Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6FE42F284AD11F1862E01298EA30FBC.roa
File: F6FE42F284AD11F1862E01298EA30FBC.roa (raw, json)
Hash identifier: W7s+oB2oIO85vbJrDqpLSdzX3/d7Bv6hjgFbwfcpc2Y=
Subject key identifier: DC:51:91:2F:8D:4D:6C:CA:AE:44:D9:C9:3F:15:A3:5B:66:D1:B5:06
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6D44
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6FE42F284AD11F1862E01298EA30FBC.roa
Signing time: Fri 04 Sep 2026 12:59:37 +0000
ROA not before: Fri 04 Sep 2026 12:59:37 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 38732
IP address blocks: 42.96.32.0/24 maxlen: 24
42.96.34.0/23 maxlen: 24
42.96.63.0/24 maxlen: 24
45.122.253.0/24 maxlen: 24
101.99.3.0/24 maxlen: 24
103.21.148.0/22 maxlen: 24
103.63.108.0/23 maxlen: 24
103.152.164.0/23 maxlen: 24
103.173.66.0/23 maxlen: 24
103.252.0.0/22 maxlen: 24
115.146.120.0/21 maxlen: 24
124.158.0.0/21 maxlen: 24
163.227.126.0/23 maxlen: 23
183.91.14.0/24 maxlen: 24
203.205.4.0/24 maxlen: 24
2001:df5:67c0::/48 maxlen: 48
2402:5300:407::/48 maxlen: 48
2402:5300:7000::/40 maxlen: 48
2402:5300:7200::/40 maxlen: 48
2402:5300:7300::/40 maxlen: 48
2402:5300:7400::/40 maxlen: 48
2402:5300:7500::/40 maxlen: 48
2402:5300:7600::/40 maxlen: 48
2402:5300:7700::/40 maxlen: 48
2402:5300:7800::/40 maxlen: 48
2402:5300:7900::/40 maxlen: 48
2402:5300:7a00::/40 maxlen: 48
2402:5300:7b00::/40 maxlen: 48
2406:30c0::/48 maxlen: 48
2407:e3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27972 (0x6d44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 4 12:59:37 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a9ac0b9-4bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:20:27:72:2e:3b:e9:85:f1:b0:de:d8:98:9d:
4e:62:33:5c:9c:3b:f7:eb:71:7e:7e:38:ce:39:30:
2a:54:f6:21:b4:83:88:dc:45:d9:64:76:78:cb:be:
a7:92:4e:19:7b:8a:e1:eb:c9:15:45:04:1d:bd:80:
96:39:37:e7:a1:45:f6:93:19:ad:98:56:b2:e7:f4:
45:c9:ab:ea:9a:de:6c:a3:28:fc:88:f0:e2:1a:ef:
21:16:a2:fb:e0:11:af:cd:15:55:8c:a1:9e:70:6d:
00:a3:bf:2b:f7:39:ce:92:85:e9:08:e3:31:e2:57:
f3:61:0b:20:b1:c6:cb:40:ce:59:a0:76:04:1d:ab:
18:02:bc:c7:6d:80:08:26:71:b1:86:02:df:bb:4d:
cc:88:ef:26:42:bf:32:fc:99:f4:9f:29:de:dc:10:
61:e3:8e:74:9b:f1:fe:ec:9e:a9:fa:6b:08:b1:6f:
2a:6b:e5:56:f5:93:e5:15:92:8c:3a:5a:78:b4:f4:
55:b4:ab:95:3b:d9:4c:09:a9:ae:a3:bc:8d:2a:fa:
e5:be:2c:33:3d:68:4d:76:ef:37:4d:68:93:7e:48:
09:d5:4a:8b:1d:46:ac:70:4e:a6:c7:e5:d0:95:7d:
46:25:a1:61:2e:62:b3:be:3d:5d:fa:03:c2:fc:66:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:51:91:2F:8D:4D:6C:CA:AE:44:D9:C9:3F:15:A3:5B:66:D1:B5:06
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6FE42F284AD11F1862E01298EA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.32.0/24
42.96.34.0/23
42.96.63.0/24
45.122.253.0/24
101.99.3.0/24
103.21.148.0/22
103.63.108.0/23
103.152.164.0/23
103.173.66.0/23
103.252.0.0/22
115.146.120.0/21
124.158.0.0/21
163.227.126.0/23
183.91.14.0/24
203.205.4.0/24
IPv6:
2001:df5:67c0::/48
2402:5300:407::/48
2402:5300:7000::/40
2402:5300:7200::-2402:5300:7bff:ffff:ffff:ffff:ffff:ffff
2406:30c0::/48
2407:e3c0::/48
Signature Algorithm: sha256WithRSAEncryption
b5:57:83:64:5c:cd:29:1b:ac:af:4d:83:16:54:25:96:37:af:
2e:e5:6e:1f:db:65:22:a0:16:05:d6:15:9d:b5:6c:47:a7:71:
ac:81:b3:af:af:da:e4:62:ab:04:a9:a3:d1:8f:9f:8e:00:a4:
19:ea:71:f8:87:22:76:bb:71:ac:b0:54:6b:a6:36:1a:82:6a:
50:f3:f2:f4:5e:4a:69:4c:2a:bd:a1:68:0f:9a:53:3d:cd:d4:
29:bc:0c:d6:9f:ae:8f:e4:7e:14:a1:c4:44:28:ca:ec:8e:79:
8f:d8:94:b3:c2:0f:6e:e2:a1:a6:52:bd:e6:e9:56:c7:18:53:
54:a8:3f:c7:4a:0e:59:2e:82:7c:f0:6f:00:b3:a4:9a:08:86:
60:8f:2d:93:38:4b:a6:5f:3d:7b:39:d7:5c:39:93:7c:19:9f:
b8:47:7b:2f:d4:b1:3b:65:1a:56:31:12:c3:67:fb:fd:62:5e:
31:58:9b:03:97:25:05:50:92:00:f9:56:6c:6e:20:1f:9f:42:
f0:53:d8:79:38:45:a5:a0:dc:2e:cb:c5:85:a8:a9:0c:51:9b:
b2:dc:7e:bc:ae:12:a8:4d:2a:4d:c2:a5:7d:77:3e:d5:7c:cf:
92:00:38:e8:ef:80:be:3c:48:42:37:42:a3:75:9a:3c:ba:dd:
fe:65:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:05:02 2026 by rpki-client