Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa
File: 9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa (raw, json)
Hash identifier: WtaSG6V7KK7556nMulhV3scLfcyV7h4T3q7lkKPSpWA=
Subject key identifier: B9:90:BD:72:83:01:03:14:BA:60:2E:31:38:12:C0:B8:E0:9B:5C:2D
Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Certificate serial: 18C3
Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa
Signing time: Mon 14 Sep 2026 16:30:01 +0000
ROA not before: Mon 14 Sep 2026 16:30:01 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38614
IP address blocks: 103.158.38.0/24 maxlen: 24
103.158.39.0/24 maxlen: 24
117.103.80.0/24 maxlen: 24
117.103.81.0/24 maxlen: 24
117.103.82.0/24 maxlen: 24
117.103.83.0/24 maxlen: 24
117.103.84.0/24 maxlen: 24
117.103.85.0/24 maxlen: 24
117.103.86.0/24 maxlen: 24
117.103.87.0/24 maxlen: 24
2404:f380::/32 maxlen: 32
2404:f380::/36 maxlen: 36
2404:f380::/48 maxlen: 48
2404:f380:1::/48 maxlen: 48
2404:f380:2::/48 maxlen: 48
2404:f380:3::/48 maxlen: 48
2404:f380:4::/48 maxlen: 48
2404:f380:5::/48 maxlen: 48
2404:f380:6::/48 maxlen: 48
2404:f380:7::/48 maxlen: 48
2404:f380:8::/48 maxlen: 48
2404:f380:9::/48 maxlen: 48
2404:f380:a::/48 maxlen: 48
2404:f380:b::/48 maxlen: 48
2404:f380:c::/48 maxlen: 48
2404:f380:d::/48 maxlen: 48
2404:f380:e::/48 maxlen: 48
2404:f380:f::/48 maxlen: 48
2404:f380:1000::/36 maxlen: 36
2404:f380:2000::/36 maxlen: 36
2404:f380:3000::/36 maxlen: 36
2404:f380:4000::/36 maxlen: 36
2404:f380:5000::/36 maxlen: 36
2404:f380:6000::/36 maxlen: 36
2404:f380:7000::/36 maxlen: 36
2404:f380:8000::/36 maxlen: 36
2404:f380:9000::/36 maxlen: 36
2404:f380:a000::/36 maxlen: 36
2404:f380:b000::/36 maxlen: 36
2404:f380:c000::/36 maxlen: 36
2404:f380:d000::/36 maxlen: 36
2404:f380:e000::/36 maxlen: 36
2404:f380:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6339 (0x18c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD4DB, serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Validity
Not Before: Sep 14 16:30:01 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6aa82108-b1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:22:69:16:63:e8:c5:f6:dc:90:82:1f:31:
62:53:04:2f:8c:01:4a:3d:43:77:ec:d4:03:ce:9b:
cc:7a:08:a2:dd:7a:3b:87:aa:24:fa:0f:c8:00:79:
da:dc:f7:10:ee:39:83:4f:31:27:a3:83:a2:1e:1c:
bd:0a:a1:82:90:52:e2:98:a6:0d:59:6a:93:c9:f2:
5d:9b:fb:ca:ae:41:e6:a0:25:2a:fe:75:2d:2f:d5:
b3:b7:e8:20:c3:5b:b5:5c:56:42:2e:da:98:51:d4:
25:ff:c6:67:4c:c1:a5:9c:84:e6:92:ef:ff:11:64:
3c:8e:9e:c2:8f:91:b2:86:64:5d:fa:2e:9f:a3:00:
e2:15:0f:ec:de:22:fb:19:db:39:ff:54:45:20:46:
d9:44:91:a7:b9:92:3b:45:4f:81:2b:b6:26:21:4a:
ed:a4:10:8c:fd:a8:1e:29:c9:76:99:87:b2:6b:d6:
c5:2e:85:b0:7e:84:b4:79:04:3f:41:e3:32:94:ce:
21:59:f8:e6:96:e5:63:9d:3b:9f:60:32:42:99:fd:
3f:2c:03:27:5d:e5:71:57:c0:8e:0d:be:52:b8:ef:
6c:1f:51:48:e1:3f:c8:4b:3f:65:da:6d:45:a8:15:
61:75:30:79:5b:8e:86:e8:af:87:51:46:3d:e8:5b:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:90:BD:72:83:01:03:14:BA:60:2E:31:38:12:C0:B8:E0:9B:5C:2D
X509v3 Authority Key Identifier:
keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.38.0/23
117.103.80.0/21
IPv6:
2404:f380::/32
Signature Algorithm: sha256WithRSAEncryption
40:b9:a1:8b:c6:c5:4b:ad:08:b3:83:76:34:ae:ac:8a:7f:07:
50:ad:ed:84:b2:67:f4:bc:a5:d1:ce:e7:6f:e8:4c:32:94:7f:
35:0b:fe:a0:83:9a:ca:ae:cb:bb:b7:1f:8b:c6:95:a1:29:85:
f6:84:a6:11:19:f5:70:db:16:74:e3:98:42:6e:1d:08:f7:ed:
44:06:25:9a:45:e9:8f:d4:89:68:fa:01:23:32:75:ec:ff:23:
81:a0:9d:32:86:41:c5:35:bd:38:b6:a4:93:e7:a9:70:a6:66:
39:77:4b:c7:d8:a3:44:37:f6:f9:17:7c:d4:e8:b8:c7:b2:45:
7a:1c:8c:ea:26:74:b4:40:5d:8e:a6:01:cf:83:b4:84:50:47:
4b:c8:d1:c5:a3:08:aa:b3:d4:37:a8:bb:c0:8d:33:35:59:89:
e5:f5:95:33:37:c5:a4:95:dd:df:af:ca:57:f5:e8:d9:71:1f:
63:23:4c:71:32:e2:76:90:4c:7f:25:52:26:01:f8:dd:34:9c:
10:a7:1c:99:f2:28:29:30:6e:4b:ff:8d:a3:11:ec:1e:32:5c:
60:a5:69:6c:91:5c:2b:3f:fe:0c:2e:9a:8d:8c:35:f9:a4:68:
fb:e4:6e:c4:d8:6a:a7:80:d1:b5:66:80:51:7d:4e:8e:a8:e2:
de:b3:7b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:10:35 2026 by rpki-client