Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/84B96CA6904111EF8D11A381C4F9AE02.roa
File: 84B96CA6904111EF8D11A381C4F9AE02.roa (raw, json)
Hash identifier: cGYw9RXkN6jl5Saa1Bh0uceE3pbuIShbY5CrfH5p5cA=
Subject key identifier: 1E:6E:44:F8:70:82:5E:F3:20:C7:BB:D9:62:38:FD:F6:45:1F:27:07
Certificate issuer: /CN=A91EF24F/serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2
Certificate serial: 08EC
Authority key identifier: 1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/84B96CA6904111EF8D11A381C4F9AE02.roa
Signing time: Mon 28 Sep 2026 21:40:36 +0000
ROA not before: Mon 28 Sep 2026 21:40:36 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 55705
IP address blocks: 45.124.108.0/24 maxlen: 24
45.124.109.0/24 maxlen: 24
103.10.76.0/24 maxlen: 24
103.10.77.0/24 maxlen: 24
103.18.140.0/24 maxlen: 24
103.18.141.0/24 maxlen: 24
103.18.142.0/24 maxlen: 24
103.18.143.0/24 maxlen: 24
103.36.156.0/24 maxlen: 24
103.36.157.0/24 maxlen: 24
103.36.158.0/24 maxlen: 24
103.36.159.0/24 maxlen: 24
103.225.60.0/24 maxlen: 24
103.225.61.0/24 maxlen: 24
103.225.62.0/24 maxlen: 24
103.225.63.0/24 maxlen: 24
103.238.100.0/24 maxlen: 24
103.238.101.0/24 maxlen: 24
103.238.102.0/24 maxlen: 24
103.238.103.0/24 maxlen: 24
202.41.22.0/24 maxlen: 24
202.41.23.0/24 maxlen: 24
202.41.24.0/24 maxlen: 24
202.41.25.0/24 maxlen: 24
202.41.26.0/24 maxlen: 24
202.41.27.0/24 maxlen: 24
202.41.28.0/24 maxlen: 24
202.41.29.0/24 maxlen: 24
202.41.30.0/24 maxlen: 24
202.41.31.0/24 maxlen: 24
203.55.102.0/24 maxlen: 24
203.55.103.0/24 maxlen: 24
223.165.24.0/24 maxlen: 24
223.165.25.0/24 maxlen: 24
223.165.26.0/24 maxlen: 24
223.165.27.0/24 maxlen: 24
223.165.28.0/24 maxlen: 24
223.165.29.0/24 maxlen: 24
223.165.30.0/24 maxlen: 24
223.165.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl
rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF24F, serialNumber=1EB7AD2352F7C6EA4A62F784CE5FBB116DF26EC2
Validity
Not Before: Sep 28 21:40:36 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abaded3-5c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:a3:ca:a1:c1:8e:c3:68:35:ac:08:a2:ad:
9d:65:d4:d5:2e:69:c4:52:8f:90:5d:59:e0:0c:3e:
45:95:8c:82:27:e8:a1:0d:55:16:23:b3:41:ec:fa:
31:21:4d:22:f9:b2:a4:d5:45:4a:16:7d:c9:0f:48:
a9:f5:11:e0:cb:f3:ca:a3:94:f7:7e:71:74:ae:27:
ed:35:af:6b:4e:ab:a0:56:58:83:32:a0:9e:cc:a8:
e8:f7:db:93:46:f3:42:0b:f4:47:7c:94:2b:69:86:
f7:ae:47:ce:cb:bf:21:91:f3:c6:33:70:ff:8c:d9:
29:47:75:5b:bb:63:cf:fd:6d:4b:35:49:c8:f4:db:
bb:7e:bc:1e:2f:c5:20:5b:66:62:31:fa:5d:31:79:
4e:20:88:f1:d7:34:0e:9a:c5:54:61:67:40:22:4e:
36:e7:dc:a6:ca:b1:68:86:fc:59:37:fe:1b:34:5b:
9f:57:c8:bb:7f:9a:cc:80:13:81:54:ff:0b:60:17:
f4:bd:37:b3:ad:b7:c9:ec:6d:92:ed:79:05:a0:5c:
8f:0b:c3:b2:38:b1:9e:22:26:13:35:0c:d5:76:c8:
3c:3c:76:64:c0:aa:43:c6:55:b0:14:e6:12:88:a9:
aa:10:5a:19:2f:e1:a1:9f:00:ae:59:cd:b5:c5:d6:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6E:44:F8:70:82:5E:F3:20:C7:BB:D9:62:38:FD:F6:45:1F:27:07
X509v3 Authority Key Identifier:
keyid:1E:B7:AD:23:52:F7:C6:EA:4A:62:F7:84:CE:5F:BB:11:6D:F2:6E:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/HretI1L3xupKYveEzl-7EW3ybsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HretI1L3xupKYveEzl-7EW3ybsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/65DDFAB402FA11EBA3A0A231C4F9AE02/84B96CA6904111EF8D11A381C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.124.108.0/23
103.10.76.0/23
103.18.140.0/22
103.36.156.0/22
103.225.60.0/22
103.238.100.0/22
202.41.22.0-202.41.31.255
203.55.102.0/23
223.165.24.0/21
Signature Algorithm: sha256WithRSAEncryption
96:7a:a4:01:33:77:ab:a2:b0:68:fc:c0:0b:fb:1a:b3:a8:08:
f5:34:39:66:f2:58:bb:36:2e:06:2b:f5:78:60:87:83:82:d9:
a6:b0:5f:18:ed:1e:6b:f2:1d:93:1a:5c:cb:bf:09:5c:e3:81:
a7:50:bd:63:ad:e9:39:27:d7:12:58:10:1e:42:ca:1a:1b:19:
a9:f2:15:a9:01:c8:bd:01:3e:4c:11:da:fc:24:32:3a:96:ac:
7e:9f:d5:35:39:5c:cc:18:50:19:39:b7:76:04:22:fe:2f:a6:
4d:32:92:8d:be:ae:d8:17:e2:63:5a:03:ee:0e:eb:66:86:33:
39:e1:ed:05:41:27:17:c1:7b:15:a9:4c:89:d2:93:d0:18:d9:
07:90:d7:3b:c9:b5:31:74:55:b3:2e:66:d1:42:76:84:15:b7:
60:a4:79:b7:ad:89:b2:9a:f2:bb:a1:ad:27:bb:88:c2:43:df:
a3:8e:1b:ad:30:e4:45:6a:cd:01:c5:7b:f5:8e:54:9d:67:ed:
7a:4a:24:ad:d9:57:a9:20:26:32:47:77:1e:6d:f1:bd:ee:1f:
59:f6:05:cb:1e:74:cf:59:6a:14:05:97:9c:36:ee:19:05:f7:
ac:04:27:7f:2d:83:a4:39:4d:da:e4:3b:d9:56:78:a3:7d:29:
d8:8a:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:23:14 2026 by rpki-client