Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EF44FD8768A11F18379E3C263A30FBC.roa
File: 9EF44FD8768A11F18379E3C263A30FBC.roa (raw, json)
Hash identifier: 3DU7bkuGyP4us72SOqBeemUYKBJuDdbpB3Y5pYPWPy8=
Subject key identifier: 09:E6:2B:1A:47:E4:63:8D:7F:EE:67:90:AA:14:15:E7:B1:3A:C1:03
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6D52
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EF44FD8768A11F18379E3C263A30FBC.roa
Signing time: Fri 18 Sep 2026 14:13:32 +0000
ROA not before: Fri 18 Sep 2026 14:13:32 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151858
IP address blocks: 36.50.54.0/23 maxlen: 23
36.50.176.0/23 maxlen: 23
103.14.48.0/23 maxlen: 23
103.20.96.0/23 maxlen: 23
103.20.102.0/23 maxlen: 23
103.75.180.0/22 maxlen: 23
103.77.208.0/23 maxlen: 23
103.106.104.0/23 maxlen: 24
103.116.8.0/23 maxlen: 23
103.118.28.0/23 maxlen: 23
103.167.88.0/23 maxlen: 23
103.169.34.0/23 maxlen: 23
103.169.34.0/24 maxlen: 24
103.169.35.0/24 maxlen: 24
103.171.90.0/23 maxlen: 23
103.173.226.0/23 maxlen: 23
103.175.248.0/23 maxlen: 23
103.175.248.0/24 maxlen: 24
103.175.249.0/24 maxlen: 24
103.180.136.0/23 maxlen: 23
103.180.140.0/23 maxlen: 23
103.182.22.0/23 maxlen: 23
103.186.64.0/23 maxlen: 23
103.188.166.0/23 maxlen: 23
103.195.236.0/22 maxlen: 22
103.195.236.0/23 maxlen: 23
103.195.238.0/23 maxlen: 23
103.240.6.0/23 maxlen: 23
103.245.236.0/23 maxlen: 23
163.52.144.0/24 maxlen: 24
202.158.248.0/23 maxlen: 23
2001:df3:53c0::/48 maxlen: 48
2001:df4:e40::/48 maxlen: 48
2001:df4:5740::/48 maxlen: 48
2001:df4:7dc0::/48 maxlen: 48
2001:df7:79c0::/48 maxlen: 48
2400:1da0::/48 maxlen: 48
2400:6ea0::/48 maxlen: 48
2400:82a0::/32 maxlen: 48
2400:e6e0::/48 maxlen: 48
2400:eea0::/48 maxlen: 48
2401:1e60::/48 maxlen: 48
2401:2b20::/48 maxlen: 48
2401:4120::/48 maxlen: 48
2401:44e0::/48 maxlen: 48
2401:4660::/48 maxlen: 48
2401:5ce0::/48 maxlen: 48
2401:8260::/48 maxlen: 48
2407:66c0::/48 maxlen: 48
2407:9940::/48 maxlen: 48
2407:f140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27986 (0x6d52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 18 14:13:32 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6aad470c-abdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:16:e3:ce:c0:d8:09:aa:c7:59:3f:76:c9:
37:e0:89:70:8a:71:16:56:87:29:b9:14:dc:6c:7e:
78:9b:43:7f:23:ca:c8:e4:71:57:8f:9e:03:13:a2:
99:ed:c1:cd:94:c7:ce:be:52:eb:ef:23:48:2d:47:
e7:91:0c:eb:92:d0:d7:7a:ca:5f:19:d2:e6:fd:5c:
21:7f:44:cb:ae:4b:cf:44:7a:f9:d6:2d:97:2d:f0:
e9:66:71:b3:c5:11:34:00:96:d3:b3:73:32:ec:3b:
66:bb:0a:95:a5:28:9b:88:3e:96:39:61:ec:b9:18:
b3:4a:7e:35:46:25:36:87:66:78:7a:a0:ec:f4:91:
cc:d2:a2:31:62:f8:8b:f2:dd:73:42:09:fa:69:a3:
6d:1e:81:52:50:53:c6:4c:e1:e8:bd:e3:cb:95:02:
96:61:0a:18:bf:fe:45:8a:e6:67:46:a7:78:9b:5b:
cc:9c:df:6e:79:6a:1c:0f:d2:f9:0f:4b:78:2e:b6:
62:63:f4:7a:5c:0e:f2:27:c2:0d:32:e4:11:8f:e6:
31:6e:05:57:6c:5a:04:0d:58:45:33:e9:e3:79:7c:
04:63:0b:d0:58:af:6d:93:39:45:ea:98:b0:84:ea:
19:73:36:9d:fa:e4:bd:21:b3:32:4e:6a:fb:8c:36:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E6:2B:1A:47:E4:63:8D:7F:EE:67:90:AA:14:15:E7:B1:3A:C1:03
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9EF44FD8768A11F18379E3C263A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.54.0/23
36.50.176.0/23
103.14.48.0/23
103.20.96.0/23
103.20.102.0/23
103.75.180.0/22
103.77.208.0/23
103.106.104.0/23
103.116.8.0/23
103.118.28.0/23
103.167.88.0/23
103.169.34.0/23
103.171.90.0/23
103.173.226.0/23
103.175.248.0/23
103.180.136.0/23
103.180.140.0/23
103.182.22.0/23
103.186.64.0/23
103.188.166.0/23
103.195.236.0/22
103.240.6.0/23
103.245.236.0/23
163.52.144.0/24
202.158.248.0/23
IPv6:
2001:df3:53c0::/48
2001:df4:e40::/48
2001:df4:5740::/48
2001:df4:7dc0::/48
2001:df7:79c0::/48
2400:1da0::/48
2400:6ea0::/48
2400:82a0::/32
2400:e6e0::/48
2400:eea0::/48
2401:1e60::/48
2401:2b20::/48
2401:4120::/48
2401:44e0::/48
2401:4660::/48
2401:5ce0::/48
2401:8260::/48
2407:66c0::/48
2407:9940::/48
2407:f140::/48
Signature Algorithm: sha256WithRSAEncryption
a0:9d:4b:1a:15:4b:3f:8e:d4:16:02:8b:5e:0d:5d:51:5c:95:
cc:a7:c9:11:96:a9:88:39:39:32:0e:e9:02:44:35:ec:a0:37:
23:83:ce:34:02:36:43:15:f5:98:d8:98:3e:7d:a9:6b:71:cc:
e8:b8:bc:a3:58:72:2a:07:59:4f:ae:58:a6:1e:62:be:63:4e:
60:82:ee:12:5d:2b:8f:3a:8a:c8:b2:e3:8e:50:05:26:03:98:
2a:77:8a:22:ff:13:1c:b2:39:cf:04:dc:e1:0f:db:4b:c1:8a:
de:aa:06:b3:cf:83:1c:47:1c:e4:53:68:96:2d:e1:1a:01:3e:
3b:32:ac:99:b7:fe:1d:13:6d:30:d6:58:cb:a4:09:de:97:e7:
a8:1d:bc:7b:cd:2b:22:42:bd:ba:33:76:94:c4:10:7d:62:ee:
81:80:9e:de:c5:e0:36:8c:58:0e:1c:c9:b6:4b:dd:06:c0:46:
78:a7:4d:2a:fe:60:66:3b:c6:d7:d6:b5:5c:0d:1a:53:31:da:
f7:ad:72:39:75:a9:39:e8:41:65:f3:52:b9:05:f6:90:01:09:
9c:1b:c0:97:c5:c4:5a:ae:68:af:10:99:94:bd:de:ee:d7:bc:
0a:2e:3d:cb:1d:16:cf:d8:15:b4:f7:70:5f:05:7d:49:23:06:
b0:d4:70:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:32:11 2026 by rpki-client