Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa
File: CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa (raw, json)
Hash identifier: tJs9SwDCGC0f70nRnoPvibKTDUIggxVdaWkB676t5eI=
Subject key identifier: B4:EE:C8:6D:6F:0C:FE:F3:97:98:61:4B:70:CC:5D:4F:5C:7B:59:19
Certificate issuer: /CN=A91B6EB1/serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Certificate serial: 0C29
Authority key identifier: C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:25:42 +0000
ROA not before: Fri 28 Mar 2025 19:30:47 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136395
IP address blocks: 103.86.108.0/22 maxlen: 22
103.86.108.0/23 maxlen: 23
103.86.108.0/24 maxlen: 24
103.86.109.0/24 maxlen: 24
103.86.110.0/24 maxlen: 24
103.86.111.0/24 maxlen: 24
202.181.4.0/22 maxlen: 22
202.181.4.0/23 maxlen: 23
202.181.4.0/24 maxlen: 24
202.181.5.0/24 maxlen: 24
202.181.6.0/23 maxlen: 23
202.181.6.0/24 maxlen: 24
202.181.7.0/24 maxlen: 24
2400:bcc0::/32 maxlen: 32
2400:bcc0::/36 maxlen: 36
2400:bcc0:1::/48 maxlen: 48
2400:bcc0:2::/48 maxlen: 48
2400:bcc0:3::/48 maxlen: 48
2400:bcc0:4::/48 maxlen: 48
2400:bcc0:9::/48 maxlen: 48
2400:bcc0:1000::/36 maxlen: 36
2400:bcc0:1000::/48 maxlen: 48
2400:bcc0:1001::/48 maxlen: 48
2400:bcc0:1002::/48 maxlen: 48
2400:bcc0:1003::/48 maxlen: 48
2400:bcc0:1004::/48 maxlen: 48
2400:bcc0:1005::/48 maxlen: 48
2400:bcc0:1006::/48 maxlen: 48
2400:bcc0:1007::/48 maxlen: 48
2400:bcc0:1008::/48 maxlen: 48
2400:bcc0:1009::/48 maxlen: 48
2400:bcc0:100a::/48 maxlen: 48
2400:bcc0:100b::/48 maxlen: 48
2400:bcc0:100c::/48 maxlen: 48
2400:bcc0:1010::/48 maxlen: 48
2400:bcc0:1011::/48 maxlen: 48
2400:bcc0:1016::/48 maxlen: 48
2400:bcc0:1017::/48 maxlen: 48
2400:bcc0:101c::/48 maxlen: 48
2400:bcc0:101d::/48 maxlen: 48
2400:bcc0:1022::/48 maxlen: 48
2400:bcc0:1023::/48 maxlen: 48
2400:bcc0:1028::/48 maxlen: 48
2400:bcc0:1029::/48 maxlen: 48
2400:bcc0:102e::/48 maxlen: 48
2400:bcc0:1033::/48 maxlen: 48
2400:bcc0:1034::/48 maxlen: 48
2400:bcc0:2000::/36 maxlen: 36
2400:bcc0:3000::/36 maxlen: 36
2400:bcc0:3001::/48 maxlen: 48
2400:bcc0:3002::/48 maxlen: 48
2400:bcc0:3003::/48 maxlen: 48
2400:bcc0:3004::/48 maxlen: 48
2400:bcc0:3005::/48 maxlen: 48
2400:bcc0:3006::/48 maxlen: 48
2400:bcc0:300b::/48 maxlen: 48
2400:bcc0:300c::/48 maxlen: 48
2400:bcc0:3010::/48 maxlen: 48
2400:bcc0:3011::/48 maxlen: 48
2400:bcc0:3016::/48 maxlen: 48
2400:bcc0:3017::/48 maxlen: 48
2400:bcc0:301c::/48 maxlen: 48
2400:bcc0:301d::/48 maxlen: 48
2400:bcc0:3022::/48 maxlen: 48
2400:bcc0:3023::/48 maxlen: 48
2400:bcc0:3028::/48 maxlen: 48
2400:bcc0:3029::/48 maxlen: 48
2400:bcc0:302e::/48 maxlen: 48
2400:bcc0:4000::/36 maxlen: 36
2400:bcc0:5000::/36 maxlen: 36
2400:bcc0:6000::/36 maxlen: 36
2400:bcc0:7000::/36 maxlen: 36
2400:bcc0:8000::/36 maxlen: 36
2400:bcc0:9000::/36 maxlen: 36
2400:bcc0:a000::/36 maxlen: 36
2400:bcc0:b000::/36 maxlen: 36
2400:bcc0:c000::/36 maxlen: 36
2400:bcc0:d000::/36 maxlen: 36
2400:bcc0:e000::/36 maxlen: 36
2400:bcc0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3113 (0xc29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6EB1, serialNumber=C28879FEC10CE929C1CF2E5B97886F1D7EA17C5A
Validity
Not Before: Mar 28 19:30:47 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40616-6b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:0f:3b:44:84:fb:27:3e:e8:10:80:f3:45:
95:a6:de:e7:04:b6:91:d0:e3:a9:57:b4:0b:b9:00:
05:e2:d9:c1:15:80:44:89:e9:84:a0:ac:e3:50:15:
5c:8c:81:5a:e6:f4:dd:55:7f:f8:8e:38:67:d5:31:
d1:f3:5a:51:12:66:bc:dd:81:bd:fb:80:29:0b:1d:
59:2f:29:ea:4b:08:52:04:fc:6d:56:51:bb:56:68:
33:8f:e2:a1:f5:bd:18:f9:74:60:1c:ad:ff:a0:d4:
cf:ce:9a:de:51:b2:09:22:71:86:b2:f0:8e:07:50:
bb:bf:e4:3b:fa:d6:56:4e:93:45:90:12:9a:5b:be:
a6:97:9a:9e:1a:1f:33:57:09:c3:e8:64:ac:45:87:
89:9f:c9:c8:9f:9f:01:02:8e:02:a0:f8:be:52:44:
78:fa:a3:a3:5e:c6:af:08:53:ac:9f:ed:cb:66:0b:
c1:e1:da:be:a2:11:8e:1e:d4:5b:7e:48:65:8b:b8:
03:d2:2b:ab:93:7b:bd:1e:75:cc:6d:4c:6d:af:71:
d9:1b:de:88:51:5e:14:02:5f:19:c2:c1:be:e3:97:
85:a4:c3:2a:b2:1e:fc:1a:3e:20:96:d1:f9:7b:48:
be:d9:bb:41:31:ed:65:2d:d0:87:05:8e:3c:f4:09:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EE:C8:6D:6F:0C:FE:F3:97:98:61:4B:70:CC:5D:4F:5C:7B:59:19
X509v3 Authority Key Identifier:
keyid:C2:88:79:FE:C1:0C:E9:29:C1:CF:2E:5B:97:88:6F:1D:7E:A1:7C:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/woh5_sEM6SnBzy5bl4hvHX6hfFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woh5_sEM6SnBzy5bl4hvHX6hfFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6EB1/4C5F720831F311EAA0A96876C4F9AE02/CEC1F8CEBCDD11EDA890C37EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.108.0/22
202.181.4.0/22
IPv6:
2400:bcc0::/32
Signature Algorithm: sha256WithRSAEncryption
27:62:ca:cd:08:da:8f:50:f5:75:83:e1:a2:d6:ba:f0:17:fc:
73:46:8a:c0:86:9a:5f:ca:85:6b:29:ac:38:13:ac:53:7d:61:
53:1c:30:bb:e5:23:45:99:1a:88:0f:32:67:81:ea:9a:66:07:
95:18:5d:fb:8b:ad:32:74:22:ab:76:a8:75:0b:27:42:0d:89:
d6:a3:4f:2a:21:01:03:8a:f9:73:2a:94:6f:d4:f2:8c:39:ac:
17:af:61:47:fa:a0:8c:08:b2:a6:79:a1:64:7b:f3:41:48:11:
8b:0f:fa:17:08:1d:39:d1:e4:87:8b:1f:ff:95:fc:02:42:f7:
35:b1:40:18:5c:a7:a0:9a:e8:12:8f:c5:57:82:39:6f:7a:ee:
0c:a2:04:9f:38:cd:2c:9c:24:4a:1b:1d:c1:c9:64:27:ce:18:
dc:f7:45:90:98:a0:f2:c4:bf:09:a0:5d:19:ab:d8:c5:5e:5b:
e6:0d:49:af:b1:c1:07:fd:25:a6:ea:71:5c:31:13:8e:92:ac:
cd:b8:eb:40:92:1e:13:77:e8:68:ca:3d:e7:b7:8f:1f:4a:32:
c4:1e:8d:2c:b0:ec:61:83:4e:cc:3c:1d:7f:13:61:35:7a:59:
97:77:6c:a1:17:be:77:4a:64:f2:1b:f5:cb:13:db:57:52:09:
8a:7b:18:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:23 2026 by rpki-client