Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F9A5134146811F09306AD61C4F9AE02.roa
File: 3F9A5134146811F09306AD61C4F9AE02.roa (raw, json)
Hash identifier: RhG4HYjg3B2TK5dtdi9m/MCnp1lYo7m8RlLMX1UVjzI=
Subject key identifier: AD:DE:D3:DD:4E:A4:BD:CF:81:96:D6:67:98:0F:1D:0D:78:C2:CC:BF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EBAF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F9A5134146811F09306AD61C4F9AE02.roa
Signing time: Sun 31 May 2026 17:54:13 +0000
ROA not before: Sun 31 May 2026 17:54:13 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 9830
IP address blocks: 103.21.67.0/24 maxlen: 24
103.60.198.0/24 maxlen: 24
103.60.199.0/24 maxlen: 24
103.170.20.0/24 maxlen: 24
103.239.64.0/23 maxlen: 24
160.20.4.0/23 maxlen: 24
163.227.198.0/23 maxlen: 24
202.91.64.0/24 maxlen: 24
202.91.65.0/24 maxlen: 24
202.91.66.0/24 maxlen: 24
202.91.67.0/24 maxlen: 24
202.91.68.0/24 maxlen: 24
202.91.69.0/24 maxlen: 24
202.91.70.0/24 maxlen: 24
202.91.71.0/24 maxlen: 24
202.91.72.0/24 maxlen: 24
202.91.73.0/24 maxlen: 24
202.91.74.0/24 maxlen: 24
202.91.75.0/24 maxlen: 24
202.91.76.0/24 maxlen: 24
202.91.77.0/24 maxlen: 24
202.91.78.0/24 maxlen: 24
202.91.79.0/24 maxlen: 24
202.91.80.0/24 maxlen: 24
202.91.81.0/24 maxlen: 24
202.91.82.0/24 maxlen: 24
202.91.83.0/24 maxlen: 24
202.91.84.0/24 maxlen: 24
202.91.85.0/24 maxlen: 24
202.91.86.0/24 maxlen: 24
202.91.87.0/24 maxlen: 24
202.91.88.0/24 maxlen: 24
202.91.89.0/24 maxlen: 24
202.91.90.0/24 maxlen: 24
202.91.91.0/24 maxlen: 24
202.91.92.0/24 maxlen: 24
202.91.93.0/24 maxlen: 24
202.91.94.0/24 maxlen: 24
202.91.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60335 (0xebaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:54:13 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c75c5-850b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:a1:c6:58:0f:a9:35:dd:31:3b:12:d0:7e:
9d:7c:7b:4b:05:10:17:30:16:81:56:04:f6:71:08:
32:b1:50:42:65:97:2f:28:a9:89:ca:7c:0c:00:3e:
67:48:42:9a:02:22:83:cf:13:8a:71:28:54:1f:cd:
51:1e:dc:bf:3b:01:38:f8:19:14:6a:41:9e:ca:ee:
2c:5f:fe:41:11:06:8c:80:9b:69:16:d9:08:ff:27:
67:ee:6a:72:ce:74:21:01:77:b8:c3:83:d8:dc:48:
7e:56:b1:20:5d:15:80:da:fe:a4:6e:ac:81:69:10:
fd:79:2b:b0:be:04:4a:54:f0:af:40:d2:c4:fb:cb:
3c:88:25:13:99:9d:63:7b:cf:93:a4:5c:c2:e7:be:
6b:1f:30:35:f9:6f:ce:ed:7d:d4:5f:92:d5:92:88:
73:61:14:71:7c:a6:bb:50:3e:9f:13:0e:f1:3a:de:
03:73:32:34:9b:69:1f:41:ed:18:96:9e:42:6e:5a:
69:cb:b3:a8:96:ec:91:ed:f3:ee:81:6e:a8:89:cb:
86:eb:ca:a1:19:ae:27:55:9f:03:52:f7:93:b0:db:
48:e6:d3:6d:87:23:74:a9:69:70:13:cc:cd:ff:a1:
ef:b7:a1:b1:4a:a1:c9:f1:2c:02:28:68:35:8e:10:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DE:D3:DD:4E:A4:BD:CF:81:96:D6:67:98:0F:1D:0D:78:C2:CC:BF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F9A5134146811F09306AD61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.21.67.0/24
103.60.198.0/23
103.170.20.0/24
103.239.64.0/23
160.20.4.0/23
163.227.198.0/23
202.91.64.0/19
Signature Algorithm: sha256WithRSAEncryption
56:19:98:fa:91:ec:c4:d7:65:24:e3:98:ac:e0:cf:bc:0d:fb:
a6:be:32:c6:35:4b:2f:64:52:39:00:93:ea:60:0d:79:f5:71:
d4:82:9d:9e:86:52:8a:d1:b2:1c:30:b8:50:0a:71:f3:ac:37:
18:ac:28:75:e9:15:69:4c:87:56:5b:80:ca:1e:18:a6:b9:29:
60:02:d8:7e:da:8a:88:1a:21:25:0b:73:f0:5f:77:29:88:c3:
da:25:d9:cf:45:fb:26:23:15:61:95:17:76:3c:82:96:20:54:
bf:4a:ae:dd:ba:65:d0:cd:98:20:d9:c2:4d:ae:e3:37:7d:0e:
1b:c9:8c:61:7b:1d:71:9a:cc:cc:09:f0:52:5c:17:01:9b:17:
21:f7:2c:fb:73:48:7f:9c:db:c9:58:cf:42:ee:7f:3b:b1:2f:
c7:f0:d5:30:cd:75:16:09:c0:40:cd:56:58:39:57:3a:34:61:
a9:9c:27:15:66:f9:a4:c4:f6:a9:d8:f7:ed:db:28:dc:ac:66:
6f:9d:ec:e2:e0:47:69:c2:94:d8:3a:53:6c:95:b6:34:4c:71:
93:ba:ad:d6:a6:68:63:c0:cc:78:c4:0d:0f:66:0c:d1:21:4f:
9a:f8:d6:92:47:75:74:57:fc:e5:21:10:13:e3:b3:b4:18:bc:
a5:9a:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:42 2026 by rpki-client