Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D409E53485DF11F18D04681C8EEE528E.roa
File: D409E53485DF11F18D04681C8EEE528E.roa (raw, json)
Hash identifier: 9rU7g/AjpsXSci5yeNPxqDDF2qXDIuYh1aLGV8Lpg2Q=
Subject key identifier: 32:B4:D7:3E:71:43:75:B2:63:20:EC:FF:2C:3B:18:62:52:33:CB:D1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CFA
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D409E53485DF11F18D04681C8EEE528E.roa
Signing time: Wed 22 Jul 2026 15:13:01 +0000
ROA not before: Wed 22 Jul 2026 15:13:01 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140810
IP address blocks: 103.77.172.0/23 maxlen: 23
103.77.214.0/23 maxlen: 23
103.77.240.0/23 maxlen: 23
103.77.246.0/23 maxlen: 23
103.78.0.0/23 maxlen: 23
103.116.38.0/23 maxlen: 23
103.141.140.0/23 maxlen: 23
103.155.216.0/24 maxlen: 24
103.178.234.0/23 maxlen: 23
103.213.218.0/23 maxlen: 23
103.214.8.0/22 maxlen: 22
103.238.234.0/23 maxlen: 23
103.252.136.0/23 maxlen: 23
223.130.10.0/23 maxlen: 23
2001:df4:c340::/48 maxlen: 48
2001:df4:d880::/48 maxlen: 48
2400:ece0::/48 maxlen: 48
2401:1960::/48 maxlen: 48
2401:2420::/48 maxlen: 48
2401:3660::/48 maxlen: 48
2401:36a0::/48 maxlen: 48
2401:3760::/48 maxlen: 48
2401:37a0::/48 maxlen: 48
2401:3f20::/48 maxlen: 48
2401:45a0::/48 maxlen: 48
2405:19c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27898 (0x6cfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 22 15:13:01 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a60ddfd-3e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:87:11:84:a1:ae:80:67:f5:53:9a:e6:92:
b6:3a:06:9e:92:50:83:c7:38:57:65:56:2c:5b:f1:
2c:dc:5f:f6:b9:95:35:bc:9a:ad:56:f7:1e:99:b6:
4d:e1:2c:f1:b6:77:7b:1f:13:6b:3b:da:a8:c8:d4:
9a:c5:1a:e1:f8:2e:d6:e9:39:3b:2d:ea:0e:2e:d0:
87:11:40:23:98:79:f3:a8:8f:c5:5f:1c:e6:9f:3f:
cb:11:44:f3:69:04:d7:1e:f5:d5:f0:d0:d9:f5:d1:
5a:08:e0:c9:c3:b8:79:a4:47:84:09:22:82:51:80:
ad:d0:e2:1d:5a:55:81:d0:86:d6:5c:9c:32:e4:fd:
be:96:c2:f9:74:ca:15:e3:c8:ab:3c:01:a6:7b:2c:
1e:fb:69:f4:ea:c2:e7:ce:41:3f:c7:d8:48:11:2c:
ca:1d:6e:f3:e1:37:20:f5:21:6c:df:ba:62:26:c5:
e2:e6:aa:3f:5a:89:f2:c0:16:e2:11:ba:25:ff:25:
02:49:65:bb:62:63:b2:40:87:60:cf:6d:81:e0:a5:
64:8e:ae:34:da:bb:21:d0:2a:70:bc:77:16:ad:4d:
79:50:e9:8b:80:02:c7:1e:70:fa:95:2b:0c:89:a8:
6c:d1:f8:9c:2a:24:48:ff:23:e5:18:b3:33:08:2c:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B4:D7:3E:71:43:75:B2:63:20:EC:FF:2C:3B:18:62:52:33:CB:D1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D409E53485DF11F18D04681C8EEE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.77.172.0/23
103.77.214.0/23
103.77.240.0/23
103.77.246.0/23
103.78.0.0/23
103.116.38.0/23
103.141.140.0/23
103.155.216.0/24
103.178.234.0/23
103.213.218.0/23
103.214.8.0/22
103.238.234.0/23
103.252.136.0/23
223.130.10.0/23
IPv6:
2001:df4:c340::/48
2001:df4:d880::/48
2400:ece0::/48
2401:1960::/48
2401:2420::/48
2401:3660::/48
2401:36a0::/48
2401:3760::/48
2401:37a0::/48
2401:3f20::/48
2401:45a0::/48
2405:19c0::/32
Signature Algorithm: sha256WithRSAEncryption
75:c0:cc:48:36:35:70:c2:40:0b:26:e7:30:46:7f:a8:97:ce:
38:d3:fd:7d:a1:99:a2:b8:87:3f:3b:07:75:69:c3:dd:61:1f:
81:c7:b1:62:86:17:65:a6:10:b7:2a:8f:39:56:31:c7:6f:52:
3d:e4:87:17:c2:31:bd:b0:9e:ba:36:2c:ff:c3:d3:3d:6e:1d:
6c:e9:4e:2d:61:27:09:07:27:54:11:df:3d:9c:e7:fb:2a:70:
cb:62:34:b0:2c:01:93:38:ac:e9:dd:27:e2:e4:82:dc:b4:f4:
e7:c8:b1:ad:8c:0c:25:9d:99:60:f6:fe:89:7f:83:42:f6:29:
28:81:a7:28:9f:33:fc:60:b4:52:ad:db:8f:20:ca:b0:b3:e8:
52:e3:52:aa:d7:c1:a3:08:b1:eb:51:6c:65:e1:98:eb:80:84:
32:0c:a8:7c:f8:9d:da:96:e2:55:a5:4f:17:44:b7:81:b6:0f:
bf:c6:28:42:e4:ec:43:4d:94:ac:58:d1:ea:c4:70:25:d3:e4:
c5:35:45:fc:9f:ec:d8:01:77:12:15:47:42:a3:33:de:f1:47:
da:3e:fd:be:8b:13:a5:43:9c:ff:f4:f1:e7:72:f0:32:b7:33:
47:be:a3:43:ee:fc:53:a5:9c:92:2a:16:7d:8b:7c:eb:b5:52:
c7:e0:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:55 2026 by rpki-client