Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/38FA1FDE135711EAACF3565BC4F9AE02.roa
File: 38FA1FDE135711EAACF3565BC4F9AE02.roa (raw, json)
Hash identifier: itG/2TEeUAiOGwgLnnnphos/UoKB0vtQptEJXIBL+5I=
Subject key identifier: C1:82:59:78:5F:C4:EC:9D:F7:5F:8B:1A:B2:11:9F:A8:D1:47:92:BF
Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Certificate serial: 0CA4
Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/38FA1FDE135711EAACF3565BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:01:59 +0000
ROA not before: Mon 29 Dec 2025 18:29:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137554
IP address blocks: 103.113.12.0/22 maxlen: 22
103.113.12.0/23 maxlen: 23
103.113.12.0/24 maxlen: 24
103.113.13.0/24 maxlen: 24
103.113.14.0/23 maxlen: 23
103.113.14.0/24 maxlen: 24
103.113.15.0/24 maxlen: 24
2402:b540::/32 maxlen: 32
2402:b540:1::/48 maxlen: 48
2402:b540:2::/48 maxlen: 48
2402:b540:3::/48 maxlen: 48
2402:b540:4::/48 maxlen: 48
2402:b540:5::/48 maxlen: 48
2402:b540:6::/48 maxlen: 48
2402:b540:7::/48 maxlen: 48
2402:b540:8::/48 maxlen: 48
2402:b540:9::/48 maxlen: 48
2402:b540:a::/48 maxlen: 48
2402:b540:b::/48 maxlen: 48
2402:b540:c::/48 maxlen: 48
2402:b540:d::/48 maxlen: 48
2402:b540:e::/48 maxlen: 48
2402:b540:f::/48 maxlen: 48
2402:b540:2a::/48 maxlen: 48
2402:b540:2b::/48 maxlen: 48
2402:b540:2c::/48 maxlen: 48
2402:b540:2d::/48 maxlen: 48
2402:b540:2e::/48 maxlen: 48
2402:b540:2f::/48 maxlen: 48
2402:b540:200::/48 maxlen: 48
2402:b540:202::/48 maxlen: 48
2402:b540:203::/48 maxlen: 48
2402:b540:400::/48 maxlen: 48
2402:b540:410::/48 maxlen: 48
2402:b540:600::/40 maxlen: 40
2402:b540:600::/48 maxlen: 48
2402:b540:601::/48 maxlen: 48
2402:b540:602::/48 maxlen: 48
2402:b540:603::/48 maxlen: 48
2402:b540:604::/48 maxlen: 48
2402:b540:605::/48 maxlen: 48
2402:b540:606::/48 maxlen: 48
2402:b540:607::/48 maxlen: 48
2402:b540:608::/48 maxlen: 48
2402:b540:609::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Validity
Not Before: Dec 29 18:29:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47106-40c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9e:ba:cb:d8:2c:08:5f:ba:e1:d5:05:c2:1b:
7b:0c:08:20:25:6a:5b:b6:5e:d3:a5:08:6f:ef:0d:
6f:e6:a4:26:81:2b:6e:d6:6f:d2:dc:c4:02:ee:a2:
94:58:7f:98:cc:34:46:e0:2b:4b:8b:6b:1d:91:7b:
4b:43:e5:6a:3d:e9:08:d7:fe:96:08:da:13:15:f2:
35:86:40:c7:f0:e0:e0:12:79:cb:ec:0c:b3:9c:84:
1e:63:f6:a2:86:74:33:dc:95:90:56:09:b2:89:bf:
5a:c5:d2:eb:f9:65:40:d3:c5:f0:30:15:24:90:76:
94:e7:29:29:a4:26:65:f4:e1:c0:05:4b:5b:63:58:
92:ab:cf:41:88:34:7f:cc:10:1f:4f:9d:9e:6c:ef:
36:17:9e:a5:dc:67:2b:05:9a:ba:d5:fe:c0:a4:7f:
54:b6:48:97:ad:64:4e:55:6b:15:33:fe:0b:06:11:
7c:ec:b2:a7:16:cb:29:52:32:04:7d:0e:a6:e1:b6:
eb:f9:61:0b:d0:7a:fb:b2:ac:b6:79:3d:65:65:85:
4b:59:93:5c:95:05:91:ce:81:8e:6d:b2:0b:f5:43:
64:06:82:8b:d3:03:cc:7c:38:e2:71:c1:68:26:74:
bb:4f:93:4e:96:3e:37:73:2c:f2:98:67:51:ee:b4:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:82:59:78:5F:C4:EC:9D:F7:5F:8B:1A:B2:11:9F:A8:D1:47:92:BF
X509v3 Authority Key Identifier:
keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/38FA1FDE135711EAACF3565BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.12.0/22
IPv6:
2402:b540::/32
Signature Algorithm: sha256WithRSAEncryption
67:a0:9d:c3:79:2c:ff:da:93:b0:6b:fc:a4:05:69:21:ef:40:
55:dc:66:5e:8b:b9:ef:86:65:72:66:66:ee:c8:8b:75:8e:48:
b5:f8:26:76:49:95:51:70:dc:b3:ee:c2:38:01:bd:16:dc:c7:
bc:1d:f0:a5:a8:55:da:8e:cc:d6:79:fb:20:15:4c:2c:eb:37:
88:95:cb:21:0a:c6:93:3b:c4:6f:df:a5:73:c6:eb:94:42:c7:
0d:38:f3:09:26:3e:01:dd:db:91:47:e2:1c:7c:06:be:50:80:
0c:d8:86:aa:0c:cd:a3:6c:45:86:eb:fc:ca:86:91:19:0b:fe:
71:a2:1e:1e:f1:40:fe:22:46:d9:09:0e:59:3f:65:c3:9d:1d:
dd:9b:fb:74:7a:1f:05:df:af:f0:21:65:fd:d3:d3:26:1b:0a:
af:78:0d:9a:75:f8:88:c1:5d:32:ca:e6:01:13:45:07:70:d2:
dc:0e:f4:07:38:f3:1d:ac:42:15:2b:6a:6a:04:91:5b:45:04:
eb:c2:40:a8:1c:94:59:37:30:63:29:2f:4b:80:3a:27:b5:ce:
d5:32:aa:05:52:6f:2a:72:4b:ba:30:a5:94:93:be:cb:a6:4b:
3f:68:d1:c4:77:64:22:86:1d:64:29:dd:3b:5d:00:43:10:e0:
86:5a:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:44 2026 by rpki-client