Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/CBF7E2CE2D3611EEA81A490BC4F9AE02.roa
File: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (raw, json)
Hash identifier: 5qvqzmsbRW5LBUnnBo5pzofLXlPjmeRE2wzoeLfm3gk=
Subject key identifier: BF:E7:07:1A:41:7D:B5:A1:D2:42:31:E4:88:6B:CD:1E:62:2E:DC:4C
Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04
Certificate serial: 02B8
Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/CBF7E2CE2D3611EEA81A490BC4F9AE02.roa
Signing time: Fri 31 Jul 2026 03:51:24 +0000
ROA not before: Fri 31 Jul 2026 03:51:24 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 136395
IP address blocks: 103.213.36.0/23 maxlen: 23
103.213.36.0/24 maxlen: 24
103.213.37.0/24 maxlen: 24
2401:5e0::/32 maxlen: 32
2401:5e0::/36 maxlen: 36
2401:5e0:1::/48 maxlen: 48
2401:5e0:2::/48 maxlen: 48
2401:5e0:3::/48 maxlen: 48
2401:5e0:4::/48 maxlen: 48
2401:5e0:1000::/36 maxlen: 36
2401:5e0:1000::/48 maxlen: 48
2401:5e0:1001::/48 maxlen: 48
2401:5e0:1002::/48 maxlen: 48
2401:5e0:1003::/48 maxlen: 48
2401:5e0:1004::/48 maxlen: 48
2401:5e0:1005::/48 maxlen: 48
2401:5e0:1006::/48 maxlen: 48
2401:5e0:1007::/48 maxlen: 48
2401:5e0:1008::/48 maxlen: 48
2401:5e0:1009::/48 maxlen: 48
2401:5e0:100a::/48 maxlen: 48
2401:5e0:100b::/48 maxlen: 48
2401:5e0:100c::/48 maxlen: 48
2401:5e0:100d::/48 maxlen: 48
2401:5e0:100e::/48 maxlen: 48
2401:5e0:100f::/48 maxlen: 48
2401:5e0:1010::/48 maxlen: 48
2401:5e0:2000::/36 maxlen: 36
2401:5e0:2000::/48 maxlen: 48
2401:5e0:2001::/48 maxlen: 48
2401:5e0:2002::/48 maxlen: 48
2401:5e0:2003::/48 maxlen: 48
2401:5e0:2004::/48 maxlen: 48
2401:5e0:2005::/48 maxlen: 48
2401:5e0:3000::/36 maxlen: 36
2401:5e0:4000::/36 maxlen: 36
2401:5e0:5000::/36 maxlen: 36
2401:5e0:6000::/36 maxlen: 36
2401:5e0:7000::/36 maxlen: 36
2401:5e0:8000::/36 maxlen: 36
2401:5e0:9000::/36 maxlen: 36
2401:5e0:a000::/36 maxlen: 36
2401:5e0:b000::/36 maxlen: 36
2401:5e0:c000::/36 maxlen: 36
2401:5e0:d000::/36 maxlen: 36
2401:5e0:e000::/36 maxlen: 36
2401:5e0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl
rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 696 (0x2b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB4C2, serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04
Validity
Not Before: Jul 31 03:51:24 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6c1bbc-eec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:e3:d3:65:5f:19:45:96:0e:99:9a:51:72:
af:d2:dd:49:c8:16:74:6e:85:6b:75:5a:32:47:a0:
c8:08:39:a3:db:1b:10:24:94:e4:89:38:c0:2e:f2:
e1:53:86:76:d2:f5:48:57:a8:6f:0b:97:71:15:f7:
c2:2e:91:4e:ad:16:12:70:bc:90:1f:41:68:21:57:
b4:be:92:ad:db:f3:70:b8:db:d9:73:a9:12:84:4e:
7a:be:48:d8:01:75:1b:ab:c6:24:b0:de:af:fa:cd:
1d:f9:96:26:69:bc:d0:43:a9:f2:74:12:e2:bf:57:
f2:69:12:f0:ea:7d:ff:97:1d:0c:dd:48:0d:e7:9f:
85:c7:d4:ae:bf:07:a0:bd:c6:93:a0:aa:ea:98:f1:
5b:f1:af:7d:04:fe:af:3a:0b:f5:af:0c:7d:fd:1d:
a7:97:d4:13:f7:a0:74:ed:de:2a:8e:95:1c:ae:26:
2d:58:27:1b:fa:29:63:36:c4:1e:c6:03:d8:ea:d2:
ed:b7:4b:51:4b:80:e4:78:96:79:ce:46:2d:4c:ec:
d9:e6:f1:86:d1:95:48:0e:61:cb:da:41:6a:a5:f9:
02:a7:be:08:53:d6:9e:fa:c3:8b:7e:9b:67:03:79:
66:86:1e:aa:5b:5d:3e:c0:7d:5b:5e:b5:ff:67:53:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E7:07:1A:41:7D:B5:A1:D2:42:31:E4:88:6B:CD:1E:62:2E:DC:4C
X509v3 Authority Key Identifier:
keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/CBF7E2CE2D3611EEA81A490BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.36.0/23
IPv6:
2401:5e0::/32
Signature Algorithm: sha256WithRSAEncryption
79:6b:2b:aa:dc:97:67:4a:c4:c5:8c:e0:bc:e4:69:e2:f2:98:
b2:55:1b:bc:22:1c:12:0c:d9:ae:ed:bd:58:69:2a:55:bb:ff:
ee:8d:ac:5d:6c:45:b0:08:ad:7c:b8:5a:41:44:5c:72:c3:7d:
e1:ab:b0:27:ea:24:e0:b4:8c:50:e0:b5:9f:92:1d:a6:59:ba:
79:8b:31:a1:52:cd:2e:e2:2f:e7:27:fd:a7:6b:9f:96:88:0e:
d3:15:3a:2e:af:db:f5:83:9d:48:3c:7d:4a:bb:7f:4e:b7:fe:
e7:d3:15:77:f1:6e:b5:b9:5b:dd:be:07:f8:3a:d7:6b:7b:33:
d5:68:8f:20:78:17:91:9e:6a:12:3a:cf:eb:ff:a8:fc:22:bc:
38:91:f0:bd:4f:8a:88:e0:b2:20:70:1a:e1:32:09:f3:a3:a4:
ed:bf:e1:d6:ed:f9:d6:00:4a:f7:99:60:0a:ac:be:3a:46:1f:
0e:9e:11:c4:a7:fc:9a:30:b0:da:a3:a7:dd:34:14:86:4a:e4:
62:04:92:de:9e:77:25:b6:5f:8b:7c:e5:63:51:a3:9f:38:5b:
e2:dc:43:7d:ec:4a:6d:31:41:2b:f0:a8:8d:bf:ce:9f:e4:03:
dd:79:03:a9:47:f4:78:c4:e6:1d:ff:5e:76:1d:f8:0c:53:7c:
6c:7f:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:33 2026 by rpki-client