Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/AB9A0D320D6011EDA50DFA25C4F9AE02.roa
File: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (raw, json)
Hash identifier: tJ8Z7JmN38ewagG4q09uJOSNlnpYV6I5xzkgsPx/uek=
Subject key identifier: 3F:A1:10:E2:6D:DC:4E:CB:36:FE:DC:32:15:65:6C:AB:77:26:CE:3F
Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Certificate serial: 354F
Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/AB9A0D320D6011EDA50DFA25C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:08:54 +0000
ROA not before: Mon 16 Jun 2025 15:10:36 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 10219
IP address blocks: 103.23.48.0/22 maxlen: 22
103.23.48.0/24 maxlen: 24
103.23.49.0/24 maxlen: 24
103.23.50.0/24 maxlen: 24
103.23.51.0/24 maxlen: 24
112.72.0.0/20 maxlen: 20
112.72.0.0/24 maxlen: 24
112.72.1.0/24 maxlen: 24
112.72.2.0/24 maxlen: 24
112.72.3.0/24 maxlen: 24
112.72.4.0/24 maxlen: 24
112.72.5.0/24 maxlen: 24
112.72.6.0/24 maxlen: 24
112.72.7.0/24 maxlen: 24
112.72.8.0/24 maxlen: 24
112.72.9.0/24 maxlen: 24
112.72.10.0/24 maxlen: 24
112.72.11.0/24 maxlen: 24
112.72.12.0/24 maxlen: 24
112.72.13.0/24 maxlen: 24
112.72.14.0/24 maxlen: 24
112.72.15.0/24 maxlen: 24
202.9.40.0/21 maxlen: 21
202.9.40.0/24 maxlen: 24
202.9.41.0/24 maxlen: 24
202.9.42.0/24 maxlen: 24
202.9.43.0/24 maxlen: 24
202.9.44.0/24 maxlen: 24
202.9.45.0/24 maxlen: 24
202.9.46.0/24 maxlen: 24
202.9.47.0/24 maxlen: 24
202.55.176.0/20 maxlen: 20
202.55.176.0/24 maxlen: 24
202.55.177.0/24 maxlen: 24
202.55.178.0/24 maxlen: 24
202.55.179.0/24 maxlen: 24
202.55.180.0/24 maxlen: 24
202.55.181.0/24 maxlen: 24
202.55.182.0/24 maxlen: 24
202.55.183.0/24 maxlen: 24
202.55.184.0/24 maxlen: 24
202.55.185.0/24 maxlen: 24
202.55.186.0/24 maxlen: 24
202.55.187.0/24 maxlen: 24
202.55.188.0/24 maxlen: 24
202.55.189.0/24 maxlen: 24
202.55.190.0/24 maxlen: 24
202.55.191.0/24 maxlen: 24
2405:ae00::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl
rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13647 (0x354f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Validity
Not Before: Jun 16 15:10:36 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58be6-0642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7d:2d:d6:57:09:7d:5b:0b:7d:25:b8:61:68:
d5:dd:e4:a5:d4:1f:f3:65:d0:ad:bc:61:b4:ee:6e:
31:b2:b3:3b:05:7d:ae:6a:52:e0:be:62:5a:d3:e1:
ee:08:0b:45:6f:7e:25:97:9e:f3:f1:89:88:7f:2c:
91:54:3b:e0:8b:b4:33:52:4c:71:29:51:e6:4d:9b:
bf:55:33:38:b1:9c:da:dc:6d:e7:d2:8f:8f:33:de:
bd:98:6d:5a:fd:c7:09:10:d8:9b:01:4a:78:12:b6:
63:2e:e3:9a:c2:bb:cb:bb:a5:b3:fc:a4:55:a1:91:
33:fb:76:1b:98:03:cc:ad:e7:89:ee:63:9d:21:7c:
3f:4a:d3:86:77:0e:ad:00:c5:83:7b:dd:59:5b:90:
77:37:f3:30:1c:14:37:0b:69:83:8d:af:6d:2b:c1:
32:68:b1:e5:41:84:0f:94:1c:a5:72:7e:60:3b:d8:
47:89:9b:95:e4:dc:46:7a:a5:08:16:97:44:0e:de:
db:92:c2:39:df:86:db:ef:f4:3d:dd:01:1a:e2:23:
2d:d4:1b:f0:af:01:76:c8:3e:f7:9f:e5:b2:cf:f7:
9d:d3:df:f2:a4:c3:f8:f2:08:0c:87:99:9d:fd:c9:
23:fa:29:57:79:2f:4a:9c:1f:ee:b3:1b:c1:40:f9:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A1:10:E2:6D:DC:4E:CB:36:FE:DC:32:15:65:6C:AB:77:26:CE:3F
X509v3 Authority Key Identifier:
keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/AB9A0D320D6011EDA50DFA25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.48.0/22
112.72.0.0/20
202.9.40.0/21
202.55.176.0/20
IPv6:
2405:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
83:6c:60:16:ef:cc:a5:39:a5:cd:f3:1d:5e:aa:23:aa:4a:42:
4a:83:5b:ec:b4:53:1f:66:3c:e8:70:26:49:d0:5c:c2:22:9d:
17:a0:e9:18:aa:c7:a9:5f:78:5f:82:a9:fd:24:89:fd:42:79:
24:2b:ee:ae:02:26:4a:d6:e0:15:2c:73:e9:a2:fe:34:56:07:
3d:29:a8:37:ed:62:df:68:e1:7c:71:61:96:da:4d:85:12:ea:
67:d1:be:ec:40:a4:33:e8:50:b8:02:69:13:7c:12:0b:e7:04:
d9:f8:92:88:1c:29:c6:bd:27:3b:59:d1:85:94:04:85:24:08:
28:72:71:1d:ba:66:9f:a3:d7:ef:c4:aa:d5:8c:b6:1e:97:46:
13:ed:d6:9f:b1:aa:d1:3c:08:dd:4f:4b:33:21:a0:cb:d7:46:
a5:35:f5:01:d3:87:aa:b6:1f:b7:1d:97:61:89:e2:45:bd:14:
c8:2a:c9:a9:41:b4:71:f6:4c:f1:19:aa:cc:80:50:c9:3a:6b:
0a:2f:19:22:a2:70:75:2e:46:cb:f8:9c:5a:87:61:c4:8e:54:
6a:09:fa:b8:ea:c7:41:aa:19:66:93:18:53:e5:95:68:55:45:
87:fe:4a:a4:45:50:82:c8:0b:a9:52:43:4b:fc:ba:b3:74:02:
f9:ba:0b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:40:58 2026 by rpki-client