Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa
File: DC0965247F5A11F186F9402F5DA30FBC.roa (raw, json)
Hash identifier: jYolU4+9Q7InV3wpksAbQFn1Zrx4rhOwMcJBlrReAgE=
Subject key identifier: DB:5A:0C:51:C9:14:BF:A3:34:62:84:13:E1:12:53:96:6E:15:AF:5D
Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial: 0E46
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa
Signing time: Tue 14 Jul 2026 08:08:41 +0000
ROA not before: Tue 14 Jul 2026 08:08:41 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137967
IP address blocks: 103.117.192.0/22 maxlen: 22
103.117.192.0/23 maxlen: 23
103.117.192.0/24 maxlen: 24
103.117.193.0/24 maxlen: 24
103.117.194.0/23 maxlen: 23
103.117.194.0/24 maxlen: 24
103.117.195.0/24 maxlen: 24
2403:1e40::/32 maxlen: 32
2403:1e40::/34 maxlen: 34
2403:1e40::/48 maxlen: 48
2403:1e40:100::/48 maxlen: 48
2403:1e40:150::/48 maxlen: 48
2403:1e40:151::/48 maxlen: 48
2403:1e40:152::/48 maxlen: 48
2403:1e40:153::/48 maxlen: 48
2403:1e40:154::/48 maxlen: 48
2403:1e40:168::/48 maxlen: 48
2403:1e40:169::/48 maxlen: 48
2403:1e40:207::/48 maxlen: 48
2403:1e40:1205::/48 maxlen: 48
2403:1e40:1206::/48 maxlen: 48
2403:1e40:1207::/48 maxlen: 48
2403:1e40:1208::/48 maxlen: 48
2403:1e40:1209::/48 maxlen: 48
2403:1e40:120a::/48 maxlen: 48
2403:1e40:1210::/48 maxlen: 48
2403:1e40:1211::/48 maxlen: 48
2403:1e40:1212::/48 maxlen: 48
2403:1e40:1213::/48 maxlen: 48
2403:1e40:1214::/48 maxlen: 48
2403:1e40:1215::/48 maxlen: 48
2403:1e40:1216::/48 maxlen: 48
2403:1e40:1217::/48 maxlen: 48
2403:1e40:1218::/48 maxlen: 48
2403:1e40:1219::/48 maxlen: 48
2403:1e40:121a::/48 maxlen: 48
2403:1e40:121b::/48 maxlen: 48
2403:1e40:121c::/48 maxlen: 48
2403:1e40:121d::/48 maxlen: 48
2403:1e40:121e::/48 maxlen: 48
2403:1e40:121f::/48 maxlen: 48
2403:1e40:1220::/48 maxlen: 48
2403:1e40:1221::/48 maxlen: 48
2403:1e40:1222::/48 maxlen: 48
2403:1e40:1223::/48 maxlen: 48
2403:1e40:1224::/48 maxlen: 48
2403:1e40:1225::/48 maxlen: 48
2403:1e40:1226::/48 maxlen: 48
2403:1e40:1227::/48 maxlen: 48
2403:1e40:1228::/48 maxlen: 48
2403:1e40:1229::/48 maxlen: 48
2403:1e40:122a::/48 maxlen: 48
2403:1e40:122b::/48 maxlen: 48
2403:1e40:122c::/48 maxlen: 48
2403:1e40:122d::/48 maxlen: 48
2403:1e40:122e::/48 maxlen: 48
2403:1e40:122f::/48 maxlen: 48
2403:1e40:1241::/48 maxlen: 48
2403:1e40:1242::/48 maxlen: 48
2403:1e40:1244::/48 maxlen: 48
2403:1e40:1245::/48 maxlen: 48
2403:1e40:1246::/48 maxlen: 48
2403:1e40:1247::/48 maxlen: 48
2403:1e40:1248::/48 maxlen: 48
2403:1e40:1249::/48 maxlen: 48
2403:1e40:124a::/48 maxlen: 48
2403:1e40:3205::/48 maxlen: 48
2403:1e40:3206::/48 maxlen: 48
2403:1e40:3207::/48 maxlen: 48
2403:1e40:3208::/48 maxlen: 48
2403:1e40:3209::/48 maxlen: 48
2403:1e40:320a::/48 maxlen: 48
2403:1e40:3c05::/48 maxlen: 48
2403:1e40:3c06::/48 maxlen: 48
2403:1e40:3c07::/48 maxlen: 48
2403:1e40:3c08::/48 maxlen: 48
2403:1e40:5704::/48 maxlen: 48
2403:1e40:5705::/48 maxlen: 48
2403:1e40:5706::/48 maxlen: 48
2403:1e40:5804::/48 maxlen: 48
2403:1e40:5805::/48 maxlen: 48
2403:1e40:5806::/48 maxlen: 48
2403:1e40:580a::/48 maxlen: 48
2403:1e40:580b::/48 maxlen: 48
2403:1e40:5905::/48 maxlen: 48
2403:1e40:70ff::/48 maxlen: 48
2403:1e40:7205::/48 maxlen: 48
2403:1e40:7206::/48 maxlen: 48
2403:1e40:7207::/48 maxlen: 48
2403:1e40:7208::/48 maxlen: 48
2403:1e40:80ff::/48 maxlen: 48
2403:1e40:90ff::/48 maxlen: 48
2403:1e40:97ff::/48 maxlen: 48
2403:1e40:c305::/48 maxlen: 48
2403:1e40:c306::/48 maxlen: 48
2403:1e40:fffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 17:59:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3654 (0xe46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Validity
Not Before: Jul 14 08:08:41 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a55ee89-db1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:c0:40:75:8a:56:21:4a:62:6c:72:0f:d0:
ad:07:93:56:d7:04:b2:3c:8a:9d:da:d1:3b:20:99:
48:3f:3c:04:02:fb:80:66:a7:fe:c4:f8:ae:61:d1:
98:ab:c0:37:28:72:e9:7d:b2:21:0a:6e:b6:5e:55:
13:fc:39:13:96:46:0b:55:d6:b3:45:c6:e7:1d:bf:
84:b9:a7:39:a3:ac:47:92:84:95:75:57:17:66:d1:
c7:2f:77:1b:0c:2c:09:d1:e6:a3:59:a8:14:75:ce:
ae:9b:45:a3:de:ec:88:d7:3b:dd:44:f2:bf:75:9c:
88:9a:fc:a0:93:00:48:66:de:a0:0a:9e:6a:e9:d9:
15:bb:9b:33:d3:2b:27:83:c2:de:9d:91:1e:73:aa:
76:23:2c:fa:d7:99:e6:f0:0a:9e:70:10:62:d6:40:
33:6c:5e:c7:a7:8c:d3:09:23:e1:6a:16:83:d3:62:
81:33:09:db:df:f5:79:ba:70:c2:cc:ac:94:a9:7c:
5f:00:d0:6d:ec:40:96:b9:ea:b8:f4:51:d9:71:b6:
c2:c2:dd:04:a0:c9:17:36:5e:78:6f:2d:16:d6:a3:
d8:e8:23:5e:3b:fc:a1:63:04:75:f1:ba:17:98:84:
2b:e4:bc:36:75:b4:00:58:d7:06:a9:0f:9b:b7:78:
54:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:0C:51:C9:14:BF:A3:34:62:84:13:E1:12:53:96:6E:15:AF:5D
X509v3 Authority Key Identifier:
keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.192.0/22
IPv6:
2403:1e40::/32
Signature Algorithm: sha256WithRSAEncryption
60:0d:ea:0c:5f:c6:47:78:6d:3e:ec:75:46:52:ac:83:9e:83:
71:ed:ff:07:fc:6e:b0:57:c4:19:1a:ed:21:f2:8c:6e:e3:f7:
48:32:7c:bc:b8:2c:7c:56:38:18:58:af:dc:44:6c:d7:a9:40:
68:e5:55:28:69:6d:7f:74:43:28:13:db:aa:08:fc:95:d5:2c:
c7:bb:bf:d9:46:83:6d:3c:ba:79:6e:76:40:e2:79:9f:4b:c7:
63:0c:38:91:bc:46:5a:c8:8f:d7:54:cd:c0:09:ab:90:9b:43:
19:98:d1:fd:9d:41:14:88:cf:9e:23:05:40:92:3e:b7:28:07:
cb:6a:84:37:4d:6b:6d:d9:30:cc:54:32:3b:49:4c:2f:d6:8f:
46:d7:00:ab:e3:5f:b9:d2:74:e5:7a:f9:5d:93:2f:38:99:01:
fb:27:62:a2:54:78:91:c2:bb:e3:05:35:94:2a:55:a0:08:6d:
f8:95:80:ea:7c:c1:12:98:97:7e:70:9f:83:58:ef:8f:d9:94:
f9:1a:f5:15:2e:88:71:0d:1f:d2:18:1b:70:39:81:75:9d:23:
12:ad:06:6d:0a:55:24:a3:bf:b3:b4:18:0c:c2:c7:ce:63:7d:
7c:f4:24:97:01:d8:5f:fd:47:43:7c:b0:cc:f4:49:7d:5f:89:
3c:27:01:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:19:37 2026 by rpki-client