:a0:26:2d:42:bc:2c:e8:67:a2:
c6:7d:3d:65:bb:30:f2:37:73:d1:58:91:a1:47:00:
33:4a:68:c0:44:90:dc:5c:23:f6:f9:f4:1e:ff:45:
48:87:31:c0:ad:b6:b6:41:21:2f:1b:62:91:6a:d0:
89:9a:dd:11:1c:6e:c5:5b:a3:7a:56:ae:1f:a8:1d:
06:7b:12:10:7e:70:9d:08:02:3f:6a:41:a2:1d:6f:
01:a5:b3:e2:7c:05:53:f7:37:45:9a:bb:85:fc:3b:
29:8f:be:84:c9:c4:a3:a0:83:79:76:05:d9:be:d2:
f5:26:96:d9:5b:80:83:a2:40:d3:8b:f0:86:7d:59:
04:17:18:af:02:ae:26:67:20:a1:ca:bd:39:92:93:
c8:5d:3f:78:61:9d:9d:0b:83:de:b4:f3:49:c9:95:
70:48:b2:f6:b7:da:78:3e:6e:f5:4c:7c:dc:f2:23:
1d:75:3b:70:9e:e1:bb:fb:92:9a:33:4a:9a:a2:e1:
46:d5:1c:db:fd:ac:4a:3c:6c:c1:7a:f7:03:39:6b:
08:35:69:45:e7:da:1d:2d:d6:08:38:9c:56:a4:84:
ef:fb:ef:11:c5:39:99:ee:99:e9:2d:55:16:a3:e6:
cd:e5:07:57:84:bb:db:f4:e6:bf:ff:0d:9c:dd:21:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:56:25:CD:73:C8:D1:51:13:E3:25:9C:14:B9:B0:FD:83:37:9F:72
X509v3 Authority Key Identifier:
keyid:D1:D6:5C:8A:43:24:E2:87:F6:EA:91:5B:39:F5:D3:60:2D:1E:37:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/0dZcikMk4of26pFbOfXTYC0eN6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0dZcikMk4of26pFbOfXTYC0eN6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91743EF/E6ABB010BA4011E7A08D266FC4F9AE02/8B2EE9667A0911EE934F1262C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.199.224.0/22
150.107.8.0/23
202.142.80.0/24
202.142.82.0/24
202.142.84.0/24
202.142.88.0/24
202.142.94.0/24
202.142.108.0/23
202.142.111.0/24
202.142.116.0/23
202.142.121.0-202.142.122.255
203.81.240.0/22
IPv6:
2402:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
3c:cf:d7:f0:2b:24:4d:69:56:c8:07:80:48:b3:6a:66:e9:ae:
ca:19:8b:56:4e:e8:b0:00:e5:2e:e6:be:87:53:b9:93:88:f5:
d6:14:53:3a:0e:be:c4:cc:9c:a8:8b:db:0f:17:ab:64:0e:07:
d7:96:26:49:b0:17:f3:1d:46:4f:0f:d6:40:da:55:1d:18:a9:
e2:54:a2:96:f7:60:42:c1:91:74:d2:33:5a:6b:6b:34:3e:db:
4a:89:d6:ba:f1:80:d4:0f:9a:37:92:43:6d:df:ea:ba:04:a6:
83:44:cd:30:13:9f:2a:a0:87:e8:f0:7b:1c:b5:95:83:33:50:
a5:23:45:61:ca:64:90:73:17:b8:05:30:e4:67:ab:15:cb:77:
a9:37:a5:ed:a4:9c:2d:b6:c3:36:bc:9e:dd:fc:4b:30:7c:6a:
22:fa:1b:c9:0b:84:f1:a2:e2:8a:e7:d6:7a:bc:60:d2:84:16:
dd:a8:f1:05:fe:d0:15:5a:4c:b8:af:de:d4:7a:1d:2f:cc:ef:
40:00:86:5f:ec:51:6b:1b:f6:b3:2f:6d:63:9b:b5:f0:e9:21:
ff:5f:f9:1b:3a:62:9f:51:f4:d1:fd:a7:5e:a1:36:34:45:d4:
4d:93:8e:e3:41:b3:de:01:ad:e7:f7:37:0a:0d:32:39:b1:1e:
5b:71:78:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:59:37 2026 by rpki-client