Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6FE42F284AD11F1862E01298EA30FBC.roa
File: F6FE42F284AD11F1862E01298EA30FBC.roa (raw, json)
Hash identifier: SWF1eBUGbkqmctTrQMaX+MpFtmfcVJBoexyoH11IDYE=
Subject key identifier: AD:07:EA:9C:3C:6A:33:7B:C7:94:B3:14:26:E6:46:55:CD:19:72:F6
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6F05
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6FE42F284AD11F1862E01298EA30FBC.roa
Signing time: Fri 02 Oct 2026 15:35:28 +0000
ROA not before: Fri 02 Oct 2026 15:35:28 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38732
IP address blocks: 42.96.32.0/24 maxlen: 24
42.96.34.0/23 maxlen: 24
42.96.63.0/24 maxlen: 24
45.122.253.0/24 maxlen: 24
101.99.3.0/24 maxlen: 24
103.21.148.0/22 maxlen: 24
103.63.108.0/23 maxlen: 24
103.152.164.0/23 maxlen: 24
103.173.66.0/23 maxlen: 24
103.252.0.0/22 maxlen: 24
115.146.120.0/21 maxlen: 24
124.158.0.0/21 maxlen: 24
163.227.126.0/23 maxlen: 23
183.91.14.0/24 maxlen: 24
203.205.4.0/24 maxlen: 24
2001:df5:67c0::/48 maxlen: 48
2402:5300:407::/48 maxlen: 48
2402:5300:7000::/40 maxlen: 48
2402:5300:7200::/40 maxlen: 48
2402:5300:7300::/40 maxlen: 48
2402:5300:7400::/40 maxlen: 48
2402:5300:7500::/40 maxlen: 48
2402:5300:7600::/40 maxlen: 48
2402:5300:7700::/40 maxlen: 48
2402:5300:7800::/40 maxlen: 48
2402:5300:7900::/40 maxlen: 48
2402:5300:7a00::/40 maxlen: 48
2402:5300:7b00::/40 maxlen: 48
2406:30c0::/48 maxlen: 48
2407:e3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28421 (0x6f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:35:28 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf40-3dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:a9:a8:37:40:07:a4:20:eb:16:ad:e8:1b:
d0:e3:41:5e:f1:79:b2:27:90:18:09:12:1e:11:b2:
4c:b9:29:c3:10:01:0d:45:03:95:f2:0b:97:93:2e:
a3:6d:a1:47:69:c5:27:3f:1c:42:b5:64:a1:75:ba:
c9:39:fa:da:f2:c1:40:90:98:7b:f2:07:a8:87:24:
16:ac:8b:14:e6:8d:1e:a8:16:22:48:1e:6d:7b:5c:
23:bf:4e:1a:bb:ce:fe:25:cc:96:42:88:9f:59:66:
41:43:ae:0e:b5:d4:02:ab:76:33:d1:10:0d:09:19:
37:10:cf:a8:22:e8:44:7f:a9:4d:77:27:7a:26:77:
f1:4d:5e:86:e5:f4:4c:65:15:b0:dd:8b:d2:72:f9:
2d:7b:c8:02:9d:7f:10:d4:cf:d8:35:07:eb:ac:95:
1f:f1:f1:0d:a2:b4:40:d0:8e:6e:42:a2:23:d9:a5:
42:a5:e3:c1:89:21:a6:d2:71:3d:74:84:e1:52:51:
12:6d:c7:d2:dd:ea:17:44:c4:b0:77:b7:34:39:9a:
14:cd:6a:20:b7:99:89:4f:6e:34:9e:15:01:8c:4e:
93:b7:e5:14:01:a0:17:e8:89:1e:fd:63:3a:ab:45:
04:a6:27:40:32:21:b7:43:3a:9f:2d:13:c9:f9:66:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:07:EA:9C:3C:6A:33:7B:C7:94:B3:14:26:E6:46:55:CD:19:72:F6
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6FE42F284AD11F1862E01298EA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.32.0/24
42.96.34.0/23
42.96.63.0/24
45.122.253.0/24
101.99.3.0/24
103.21.148.0/22
103.63.108.0/23
103.152.164.0/23
103.173.66.0/23
103.252.0.0/22
115.146.120.0/21
124.158.0.0/21
163.227.126.0/23
183.91.14.0/24
203.205.4.0/24
IPv6:
2001:df5:67c0::/48
2402:5300:407::/48
2402:5300:7000::/40
2402:5300:7200::-2402:5300:7bff:ffff:ffff:ffff:ffff:ffff
2406:30c0::/48
2407:e3c0::/48
Signature Algorithm: sha256WithRSAEncryption
2f:19:39:4b:cf:82:40:06:6c:64:c3:11:83:88:62:20:8f:39:
53:60:10:7f:90:33:ef:f9:59:2f:16:c8:53:da:a1:a6:23:03:
37:a9:49:c5:23:ab:3f:3a:71:2b:61:42:e1:eb:2f:2f:0c:86:
a7:06:19:86:8f:8c:49:dd:13:68:b7:51:09:58:8c:2c:67:d3:
a0:62:1b:ac:a2:ce:80:b0:8e:c8:1e:d6:45:fc:31:be:17:c7:
8c:34:2b:35:47:ae:cd:b1:1f:9d:38:30:8e:75:22:59:20:38:
b6:dc:c6:70:3b:a9:74:fd:5c:25:ed:9e:c5:9d:f2:6c:01:3c:
f1:d4:c8:66:ec:ea:94:15:fc:d7:0e:9f:45:8f:a6:cd:f2:bb:
92:7e:38:3e:ab:ba:7b:cf:5e:18:fe:5d:3a:3d:2f:6e:6e:c6:
e5:99:e1:77:05:4a:c9:59:4e:55:d1:08:45:f8:89:38:e1:ae:
d4:80:22:8e:fe:9f:e3:1f:af:8d:0a:81:f7:ae:87:9e:e8:2e:
e1:2b:0f:f6:da:42:90:5e:27:1c:aa:54:31:5c:59:2f:2a:9b:
03:48:b3:c3:31:94:52:2f:28:19:91:a5:19:b1:ed:4d:72:a0:
59:c2:d1:4f:d0:0a:ea:fb:73:79:87:7a:7d:9b:e9:57:70:07:
75:85:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:42:54 2026 by rpki-client