Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F7FD171E84AD11F1862E01298EA30FBC.roa
File: F7FD171E84AD11F1862E01298EA30FBC.roa (raw, json)
Hash identifier: VlmFuBFlimXjtLQaEoq6OihwP8HQFeh+9uz223HyiwA=
Subject key identifier: E4:E0:9B:7F:D5:1A:A8:9D:09:13:FF:06:44:E4:79:55:9D:BF:2D:C2
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CF4
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F7FD171E84AD11F1862E01298EA30FBC.roa
Signing time: Tue 21 Jul 2026 02:43:35 +0000
ROA not before: Tue 21 Jul 2026 02:43:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 38733
IP address blocks: 42.96.33.0/24 maxlen: 24
42.96.36.0/23 maxlen: 24
42.96.62.0/24 maxlen: 24
42.96.63.0/24 maxlen: 24
45.122.244.0/24 maxlen: 24
103.82.32.0/22 maxlen: 24
103.117.196.0/23 maxlen: 23
103.188.20.0/23 maxlen: 23
103.190.38.0/23 maxlen: 24
115.165.161.0/24 maxlen: 24
115.165.162.0/23 maxlen: 24
115.165.164.0/23 maxlen: 24
115.165.167.0/24 maxlen: 24
119.82.133.0/24 maxlen: 24
124.158.8.0/21 maxlen: 24
124.158.8.0/24 maxlen: 24
124.158.9.0/24 maxlen: 24
124.158.10.0/24 maxlen: 24
124.158.11.0/24 maxlen: 24
124.158.12.0/24 maxlen: 24
124.158.13.0/24 maxlen: 24
124.158.15.0/24 maxlen: 24
203.167.12.0/22 maxlen: 24
203.205.15.0/24 maxlen: 24
2400:8c60::/48 maxlen: 48
2402:5300:4020::/48 maxlen: 48
2402:5300:4021::/48 maxlen: 48
2402:5300:4e00::/40 maxlen: 48
2402:5300:7100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 04:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27892 (0x6cf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 21 02:43:35 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a5edcd7-db95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:f1:34:70:c6:c2:be:65:a6:d7:26:de:7e:
c7:7a:84:88:53:71:1f:64:da:1c:60:24:c6:11:02:
42:d3:a2:ae:6c:63:e9:f8:91:2d:e3:59:88:64:32:
bd:20:27:82:32:46:bd:e7:99:97:7b:e1:71:0f:3b:
0f:7f:ae:84:2d:9e:06:59:ff:bf:7b:4b:23:a5:b0:
9b:11:7c:0e:f4:50:c6:23:9f:c3:a4:02:c8:24:27:
c8:c7:aa:86:ca:e7:66:a1:54:ac:aa:96:a8:e3:9c:
c3:eb:86:c0:97:8f:35:ee:c0:e1:2c:a2:e2:39:9e:
95:41:90:29:cc:17:41:11:32:07:4c:c7:2b:61:77:
2e:5e:89:bc:c7:69:5c:1d:ea:68:db:0d:43:52:27:
26:ae:0d:d0:0d:b3:66:7f:bd:bf:33:be:24:53:71:
b5:d9:27:2a:3c:d0:8d:de:3d:df:ce:fa:87:3a:09:
15:22:b8:44:85:77:98:f5:16:57:1a:0c:f2:f6:3a:
a3:c3:48:cb:17:1a:d1:4d:67:79:8e:05:a4:f2:78:
de:bc:36:de:a9:90:16:10:54:cd:19:ad:36:36:91:
f8:4a:06:a7:3b:90:3f:ef:68:63:d2:72:ec:d8:32:
e4:d9:c5:57:bf:0e:7b:da:60:61:b1:80:74:f8:2e:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E0:9B:7F:D5:1A:A8:9D:09:13:FF:06:44:E4:79:55:9D:BF:2D:C2
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F7FD171E84AD11F1862E01298EA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.33.0/24
42.96.36.0/23
42.96.62.0/23
45.122.244.0/24
103.82.32.0/22
103.117.196.0/23
103.188.20.0/23
103.190.38.0/23
115.165.161.0-115.165.165.255
115.165.167.0/24
119.82.133.0/24
124.158.8.0/21
203.167.12.0/22
203.205.15.0/24
IPv6:
2400:8c60::/48
2402:5300:4020::/47
2402:5300:4e00::/40
2402:5300:7100::/40
Signature Algorithm: sha256WithRSAEncryption
8d:a5:9e:80:7c:e7:c1:ae:b3:27:b0:de:54:44:88:20:f3:99:
ee:b2:cc:01:f3:52:ef:69:94:8c:e1:6f:a2:08:c0:b0:45:35:
81:2f:1e:87:f2:4b:39:99:3e:63:06:67:ac:c1:35:11:8f:a0:
57:4e:b2:9a:cf:a8:22:2a:c1:87:08:ca:a8:9e:e0:5e:51:b4:
60:c6:92:49:55:bf:ed:08:ad:b9:a9:4f:0d:5c:20:04:3e:b3:
7e:79:06:65:1b:da:75:0c:96:df:5c:c4:bf:6b:d1:5f:4c:1f:
5f:f5:5c:87:2e:f3:84:0f:29:48:2d:fe:da:fa:19:ed:af:ee:
12:7b:1b:8c:44:91:12:40:eb:49:08:b7:34:d2:9a:95:93:7c:
6a:4a:e0:bc:70:55:64:96:5c:eb:4f:8e:b3:d5:58:4f:d5:81:
4d:59:9d:a7:2c:ad:08:61:1b:d6:ad:c3:00:de:1c:ef:ea:3f:
a5:b7:2a:75:f2:79:30:01:60:63:c4:15:b9:fb:47:d3:dc:db:
64:6e:f5:06:fe:18:f5:52:86:fb:c1:71:b8:0c:e6:6d:a7:40:
e8:bf:09:9d:d7:93:74:5e:65:ff:8a:c8:79:01:00:88:ae:d1:
75:74:0d:09:d2:84:d1:41:99:84:8c:69:4c:67:bc:a6:5d:db:
14:dd:0d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:45 2026 by rpki-client