Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/3AFA35E04B2E11EEA07FEE34C4F9AE02.roa
File: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (raw, json)
Hash identifier: 8iP1Mv4/b0zp3zODm1tXPKyVEgSd+VYztvxI8wdIpHY=
Subject key identifier: A7:51:89:32:8D:CF:C7:41:75:FD:9C:38:45:01:40:05:5F:53:6F:4F
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: 01F6
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/3AFA35E04B2E11EEA07FEE34C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:08:42 +0000
ROA not before: Tue 07 Oct 2025 04:00:50 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 24424
IP address blocks: 113.197.104.0/22 maxlen: 22
113.197.104.0/23 maxlen: 23
113.197.104.0/24 maxlen: 24
113.197.105.0/24 maxlen: 24
113.197.106.0/23 maxlen: 23
113.197.106.0/24 maxlen: 24
113.197.107.0/24 maxlen: 24
2401:fa00:40::/43 maxlen: 43
2401:fa00:40::/44 maxlen: 44
2401:fa00:40::/45 maxlen: 45
2401:fa00:40::/46 maxlen: 46
2401:fa00:40::/47 maxlen: 47
2401:fa00:40::/48 maxlen: 48
2401:fa00:41::/48 maxlen: 48
2401:fa00:42::/47 maxlen: 47
2401:fa00:42::/48 maxlen: 48
2401:fa00:43::/48 maxlen: 48
2401:fa00:44::/46 maxlen: 46
2401:fa00:44::/47 maxlen: 47
2401:fa00:44::/48 maxlen: 48
2401:fa00:45::/48 maxlen: 48
2401:fa00:46::/47 maxlen: 47
2401:fa00:46::/48 maxlen: 48
2401:fa00:47::/48 maxlen: 48
2401:fa00:48::/45 maxlen: 45
2401:fa00:48::/46 maxlen: 46
2401:fa00:48::/47 maxlen: 47
2401:fa00:48::/48 maxlen: 48
2401:fa00:49::/48 maxlen: 48
2401:fa00:4a::/47 maxlen: 47
2401:fa00:4a::/48 maxlen: 48
2401:fa00:4b::/48 maxlen: 48
2401:fa00:4c::/46 maxlen: 46
2401:fa00:4c::/47 maxlen: 47
2401:fa00:4c::/48 maxlen: 48
2401:fa00:4d::/48 maxlen: 48
2401:fa00:4e::/47 maxlen: 47
2401:fa00:4e::/48 maxlen: 48
2401:fa00:4f::/48 maxlen: 48
2401:fa00:50::/44 maxlen: 44
2401:fa00:50::/45 maxlen: 45
2401:fa00:50::/46 maxlen: 46
2401:fa00:50::/47 maxlen: 47
2401:fa00:50::/48 maxlen: 48
2401:fa00:51::/48 maxlen: 48
2401:fa00:52::/47 maxlen: 47
2401:fa00:52::/48 maxlen: 48
2401:fa00:53::/48 maxlen: 48
2401:fa00:54::/46 maxlen: 46
2401:fa00:54::/47 maxlen: 47
2401:fa00:54::/48 maxlen: 48
2401:fa00:55::/48 maxlen: 48
2401:fa00:56::/47 maxlen: 47
2401:fa00:56::/48 maxlen: 48
2401:fa00:57::/48 maxlen: 48
2401:fa00:58::/45 maxlen: 45
2401:fa00:58::/46 maxlen: 46
2401:fa00:58::/47 maxlen: 47
2401:fa00:58::/48 maxlen: 48
2401:fa00:59::/48 maxlen: 48
2401:fa00:5a::/47 maxlen: 47
2401:fa00:5a::/48 maxlen: 48
2401:fa00:5b::/48 maxlen: 48
2401:fa00:5c::/46 maxlen: 46
2401:fa00:5c::/47 maxlen: 47
2401:fa00:5c::/48 maxlen: 48
2401:fa00:5d::/48 maxlen: 48
2401:fa00:5e::/47 maxlen: 47
2401:fa00:5e::/48 maxlen: 48
2401:fa00:5f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 02:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: Oct 7 04:00:50 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4567a-cfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:3b:e0:6e:7b:9f:1f:13:5f:6a:76:43:61:
72:c3:ea:69:6b:21:96:3e:4b:bb:49:1c:fa:72:83:
e9:4f:a5:3e:7e:3b:5e:a9:83:db:77:97:4e:84:5e:
2b:b7:0a:bb:60:d6:46:78:9d:d8:fa:81:46:0e:f0:
2f:89:f8:50:6a:54:af:88:07:d4:96:2e:cd:d6:c2:
a1:cc:5c:13:7d:89:59:8c:db:9e:aa:e4:ec:30:16:
c9:73:39:03:77:6b:89:1a:79:cd:27:92:cd:9f:82:
27:ac:60:bf:de:07:04:77:c1:d1:7a:27:ed:8a:73:
27:3d:40:6b:50:e2:35:93:9d:ea:b0:44:88:53:05:
65:7b:83:09:60:d1:e0:40:88:01:6a:59:54:11:40:
d7:0e:9a:58:fa:72:28:f6:42:0e:e5:cd:79:5a:21:
03:fe:5b:72:50:7f:d8:4f:e0:2d:3b:09:57:79:09:
cb:f6:38:09:d8:f4:7d:9b:7a:d4:8b:7f:e0:10:cf:
e1:00:98:ae:82:20:1b:de:51:83:15:3a:9b:66:7e:
a4:6f:6f:75:4d:dd:2a:67:7e:00:fe:44:5b:86:04:
3e:9d:11:96:74:9e:fe:99:bd:9d:a7:4d:14:89:c7:
ee:29:2d:86:1c:45:8d:c6:a5:2d:dc:65:a0:ac:9c:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:51:89:32:8D:CF:C7:41:75:FD:9C:38:45:01:40:05:5F:53:6F:4F
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/3AFA35E04B2E11EEA07FEE34C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
113.197.104.0/22
IPv6:
2401:fa00:40::/43
Signature Algorithm: sha256WithRSAEncryption
bb:25:c2:a7:21:38:6e:c9:74:33:ab:f6:25:e2:e4:ec:37:95:
ed:5b:9c:79:79:07:25:68:fe:5f:70:bb:11:59:3c:94:32:75:
ca:7f:01:84:63:20:ba:8e:68:b8:8a:9a:9e:4c:b9:06:84:5f:
c9:d2:2d:ae:f5:b5:25:ce:35:be:88:fa:2f:91:94:4d:93:a2:
5c:80:ed:cd:c5:2e:ca:24:72:ce:48:e7:fa:30:0e:38:79:17:
e4:09:bd:fe:b1:c4:5b:5f:77:d4:c2:73:1d:9b:e4:19:e9:b6:
14:a2:7e:c1:f3:a9:db:85:bb:43:c8:01:53:8c:7c:db:9a:f1:
75:73:77:62:c8:11:a2:c0:0b:24:1d:c0:2f:7e:f5:ad:89:a6:
d3:b1:f9:f9:e4:2f:e9:10:fc:71:4a:36:e6:70:a3:88:ad:0b:
8f:92:75:45:e9:07:d1:78:d4:b2:03:81:72:5e:41:1f:fa:be:
c8:68:1e:cb:a3:c0:d1:fa:41:a1:29:ad:63:71:ff:39:b0:1f:
e0:22:37:7c:61:7c:e5:60:b6:d5:6b:59:19:12:fe:a0:54:54:
7d:f3:9a:a1:f3:e1:24:cf:bc:0e:d9:41:ee:3e:fa:96:ec:51:
91:cc:03:26:2a:18:af:98:b5:72:55:2c:f3:7d:73:47:ff:1e:
ae:e5:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:29:00 2026 by rpki-client