Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9E4BC5F886EC11F19E006003A7EE528E.roa
File: 9E4BC5F886EC11F19E006003A7EE528E.roa (raw, json)
Hash identifier: 8f7Q6YgpcSW8Wk7gyOtCVAXWK/t1u0vaNGg40jLtA4Y=
Subject key identifier: E0:86:9D:13:86:09:E4:3B:56:44:5A:92:CB:D7:7B:20:F9:33:ED:5D
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F06
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9E4BC5F886EC11F19E006003A7EE528E.roa
Signing time: Fri 02 Oct 2026 15:35:30 +0000
ROA not before: Fri 02 Oct 2026 15:35:30 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38733
IP address blocks: 42.96.33.0/24 maxlen: 24
42.96.36.0/23 maxlen: 24
42.96.62.0/24 maxlen: 24
42.96.63.0/24 maxlen: 24
45.122.244.0/24 maxlen: 24
103.82.32.0/22 maxlen: 24
103.117.196.0/23 maxlen: 23
103.188.20.0/23 maxlen: 23
103.190.38.0/23 maxlen: 24
115.165.161.0/24 maxlen: 24
115.165.162.0/23 maxlen: 24
115.165.164.0/23 maxlen: 24
115.165.167.0/24 maxlen: 24
119.82.133.0/24 maxlen: 24
124.158.8.0/21 maxlen: 24
203.167.12.0/22 maxlen: 24
203.205.15.0/24 maxlen: 24
2400:8c60::/48 maxlen: 48
2402:5300:4020::/48 maxlen: 48
2402:5300:4021::/48 maxlen: 48
2402:5300:4e00::/40 maxlen: 48
2402:5300:7100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28422 (0x6f06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:35:30 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf42-10bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:a7:06:27:b0:86:bd:9c:93:8a:7d:7a:6f:
cc:cc:24:47:6d:2d:fe:27:de:2d:2b:04:27:03:97:
d1:17:84:23:ef:07:bf:1f:e6:48:19:50:95:3e:ca:
17:8f:c4:5f:18:dd:de:39:d1:35:25:71:3d:0c:49:
85:bb:92:f4:cb:cc:23:2f:91:2d:7f:13:28:39:2c:
c6:9a:40:68:f4:3b:4f:fb:2b:79:ce:c9:92:9e:94:
63:99:b4:83:63:5c:40:f5:24:27:cc:67:b5:13:9b:
ba:f1:54:06:e5:07:01:80:da:1d:7f:cc:75:5f:ce:
90:ff:7f:42:85:a7:a7:91:4f:57:54:b1:90:0f:7b:
b1:9b:39:31:59:b2:d8:3f:69:7b:9b:25:f6:bd:5f:
78:c9:a4:6f:73:f8:02:1a:ae:68:d4:d3:a2:f9:58:
be:df:57:5c:ed:a9:0a:bf:1d:18:30:7f:ba:38:46:
e6:36:5a:d2:17:77:3d:de:3b:36:a7:46:51:06:67:
e7:fd:77:3f:10:20:28:ef:87:f8:21:9f:ba:a4:fe:
90:92:d8:98:29:0d:04:9e:3c:65:70:c3:07:50:09:
76:7b:95:05:43:d5:62:a2:39:0b:a7:40:0e:51:f2:
94:cd:cc:2e:02:c8:c2:5b:e6:e0:79:21:35:86:fc:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:9D:13:86:09:E4:3B:56:44:5A:92:CB:D7:7B:20:F9:33:ED:5D
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9E4BC5F886EC11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.33.0/24
42.96.36.0/23
42.96.62.0/23
45.122.244.0/24
103.82.32.0/22
103.117.196.0/23
103.188.20.0/23
103.190.38.0/23
115.165.161.0-115.165.165.255
115.165.167.0/24
119.82.133.0/24
124.158.8.0/21
203.167.12.0/22
203.205.15.0/24
IPv6:
2400:8c60::/48
2402:5300:4020::/47
2402:5300:4e00::/40
2402:5300:7100::/40
Signature Algorithm: sha256WithRSAEncryption
84:ca:b6:bf:be:91:38:99:53:35:c4:f5:be:c3:9d:5c:4f:8f:
a7:64:9c:1c:bd:a2:0a:a6:2f:8a:f6:6d:57:c3:4d:71:0d:57:
01:00:a6:89:ad:d1:75:7a:18:06:f6:c0:cb:9a:c7:b4:74:1d:
6b:42:49:bc:e8:28:76:d8:8f:ff:22:04:79:0a:d1:39:e5:85:
87:c3:b3:55:c4:74:c9:bf:f8:ef:4d:25:6f:46:1f:7e:e8:68:
86:44:dd:0e:21:1f:b9:e0:be:5b:40:45:b3:76:07:0c:4b:b7:
ae:0f:7c:61:1c:06:18:81:ed:6f:2e:f7:e4:2b:97:38:8c:f0:
f4:c7:d8:9b:7a:6a:7c:b1:a3:59:e1:b6:12:f6:35:c4:31:0d:
c8:e9:e1:a2:58:2f:d6:2a:4d:a7:22:c5:10:81:42:44:78:7c:
0b:28:cd:44:b1:1d:da:3a:ab:b3:cd:a0:e3:16:73:24:a7:d7:
bb:b4:c4:11:ab:80:ff:d1:6b:b6:d0:fd:99:d0:d1:20:cd:05:
a2:d3:7a:87:ec:89:cc:29:55:01:8d:6e:1d:6a:09:ff:4c:37:
ec:15:ff:20:60:63:2a:61:1d:39:17:c2:26:0d:37:e5:a3:e4:
a3:2b:88:87:2c:d8:98:c5:db:e1:5d:20:50:53:1c:38:2b:6d:
3c:f0:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:58 2026 by rpki-client