Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/373C0EEEAFB011EC9688644FC4F9AE02.roa
File: 373C0EEEAFB011EC9688644FC4F9AE02.roa (raw, json)
Hash identifier: JTjRlKAfcNIA5ztze61fVTgp1O9yMXmNQyaweK8zv78=
Subject key identifier: 46:14:16:5D:2D:21:18:C4:34:36:6E:92:CF:54:79:B8:FA:AB:4B:15
Certificate issuer: /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Certificate serial: 04CB
Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/373C0EEEAFB011EC9688644FC4F9AE02.roa
Signing time: Mon 13 Jul 2026 06:19:01 +0000
ROA not before: Mon 13 Jul 2026 06:19:01 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 200325
IP address blocks: 103.180.114.0/23 maxlen: 24
2400:52e0::/32 maxlen: 32
2400:52e0:1::/48 maxlen: 48
2400:52e0:2::/48 maxlen: 48
2400:52e0:1500::/48 maxlen: 48
2400:52e0:1501::/48 maxlen: 48
2400:52e0:1502::/48 maxlen: 48
2400:52e0:1690::/48 maxlen: 48
2400:52e0:1a00::/48 maxlen: 48
2400:52e0:1a01::/48 maxlen: 48
2400:52e0:1a02::/48 maxlen: 48
2400:52e0:1a03::/48 maxlen: 48
2400:52e0:1a04::/48 maxlen: 48
2400:52e0:1a05::/48 maxlen: 48
2400:52e0:1a06::/48 maxlen: 48
2400:52e0:1a07::/48 maxlen: 48
2400:52e0:1a08::/48 maxlen: 48
2400:52e0:1a09::/48 maxlen: 48
2400:52e0:1e00::/48 maxlen: 48
2400:52e0:1e01::/48 maxlen: 48
2400:52e0:1e02::/48 maxlen: 48
2400:52e0:1e03::/48 maxlen: 48
2400:52e0:1e04::/48 maxlen: 48
2400:52e0:1e05::/48 maxlen: 48
2400:52e0:1e06::/48 maxlen: 48
2400:52e0:1e07::/48 maxlen: 48
2400:52e0:1e08::/48 maxlen: 48
2400:52e0:1e09::/48 maxlen: 48
2400:52e0:1e10::/48 maxlen: 48
2400:52e0:1e11::/48 maxlen: 48
2400:52e0:2500::/48 maxlen: 48
2400:52e0:2a00::/48 maxlen: 48
2400:52e0:4000::/48 maxlen: 48
2400:52e0:fff0::/48 maxlen: 48
2400:52e0:fff1::/48 maxlen: 48
2400:52e0:fff2::/48 maxlen: 48
2400:52e0:fff3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 00:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1227 (0x4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294
Validity
Not Before: Jul 13 06:19:01 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a548355-0451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:01:ae:92:b5:e2:7b:a8:a1:5b:de:1a:cf:c2:
35:ba:9c:77:51:fb:4d:d4:16:9c:79:44:0f:b2:78:
62:91:ab:89:45:ea:a2:2f:22:09:7a:fa:37:a1:4b:
47:ef:54:17:c0:de:5e:b8:47:d0:3a:9d:12:5b:e5:
15:b2:aa:2d:51:1e:48:35:bf:60:12:96:b4:15:54:
53:8f:ec:43:2b:36:61:28:a0:53:2d:96:3c:64:e3:
c6:9c:39:06:c9:9f:a2:6c:4f:d5:96:26:af:d2:27:
9b:30:3a:b3:4e:2a:52:6d:54:d6:ab:d8:01:5c:45:
37:0e:a7:5e:77:65:b6:f3:3c:60:15:05:82:7c:3d:
4a:87:9f:0c:ea:71:30:1b:57:0d:8d:f6:0d:c4:63:
e3:02:f7:b8:49:23:86:cf:09:c5:5a:55:57:84:ee:
6e:92:6b:0d:d1:0c:01:4f:33:69:93:15:0f:f3:d3:
98:45:6c:5e:57:9a:b4:29:cb:b6:32:08:c5:a8:e2:
63:e5:a7:8d:30:32:c9:58:b9:94:ec:51:2d:62:99:
94:32:36:85:fa:45:47:c7:0e:6a:8f:45:71:27:7c:
64:c8:62:ba:bc:d4:46:b6:7f:65:9f:cc:33:a9:8d:
73:80:40:22:b1:a6:dc:ac:2f:af:62:c0:58:e6:44:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:14:16:5D:2D:21:18:C4:34:36:6E:92:CF:54:79:B8:FA:AB:4B:15
X509v3 Authority Key Identifier:
keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/373C0EEEAFB011EC9688644FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.180.114.0/23
IPv6:
2400:52e0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:54:1c:39:4b:ca:ab:12:6f:9f:67:ca:00:7e:68:a0:6f:c4:
46:a2:4f:ae:40:e9:bb:4c:27:a5:14:b7:26:6d:83:af:b5:f4:
9e:d0:a9:19:3e:a2:08:bd:d5:99:b2:6f:b9:e2:76:27:dd:1e:
87:3b:f2:fd:4d:c5:ad:23:57:26:92:60:6c:85:fa:ca:10:bb:
9f:89:7e:ab:68:82:7b:bc:a4:ec:9b:47:98:37:33:bc:94:43:
8a:26:3d:b7:d7:4b:14:33:14:ed:1b:f0:cc:fd:7a:05:e9:86:
1c:9f:b1:ad:f7:df:0b:1d:9d:6b:0c:eb:2b:f7:22:41:29:a1:
1c:83:42:9f:f3:dc:a1:1e:5a:2d:4d:ff:f7:50:bd:41:8e:7a:
9b:f6:d7:cb:6e:24:2e:85:55:0a:b3:52:88:26:d9:20:21:e1:
45:07:8e:7e:b2:67:a8:b1:08:cf:8c:5d:b1:b5:4a:c2:8d:c2:
4f:e4:77:29:93:83:84:b5:b7:61:62:d3:dd:ab:3b:1a:54:32:
5a:b1:e4:7c:b5:c5:c8:52:0b:5b:64:35:41:b1:cd:13:ae:1a:
87:ac:49:70:13:96:7c:0b:23:fe:8e:ff:eb:87:ca:59:53:b9:
8f:72:e4:4a:08:e5:1f:d3:fc:99:f7:b0:0c:11:83:56:82:61:
cd:8f:ed:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:25:46 2026 by rpki-client