Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/0B7CEEB07CC911F08411627BC4F9AE02.roa
File: 0B7CEEB07CC911F08411627BC4F9AE02.roa (raw, json)
Hash identifier: moQdwCzBlmNlAiw9paQMLtK3AmKfoNvZ1GhKXdVjzaI=
Subject key identifier: 90:8C:1F:82:08:E0:3E:30:AC:CF:1F:73:F6:BD:31:4E:5C:51:CE:9B
Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial: 04A2
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/0B7CEEB07CC911F08411627BC4F9AE02.roa
Signing time: Fri 30 Oct 2026 14:22:50 +0000
ROA not before: Fri 30 Oct 2026 14:22:50 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 203020
IP address blocks: 43.225.191.0/24 maxlen: 24
45.125.244.0/24 maxlen: 24
45.125.245.0/24 maxlen: 24
103.3.224.0/22 maxlen: 22
103.66.178.0/23 maxlen: 23
103.77.102.0/24 maxlen: 24
103.77.103.0/24 maxlen: 24
103.77.255.0/24 maxlen: 24
103.84.254.0/23 maxlen: 23
103.85.228.0/22 maxlen: 22
103.102.246.0/23 maxlen: 23
103.104.92.0/22 maxlen: 22
103.104.128.0/23 maxlen: 24
103.110.104.0/22 maxlen: 22
103.114.58.0/23 maxlen: 24
103.117.92.0/22 maxlen: 22
103.117.214.0/23 maxlen: 23
103.120.6.0/24 maxlen: 24
103.138.124.0/24 maxlen: 24
103.139.178.0/24 maxlen: 24
103.141.60.0/24 maxlen: 24
103.142.70.0/23 maxlen: 23
103.148.214.0/23 maxlen: 23
103.149.97.0/24 maxlen: 24
103.151.58.0/23 maxlen: 23
103.194.112.0/24 maxlen: 24
103.221.232.0/24 maxlen: 24
103.221.234.0/24 maxlen: 24
103.221.235.0/24 maxlen: 24
103.225.52.0/22 maxlen: 24
103.228.132.0/24 maxlen: 24
103.241.52.0/22 maxlen: 22
103.252.108.0/24 maxlen: 24
103.252.111.0/24 maxlen: 24
150.107.224.0/23 maxlen: 23
150.107.227.0/24 maxlen: 24
202.94.174.0/24 maxlen: 24
202.155.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 01:19:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1186 (0x4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Validity
Not Before: Oct 30 14:22:50 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ae4a83a-843d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:21:fd:da:d0:09:18:7e:ee:55:bb:62:0e:2e:
85:e5:f4:8b:0a:4d:01:96:6d:9e:d4:5a:e9:1e:ad:
80:3f:a7:3c:04:7e:ec:c2:2a:e3:f3:7c:f6:52:04:
98:85:b2:cc:73:4e:25:ce:02:5e:4b:6b:af:b3:bc:
c1:85:b6:f6:d9:fa:2c:bd:14:4e:75:47:2b:fb:fa:
1d:03:f2:58:b1:c4:e6:0a:2b:c9:e7:71:07:3f:95:
6c:7c:f3:ba:d3:e9:a4:77:35:41:9f:f4:09:10:b5:
a1:3d:94:d0:14:c9:59:6d:d0:7b:60:7a:59:38:a5:
2c:3d:30:73:3d:e1:32:12:98:aa:91:d3:42:20:4c:
c4:be:9f:19:b7:12:a2:ad:2c:ac:f9:a1:25:f6:7d:
47:2a:44:1e:cf:68:8c:be:a7:d9:ef:cf:3e:62:62:
d6:f7:4e:17:1d:49:bf:dc:71:89:a1:ac:89:b7:d0:
a4:1d:03:99:36:a0:66:24:c8:49:8f:13:7f:ca:da:
4b:d1:1b:28:a7:be:62:06:46:a0:ad:9e:f3:67:4b:
6a:94:03:22:fe:cd:b4:b2:e6:a3:3e:0f:96:8e:a9:
f7:35:8a:2c:2c:2d:7c:c9:c4:cf:99:6b:42:2d:17:
53:57:3b:dc:41:c3:9d:b3:47:27:ff:c6:05:f5:c5:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8C:1F:82:08:E0:3E:30:AC:CF:1F:73:F6:BD:31:4E:5C:51:CE:9B
X509v3 Authority Key Identifier:
keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/0B7CEEB07CC911F08411627BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.191.0/24
45.125.244.0/23
103.3.224.0/22
103.66.178.0/23
103.77.102.0/23
103.77.255.0/24
103.84.254.0/23
103.85.228.0/22
103.102.246.0/23
103.104.92.0/22
103.104.128.0/23
103.110.104.0/22
103.114.58.0/23
103.117.92.0/22
103.117.214.0/23
103.120.6.0/24
103.138.124.0/24
103.139.178.0/24
103.141.60.0/24
103.142.70.0/23
103.148.214.0/23
103.149.97.0/24
103.151.58.0/23
103.194.112.0/24
103.221.232.0/24
103.221.234.0/23
103.225.52.0/22
103.228.132.0/24
103.241.52.0/22
103.252.108.0/24
103.252.111.0/24
150.107.224.0/23
150.107.227.0/24
202.94.174.0/24
202.155.186.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:00:f7:cc:77:f0:da:dd:10:f6:b9:3c:6f:04:60:3e:32:ba:
db:3b:5e:0f:b0:76:df:cd:01:c9:5d:c3:00:8b:a0:96:e8:67:
27:69:c7:7a:f7:25:58:a0:4e:d4:33:0c:8b:20:fa:77:23:81:
30:18:2c:5a:d1:5c:8d:60:f8:00:1c:b4:73:73:61:93:6c:22:
e4:53:da:01:47:02:44:84:01:ac:a2:1b:fa:71:2d:84:4f:c3:
8e:a1:6f:d9:cb:72:26:16:e0:ef:ea:ae:d7:bb:ad:da:d2:ee:
ef:e9:b7:be:97:da:55:c4:b2:fe:81:1c:ee:35:d9:3e:44:c9:
7b:67:2e:5f:2d:0c:8e:79:c3:9e:5b:7a:89:c2:60:fa:b4:65:
6c:df:20:a2:73:96:16:05:c8:7f:1a:3a:56:31:61:90:22:28:
15:9a:8c:c5:ef:46:a9:4f:71:75:03:35:49:e5:f9:ef:02:f2:
0f:f8:4c:d6:74:93:62:99:92:37:f3:5f:7d:64:39:09:60:4d:
d2:84:72:0c:a3:e9:41:49:85:77:37:91:cc:aa:24:ee:7e:c0:
98:34:40:44:d9:2b:d2:39:0f:49:9e:43:67:f1:bf:11:71:11:
60:1d:49:b8:ac:65:50:e8:54:3b:a7:89:f5:31:17:89:ff:71:
95:2b:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:47:01 2026 by rpki-client