Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
File: 3AF0F3E028CB11F195C91CE1BF833773.roa (raw, json)
Hash identifier: u52MWF5tX/svUqxjvLk6vmWrJaUj9BbcKl4QUhfj+Tw=
Subject key identifier: 87:B0:93:02:95:22:66:3E:57:51:4F:D6:AA:B9:F9:4C:DD:40:BF:DC
Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial: 352D
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
Signing time: Sun 29 Mar 2026 05:41:18 +0000
ROA not before: Sun 29 Mar 2026 05:41:18 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 55330
IP address blocks: 103.17.165.0/24 maxlen: 24
103.17.166.0/24 maxlen: 24
180.94.64.0/24 maxlen: 24
180.94.65.0/24 maxlen: 24
180.94.66.0/24 maxlen: 24
180.94.67.0/24 maxlen: 24
180.94.68.0/24 maxlen: 24
180.94.69.0/24 maxlen: 24
180.94.70.0/24 maxlen: 24
180.94.71.0/24 maxlen: 24
180.94.72.0/24 maxlen: 24
180.94.73.0/24 maxlen: 24
180.94.74.0/24 maxlen: 24
180.94.75.0/24 maxlen: 24
180.94.76.0/24 maxlen: 24
180.94.77.0/24 maxlen: 24
180.94.78.0/24 maxlen: 24
180.94.79.0/24 maxlen: 24
180.94.80.0/24 maxlen: 24
180.94.81.0/24 maxlen: 24
180.94.82.0/24 maxlen: 24
180.94.83.0/24 maxlen: 24
180.94.84.0/24 maxlen: 24
180.94.85.0/24 maxlen: 24
180.94.86.0/24 maxlen: 24
180.94.87.0/24 maxlen: 24
180.94.88.0/24 maxlen: 24
180.94.89.0/24 maxlen: 24
180.94.90.0/24 maxlen: 24
180.94.91.0/24 maxlen: 24
180.94.92.0/24 maxlen: 24
180.94.93.0/24 maxlen: 24
180.94.94.0/24 maxlen: 24
180.94.95.0/24 maxlen: 24
203.215.32.0/24 maxlen: 24
203.215.33.0/24 maxlen: 24
203.215.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13613 (0x352d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Validity
Not Before: Mar 29 05:41:18 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69c8bb7e-f620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:7f:b4:10:2a:e1:18:40:c9:f0:af:89:d9:
bd:44:13:d1:87:60:b8:18:93:ae:20:08:05:6d:f0:
26:61:68:61:d7:5d:b1:1c:3f:fd:03:dd:d4:e5:22:
0d:cf:1c:6b:1b:66:d4:c7:ed:6f:77:8c:11:77:89:
2f:b1:cc:2b:53:a1:5a:8e:5c:7d:12:90:d0:ff:15:
39:92:55:ac:82:b9:f6:0a:41:af:14:79:47:a7:59:
17:93:e9:b3:76:d5:ea:f4:77:e1:bb:99:62:d2:78:
a3:34:6c:12:b1:90:7a:d0:8d:42:a7:6d:f0:ea:fe:
c4:53:e4:af:ba:5b:de:df:ec:0e:e1:6d:51:8d:42:
07:f9:ad:8c:a8:6d:ae:24:8b:2d:7c:13:9d:89:00:
e8:84:0a:d1:c3:f0:92:f9:2f:1a:86:85:4d:70:72:
52:91:90:e2:35:9c:c7:e2:23:ca:e7:6d:ef:57:37:
90:8f:fd:f4:69:18:db:47:32:c4:e5:dd:37:11:35:
60:13:a6:5a:89:10:50:b3:b8:fd:75:92:8f:aa:16:
ab:a3:b9:26:04:0c:a7:7e:72:a4:13:fa:45:8d:08:
6a:93:ec:1c:f1:8b:3a:0f:4d:24:8a:58:b6:7c:40:
c6:68:9f:c9:f2:44:c3:52:ab:92:3d:f4:bb:09:22:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B0:93:02:95:22:66:3E:57:51:4F:D6:AA:B9:F9:4C:DD:40:BF:DC
X509v3 Authority Key Identifier:
keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.165.0-103.17.166.255
180.94.64.0/19
203.215.32.0-203.215.34.255
Signature Algorithm: sha256WithRSAEncryption
5d:f5:17:f1:4f:97:9d:5c:26:16:cc:92:ed:9f:6e:85:a5:94:
26:d1:58:32:53:3b:5d:1d:f0:1e:e6:95:d0:d3:3e:04:25:23:
44:a8:18:55:f6:f3:d9:9d:0c:8b:ba:84:f4:b4:00:d1:fa:a3:
ca:84:89:73:b8:34:4a:79:26:c5:0d:12:5f:7f:b3:b1:02:3f:
f0:90:53:48:d9:31:09:59:7d:f1:f5:14:9c:9e:92:a9:68:a1:
36:69:c2:27:8c:b9:98:2a:47:cc:17:36:3f:75:84:c4:61:2f:
4b:f3:c1:ce:e9:9a:61:f4:cb:c7:6a:b5:26:fb:de:16:94:91:
cf:87:c6:22:65:4b:65:47:fc:14:1e:66:91:59:1f:1d:c4:46:
2a:bd:eb:36:3c:21:7f:e6:98:ef:1e:9f:6c:36:ea:49:b9:8a:
d1:d0:61:8a:68:93:82:2d:40:53:ef:cf:04:9a:e4:37:fa:0b:
13:0b:48:88:b6:65:18:cc:c3:c9:e7:6b:48:0e:5b:5b:7b:12:
73:7e:0f:03:54:4e:b0:89:28:72:f8:aa:67:22:f8:64:56:16:
3b:b3:0a:03:e4:b3:69:43:52:1d:56:7c:a3:a3:48:62:c3:2b:
63:d5:ee:cb:48:80:f7:4f:3f:66:c5:f8:1d:4f:4b:3b:0d:62:
71:b3:d0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:22:19 2026 by rpki-client