Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/82BB885E4B9811EB85F74960C4F9AE02.roa
File: 82BB885E4B9811EB85F74960C4F9AE02.roa (raw, json)
Hash identifier: k/6Ci5PJ0I5HgjHi9Xl2j9V/6QNxgQYLkDLQ1Xnljkc=
Subject key identifier: 41:1F:03:5D:E3:BE:B9:3A:73:1D:F5:59:C2:F5:91:6D:F4:31:03:45
Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
Certificate serial: 08F0
Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/82BB885E4B9811EB85F74960C4F9AE02.roa
Signing time: Fri 28 Aug 2026 21:41:06 +0000
ROA not before: Fri 28 Aug 2026 21:41:06 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38193
IP address blocks: 103.86.38.0/24 maxlen: 24
103.92.20.0/22 maxlen: 24
110.93.192.0/18 maxlen: 23
110.93.192.0/24 maxlen: 24
110.93.194.0/23 maxlen: 24
110.93.196.0/22 maxlen: 24
110.93.200.0/21 maxlen: 24
110.93.208.0/21 maxlen: 24
110.93.216.0/22 maxlen: 24
110.93.220.0/23 maxlen: 24
110.93.222.0/24 maxlen: 24
110.93.224.0/23 maxlen: 24
110.93.229.0/24 maxlen: 24
110.93.231.0/24 maxlen: 24
110.93.232.0/22 maxlen: 24
110.93.238.0/23 maxlen: 24
110.93.241.0/24 maxlen: 24
110.93.242.0/23 maxlen: 24
110.93.248.0/21 maxlen: 24
117.20.16.0/20 maxlen: 23
117.20.16.0/21 maxlen: 24
117.20.24.0/22 maxlen: 24
117.20.28.0/24 maxlen: 24
117.20.30.0/23 maxlen: 24
119.63.128.0/20 maxlen: 23
119.63.128.0/21 maxlen: 24
119.63.136.0/23 maxlen: 24
119.63.140.0/22 maxlen: 24
221.132.112.0/21 maxlen: 23
221.132.112.0/22 maxlen: 24
221.132.116.0/23 maxlen: 24
221.132.118.0/24 maxlen: 24
2404:d400::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl
rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288 (0x8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808
Validity
Not Before: Aug 28 21:41:06 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a920072-a027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:15:91:2c:a4:ef:42:20:a8:64:cc:34:3d:
94:da:74:d1:27:b2:25:0c:53:79:dc:66:f5:a4:12:
cc:f1:5e:de:8e:0f:b4:0c:8d:e5:d2:00:9b:af:ac:
3a:97:ec:83:2e:48:79:c6:3e:16:4d:a3:00:12:4f:
b2:70:7f:c7:e3:85:b1:7f:bb:77:0b:4a:69:26:4b:
e4:c0:63:7b:63:aa:1d:ab:54:2a:6c:c0:3e:43:42:
28:70:83:e3:6e:a4:7d:04:cb:46:90:3c:e8:73:dc:
13:2f:5b:c7:c5:e7:40:bf:94:a1:87:e9:9c:50:a0:
ef:59:71:19:16:f7:28:ae:81:30:d2:8e:41:23:5c:
a3:cc:9f:ae:5f:c8:c7:ff:e8:04:73:e0:19:86:a5:
f1:21:61:87:9f:44:72:ee:07:e1:54:86:a5:46:1e:
48:39:e5:2d:6a:8c:b2:6b:cf:11:d8:c7:be:50:f3:
7c:db:e4:55:89:dd:0f:b7:8e:52:81:c5:9a:a2:0e:
b3:b4:01:81:39:f4:dd:0e:e6:36:fa:7e:02:86:f3:
cc:a5:24:cc:dc:cd:47:80:25:04:33:ae:28:8e:d8:
61:c4:9b:09:f8:5a:08:2c:31:b2:7e:ff:df:3a:9d:
b3:92:3b:53:2a:d3:9c:e0:93:04:6a:e2:06:0c:24:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1F:03:5D:E3:BE:B9:3A:73:1D:F5:59:C2:F5:91:6D:F4:31:03:45
X509v3 Authority Key Identifier:
keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/82BB885E4B9811EB85F74960C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.38.0/24
103.92.20.0/22
110.93.192.0/18
117.20.16.0/20
119.63.128.0/20
221.132.112.0/21
IPv6:
2404:d400::/32
Signature Algorithm: sha256WithRSAEncryption
17:7c:5d:f9:fb:3e:76:64:99:e5:08:f3:b4:86:a7:e9:cd:67:
45:6a:2c:85:04:d5:3a:d0:e6:e4:eb:fc:17:1c:c4:23:72:bf:
59:30:d3:5b:4d:80:7e:cd:4b:6e:24:e6:39:e8:1e:d3:03:70:
d1:b0:45:bb:34:5b:93:d8:b4:6a:10:92:df:3b:9c:e5:e8:b2:
e0:d9:60:7b:e1:9b:23:c1:37:7f:85:74:47:6a:7f:1f:2f:96:
3d:04:ee:25:a2:b5:be:e2:59:d9:62:66:d0:77:50:07:c4:8d:
f5:2e:cb:dc:45:52:c2:f3:e8:c6:f0:dc:e9:66:53:a3:a9:48:
01:88:2c:41:e6:49:0f:da:f0:74:cd:d7:f7:cc:03:66:39:85:
4f:7f:bc:d8:5e:2c:ab:ec:f4:ab:da:33:62:f5:14:dc:bb:f8:
8e:e6:1f:9b:69:c2:2d:de:a2:5c:0c:e3:60:cb:41:f5:c4:ab:
29:d8:2b:d7:55:02:d0:f9:11:53:a0:7d:4c:5e:d5:34:30:e3:
bf:d8:63:db:97:24:72:90:f0:a6:e3:0c:a1:12:f9:b4:0b:48:
be:d1:60:7d:1b:bf:21:22:81:90:e4:86:2f:1d:0b:70:e1:2e:
42:42:fd:f3:d7:45:fa:ac:91:54:21:57:58:35:5e:aa:60:20:
b3:9a:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:17:16 2026 by rpki-client