Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/8F330FF0A1E411F1BF95BE383A11F970.roa
File: 8F330FF0A1E411F1BF95BE383A11F970.roa (raw, json)
Hash identifier: tYDjSWkia27mFMQe+2AcR+zDrq7uBYB5y+FfzQMzZoI=
Subject key identifier: 42:F1:22:B4:9C:34:E6:48:DB:5F:EA:0F:E3:A2:AC:D3:6B:56:67:73
Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial: 36EF
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/8F330FF0A1E411F1BF95BE383A11F970.roa
Signing time: Tue 06 Oct 2026 12:06:08 +0000
ROA not before: Tue 06 Oct 2026 12:06:08 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132608
IP address blocks: 103.248.204.0/22 maxlen: 23
103.248.204.0/24 maxlen: 24
103.248.205.0/24 maxlen: 24
103.248.206.0/24 maxlen: 24
103.248.207.0/24 maxlen: 24
114.130.4.0/23 maxlen: 23
114.130.4.0/24 maxlen: 24
114.130.5.0/24 maxlen: 24
114.130.8.0/24 maxlen: 24
114.130.10.0/24 maxlen: 24
114.130.31.0/24 maxlen: 24
114.130.36.0/22 maxlen: 22
114.130.36.0/24 maxlen: 24
114.130.37.0/24 maxlen: 24
114.130.41.0/24 maxlen: 24
114.130.51.0/24 maxlen: 24
114.130.52.0/23 maxlen: 24
114.130.56.0/23 maxlen: 23
114.130.58.0/24 maxlen: 24
114.130.68.0/24 maxlen: 24
114.130.71.0/24 maxlen: 24
114.130.74.0/23 maxlen: 24
114.130.76.0/23 maxlen: 24
114.130.80.0/24 maxlen: 24
114.130.81.0/24 maxlen: 24
114.130.83.0/24 maxlen: 24
114.130.84.0/24 maxlen: 24
114.130.85.0/24 maxlen: 24
114.130.86.0/24 maxlen: 24
114.130.89.0/24 maxlen: 24
114.130.92.0/23 maxlen: 24
114.130.94.0/24 maxlen: 24
114.130.95.0/24 maxlen: 24
114.130.96.0/23 maxlen: 24
114.130.98.0/23 maxlen: 24
114.130.120.0/24 maxlen: 24
114.130.223.0/24 maxlen: 24
2403:ec00:45::/48 maxlen: 48
2403:ec00:f000::/36 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14063 (0x36ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AABB1, serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Validity
Not Before: Oct 6 12:06:08 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ac4e430-f57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:bb:cb:a8:d5:fb:74:41:ae:9b:25:97:58:
aa:e4:ed:f0:2b:70:81:73:6f:a5:be:35:d2:6b:0a:
3f:8b:83:73:c5:ca:fb:ec:3e:85:65:04:cf:e3:a5:
d2:89:e6:13:7e:67:93:9d:07:21:3f:56:ae:0f:d0:
94:8f:bb:82:97:6a:71:f3:3d:52:98:c4:f3:10:ef:
53:a8:71:82:20:8a:73:94:ec:0c:ac:2a:02:ab:71:
ab:97:40:5f:f5:e7:47:c8:f7:05:6b:11:3b:af:c9:
89:fc:62:57:46:e2:6b:7c:7b:08:b3:2c:ea:53:6d:
fa:71:dd:61:01:b0:d2:93:e4:cc:18:f8:17:54:7e:
22:b8:35:50:92:0b:a4:ec:10:10:c9:eb:d1:38:9c:
c8:73:ac:e7:81:48:90:a2:2e:b1:90:ce:d6:64:a2:
3d:60:cd:01:5d:3c:16:5b:c4:93:83:42:bf:4e:84:
72:be:12:d2:d6:1a:b7:04:af:b3:33:b7:64:a1:15:
d9:34:1b:cd:d7:a9:8b:97:09:4e:b2:02:82:d6:30:
99:10:e4:72:56:a3:d5:9a:9b:77:e2:35:53:e3:c7:
f7:4a:90:71:a8:c1:db:77:2e:2f:1e:c0:05:2b:af:
94:15:b8:50:9c:1e:3b:11:bf:94:65:f2:87:c8:3e:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F1:22:B4:9C:34:E6:48:DB:5F:EA:0F:E3:A2:AC:D3:6B:56:67:73
X509v3 Authority Key Identifier:
keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/8F330FF0A1E411F1BF95BE383A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.248.204.0/22
114.130.4.0/23
114.130.8.0/24
114.130.10.0/24
114.130.31.0/24
114.130.36.0/22
114.130.41.0/24
114.130.51.0-114.130.53.255
114.130.56.0-114.130.58.255
114.130.68.0/24
114.130.71.0/24
114.130.74.0-114.130.77.255
114.130.80.0/23
114.130.83.0-114.130.86.255
114.130.89.0/24
114.130.92.0-114.130.99.255
114.130.120.0/24
114.130.223.0/24
IPv6:
2403:ec00:45::/48
2403:ec00:f000::/36
Signature Algorithm: sha256WithRSAEncryption
61:af:c3:c4:35:cd:69:9e:3e:62:ea:0b:ab:4f:8a:2b:c9:a0:
33:e8:b2:e4:c8:bc:85:5d:4d:e3:7a:e5:89:c7:3b:d0:9d:23:
9d:1f:98:f5:dc:e7:bb:15:ea:85:97:f3:7c:1f:24:12:42:47:
2b:d1:2d:e4:2b:58:a2:37:29:2b:bd:59:43:10:66:75:d0:d2:
0f:ac:cf:bb:60:e8:73:d7:a2:3f:67:b9:cb:13:fb:55:51:d9:
25:07:3a:1b:41:b2:07:ad:04:2b:69:9d:3b:93:c7:10:02:e8:
77:41:c6:a2:ab:48:25:3b:95:39:06:77:7d:c7:6d:c5:1c:3d:
19:65:64:d9:09:d0:13:70:37:c2:5b:11:7b:13:9c:8c:0b:15:
08:70:e1:61:03:56:87:e4:90:0c:55:e3:85:d8:21:da:08:69:
36:8d:1b:7e:81:66:89:23:d3:1a:0d:30:cf:41:bf:01:aa:4a:
8c:b2:47:c4:97:96:a2:5f:9e:8d:b1:0a:d2:4c:d0:c0:25:c7:
0c:66:87:1a:78:31:80:aa:8a:5b:a5:c4:b8:72:8b:15:32:5f:
72:05:55:9b:b5:09:6a:43:88:25:a5:03:98:69:5d:33:18:3c:
6f:85:6f:8d:68:cf:b9:ce:39:56:5b:62:1f:2d:de:ea:d9:ce:
0f:7e:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:49:43 2026 by rpki-client