Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
File: 3AF0F3E028CB11F195C91CE1BF833773.roa (raw, json)
Hash identifier: HFaUgN3HTwdNLlwCUwIht6jR7jRmO8HS69Mt0xa7qjc=
Subject key identifier: 18:E9:C9:18:3C:ED:56:8F:31:7A:60:29:9C:06:C5:56:5E:61:EB:83
Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial: 35A3
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
Signing time: Wed 28 Oct 2026 15:16:18 +0000
ROA not before: Wed 28 Oct 2026 15:16:18 +0000
ROA not after: Sun 28 Feb 2027 00:00:00 +0000
asID: 55330
IP address blocks: 103.17.165.0/24 maxlen: 24
103.17.166.0/24 maxlen: 24
180.94.64.0/24 maxlen: 24
180.94.65.0/24 maxlen: 24
180.94.66.0/24 maxlen: 24
180.94.67.0/24 maxlen: 24
180.94.68.0/24 maxlen: 24
180.94.69.0/24 maxlen: 24
180.94.70.0/24 maxlen: 24
180.94.71.0/24 maxlen: 24
180.94.72.0/24 maxlen: 24
180.94.73.0/24 maxlen: 24
180.94.74.0/24 maxlen: 24
180.94.75.0/24 maxlen: 24
180.94.76.0/24 maxlen: 24
180.94.77.0/24 maxlen: 24
180.94.78.0/24 maxlen: 24
180.94.79.0/24 maxlen: 24
180.94.80.0/24 maxlen: 24
180.94.81.0/24 maxlen: 24
180.94.82.0/24 maxlen: 24
180.94.83.0/24 maxlen: 24
180.94.84.0/24 maxlen: 24
180.94.85.0/24 maxlen: 24
180.94.86.0/24 maxlen: 24
180.94.87.0/24 maxlen: 24
180.94.88.0/24 maxlen: 24
180.94.89.0/24 maxlen: 24
180.94.90.0/24 maxlen: 24
180.94.91.0/24 maxlen: 24
180.94.92.0/24 maxlen: 24
180.94.93.0/24 maxlen: 24
180.94.94.0/24 maxlen: 24
180.94.95.0/24 maxlen: 24
203.215.32.0/24 maxlen: 24
203.215.33.0/24 maxlen: 24
203.215.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 14:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13731 (0x35a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Validity
Not Before: Oct 28 15:16:18 2026 GMT
Not After : Feb 28 00:00:00 2027 GMT
Subject: CN=6ae211c2-30d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:b0:3e:af:77:db:07:b9:e2:0f:64:cc:59:
25:2f:61:70:28:02:dc:54:37:7b:ea:ad:09:3b:ca:
d2:3b:ee:69:74:a8:63:81:51:a7:1f:c6:4c:80:13:
a9:a0:64:2c:b7:00:e0:7b:d5:21:6d:7e:d9:d5:74:
29:4d:8e:93:14:86:e3:6d:8c:f3:2c:6b:3e:96:a3:
e9:21:ba:6b:58:73:bf:bd:af:ab:ff:8d:6a:90:3a:
d8:23:da:15:5b:02:75:eb:41:df:80:d1:2e:b8:d3:
1b:e2:47:f2:4b:e0:2f:2f:9f:4b:9d:74:65:36:a7:
43:64:ac:ac:79:35:aa:3e:eb:7b:a1:ac:da:1b:b9:
a2:4b:05:0d:49:09:9d:ce:5c:4a:dd:7a:f0:df:28:
65:f8:a0:aa:5a:e3:83:2b:32:1c:b0:20:01:29:3a:
97:3e:d7:b3:97:16:c8:80:85:80:ae:3f:52:71:35:
12:6b:04:1b:69:43:67:e3:cf:89:70:d7:9c:4e:91:
5f:17:85:86:1d:77:c3:96:d0:0b:dc:86:c7:d8:bd:
08:6f:43:f8:8c:a8:56:d7:9c:f8:da:df:4d:2e:e2:
01:93:9f:07:b6:9e:82:d7:00:0b:56:e2:42:80:bc:
f1:32:6b:6e:c4:9d:41:d4:5c:db:eb:a0:83:9f:85:
23:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E9:C9:18:3C:ED:56:8F:31:7A:60:29:9C:06:C5:56:5E:61:EB:83
X509v3 Authority Key Identifier:
keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.165.0-103.17.166.255
180.94.64.0/19
203.215.32.0-203.215.34.255
Signature Algorithm: sha256WithRSAEncryption
d2:6c:f4:1e:81:88:02:c4:be:82:00:3b:d9:49:18:56:e2:21:
11:73:d7:35:72:23:ab:db:95:1e:1f:ac:db:7e:80:45:20:44:
0d:a1:70:db:bd:bc:a4:7c:bd:f1:e8:22:67:44:7c:11:9a:70:
14:96:61:d5:e8:da:a9:82:b7:4d:1b:3a:89:3c:c9:b1:c2:30:
d7:da:8f:3a:43:1e:a0:a2:39:0c:31:8b:1d:e0:bd:78:a9:32:
d9:54:54:01:13:18:d3:43:c8:52:12:bb:cb:fb:31:ae:e9:f1:
a3:bd:68:07:74:12:4b:2b:ed:72:bf:c5:6f:5f:42:d2:5f:8c:
34:eb:a0:ef:50:48:dd:4d:f5:d1:e3:e2:e5:21:cc:a6:9f:19:
76:d6:a1:f0:e9:e8:71:7a:4c:7e:b2:c4:84:20:63:c5:ea:47:
07:d2:ad:ce:b0:1b:46:69:1d:25:2d:15:f5:97:d0:92:1b:50:
b3:49:33:b0:d5:bc:c2:b2:8d:c7:72:70:9a:cb:76:33:13:0c:
42:41:02:c4:37:47:88:da:2d:ed:f7:0a:4b:ed:db:25:86:07:
8d:a5:af:70:07:67:9a:b8:97:5a:45:0e:2b:99:ad:dc:bf:1d:
2e:24:89:5c:c9:8c:8c:b5:06:5c:d7:4d:9d:7a:d3:d4:b6:82:
9b:68:f9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 14:12:57 2026 by rpki-client