Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa
File: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (raw, json)
Hash identifier: T30sMzZH4Abydwi4UNKY0/Wj2XuOOa+/JM841poURBU=
Subject key identifier: 5F:CA:D1:F2:66:8C:89:2A:D2:23:D6:3C:31:72:DC:2A:91:95:9A:C0
Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial: 0CFB
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 19:22:23 +0000
ROA not before: Mon 02 Mar 2026 19:22:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136224
IP address blocks: 103.84.36.0/22 maxlen: 22
103.84.36.0/23 maxlen: 23
103.84.36.0/24 maxlen: 24
103.84.37.0/24 maxlen: 24
103.84.38.0/23 maxlen: 23
103.84.38.0/24 maxlen: 24
103.84.39.0/24 maxlen: 24
113.212.108.0/22 maxlen: 22
113.212.108.0/23 maxlen: 23
113.212.108.0/24 maxlen: 24
113.212.109.0/24 maxlen: 24
113.212.110.0/23 maxlen: 23
113.212.110.0/24 maxlen: 24
113.212.111.0/24 maxlen: 24
2400:9940:5::/48 maxlen: 48
2400:9940:1000::/36 maxlen: 40
2400:9940:1000::/48 maxlen: 48
2400:9940:1001::/48 maxlen: 48
2400:9940:1002::/48 maxlen: 48
2400:9940:1003::/48 maxlen: 48
2400:9940:1004::/48 maxlen: 48
2400:9940:1100::/48 maxlen: 48
2400:9940:1101::/48 maxlen: 48
2400:9940:1102::/48 maxlen: 48
2400:9940:1103::/48 maxlen: 48
2400:9940:1104::/48 maxlen: 48
2400:9940:1137::/48 maxlen: 48
2400:9940:1138::/48 maxlen: 48
2400:9940:1139::/48 maxlen: 48
2400:9940:1142::/48 maxlen: 48
2400:9940:1143::/48 maxlen: 48
2400:9940:1144::/48 maxlen: 48
2400:9940:1145::/48 maxlen: 48
2400:9940:1146::/48 maxlen: 48
2400:9940:1147::/48 maxlen: 48
2400:9940:1200::/48 maxlen: 48
2400:9940:1201::/48 maxlen: 48
2400:9940:1202::/48 maxlen: 48
2400:9940:1203::/48 maxlen: 48
2400:9940:1204::/48 maxlen: 48
2400:9940:1300::/48 maxlen: 48
2400:9940:1301::/48 maxlen: 48
2400:9940:1302::/48 maxlen: 48
2400:9940:1303::/48 maxlen: 48
2400:9940:1304::/48 maxlen: 48
2400:9940:1400::/48 maxlen: 48
2400:9940:1401::/48 maxlen: 48
2400:9940:1402::/48 maxlen: 48
2400:9940:1403::/48 maxlen: 48
2400:9940:1404::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3323 (0xcfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Validity
Not Before: Mar 2 19:22:23 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5e36f-ef61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:74:0d:55:24:ff:48:b1:b6:e5:ab:11:54:88:
d3:19:55:41:44:d0:82:92:16:09:7c:a6:4b:52:fb:
85:a5:eb:34:fd:fa:60:1a:4d:bf:5f:94:da:3d:e9:
63:80:d9:eb:93:d4:ee:42:d9:08:f1:2b:70:4f:9e:
8a:cc:a3:20:e2:f5:f6:b1:ed:0b:a8:ea:fb:80:e6:
7d:d3:29:e7:d0:c9:69:aa:8a:25:0d:eb:fe:30:9e:
7e:08:63:8f:e1:fa:1f:5f:be:49:e6:e7:31:1e:93:
24:82:f4:13:ae:e5:41:8f:02:8e:87:f1:f6:ee:c1:
54:c7:06:6c:2e:b0:dd:2d:7d:99:df:9a:6b:a7:bf:
50:a6:43:ea:b6:54:b9:c6:5d:1d:3a:65:22:1c:3e:
b7:85:9c:31:17:94:fe:5d:9b:e9:fd:ca:a5:db:39:
2d:d4:39:a5:57:6e:36:7f:3a:5d:73:3d:19:76:61:
53:02:3f:73:c5:0c:3f:5c:76:14:6b:ce:bc:25:9c:
9c:8b:cb:61:94:43:b4:74:f3:29:2d:63:63:6b:77:
02:88:5d:fd:65:1b:54:2c:f8:a2:18:45:da:d7:b7:
cb:00:0c:bc:15:f5:e0:87:c0:68:2c:b7:66:a2:54:
9d:a2:3b:15:aa:86:69:52:5e:86:ca:ae:7c:10:0c:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CA:D1:F2:66:8C:89:2A:D2:23:D6:3C:31:72:DC:2A:91:95:9A:C0
X509v3 Authority Key Identifier:
keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.36.0/22
113.212.108.0/22
IPv6:
2400:9940:5::/48
2400:9940:1000::/36
Signature Algorithm: sha256WithRSAEncryption
97:1c:64:f5:b9:4c:c3:dc:c8:36:fb:bf:f4:d9:e5:85:7f:1f:
3a:33:48:d8:e6:62:b8:80:03:6b:d4:7c:b4:27:d8:18:c1:17:
04:89:f1:e3:f4:13:88:82:f3:5a:1d:1c:be:35:27:18:ed:bc:
77:d5:68:7c:2a:29:87:06:d1:e8:08:74:78:d6:13:e9:21:82:
76:18:b5:94:98:54:30:ed:a1:05:64:28:49:6b:ff:1b:d2:4c:
e1:9a:83:d2:b2:4a:89:84:f8:d3:ab:83:ba:9a:5c:30:2e:80:
c1:ac:99:9c:86:08:3a:ca:63:35:16:8b:90:5c:ad:a5:cf:e3:
30:03:d8:84:cd:9d:14:58:e4:24:3d:80:11:ee:09:bf:54:0d:
59:2f:a5:32:cb:56:98:2b:25:b7:c2:9a:b0:cb:10:fe:8c:88:
69:aa:d8:cf:4c:b2:c8:1b:aa:cc:59:c6:28:b4:49:d8:26:43:
41:9c:e5:97:a4:ed:49:8c:be:35:74:e3:15:06:f1:ae:37:2b:
82:32:ea:14:e2:ef:9c:0c:56:47:14:e7:25:6e:d0:42:0a:ab:
2a:39:1a:db:b7:a9:95:ed:95:cc:f6:da:a6:b4:22:d9:51:a2:
57:19:d9:28:3c:35:61:ee:8a:85:70:cf:9e:6d:af:a0:5a:0d:
e5:a2:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:16 2026 by rpki-client