Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
File: 9995D8D6276011EDAF21D06DC4F9AE02.roa (raw, json)
Hash identifier: 61DuBM+MCyfc3RH02er6otIL3gR9WQxTQ4whfuHgBx0=
Subject key identifier: 57:32:47:1C:EA:6C:50:27:AC:10:39:3E:DA:D3:B1:71:72:37:00:63
Certificate issuer: /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Certificate serial: 0358
Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
Signing time: Tue 29 Sep 2026 01:49:50 +0000
ROA not before: Tue 29 Sep 2026 01:49:50 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 150178
IP address blocks: 103.198.94.0/23 maxlen: 23
103.198.94.0/24 maxlen: 24
103.198.95.0/24 maxlen: 24
2400:a3a0::/32 maxlen: 32
2400:a3a0::/48 maxlen: 48
2400:a3a0:1::/48 maxlen: 48
2400:a3a0:2::/48 maxlen: 48
2400:a3a0:3::/48 maxlen: 48
2400:a3a0:4::/48 maxlen: 48
2400:a3a0:5::/48 maxlen: 48
2400:a3a0:6::/48 maxlen: 48
2400:a3a0:94::/48 maxlen: 48
2400:a3a0:95::/48 maxlen: 48
2400:a3a0:fb::/48 maxlen: 48
2400:a3a0:ecc::/48 maxlen: 48
2400:a3a0:fb3::/48 maxlen: 48
2400:a3a0:1000::/36 maxlen: 36
2400:a3a0:1000::/48 maxlen: 48
2400:a3a0:2000::/36 maxlen: 36
2400:a3a0:2000::/48 maxlen: 48
2400:a3a0:3000::/48 maxlen: 48
2400:a3a0:4000::/42 maxlen: 42
2400:a3a0:4001::/48 maxlen: 48
2400:a3a0:4002::/48 maxlen: 48
2400:a3a0:4003::/48 maxlen: 48
2400:a3a0:4004::/48 maxlen: 48
2400:a3a0:4005::/48 maxlen: 48
2400:a3a0:4006::/48 maxlen: 48
2400:a3a0:4007::/48 maxlen: 48
2400:a3a0:4008::/48 maxlen: 48
2400:a3a0:4009::/48 maxlen: 48
2400:a3a0:400a::/48 maxlen: 48
2400:a3a0:400b::/48 maxlen: 48
2400:a3a0:400c::/48 maxlen: 48
2400:a3a0:400d::/48 maxlen: 48
2400:a3a0:400e::/48 maxlen: 48
2400:a3a0:400f::/48 maxlen: 48
2400:a3a0:4010::/48 maxlen: 48
2400:a3a0:4011::/48 maxlen: 48
2400:a3a0:4012::/48 maxlen: 48
2400:a3a0:4013::/48 maxlen: 48
2400:a3a0:4014::/48 maxlen: 48
2400:a3a0:4015::/48 maxlen: 48
2400:a3a0:4016::/48 maxlen: 48
2400:a3a0:4017::/48 maxlen: 48
2400:a3a0:4018::/48 maxlen: 48
2400:a3a0:4019::/48 maxlen: 48
2400:a3a0:401a::/48 maxlen: 48
2400:a3a0:401b::/48 maxlen: 48
2400:a3a0:401c::/48 maxlen: 48
2400:a3a0:401d::/48 maxlen: 48
2400:a3a0:401e::/48 maxlen: 48
2400:a3a0:401f::/48 maxlen: 48
2400:a3a0:4020::/48 maxlen: 48
2400:a3a0:4021::/48 maxlen: 48
2400:a3a0:4022::/48 maxlen: 48
2400:a3a0:4023::/48 maxlen: 48
2400:a3a0:4024::/48 maxlen: 48
2400:a3a0:4025::/48 maxlen: 48
2400:a3a0:4026::/48 maxlen: 48
2400:a3a0:4027::/48 maxlen: 48
2400:a3a0:4028::/48 maxlen: 48
2400:a3a0:4029::/48 maxlen: 48
2400:a3a0:402a::/48 maxlen: 48
2400:a3a0:402b::/48 maxlen: 48
2400:a3a0:402c::/48 maxlen: 48
2400:a3a0:402d::/48 maxlen: 48
2400:a3a0:402e::/48 maxlen: 48
2400:a3a0:402f::/48 maxlen: 48
2400:a3a0:4030::/48 maxlen: 48
2400:a3a0:4031::/48 maxlen: 48
2400:a3a0:4032::/48 maxlen: 48
2400:a3a0:4033::/48 maxlen: 48
2400:a3a0:4034::/48 maxlen: 48
2400:a3a0:4035::/48 maxlen: 48
2400:a3a0:4036::/48 maxlen: 48
2400:a3a0:4037::/48 maxlen: 48
2400:a3a0:4038::/48 maxlen: 48
2400:a3a0:4039::/48 maxlen: 48
2400:a3a0:403a::/48 maxlen: 48
2400:a3a0:403b::/48 maxlen: 48
2400:a3a0:403c::/48 maxlen: 48
2400:a3a0:403d::/48 maxlen: 48
2400:a3a0:403e::/48 maxlen: 48
2400:a3a0:403f::/48 maxlen: 48
2400:a3a0:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856 (0x358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194522, serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Validity
Not Before: Sep 29 01:49:50 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abb193d-d267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:03:35:83:9b:76:77:7e:a6:73:01:ab:aa:
75:d4:b1:2a:af:8f:0f:28:21:a9:89:c2:ef:2d:23:
fc:94:d1:c0:8d:76:b0:a5:ba:88:f1:34:6b:bc:eb:
50:86:dd:01:b5:26:16:70:74:f2:93:aa:5f:7d:f2:
09:e9:3d:ca:e0:5f:db:8e:64:bc:f5:6b:33:42:ef:
6b:0a:cd:3b:f4:0b:c7:c2:54:be:7f:95:5b:db:bd:
a4:63:90:62:15:cb:73:e9:0c:83:6b:04:ef:06:ea:
95:01:34:b5:bd:fa:d3:7b:bd:34:11:e6:60:0c:b9:
31:e1:5d:e7:bd:8e:23:e6:cd:55:1c:4c:9c:d6:6b:
3e:c3:ca:e5:e4:ee:e4:6d:9b:e4:16:e3:d2:0d:5a:
3b:8d:9b:25:7a:4e:73:15:60:e9:6c:8a:42:34:93:
8b:38:cb:ce:97:f6:93:15:36:ae:4e:e9:90:71:f8:
ab:c0:0e:be:67:81:a5:1a:47:94:1d:d9:99:a3:91:
67:23:10:44:16:f4:fb:43:ec:6c:98:a4:92:8c:7b:
40:f0:66:8b:17:8f:13:fe:58:f0:4d:a0:e3:54:bf:
7a:22:37:9b:8b:c6:31:c1:a0:87:07:59:c2:40:d6:
cb:8b:fd:1b:37:a4:f7:59:77:1d:ae:60:61:5f:77:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:32:47:1C:EA:6C:50:27:AC:10:39:3E:DA:D3:B1:71:72:37:00:63
X509v3 Authority Key Identifier:
keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.198.94.0/23
IPv6:
2400:a3a0::/32
Signature Algorithm: sha256WithRSAEncryption
48:a1:06:75:ff:a9:0c:47:2c:26:ad:09:0b:7e:59:64:03:b2:
dc:43:da:2d:12:4b:ce:58:d7:7f:a8:42:62:86:1c:84:90:bf:
d6:0d:fb:9c:2b:1e:c3:f7:e6:e9:ca:94:5f:b6:80:c8:10:e1:
1c:a2:f1:b5:73:78:17:a6:ca:66:fa:81:2c:cc:ca:9b:17:c7:
71:ea:7d:f9:19:11:a7:b2:ca:c7:a5:f3:1e:eb:db:91:bf:3b:
7f:56:38:f8:0a:d1:c4:b5:56:29:e3:90:97:84:9f:8e:56:89:
54:da:61:10:ae:32:7d:af:6a:fc:95:87:c4:25:a5:75:d5:84:
1d:25:dd:c7:da:a2:73:15:c7:ea:40:79:2e:7a:fc:69:ed:69:
8e:3e:bd:8a:09:ee:1a:f6:4a:a5:c9:e6:bd:0e:26:8a:81:05:
55:67:45:c1:88:4a:26:f1:88:c9:fb:6f:6c:25:bb:9b:2a:d3:
88:73:dd:b2:89:be:9e:ab:14:58:56:45:8a:89:d4:dc:32:67:
bb:e9:5e:c7:78:3e:9d:3a:f0:31:36:46:20:bb:ae:96:28:07:
a5:ec:34:77:db:8d:2e:d1:81:b3:4a:88:63:f1:53:b1:00:d0:
cb:e5:9f:d6:6f:8f:2b:42:2a:d4:a2:97:2a:83:f0:00:c2:78:
7d:c4:00:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:42:56 2026 by rpki-client