Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/367647BCC10111EFA021DB2EC4F9AE02.roa
File: 367647BCC10111EFA021DB2EC4F9AE02.roa (raw, json)
Hash identifier: kYITmQ2Dp9Nbe6NiBu8YzvwXYsh7YaAz6JsCubHndXQ=
Subject key identifier: 21:38:B4:2D:49:1D:94:CA:9B:F9:C9:EC:58:D1:F4:3E:E9:77:69:FD
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6BD9
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/367647BCC10111EFA021DB2EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:31:05 +0000
ROA not before: Wed 08 Oct 2025 03:23:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 38732
IP address blocks: 42.96.32.0/24 maxlen: 24
42.96.34.0/23 maxlen: 24
45.122.253.0/24 maxlen: 24
101.99.3.0/24 maxlen: 24
103.21.148.0/22 maxlen: 24
103.63.108.0/23 maxlen: 24
103.152.164.0/23 maxlen: 24
103.173.66.0/23 maxlen: 24
103.252.0.0/22 maxlen: 24
115.146.120.0/21 maxlen: 24
124.158.0.0/21 maxlen: 24
163.227.126.0/23 maxlen: 23
183.91.14.0/24 maxlen: 24
203.205.4.0/24 maxlen: 24
203.205.8.0/24 maxlen: 24
2001:df5:67c0::/48 maxlen: 48
2402:5300:407::/48 maxlen: 48
2402:5300:7000::/40 maxlen: 48
2402:5300:7200::/40 maxlen: 48
2402:5300:7300::/40 maxlen: 48
2402:5300:7400::/40 maxlen: 48
2402:5300:7500::/40 maxlen: 48
2402:5300:7600::/40 maxlen: 48
2402:5300:7700::/40 maxlen: 48
2402:5300:7800::/40 maxlen: 48
2402:5300:7900::/40 maxlen: 48
2402:5300:7a00::/40 maxlen: 48
2402:5300:7b00::/40 maxlen: 48
2406:30c0::/48 maxlen: 48
2407:e3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27609 (0x6bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 8 03:23:35 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61db9-684d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:bf:e6:9b:d2:1b:d4:41:08:3c:b2:8f:b4:
0a:53:4f:a1:b2:94:e7:32:56:62:71:af:21:35:0a:
bd:ee:46:56:ae:e7:c7:bb:e6:d3:4c:ee:95:25:b4:
4a:8a:61:70:52:4e:c9:b6:18:8d:fc:20:ac:a9:a9:
f2:ca:8e:e3:c6:20:26:ca:c6:9b:9a:42:fe:d3:16:
35:08:d7:19:3c:55:3a:66:59:b5:a2:41:df:a1:3a:
70:34:e0:02:85:6f:1b:51:7e:4f:b0:61:0e:a6:e1:
37:4d:cc:12:11:be:c9:08:3d:5e:7d:9d:d6:5a:8a:
d6:b6:ad:a3:7f:80:8f:bb:79:be:2e:bc:ee:6c:ae:
90:e7:6d:4d:f5:67:18:2c:c9:ba:9f:3d:69:17:fb:
c4:42:3a:62:57:4e:3d:38:76:7e:5e:a1:5b:53:3d:
66:d3:2d:8e:72:bd:06:c0:e3:0b:ed:70:b6:13:3c:
a3:d6:2c:46:eb:9b:32:2c:3e:e5:30:47:f0:47:56:
4d:8b:af:59:15:d3:8d:e7:19:1a:89:10:49:79:28:
35:f1:ce:1f:81:fd:f9:3e:f9:c1:96:04:d0:06:c8:
ec:1b:39:1d:5b:dc:3a:58:73:ce:89:61:f1:a0:e4:
d1:50:a0:39:3b:13:6c:2a:bf:00:81:6c:d3:24:52:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:38:B4:2D:49:1D:94:CA:9B:F9:C9:EC:58:D1:F4:3E:E9:77:69:FD
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/367647BCC10111EFA021DB2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.32.0/24
42.96.34.0/23
45.122.253.0/24
101.99.3.0/24
103.21.148.0/22
103.63.108.0/23
103.152.164.0/23
103.173.66.0/23
103.252.0.0/22
115.146.120.0/21
124.158.0.0/21
163.227.126.0/23
183.91.14.0/24
203.205.4.0/24
203.205.8.0/24
IPv6:
2001:df5:67c0::/48
2402:5300:407::/48
2402:5300:7000::/40
2402:5300:7200::-2402:5300:7bff:ffff:ffff:ffff:ffff:ffff
2406:30c0::/48
2407:e3c0::/48
Signature Algorithm: sha256WithRSAEncryption
04:c8:b7:69:28:dd:bf:dd:31:0c:7a:10:7e:ff:ba:b8:57:51:
92:60:e5:74:b3:dc:af:13:49:0d:81:96:f2:19:b3:11:54:56:
43:ec:32:15:86:29:62:95:90:e4:ed:13:80:51:fc:09:60:53:
dc:bb:04:38:93:5d:92:0e:95:a9:fa:c4:0a:26:b3:19:8f:79:
8e:05:a6:72:5d:40:b8:b6:c7:8e:b5:26:fb:68:4d:91:ba:22:
36:ab:0e:26:f2:ed:93:3d:5b:4d:39:03:c7:99:ac:e6:69:32:
55:10:f4:d5:ef:45:8b:93:34:e1:f4:dd:ce:95:06:0e:80:9b:
43:82:fa:ce:84:33:d3:f3:87:14:ce:46:c9:ea:a1:66:42:05:
0e:a8:85:a9:e2:84:cc:95:72:20:05:4e:af:cc:ae:9c:20:6d:
eb:48:f0:ed:1b:79:3b:a5:26:16:d2:33:bd:7d:7a:ce:34:5a:
f2:39:ee:fa:b6:18:07:0e:09:8c:1e:c8:83:80:8f:08:0f:05:
ea:19:41:15:ef:27:ae:5d:54:73:fd:da:ba:1c:dd:51:63:97:
6c:e1:2d:f5:b6:4a:70:58:83:68:6b:0a:1b:5a:a4:96:f4:45:
5e:25:29:8e:bf:9a:7d:21:d6:4a:43:dd:8b:76:84:11:4a:d2:
a4:f5:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:46:27 2026 by rpki-client