Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6FE42F284AD11F1862E01298EA30FBC.roa
File: F6FE42F284AD11F1862E01298EA30FBC.roa (raw, json)
Hash identifier: LRRkIaTASE/57Gf0LTnA51ZVr/HI90h/Uhj9ey+ahcY=
Subject key identifier: 8A:D9:40:37:2B:59:29:F8:8F:95:CB:27:6B:77:0D:04:5F:96:B3:4E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CF3
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6FE42F284AD11F1862E01298EA30FBC.roa
Signing time: Tue 21 Jul 2026 02:43:33 +0000
ROA not before: Tue 21 Jul 2026 02:43:33 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 38732
IP address blocks: 42.96.32.0/24 maxlen: 24
42.96.34.0/23 maxlen: 24
45.122.253.0/24 maxlen: 24
101.99.3.0/24 maxlen: 24
103.21.148.0/22 maxlen: 24
103.63.108.0/23 maxlen: 24
103.152.164.0/23 maxlen: 24
103.173.66.0/23 maxlen: 24
103.252.0.0/22 maxlen: 24
115.146.120.0/21 maxlen: 24
124.158.0.0/21 maxlen: 24
163.227.126.0/23 maxlen: 23
183.91.14.0/24 maxlen: 24
203.205.4.0/24 maxlen: 24
2001:df5:67c0::/48 maxlen: 48
2402:5300:407::/48 maxlen: 48
2402:5300:7000::/40 maxlen: 48
2402:5300:7200::/40 maxlen: 48
2402:5300:7300::/40 maxlen: 48
2402:5300:7400::/40 maxlen: 48
2402:5300:7500::/40 maxlen: 48
2402:5300:7600::/40 maxlen: 48
2402:5300:7700::/40 maxlen: 48
2402:5300:7800::/40 maxlen: 48
2402:5300:7900::/40 maxlen: 48
2402:5300:7a00::/40 maxlen: 48
2402:5300:7b00::/40 maxlen: 48
2406:30c0::/48 maxlen: 48
2407:e3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27891 (0x6cf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 21 02:43:33 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a5edcd5-1079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:93:48:ff:2c:a5:e3:2e:3b:c9:1b:cd:88:22:
29:cb:84:9d:d1:3b:8b:20:8a:a1:e0:90:6a:4c:39:
4f:ad:2e:3e:ef:ea:72:dd:ab:98:01:aa:f7:39:c6:
14:31:37:9c:2a:39:07:9e:af:bf:7a:eb:bc:12:4a:
65:f2:f8:bc:be:00:1c:8f:62:2f:14:15:fd:e4:3f:
a0:7a:0b:ed:52:6c:98:0f:5d:8d:3a:e5:ec:a8:18:
a0:80:b3:59:67:04:52:86:e8:3f:86:5c:75:9a:51:
6d:a7:5b:f9:60:09:e8:be:40:97:79:23:5c:f7:f1:
67:1a:0e:7d:4d:83:a0:80:6f:ba:77:78:c0:d8:82:
1c:6b:d4:7e:c8:32:c7:68:98:a5:61:51:56:94:1a:
a8:7c:5c:72:31:b9:b1:b0:df:c1:f6:78:2a:99:ff:
05:fc:93:db:0b:35:b4:b3:4a:68:47:63:fc:5c:51:
c7:8b:a6:19:ec:a2:94:cc:04:cc:23:66:2e:c3:8d:
fe:0d:45:f6:93:ed:9f:91:c7:e6:46:d3:c2:3c:0f:
01:02:71:41:83:1e:36:36:7d:7b:52:9a:3e:d6:73:
f5:61:0a:98:2c:9e:68:0a:f9:c6:53:9a:8f:70:64:
ea:2c:4f:4b:5f:67:87:1c:d6:33:20:31:b1:02:29:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D9:40:37:2B:59:29:F8:8F:95:CB:27:6B:77:0D:04:5F:96:B3:4E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6FE42F284AD11F1862E01298EA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.32.0/24
42.96.34.0/23
45.122.253.0/24
101.99.3.0/24
103.21.148.0/22
103.63.108.0/23
103.152.164.0/23
103.173.66.0/23
103.252.0.0/22
115.146.120.0/21
124.158.0.0/21
163.227.126.0/23
183.91.14.0/24
203.205.4.0/24
IPv6:
2001:df5:67c0::/48
2402:5300:407::/48
2402:5300:7000::/40
2402:5300:7200::-2402:5300:7bff:ffff:ffff:ffff:ffff:ffff
2406:30c0::/48
2407:e3c0::/48
Signature Algorithm: sha256WithRSAEncryption
24:1a:34:a0:03:b6:a4:0b:54:1a:73:d9:25:96:6a:72:83:28:
4e:c6:77:3e:16:c5:21:51:84:d3:1e:6a:b1:7b:72:30:5b:a6:
d5:97:d0:df:5f:0e:9f:0b:7a:b8:9e:a6:57:81:45:ba:27:c5:
3a:4a:87:cb:16:8a:ee:09:4a:7d:60:8b:74:d1:0c:f1:98:91:
b8:d6:02:4e:9b:5a:39:89:92:53:25:d8:e2:ad:05:6b:4c:9a:
43:4d:3b:35:3c:2b:7a:63:83:03:1d:93:cd:f3:3d:76:25:e1:
b5:94:f2:5c:8e:63:ea:2f:f7:87:19:ae:dd:7e:5d:96:3d:62:
4a:52:51:71:9f:32:cb:97:3b:f9:ed:e0:d5:66:82:44:8a:e3:
09:c9:34:fd:d0:fa:9c:2e:06:bd:1b:95:c0:e5:11:31:58:a6:
2b:4d:3b:ab:67:b6:39:a7:5a:2b:fd:c4:f2:0c:7e:af:81:49:
0b:2e:58:58:64:20:86:2c:72:6f:9a:9f:61:ce:78:cb:53:2c:
88:12:e7:88:fb:af:e2:2b:4a:6f:a7:76:ee:99:df:f0:c7:28:
e1:a5:0d:d6:bf:0a:69:f0:9d:02:2b:d9:e3:00:9b:74:fc:9c:
6e:b9:96:88:d6:7b:68:10:b7:2b:04:dc:20:de:db:35:db:bf:
95:20:3e:0e
-----BEGIN CERTIFICATE-----
MIIF0zCCBLugAwIBAgICbPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYwNzIxMDI0MzMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVlZGNkNS0xMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhJNI/yyl4y47yRvNiCIpy4Sd0TuLIIqh4JBqTDlPrS4+7+py3auYAar3OcYU
MTecKjkHnq+/euu8Ekpl8vi8vgAcj2IvFBX95D+gegvtUmyYD12NOuXsqBiggLNZ
ZwRShug/hlx1mlFtp1v5YAnovkCXeSNc9/FnGg59TYOggG+6d3jA2IIca9R+yDLH
aJilYVFWlBqofFxyMbmxsN/B9ngqmf8F/JPbCzW0s0poR2P8XFHHi6YZ7KKUzATM
I2Yuw43+DUX2k+2fkcfmRtPCPA8BAnFBgx42Nn17Upo+1nP1YQqYLJ5oCvnGU5qP
cGTqLE9LX2eHHNYzIDGxAilVDwIDAQABo4IC9zCCAvMwHQYDVR0OBBYEFIrZQDcr
WSn4j5XLJ2t3DQRflrNOMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRjZGRTQyRjI4
NEFEMTFGMTg2MkUwMTI5OEVBMzBGQkMucm9hMIG1BggrBgEFBQcBBwEB/wSBpTCB
ojBaBAIAATBUAwQAKmAgAwQBKmAiAwQALXr9AwQAZWMDAwQCZxWUAwQBZz9sAwQB
Z5ikAwQBZ61CAwQCZ/wAAwQDc5J4AwQDfJ4AAwQBo+N+AwQAt1sOAwQAy80EMEQE
AgACMD4DBwAgAQ31Z8ADBwAkAlMABAcDBgAkAlMAcDAQAwYBJAJTAHIDBgIkAlMA
eAMHACQGMMAAAAMHACQH48AAADANBgkqhkiG9w0BAQsFAAOCAQEAJBo0oAO2pAtU
GnPZJZZqcoMoTsZ3PhbFIVGE0x5qsXtyMFum1ZfQ318Onwt6uJ6mV4FFuifFOkqH
yxaK7glKfWCLdNEM8ZiRuNYCTptaOYmSUyXY4q0Fa0yaQ007NTwremODAx2TzfM9
diXhtZTyXI5j6i/3hxmu3X5dlj1iSlJRcZ8yy5c7+e3g1WaCRIrjCck0/dD6nC4G
vRuVwOURMVimK007q2e2OadaK/3E8gx+r4FJCy5YWGQghixyb5qfYc54y1MsiBLn
iPuv4itKb6d27pnf8Mco4aUN1r8KafCdAivZ4wCbdPycbrmWiNZ7aBC3KwTcIN7b
Ndu/lSA+Dg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:43 2026 by rpki-client