Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/65DFCD4A884D11EE8423C486C4F9AE02.roa
File: 65DFCD4A884D11EE8423C486C4F9AE02.roa (raw, json)
Hash identifier: bH1L9ZSWpulV/YHi19WJkDCesjZJBYuj3hbuB5QanKs=
Subject key identifier: A4:C3:5C:1C:17:15:35:AF:71:6B:14:AE:C9:AF:88:F5:C0:01:74:15
Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Certificate serial: 0620
Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/65DFCD4A884D11EE8423C486C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:39:55 +0000
ROA not before: Sat 22 Nov 2025 22:14:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 23888
IP address blocks: 43.250.84.0/22 maxlen: 22
43.250.84.0/24 maxlen: 24
43.250.85.0/24 maxlen: 24
43.250.86.0/24 maxlen: 24
43.250.87.0/24 maxlen: 24
103.253.156.0/22 maxlen: 22
103.253.156.0/24 maxlen: 24
103.253.157.0/24 maxlen: 24
103.253.158.0/24 maxlen: 24
103.253.159.0/24 maxlen: 24
113.197.48.0/22 maxlen: 22
113.197.48.0/24 maxlen: 24
113.197.49.0/24 maxlen: 24
113.197.50.0/23 maxlen: 23
113.197.52.0/23 maxlen: 23
113.197.54.0/24 maxlen: 24
113.197.55.0/24 maxlen: 24
175.107.0.0/20 maxlen: 20
175.107.0.0/22 maxlen: 23
175.107.4.0/22 maxlen: 22
175.107.5.0/24 maxlen: 24
175.107.7.0/24 maxlen: 24
175.107.8.0/24 maxlen: 24
175.107.9.0/24 maxlen: 24
175.107.10.0/24 maxlen: 24
175.107.11.0/24 maxlen: 24
175.107.12.0/24 maxlen: 24
175.107.13.0/24 maxlen: 24
175.107.14.0/24 maxlen: 24
175.107.15.0/24 maxlen: 24
175.107.16.0/20 maxlen: 20
175.107.16.0/24 maxlen: 24
175.107.17.0/24 maxlen: 24
175.107.18.0/24 maxlen: 24
175.107.19.0/24 maxlen: 24
175.107.20.0/24 maxlen: 24
175.107.21.0/24 maxlen: 24
175.107.22.0/23 maxlen: 23
175.107.24.0/21 maxlen: 21
175.107.24.0/24 maxlen: 24
175.107.25.0/24 maxlen: 24
175.107.26.0/23 maxlen: 24
175.107.28.0/22 maxlen: 24
175.107.32.0/20 maxlen: 20
175.107.32.0/24 maxlen: 24
175.107.33.0/24 maxlen: 24
175.107.35.0/24 maxlen: 24
175.107.36.0/22 maxlen: 22
175.107.40.0/22 maxlen: 22
175.107.44.0/22 maxlen: 22
175.107.48.0/20 maxlen: 20
175.107.48.0/24 maxlen: 24
175.107.49.0/24 maxlen: 24
175.107.50.0/24 maxlen: 24
175.107.51.0/24 maxlen: 24
175.107.52.0/24 maxlen: 24
175.107.53.0/24 maxlen: 24
175.107.54.0/24 maxlen: 24
175.107.55.0/24 maxlen: 24
175.107.56.0/24 maxlen: 24
175.107.57.0/24 maxlen: 24
175.107.58.0/24 maxlen: 24
175.107.59.0/24 maxlen: 24
175.107.60.0/24 maxlen: 24
175.107.61.0/24 maxlen: 24
175.107.62.0/24 maxlen: 24
175.107.63.0/24 maxlen: 24
202.83.160.0/20 maxlen: 20
202.83.160.0/22 maxlen: 22
202.83.160.0/24 maxlen: 24
202.83.161.0/24 maxlen: 24
202.83.162.0/24 maxlen: 24
202.83.163.0/24 maxlen: 24
202.83.164.0/24 maxlen: 24
202.83.165.0/24 maxlen: 24
202.83.166.0/24 maxlen: 24
202.83.167.0/24 maxlen: 24
202.83.168.0/24 maxlen: 24
202.83.169.0/24 maxlen: 24
202.83.170.0/24 maxlen: 24
202.83.171.0/24 maxlen: 24
202.83.172.0/24 maxlen: 24
202.83.173.0/24 maxlen: 24
202.83.174.0/24 maxlen: 24
202.83.175.0/24 maxlen: 24
2407:9e00::/48 maxlen: 48
2407:9e00:1::/48 maxlen: 48
2407:9e00:2::/48 maxlen: 48
2407:9e00:3::/48 maxlen: 48
2407:9e00:4::/48 maxlen: 48
2407:9e00:5::/48 maxlen: 48
2407:9e00:6::/48 maxlen: 48
2407:9e00:7::/48 maxlen: 48
2407:9e00:10::/48 maxlen: 48
2407:9e00:11::/48 maxlen: 48
2407:9e00:12::/48 maxlen: 48
2407:9e00:13::/48 maxlen: 48
2407:9e00:14::/48 maxlen: 48
2407:9e00:15::/48 maxlen: 48
2407:9e00:20::/48 maxlen: 48
2407:9e00:21::/48 maxlen: 48
2407:9e00:22::/48 maxlen: 48
2407:9e00:23::/48 maxlen: 48
2407:9e00:24::/48 maxlen: 48
2407:9e00:25::/48 maxlen: 48
2407:9e00:30::/48 maxlen: 48
2407:9e00:31::/48 maxlen: 48
2407:9e00:32::/48 maxlen: 48
2407:9e00:33::/48 maxlen: 48
2407:9e00:35::/48 maxlen: 48
2407:9e00:40::/48 maxlen: 48
2407:9e00:41::/48 maxlen: 48
2407:9e00:42::/48 maxlen: 48
2407:9e00:43::/48 maxlen: 48
2407:9e00:44::/48 maxlen: 48
2407:9e00:50::/48 maxlen: 48
2407:9e00:51::/48 maxlen: 48
2407:9e00:52::/48 maxlen: 48
2407:9e00:53::/48 maxlen: 48
2407:9e00:60::/48 maxlen: 48
2407:9e00:61::/48 maxlen: 48
2407:9e00:62::/48 maxlen: 48
2407:9e00:70::/48 maxlen: 48
2407:9e00:71::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Validity
Not Before: Nov 22 22:14:54 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4339b-1c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:b0:81:88:88:05:f8:96:59:43:96:57:c7:
41:d9:45:c8:e3:55:01:76:32:03:1f:a6:fd:6a:3c:
97:ad:71:6e:d8:dc:77:b0:d1:b0:a0:19:d6:5a:9b:
e2:3a:c4:13:6a:fa:98:12:8a:50:f6:3e:64:88:c4:
3c:a5:d9:df:e4:5c:2e:cf:3c:46:b1:ec:54:9e:b1:
38:60:19:cf:02:d0:04:86:01:d3:25:ea:d7:10:d4:
41:cd:86:d1:bc:1f:b9:a5:5d:5e:65:2e:d2:45:03:
2c:3a:3e:f1:17:87:57:5e:b2:07:cf:33:e3:ce:42:
dc:61:45:90:c1:90:b2:f8:8a:4d:7b:4d:63:bd:cb:
6d:2b:3e:d1:ef:5d:54:e5:7e:1f:bd:db:79:a3:20:
fe:2c:c6:db:75:1d:14:34:11:5b:ba:90:b7:36:1a:
00:d5:36:96:8d:a2:b5:0f:c4:2b:63:4f:97:69:70:
66:2f:c7:6d:46:59:e3:1e:53:a9:e6:57:64:29:4d:
dc:4d:a4:a6:ea:79:29:78:11:04:b3:a9:1a:19:a4:
d3:08:5b:96:95:ba:a3:45:16:35:76:c0:42:a2:06:
bb:89:5f:29:2c:5b:d3:43:60:6f:53:5c:fe:f8:27:
54:72:8c:26:2d:e2:48:58:2a:b6:c9:2e:2e:44:24:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C3:5C:1C:17:15:35:AF:71:6B:14:AE:C9:AF:88:F5:C0:01:74:15
X509v3 Authority Key Identifier:
keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/65DFCD4A884D11EE8423C486C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.250.84.0/22
103.253.156.0/22
113.197.48.0/21
175.107.0.0/18
202.83.160.0/20
IPv6:
2407:9e00::/45
2407:9e00:10::-2407:9e00:15:ffff:ffff:ffff:ffff:ffff
2407:9e00:20::-2407:9e00:25:ffff:ffff:ffff:ffff:ffff
2407:9e00:30::/46
2407:9e00:35::/48
2407:9e00:40::-2407:9e00:44:ffff:ffff:ffff:ffff:ffff
2407:9e00:50::/46
2407:9e00:60::-2407:9e00:62:ffff:ffff:ffff:ffff:ffff
2407:9e00:70::/47
Signature Algorithm: sha256WithRSAEncryption
74:93:57:bf:b2:14:ee:5b:3c:89:9f:64:32:ea:8d:7d:2c:71:
d7:40:b5:0e:ad:4e:1b:96:33:2f:94:70:0c:64:d6:e9:ce:de:
12:c9:49:20:a0:8a:9f:15:5f:b3:26:c2:9a:c4:de:2e:ab:72:
dc:b3:b0:ff:5e:20:8c:53:9c:a6:34:e6:0b:4b:7c:09:8e:fe:
ff:ac:d0:52:46:3b:3f:fd:d6:b7:ad:74:20:99:42:46:34:24:
1a:7b:ec:ac:4a:7d:4d:7e:aa:11:af:7f:1e:af:75:24:73:d2:
15:52:49:47:a5:87:b0:64:ed:ae:e8:f8:ae:e2:11:d0:ef:63:
dd:4b:33:7f:54:eb:b5:dc:49:29:8e:57:69:18:e5:a2:31:b8:
33:f3:2a:8e:d2:91:c7:ae:f4:ee:b0:ae:95:cf:e6:86:31:f8:
ef:70:6c:d9:e9:31:26:b7:ac:41:7c:25:dd:70:27:46:73:c9:
64:1a:72:4f:f7:21:eb:7d:2e:73:6f:7f:b8:26:36:09:d9:a3:
37:a5:ea:1d:91:b8:fd:2b:d9:43:04:96:37:36:82:24:b5:6d:
0d:37:13:c1:7e:1c:95:dd:fb:04:4f:66:5b:c3:49:d1:ee:ec:
8e:77:8a:65:d2:bf:e0:0a:35:1e:6c:d5:69:fd:5a:a7:81:70:
01:88:e3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:58 2026 by rpki-client