Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/8B41351885EB11F0B665685EC4F9AE02.roa
File: 8B41351885EB11F0B665685EC4F9AE02.roa (raw, json)
Hash identifier: ABCE8poXuonnB72raAXSvHKphMYWzEPA5Z8Cf+KDtcM=
Subject key identifier: 8F:FB:26:04:DA:2C:93:56:4C:55:96:53:22:AC:29:CC:A6:5C:E4:BD
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0E8E
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/8B41351885EB11F0B665685EC4F9AE02.roa
Signing time: Tue 18 Aug 2026 18:35:11 +0000
ROA not before: Tue 18 Aug 2026 18:35:11 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137935
IP address blocks: 103.117.108.0/24 maxlen: 24
103.117.109.0/24 maxlen: 24
2403:1940::/32 maxlen: 32
2403:1940::/35 maxlen: 35
2403:1940::/48 maxlen: 48
2403:1940:1::/48 maxlen: 48
2403:1940:2::/48 maxlen: 48
2403:1940:3::/48 maxlen: 48
2403:1940:4::/48 maxlen: 48
2403:1940:5::/48 maxlen: 48
2403:1940:6::/48 maxlen: 48
2403:1940:7::/48 maxlen: 48
2403:1940:8::/48 maxlen: 48
2403:1940:9::/48 maxlen: 48
2403:1940:d::/48 maxlen: 48
2403:1940:10::/48 maxlen: 48
2403:1940:11::/48 maxlen: 48
2403:1940:12::/48 maxlen: 48
2403:1940:13::/48 maxlen: 48
2403:1940:14::/48 maxlen: 48
2403:1940:15::/48 maxlen: 48
2403:1940:16::/48 maxlen: 48
2403:1940:17::/48 maxlen: 48
2403:1940:18::/48 maxlen: 48
2403:1940:19::/48 maxlen: 48
2403:1940:20::/48 maxlen: 48
2403:1940:21::/48 maxlen: 48
2403:1940:22::/48 maxlen: 48
2403:1940:23::/48 maxlen: 48
2403:1940:24::/48 maxlen: 48
2403:1940:25::/48 maxlen: 48
2403:1940:26::/48 maxlen: 48
2403:1940:27::/48 maxlen: 48
2403:1940:28::/48 maxlen: 48
2403:1940:29::/48 maxlen: 48
2403:1940:30::/48 maxlen: 48
2403:1940:31::/48 maxlen: 48
2403:1940:32::/48 maxlen: 48
2403:1940:33::/48 maxlen: 48
2403:1940:34::/48 maxlen: 48
2403:1940:35::/48 maxlen: 48
2403:1940:36::/48 maxlen: 48
2403:1940:37::/48 maxlen: 48
2403:1940:38::/48 maxlen: 48
2403:1940:39::/48 maxlen: 48
2403:1940:40::/48 maxlen: 48
2403:1940:41::/48 maxlen: 48
2403:1940:42::/48 maxlen: 48
2403:1940:43::/48 maxlen: 48
2403:1940:44::/48 maxlen: 48
2403:1940:45::/48 maxlen: 48
2403:1940:46::/48 maxlen: 48
2403:1940:47::/48 maxlen: 48
2403:1940:48::/48 maxlen: 48
2403:1940:49::/48 maxlen: 48
2403:1940:50::/48 maxlen: 48
2403:1940:60::/48 maxlen: 48
2403:1940:70::/48 maxlen: 48
2403:1940:80::/48 maxlen: 48
2403:1940:90::/48 maxlen: 48
2403:1940:100::/48 maxlen: 48
2403:1940:200::/48 maxlen: 48
2403:1940:1000::/36 maxlen: 36
2403:1940:2000::/36 maxlen: 36
2403:1940:acc1::/48 maxlen: 48
2403:1940:acc2::/48 maxlen: 48
2403:1940:acc3::/48 maxlen: 48
2403:1940:ccc1::/48 maxlen: 48
2403:1940:ccc2::/48 maxlen: 48
2403:1940:ccc3::/48 maxlen: 48
2403:1940:dac1::/48 maxlen: 48
2403:1940:dac1:dac1::/64 maxlen: 64
2403:1940:daca::/48 maxlen: 48
2403:1940:dacb::/48 maxlen: 48
2403:1940:dacc::/48 maxlen: 48
2403:1940:dacd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3726 (0xe8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: Aug 18 18:35:11 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a84a5df-b5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:46:a2:15:a2:d4:da:64:c9:2f:64:04:29:
2e:d0:13:c9:f2:8f:26:37:f5:24:cf:d2:17:89:c7:
72:1b:86:60:bb:28:54:92:d7:89:58:1b:73:0b:dd:
0f:a6:55:f5:9f:53:82:ee:2b:c0:bb:3b:6c:8d:68:
53:6d:63:5f:75:12:a5:81:37:70:1f:d2:9a:f3:5b:
05:a3:e1:26:24:b4:8d:bd:c6:f3:a5:bc:bf:fe:09:
4a:67:b9:ff:21:a9:47:f0:5b:db:ac:e4:de:f4:25:
8a:c4:6e:9b:a3:70:0d:4d:fa:8e:32:6a:25:b6:14:
ad:d1:8c:56:0b:93:79:46:5c:4e:f8:02:eb:ce:f8:
d8:72:58:fa:e0:46:31:6c:ca:be:a2:e5:82:79:05:
7b:ff:4c:ae:d5:fd:09:df:7d:67:d1:26:b9:1e:12:
f1:65:73:b7:37:9e:bc:af:f7:fd:9b:e7:07:02:ac:
18:4f:54:7d:5e:a6:73:38:ce:60:fa:bc:0a:b5:b8:
a6:de:51:bb:2a:55:85:54:a2:45:f4:7f:9c:39:ff:
af:19:97:57:76:59:cb:bf:e5:94:b7:8c:dc:6a:bb:
97:aa:f2:b8:8d:de:e6:2c:45:59:b4:9a:08:ba:b2:
b2:8e:89:ce:9b:ca:52:8a:4c:a9:aa:e8:07:2a:05:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:26:04:DA:2C:93:56:4C:55:96:53:22:AC:29:CC:A6:5C:E4:BD
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/8B41351885EB11F0B665685EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.108.0/23
IPv6:
2403:1940::/32
Signature Algorithm: sha256WithRSAEncryption
41:c1:d4:d8:ad:3b:ee:2a:f5:4f:2b:39:2e:e8:c4:a3:da:b1:
5f:c8:9b:fd:01:8a:8b:90:d9:9e:05:33:fc:ab:02:0a:c9:41:
04:23:1e:3a:41:07:4e:21:80:72:65:f7:80:f3:55:de:ac:8e:
f5:71:cd:ea:20:74:ba:84:51:46:b1:4e:d6:29:56:ec:7a:b7:
e0:3e:53:4b:52:45:f2:c1:5f:9e:06:92:ea:67:48:7e:c8:0e:
7c:cc:e6:9a:1f:26:43:9c:f8:d7:93:47:70:50:b9:78:b3:3e:
64:8b:84:cc:40:fc:21:75:cd:89:d4:d0:cb:df:c1:20:b5:8c:
48:fd:60:26:90:a9:98:c9:5d:5a:cd:6e:14:9a:6c:a6:37:d9:
6c:d9:9c:f0:c6:1f:57:2a:3e:97:e9:0e:e7:6a:00:21:4b:ef:
b8:0d:57:77:4c:26:28:13:49:3d:16:0a:8b:9e:6d:d8:83:0f:
75:19:65:cd:be:a5:00:1c:a7:73:d9:d1:fb:24:f0:cb:3f:5c:
70:42:bc:08:69:68:0f:fa:08:f0:85:d0:86:c6:a3:a3:67:9a:
d2:c0:2c:5d:54:09:a1:39:75:62:3d:33:5a:ae:93:0a:70:a7:
85:34:3b:ba:af:b5:e6:45:1f:c5:97:82:c8:14:77:9e:9b:e7:
ef:84:3c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:38 2026 by rpki-client