Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/9ED84B886EC111F19289006667A30FBC.roa
File: 9ED84B886EC111F19289006667A30FBC.roa (raw, json)
Hash identifier: hd1ZU6/Fnutera66ZXCD8DJsTN9KMedFIbuKf7ICHXM=
Subject key identifier: D3:FA:97:B8:1E:45:23:25:32:E3:F0:D8:8B:FE:06:71:5A:58:7F:8E
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 374F
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/9ED84B886EC111F19289006667A30FBC.roa
Signing time: Tue 23 Jun 2026 05:08:50 +0000
ROA not before: Tue 23 Jun 2026 05:08:50 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 23750
IP address blocks: 103.207.86.0/24 maxlen: 24
103.207.87.0/24 maxlen: 24
116.90.100.0/24 maxlen: 24
116.90.106.0/24 maxlen: 24
116.90.107.0/24 maxlen: 24
116.90.108.0/24 maxlen: 24
116.90.109.0/24 maxlen: 24
116.90.110.0/24 maxlen: 24
116.90.111.0/24 maxlen: 24
116.90.120.0/24 maxlen: 24
116.90.123.0/24 maxlen: 24
116.90.124.0/24 maxlen: 24
116.90.125.0/24 maxlen: 24
116.90.126.0/24 maxlen: 24
116.90.127.0/24 maxlen: 24
121.46.65.0/24 maxlen: 24
121.46.66.0/24 maxlen: 24
202.69.32.0/24 maxlen: 24
202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.35.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.37.0/24 maxlen: 24
202.69.38.0/24 maxlen: 24
202.69.39.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.44.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
202.69.48.0/24 maxlen: 24
202.69.49.0/24 maxlen: 24
202.69.50.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.69.52.0/24 maxlen: 24
202.69.53.0/24 maxlen: 24
202.69.54.0/24 maxlen: 24
202.69.55.0/24 maxlen: 24
202.69.56.0/24 maxlen: 24
202.69.57.0/24 maxlen: 24
202.69.58.0/24 maxlen: 24
202.69.59.0/24 maxlen: 24
202.69.60.0/24 maxlen: 24
202.69.61.0/24 maxlen: 24
202.69.62.0/24 maxlen: 24
202.69.63.0/24 maxlen: 24
202.142.144.0/24 maxlen: 24
202.142.145.0/24 maxlen: 24
202.142.146.0/24 maxlen: 24
202.142.147.0/24 maxlen: 24
202.142.148.0/24 maxlen: 24
202.142.149.0/24 maxlen: 24
202.142.150.0/24 maxlen: 24
202.142.152.0/24 maxlen: 24
202.142.153.0/24 maxlen: 24
202.142.154.0/24 maxlen: 24
202.142.156.0/24 maxlen: 24
202.142.157.0/24 maxlen: 24
202.142.158.0/24 maxlen: 24
202.142.159.0/24 maxlen: 24
2406:ac00:1::/48 maxlen: 48
2406:ac00:2::/48 maxlen: 48
2406:ac00:203::/48 maxlen: 48
2406:ac00:204::/48 maxlen: 48
2406:ac00:205::/48 maxlen: 48
2406:ac00:206::/48 maxlen: 48
2406:ac00:207::/48 maxlen: 48
2406:ac00:208::/48 maxlen: 48
2406:ac00:209::/48 maxlen: 48
2406:ac00:300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14159 (0x374f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Jun 23 05:08:50 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a3a14e2-4156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:f0:92:18:f4:71:7f:16:9e:b7:69:cb:2c:
82:be:b1:96:dd:c9:b8:19:f0:cd:4c:c6:5f:69:73:
61:d9:82:17:fd:ef:ba:b5:ac:59:44:96:75:e3:2f:
0e:99:7c:17:87:2f:3a:6b:12:63:ad:45:01:08:a9:
f2:8a:0a:41:71:19:11:ee:46:c6:0a:32:d5:cd:1a:
1d:45:4f:b4:21:0a:53:38:a4:1f:af:3b:c7:52:83:
30:69:ef:f1:fe:94:28:17:bb:72:57:f3:6a:9a:14:
02:78:19:3f:e9:86:7d:10:1c:1a:28:3f:dc:6b:d5:
c3:5a:ae:e1:db:6e:dd:69:ac:f2:f1:38:fe:57:12:
c8:62:78:64:69:f5:1b:b2:60:f8:f0:1e:f9:59:3f:
b3:3a:d5:c5:18:54:1e:ef:21:f2:84:35:ac:33:e7:
de:09:48:2b:1c:d6:64:05:51:f1:dc:fe:cd:dd:80:
38:95:45:77:8a:fb:37:9b:87:40:bd:55:85:ae:27:
27:31:85:5d:16:d6:10:6c:ad:99:bf:d5:ce:57:67:
b8:4e:eb:78:15:8a:4c:f9:9b:d9:09:ab:b5:66:90:
c1:31:96:85:18:1a:27:16:00:c2:d0:d2:e6:22:c2:
32:cb:a3:32:41:a8:03:64:05:67:0c:89:76:6f:a5:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FA:97:B8:1E:45:23:25:32:E3:F0:D8:8B:FE:06:71:5A:58:7F:8E
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/9ED84B886EC111F19289006667A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.207.86.0/23
116.90.100.0/24
116.90.106.0-116.90.111.255
116.90.120.0/24
116.90.123.0-116.90.127.255
121.46.65.0-121.46.66.255
202.69.32.0/19
202.142.144.0-202.142.150.255
202.142.152.0-202.142.154.255
202.142.156.0/22
IPv6:
2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff
2406:ac00:203::-2406:ac00:209:ffff:ffff:ffff:ffff:ffff
2406:ac00:300::/48
Signature Algorithm: sha256WithRSAEncryption
2d:d9:bd:62:de:b3:fc:5a:bf:3f:aa:ed:a6:1c:48:5f:60:42:
95:c0:ea:e9:fe:64:fb:59:81:6d:a4:0c:e3:d6:cf:d4:e5:a4:
db:a9:fc:a9:75:db:99:3d:f8:13:15:61:5b:33:c0:a8:0b:d2:
27:5d:6b:a8:81:72:81:40:7e:c0:dc:fe:15:94:9e:f0:b4:8b:
fe:98:f0:c1:f2:59:81:84:38:72:a1:38:01:c2:f2:ac:36:1b:
f7:5b:30:c5:68:46:16:15:65:12:3c:5c:ce:db:17:56:4d:51:
93:ab:ec:cc:5c:e6:db:b4:0c:99:7c:a0:97:9d:a0:6a:d8:56:
96:28:b8:6d:8a:a0:f9:f3:41:34:39:a5:b6:c6:69:41:56:f7:
9f:ae:59:c0:37:5e:77:bf:70:71:66:82:f3:6a:87:56:94:b0:
ee:bd:8a:81:1c:d3:e0:6e:84:dc:70:8f:a6:b4:65:c8:35:ad:
04:99:e6:97:6f:22:84:2b:95:e3:44:01:3e:20:36:8e:5f:08:
4f:c7:16:e0:24:e3:8e:f8:f3:9e:54:86:6a:e2:d7:48:7f:93:
1f:c6:43:ff:fd:d2:9e:65:2c:8b:1b:21:bd:d5:b7:fa:47:1b:
8d:56:f7:1d:77:c2:b5:a9:f7:fb:6a:24:d7:d6:10:c0:35:98:
fc:a7:d8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:27 2026 by rpki-client