Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
File: 20978DD270E411F08F40242AC4F9AE02.roa (raw, json)
Hash identifier: LKVvkMidiA/w0BpekGqkSExWW3VTps/vIDMNbTlvt7g=
Subject key identifier: AF:56:E7:9E:21:46:0C:BA:4F:18:38:31:15:5D:62:ED:4E:81:DA:2F
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 03F6
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
Signing time: Mon 11 May 2026 03:16:28 +0000
ROA not before: Mon 11 May 2026 03:16:28 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139057
IP address blocks: 103.137.168.0/24 maxlen: 24
103.137.169.0/24 maxlen: 24
103.137.170.0/24 maxlen: 24
103.137.171.0/24 maxlen: 24
103.138.247.0/24 maxlen: 24
103.189.255.0/24 maxlen: 24
103.243.92.0/24 maxlen: 24
103.243.93.0/24 maxlen: 24
103.243.94.0/24 maxlen: 24
103.243.95.0/24 maxlen: 24
123.108.72.0/24 maxlen: 24
123.108.73.0/24 maxlen: 24
2407:2440:1::/48 maxlen: 48
2407:2440:2::/48 maxlen: 48
2407:2440:3::/48 maxlen: 48
2407:2440:4::/48 maxlen: 48
2407:2440:5::/48 maxlen: 48
2407:2440:6::/48 maxlen: 48
2407:2440:7::/48 maxlen: 48
2407:2440:8::/48 maxlen: 48
2407:2440:9::/48 maxlen: 48
2407:2440:a::/48 maxlen: 48
2407:2440:b::/48 maxlen: 48
2407:2440:c::/48 maxlen: 48
2407:2440:d::/48 maxlen: 48
2407:2440:e::/48 maxlen: 48
2407:2440:f::/48 maxlen: 48
2407:2440:10::/48 maxlen: 48
2407:2440:11::/48 maxlen: 48
2407:2440:12::/48 maxlen: 48
2407:2440:13::/48 maxlen: 48
2407:2440:14::/48 maxlen: 48
2407:2440:15::/48 maxlen: 48
2407:2440:16::/48 maxlen: 48
2407:2440:17::/48 maxlen: 48
2407:2440:18::/48 maxlen: 48
2407:2440:19::/48 maxlen: 48
2407:2440:1e::/48 maxlen: 48
2407:2440:1f::/48 maxlen: 48
2407:2440:20::/48 maxlen: 48
2407:2440:22::/48 maxlen: 48
2407:2440:23::/48 maxlen: 48
2407:2440:25::/48 maxlen: 48
2407:2440:28::/48 maxlen: 48
2407:2440:2a::/48 maxlen: 48
2407:2440:2b::/48 maxlen: 48
2407:2440:2c::/48 maxlen: 48
2407:2440:2d::/48 maxlen: 48
2407:2440:2e::/48 maxlen: 48
2407:2440:2f::/48 maxlen: 48
2407:2440:a001::/48 maxlen: 48
2407:2440:a002::/48 maxlen: 48
2407:2440:a003::/48 maxlen: 48
2407:2440:a004::/48 maxlen: 48
2407:2440:a005::/48 maxlen: 48
2407:2440:a006::/48 maxlen: 48
2407:2440:a007::/48 maxlen: 48
2407:2440:a008::/48 maxlen: 48
2407:2440:a009::/48 maxlen: 48
2407:2440:b001::/48 maxlen: 48
2407:2440:b002::/48 maxlen: 48
2407:2440:b003::/48 maxlen: 48
2407:2440:b004::/48 maxlen: 48
2407:2440:b005::/48 maxlen: 48
2407:2440:b006::/48 maxlen: 48
2407:2440:b007::/48 maxlen: 48
2407:2440:b008::/48 maxlen: 48
2407:2440:b009::/48 maxlen: 48
2407:2440:c001::/48 maxlen: 48
2407:2440:c002::/48 maxlen: 48
2407:2440:c003::/48 maxlen: 48
2407:2440:c004::/48 maxlen: 48
2407:2440:c005::/48 maxlen: 48
2407:2440:c006::/48 maxlen: 48
2407:2440:c007::/48 maxlen: 48
2407:2440:c008::/48 maxlen: 48
2407:2440:c009::/48 maxlen: 48
2407:2440:d001::/48 maxlen: 48
2407:2440:e001::/48 maxlen: 48
2407:2440:e002::/48 maxlen: 48
2407:2440:e003::/48 maxlen: 48
2407:2440:e004::/48 maxlen: 48
2407:2440:e006::/48 maxlen: 48
2407:2440:e007::/48 maxlen: 48
2407:2440:e008::/48 maxlen: 48
2407:2440:e009::/48 maxlen: 48
2407:2440:e00a::/48 maxlen: 48
2407:2440:e00b::/48 maxlen: 48
2407:2440:e00c::/48 maxlen: 48
2407:2440:e00d::/48 maxlen: 48
2407:2440:e00e::/48 maxlen: 48
2407:2440:e00f::/48 maxlen: 48
2407:2440:e010::/48 maxlen: 48
2407:2440:e011::/48 maxlen: 48
2407:2440:e012::/48 maxlen: 48
2407:2440:e013::/48 maxlen: 48
2407:2440:e014::/48 maxlen: 48
2407:2440:e015::/48 maxlen: 48
2407:2440:e016::/48 maxlen: 48
2407:2440:e017::/48 maxlen: 48
2407:2440:e018::/48 maxlen: 48
2407:2440:e040::/48 maxlen: 48
2407:2440:e041::/48 maxlen: 48
2407:2440:e042::/48 maxlen: 48
2407:2440:e043::/48 maxlen: 48
2407:2440:e044::/48 maxlen: 48
2407:2440:e045::/48 maxlen: 48
2407:2440:e050::/48 maxlen: 48
2407:2440:e051::/48 maxlen: 48
2407:2440:e052::/48 maxlen: 48
2407:2440:e053::/48 maxlen: 48
2407:2440:e054::/48 maxlen: 48
2407:2440:e055::/48 maxlen: 48
2407:2440:e071::/48 maxlen: 48
2407:2440:e072::/48 maxlen: 48
2407:2440:e073::/48 maxlen: 48
2407:2440:e074::/48 maxlen: 48
2407:2440:e075::/48 maxlen: 48
2407:2440:e081::/48 maxlen: 48
2407:2440:e082::/48 maxlen: 48
2407:2440:e083::/48 maxlen: 48
2407:2440:e084::/48 maxlen: 48
2407:2440:e085::/48 maxlen: 48
2407:2440:f001::/48 maxlen: 48
2407:2440:f002::/48 maxlen: 48
2407:2440:f003::/48 maxlen: 48
2407:2440:f004::/48 maxlen: 48
2407:2440:f005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1014 (0x3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: May 11 03:16:28 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6a014a0c-3c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:30:c9:50:c0:39:14:e0:f6:1b:0f:48:bf:
e3:97:1b:b4:02:57:9a:11:f5:aa:3d:7e:ae:48:13:
32:f3:f8:ce:5c:33:8c:ae:40:83:ab:e0:00:12:68:
cc:83:40:dc:01:43:0e:15:f5:8c:72:08:e5:76:09:
55:19:e0:dd:4e:b8:6b:4f:e2:04:9f:a2:0c:62:d8:
6f:41:61:02:97:a1:ca:3d:d5:36:fd:39:6d:e2:60:
de:85:f5:83:8c:c2:68:8f:18:e2:c0:4e:c0:b1:15:
e5:cb:28:ae:bc:5f:ca:a2:b9:10:8b:14:83:28:f3:
bd:d9:34:c1:db:f9:28:e2:0c:a0:ae:b6:6a:7c:8e:
4e:c1:7d:5a:d1:51:9b:68:6a:30:03:29:77:5c:dc:
0a:80:a2:41:77:de:bc:22:6d:3b:83:05:a6:77:dc:
68:b3:7b:fb:54:ec:f0:99:e3:c2:40:26:9f:ff:8b:
b5:0f:cd:af:54:07:98:7c:92:3e:91:59:d1:0e:c3:
b8:ee:15:a7:06:5a:14:c3:e4:50:cc:66:eb:f5:75:
1c:63:c0:73:df:66:92:6b:12:4e:29:40:7a:3a:d1:
2b:1a:63:89:4f:a9:2b:f1:be:bb:7d:28:00:09:38:
a4:63:0f:72:34:6c:b3:70:f5:1f:de:d4:05:1e:ea:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:56:E7:9E:21:46:0C:BA:4F:18:38:31:15:5D:62:ED:4E:81:DA:2F
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.168.0/22
103.138.247.0/24
103.189.255.0/24
103.243.92.0/22
123.108.72.0/23
IPv6:
2407:2440:1::-2407:2440:19:ffff:ffff:ffff:ffff:ffff
2407:2440:1e::-2407:2440:20:ffff:ffff:ffff:ffff:ffff
2407:2440:22::/47
2407:2440:25::/48
2407:2440:28::/48
2407:2440:2a::-2407:2440:2f:ffff:ffff:ffff:ffff:ffff
2407:2440:a001::-2407:2440:a009:ffff:ffff:ffff:ffff:ffff
2407:2440:b001::-2407:2440:b009:ffff:ffff:ffff:ffff:ffff
2407:2440:c001::-2407:2440:c009:ffff:ffff:ffff:ffff:ffff
2407:2440:d001::/48
2407:2440:e001::-2407:2440:e004:ffff:ffff:ffff:ffff:ffff
2407:2440:e006::-2407:2440:e018:ffff:ffff:ffff:ffff:ffff
2407:2440:e040::-2407:2440:e045:ffff:ffff:ffff:ffff:ffff
2407:2440:e050::-2407:2440:e055:ffff:ffff:ffff:ffff:ffff
2407:2440:e071::-2407:2440:e075:ffff:ffff:ffff:ffff:ffff
2407:2440:e081::-2407:2440:e085:ffff:ffff:ffff:ffff:ffff
2407:2440:f001::-2407:2440:f005:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
87:2f:be:1e:0c:33:94:e6:a4:3d:44:26:e1:8f:45:51:3f:46:
f3:60:da:8a:a8:3b:51:25:cb:41:94:20:c0:4d:db:bb:e4:af:
94:3d:8c:e7:f8:a8:0f:fa:9e:56:e2:83:fd:fd:b0:c1:c9:10:
08:ba:a6:ed:d0:67:3b:f6:5f:5f:ce:58:cb:22:3c:5c:2d:cb:
0d:8b:0c:82:ae:76:d6:8c:1d:70:19:95:43:74:76:1e:e0:0f:
ec:8f:74:cf:b2:08:dc:fd:36:ed:a3:6a:e1:30:d1:b6:83:84:
f9:05:75:c1:2f:65:89:47:0a:d2:95:fc:47:ae:95:8f:02:99:
fd:00:71:8c:5f:10:2b:b7:3f:2e:e8:26:93:fb:66:a8:51:ec:
cf:d7:68:94:bc:75:11:31:6d:a1:68:3b:46:79:75:64:92:d9:
7c:3e:a3:06:00:61:91:02:54:b4:b7:18:90:d4:02:ee:fe:98:
7e:79:77:6a:00:58:23:5c:51:16:85:9e:18:9b:14:4c:8f:37:
28:7e:1e:de:11:b0:9a:81:42:a4:cb:32:08:50:80:41:3a:9c:
1b:3d:cf:ec:26:2a:11:81:49:68:f4:39:55:9b:e7:d9:87:a0:
0a:84:dc:e2:45:1a:b6:ae:e8:0d:75:24:9b:3d:f9:9c:bd:a6:
67:78:ce:3f
-----BEGIN CERTIFICATE-----
MIIGjjCCBXagAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB
MEFDRDQ0N0YwHhcNMjYwNTExMDMxNjI4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTAxNGEwYy0zYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTcwyVDAORTg9hsPSL/jlxu0AleaEfWqPX6uSBMy8/jOXDOMrkCDq+AAEmjM
g0DcAUMOFfWMcgjldglVGeDdTrhrT+IEn6IMYthvQWECl6HKPdU2/Tlt4mDehfWD
jMJojxjiwE7AsRXlyyiuvF/KorkQixSDKPO92TTB2/ko4gygrrZqfI5OwX1a0VGb
aGowAyl3XNwKgKJBd968Im07gwWmd9xos3v7VOzwmePCQCaf/4u1D82vVAeYfJI+
kVnRDsO47hWnBloUw+RQzGbr9XUcY8Bz32aSaxJOKUB6OtErGmOJT6kr8b67fSgA
CTikYw9yNGyzcPUf3tQFHupGewIDAQABo4IDsjCCA64wHQYDVR0OBBYEFK9W554h
Rgy6Txg4MRVdYu1OgdovMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG
NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S
SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUIyQjgvM0Y0NENCQUUyRjREMTFFRDhGNUE2QTY0QzRGOUFFMDIvMjA5NzhERDI3
MEU0MTFGMDhGNDAyNDJBQzRGOUFFMDIucm9hMIIBbwYIKwYBBQUHAQcBAf8EggFe
MIIBWjAkBAIAATAeAwQCZ4moAwQAZ4r3AwQAZ73/AwQCZ/NcAwQBe2xIMIIBMAQC
AAIwggEoMBIDBwAkByRAAAEDBwEkByRAABgwEgMHASQHJEAAHgMHACQHJEAAIAMH
ASQHJEAAIgMHACQHJEAAJQMHACQHJEAAKDASAwcBJAckQAAqAwcEJAckQAAgMBID
BwAkByRAoAEDBwEkByRAoAgwEgMHACQHJECwAQMHASQHJECwCDASAwcAJAckQMAB
AwcBJAckQMAIAwcAJAckQNABMBIDBwAkByRA4AEDBwAkByRA4AQwEgMHASQHJEDg
BgMHACQHJEDgGDASAwcGJAckQOBAAwcBJAckQOBEMBIDBwQkByRA4FADBwEkByRA
4FQwEgMHACQHJEDgcQMHASQHJEDgdDASAwcAJAckQOCBAwcBJAckQOCEMBIDBwAk
ByRA8AEDBwEkByRA8AQwDQYJKoZIhvcNAQELBQADggEBAIcvvh4MM5TmpD1EJuGP
RVE/RvNg2oqoO1Ely0GUIMBN27vkr5Q9jOf4qA/6nlbig/39sMHJEAi6pu3QZzv2
X1/OWMsiPFwtyw2LDIKudtaMHXAZlUN0dh7gD+yPdM+yCNz9Nu2jauEw0baDhPkF
dcEvZYlHCtKV/EeulY8Cmf0AcYxfECu3Py7oJpP7ZqhR7M/XaJS8dRExbaFoO0Z5
dWSS2Xw+owYAYZECVLS3GJDUAu7+mH55d2oAWCNcURaFnhibFEyPNyh+Ht4RsJqB
QqTLMghQgEE6nBs9z+wmKhGBSWj0OVWb59mHoAqE3OJFGrau6A11JJs9+Zy9pmd4
zj8=
-----END CERTIFICATE-----
Generated at Wed May 13 03:14:31 2026 by rpki-client