Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/6954A6281D1811F1BB26F0200F3D8C67.roa
File: 6954A6281D1811F1BB26F0200F3D8C67.roa (raw, json)
Hash identifier: MflmYnapzVVeRGAplynCMf3VUC0+n3ittdmrcITSfa4=
Subject key identifier: B6:A3:7C:05:67:7A:6E:1D:46:30:31:6D:CA:E4:FB:00:CE:1A:1E:25
Certificate issuer: /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial: 06C3
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/6954A6281D1811F1BB26F0200F3D8C67.roa
Signing time: Mon 06 Jul 2026 12:09:04 +0000
ROA not before: Mon 06 Jul 2026 12:09:04 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 13150
IP address blocks: 103.203.220.0/24 maxlen: 24
103.203.221.0/24 maxlen: 24
103.203.222.0/24 maxlen: 24
103.203.223.0/24 maxlen: 24
113.30.128.0/24 maxlen: 24
113.30.130.0/24 maxlen: 24
113.30.131.0/24 maxlen: 24
113.30.132.0/24 maxlen: 24
113.30.133.0/24 maxlen: 24
113.30.134.0/24 maxlen: 24
113.30.135.0/24 maxlen: 24
113.30.136.0/24 maxlen: 24
113.30.137.0/24 maxlen: 24
113.30.138.0/24 maxlen: 24
113.30.139.0/24 maxlen: 24
113.30.140.0/24 maxlen: 24
123.253.152.0/24 maxlen: 24
123.253.153.0/24 maxlen: 24
123.253.154.0/24 maxlen: 24
123.253.155.0/24 maxlen: 24
150.195.208.0/24 maxlen: 24
150.195.209.0/24 maxlen: 24
150.195.210.0/24 maxlen: 24
150.195.211.0/24 maxlen: 24
150.195.212.0/24 maxlen: 24
150.195.214.0/24 maxlen: 24
150.195.217.0/24 maxlen: 24
150.195.218.0/24 maxlen: 24
150.195.219.0/24 maxlen: 24
150.195.220.0/24 maxlen: 24
150.195.221.0/24 maxlen: 24
150.195.222.0/24 maxlen: 24
150.195.223.0/24 maxlen: 24
202.75.240.0/24 maxlen: 24
202.75.242.0/24 maxlen: 24
202.75.243.0/24 maxlen: 24
202.75.244.0/24 maxlen: 24
202.75.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731 (0x6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Validity
Not Before: Jul 6 12:09:04 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a4b9ae0-57f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:08:99:21:31:0d:32:db:c0:6f:2d:64:74:
6f:72:bb:dc:57:a7:81:87:68:15:4a:30:7a:05:66:
ba:20:61:68:5a:a7:86:ad:31:2e:36:2d:3b:3d:cb:
78:63:7e:5c:02:b9:f5:90:c5:de:93:ed:71:0f:97:
79:3d:d7:61:4f:fe:ad:a8:5a:25:94:19:7e:00:d8:
3d:72:5d:49:1d:e3:63:92:89:69:db:8e:9a:95:65:
b2:d9:80:eb:b4:53:83:76:e2:9a:63:e2:a8:e6:57:
c5:46:4d:ee:17:07:28:32:4b:40:1c:eb:71:d6:c5:
9f:fe:4e:2f:8b:50:fc:af:d8:d6:92:34:2d:59:26:
b9:27:11:3e:26:3b:33:15:d0:9d:59:d2:9e:0d:75:
37:ad:d6:f3:82:57:54:c0:09:9f:4c:49:7c:e3:bc:
e6:6f:59:1a:0b:5f:f4:63:d4:8d:39:28:8c:be:d7:
12:d9:0e:c7:5d:98:52:24:25:ec:2d:78:28:3d:8d:
52:bd:91:d0:53:74:7b:b2:e3:b4:f5:8e:e5:1b:c6:
af:58:15:61:f6:22:92:75:94:d5:ec:1d:5b:6b:5b:
a8:5b:10:4e:50:40:2f:c8:9f:25:1a:c7:95:22:77:
79:4a:dd:5b:53:1b:4a:5d:64:c6:0b:68:28:87:61:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A3:7C:05:67:7A:6E:1D:46:30:31:6D:CA:E4:FB:00:CE:1A:1E:25
X509v3 Authority Key Identifier:
keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/6954A6281D1811F1BB26F0200F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.203.220.0/22
113.30.128.0/24
113.30.130.0-113.30.140.255
123.253.152.0/22
150.195.208.0-150.195.212.255
150.195.214.0/24
150.195.217.0-150.195.223.255
202.75.240.0/24
202.75.242.0-202.75.244.255
202.75.246.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b3:9f:64:b0:8c:c4:f8:83:d4:8b:08:f3:d6:13:6f:e4:31:
58:ea:8e:98:94:dc:7c:cd:19:7f:42:78:30:db:83:e2:31:3d:
f9:00:c7:a4:ab:1a:2e:2d:2e:23:73:8c:f0:6f:14:b7:c4:12:
f4:19:5b:9e:b0:07:ab:80:00:05:e9:2c:fc:d8:93:95:2b:b1:
4b:ad:1a:24:e2:06:07:0a:4b:b1:ba:ff:7c:fd:8b:2f:37:90:
f2:62:3f:3e:2c:b2:a3:32:96:f7:d4:fa:d5:99:24:06:ac:20:
71:d6:89:90:85:d0:bd:ca:01:dc:3d:83:bc:35:40:55:8d:0d:
8c:6f:6c:46:28:43:58:df:98:bd:e1:5b:63:7e:19:52:7b:81:
f2:ac:30:ea:da:d3:1c:cd:0f:75:9e:56:10:c2:e6:76:c0:28:
14:e2:a1:8e:78:9d:49:2d:15:e3:15:99:27:ee:96:8b:ff:c1:
5a:b3:23:55:c4:ad:9c:39:65:8b:5e:79:a9:ff:86:75:76:4c:
09:3f:96:f4:51:7e:e4:2c:ab:02:c1:6e:aa:cc:25:47:03:c7:
d9:c6:60:bc:43:2b:c3:04:15:3e:12:3c:fe:21:5f:5a:80:4f:
be:63:35:a8:d3:0e:6e:4e:d9:e4:79:29:9e:87:45:29:77:9f:
73:d5:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:17 2026 by rpki-client