Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa
File: DC0965247F5A11F186F9402F5DA30FBC.roa (raw, json)
Hash identifier: Kd66Iap2RpzImbcTnn+QJ4eGgaJtf9wRmu7kIIfSccg=
Subject key identifier: 10:2B:72:1B:DE:DD:3F:4A:04:65:9A:AD:14:30:E0:3A:60:1E:74:16
Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial: 0E5E
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa
Signing time: Wed 26 Aug 2026 13:04:19 +0000
ROA not before: Wed 26 Aug 2026 13:04:19 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137967
IP address blocks: 103.117.192.0/22 maxlen: 22
103.117.192.0/23 maxlen: 23
103.117.192.0/24 maxlen: 24
103.117.193.0/24 maxlen: 24
103.117.194.0/23 maxlen: 23
103.117.194.0/24 maxlen: 24
103.117.195.0/24 maxlen: 24
2403:1e40::/32 maxlen: 32
2403:1e40::/34 maxlen: 34
2403:1e40::/48 maxlen: 48
2403:1e40:100::/48 maxlen: 48
2403:1e40:106::/48 maxlen: 48
2403:1e40:107::/48 maxlen: 48
2403:1e40:150::/48 maxlen: 48
2403:1e40:151::/48 maxlen: 48
2403:1e40:152::/48 maxlen: 48
2403:1e40:153::/48 maxlen: 48
2403:1e40:154::/48 maxlen: 48
2403:1e40:168::/48 maxlen: 48
2403:1e40:169::/48 maxlen: 48
2403:1e40:207::/48 maxlen: 48
2403:1e40:1205::/48 maxlen: 48
2403:1e40:1206::/48 maxlen: 48
2403:1e40:1207::/48 maxlen: 48
2403:1e40:1208::/48 maxlen: 48
2403:1e40:1209::/48 maxlen: 48
2403:1e40:120a::/48 maxlen: 48
2403:1e40:1210::/48 maxlen: 48
2403:1e40:1211::/48 maxlen: 48
2403:1e40:1212::/48 maxlen: 48
2403:1e40:1213::/48 maxlen: 48
2403:1e40:1214::/48 maxlen: 48
2403:1e40:1215::/48 maxlen: 48
2403:1e40:1216::/48 maxlen: 48
2403:1e40:1217::/48 maxlen: 48
2403:1e40:1218::/48 maxlen: 48
2403:1e40:1219::/48 maxlen: 48
2403:1e40:121a::/48 maxlen: 48
2403:1e40:121b::/48 maxlen: 48
2403:1e40:121c::/48 maxlen: 48
2403:1e40:121d::/48 maxlen: 48
2403:1e40:121e::/48 maxlen: 48
2403:1e40:121f::/48 maxlen: 48
2403:1e40:1220::/48 maxlen: 48
2403:1e40:1221::/48 maxlen: 48
2403:1e40:1222::/48 maxlen: 48
2403:1e40:1223::/48 maxlen: 48
2403:1e40:1224::/48 maxlen: 48
2403:1e40:1225::/48 maxlen: 48
2403:1e40:1226::/48 maxlen: 48
2403:1e40:1227::/48 maxlen: 48
2403:1e40:1228::/48 maxlen: 48
2403:1e40:1229::/48 maxlen: 48
2403:1e40:122a::/48 maxlen: 48
2403:1e40:122b::/48 maxlen: 48
2403:1e40:122c::/48 maxlen: 48
2403:1e40:122d::/48 maxlen: 48
2403:1e40:122e::/48 maxlen: 48
2403:1e40:122f::/48 maxlen: 48
2403:1e40:1241::/48 maxlen: 48
2403:1e40:1242::/48 maxlen: 48
2403:1e40:1244::/48 maxlen: 48
2403:1e40:1245::/48 maxlen: 48
2403:1e40:1246::/48 maxlen: 48
2403:1e40:1247::/48 maxlen: 48
2403:1e40:1248::/48 maxlen: 48
2403:1e40:1249::/48 maxlen: 48
2403:1e40:124a::/48 maxlen: 48
2403:1e40:3205::/48 maxlen: 48
2403:1e40:3206::/48 maxlen: 48
2403:1e40:3207::/48 maxlen: 48
2403:1e40:3208::/48 maxlen: 48
2403:1e40:3209::/48 maxlen: 48
2403:1e40:320a::/48 maxlen: 48
2403:1e40:3c05::/48 maxlen: 48
2403:1e40:3c06::/48 maxlen: 48
2403:1e40:3c07::/48 maxlen: 48
2403:1e40:3c08::/48 maxlen: 48
2403:1e40:5704::/48 maxlen: 48
2403:1e40:5705::/48 maxlen: 48
2403:1e40:5706::/48 maxlen: 48
2403:1e40:5804::/48 maxlen: 48
2403:1e40:5805::/48 maxlen: 48
2403:1e40:5806::/48 maxlen: 48
2403:1e40:580a::/48 maxlen: 48
2403:1e40:580b::/48 maxlen: 48
2403:1e40:5905::/48 maxlen: 48
2403:1e40:70ff::/48 maxlen: 48
2403:1e40:7205::/48 maxlen: 48
2403:1e40:7206::/48 maxlen: 48
2403:1e40:7207::/48 maxlen: 48
2403:1e40:7208::/48 maxlen: 48
2403:1e40:80ff::/48 maxlen: 48
2403:1e40:90ff::/48 maxlen: 48
2403:1e40:97ff::/48 maxlen: 48
2403:1e40:c305::/48 maxlen: 48
2403:1e40:c306::/48 maxlen: 48
2403:1e40:fffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3678 (0xe5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Validity
Not Before: Aug 26 13:04:19 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a8ee453-318c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:cb:ad:f6:eb:62:c7:70:fd:08:36:9b:8e:
9a:f5:5d:14:ae:8a:17:9e:3d:20:e1:c0:ca:46:58:
3a:5a:1b:75:23:18:5f:36:45:3f:50:c7:07:64:3c:
23:a2:75:6b:fa:20:dd:31:73:58:ea:37:e8:f9:77:
c4:50:af:4b:6f:df:1d:65:2d:62:c5:cf:6d:19:1e:
15:b1:a4:da:72:1d:db:73:2e:c4:3e:42:9c:69:95:
7a:d0:53:bd:cb:54:71:c1:b9:95:eb:32:4f:6e:d2:
b9:f7:7b:7f:d7:d4:84:5c:30:f8:98:8c:a7:be:b8:
7a:c3:cb:f6:11:cd:1b:43:82:e7:93:61:9f:6d:7a:
67:41:e5:7c:99:c6:14:d2:a0:b7:da:7a:76:6c:ce:
f4:9a:6f:eb:0a:65:28:cf:54:8e:a3:7a:5d:d7:d4:
14:67:73:9c:ab:90:3b:77:d3:2a:be:fe:9e:98:cd:
ab:c2:df:54:7a:7a:cb:54:ed:40:f3:b4:d5:5f:9e:
50:4e:e9:20:93:e2:d5:6e:9b:2f:74:5b:d0:39:ad:
f1:3c:41:86:97:16:3d:09:74:ed:ff:aa:e5:13:3e:
46:e7:df:7a:8a:42:b7:bc:e2:17:5f:de:85:4c:ac:
d3:8a:47:78:f5:b9:de:bf:b7:b5:b5:40:cd:e3:c3:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2B:72:1B:DE:DD:3F:4A:04:65:9A:AD:14:30:E0:3A:60:1E:74:16
X509v3 Authority Key Identifier:
keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.192.0/22
IPv6:
2403:1e40::/32
Signature Algorithm: sha256WithRSAEncryption
9a:df:dc:9f:78:87:4c:9d:cb:13:fa:7e:6f:b5:f8:ae:e8:6e:
26:36:d9:6f:69:11:c1:92:b1:b5:80:b8:c7:f7:4d:ea:03:dc:
0e:37:d7:bf:fb:55:8f:6f:99:81:57:2b:90:85:a9:97:4c:77:
d2:f2:93:c5:77:4d:b3:42:4e:18:79:d8:8c:83:8b:e3:02:90:
81:46:7a:a5:8b:31:37:59:e1:f5:7e:cf:97:31:68:2c:6a:95:
b5:b8:17:65:91:f9:57:2f:6b:92:1f:34:b8:21:cf:a6:45:50:
c5:72:aa:34:7f:f3:36:62:02:e3:16:20:ee:24:94:39:bb:97:
bd:fd:ac:d9:c2:21:f9:6d:c1:49:51:e9:2d:11:5b:43:98:7c:
98:47:2c:c5:e6:8e:b1:5e:a5:4f:5c:46:00:ac:b5:d0:f9:5a:
04:93:55:04:45:d8:cc:08:c5:98:22:d2:1f:6f:f1:b1:d1:f5:
86:08:39:8b:2d:c0:88:9e:f7:b8:1c:bc:2b:d0:ce:2e:74:e6:
31:a5:1b:72:6e:17:7f:ad:26:ac:8a:29:19:1f:f9:c5:7a:4c:
d4:c7:8c:36:02:d2:4f:b4:d8:70:b9:21:0b:be:3e:e5:a9:0b:
9f:71:74:c5:68:20:86:e4:08:14:66:8a:ce:62:c8:e8:66:fb:
3c:ac:01:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:47:15 2026 by rpki-client