Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/036356DC573611F08FD0E718C4F9AE02.roa
File: 036356DC573611F08FD0E718C4F9AE02.roa (raw, json)
Hash identifier: KRtHkVSZXFOFyWsT55lu8WNhs+51VItHv41Q5Q+Oyy0=
Subject key identifier: 3C:44:79:66:87:96:93:2C:4B:9D:BC:A5:E1:CF:D1:07:A0:5E:9B:AA
Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
Certificate serial: 356D
Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/036356DC573611F08FD0E718C4F9AE02.roa
Signing time: Tue 14 Apr 2026 15:12:50 +0000
ROA not before: Tue 14 Apr 2026 15:12:50 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 132789
IP address blocks: 203.105.192.0/24 maxlen: 24
203.105.193.0/24 maxlen: 24
203.105.194.0/24 maxlen: 24
203.105.195.0/24 maxlen: 24
203.105.196.0/24 maxlen: 24
203.105.197.0/24 maxlen: 24
203.105.198.0/24 maxlen: 24
203.105.199.0/24 maxlen: 24
203.105.201.0/24 maxlen: 24
203.105.202.0/24 maxlen: 24
203.105.205.0/24 maxlen: 24
203.105.206.0/24 maxlen: 24
203.105.207.0/24 maxlen: 24
203.105.208.0/24 maxlen: 24
203.105.209.0/24 maxlen: 24
203.105.212.0/24 maxlen: 24
203.105.213.0/24 maxlen: 24
203.105.214.0/24 maxlen: 24
203.105.215.0/24 maxlen: 24
203.105.216.0/24 maxlen: 24
203.105.217.0/24 maxlen: 24
203.105.218.0/24 maxlen: 24
203.105.219.0/24 maxlen: 24
203.105.220.0/24 maxlen: 24
203.105.221.0/24 maxlen: 24
203.105.222.0/24 maxlen: 24
203.105.223.0/24 maxlen: 24
2402:3780::/48 maxlen: 48
2402:3780:2::/48 maxlen: 48
2402:3780:1000::/48 maxlen: 48
2402:3780:f001::/48 maxlen: 48
2402:3780:f002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl
rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13677 (0x356d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B9CB, serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479
Validity
Not Before: Apr 14 15:12:50 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69de5972-f4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:46:e7:d5:1f:78:bc:85:f3:54:6e:66:57:
48:07:f0:c6:db:2c:f1:18:e5:20:d6:10:8f:20:82:
68:3a:92:d6:e1:48:88:5c:72:35:bb:25:28:87:32:
1c:38:4c:c1:d5:f8:66:2c:27:8a:27:e4:8a:bd:1b:
c8:bf:91:fb:47:ee:d1:82:94:9d:ab:d7:4e:d3:c3:
62:3d:92:ba:b2:83:72:c7:dc:be:39:ab:c5:01:99:
50:ba:8f:5d:2d:99:d4:82:68:77:e2:70:99:05:74:
18:43:25:21:f0:c8:cd:61:a1:79:f4:63:bf:8a:1b:
20:44:57:08:cc:82:8a:4b:d3:bc:bb:1a:5b:fb:03:
de:f8:bb:4f:52:7a:64:08:ef:20:5d:07:6a:0d:cd:
33:0c:80:9f:ea:19:96:18:9e:7e:ae:eb:e5:b2:26:
87:20:19:a3:b9:b0:b6:c6:2c:6c:55:8e:7d:e4:d3:
3a:53:e0:5b:09:47:b4:db:5a:6f:f1:bb:d3:ff:30:
3e:1e:79:f9:4f:0d:9e:e5:19:d5:30:c0:61:e4:cd:
c5:ec:90:27:88:5b:c5:3a:fe:81:b6:40:91:02:3b:
43:b2:c1:b5:56:cc:7a:7d:08:48:71:7b:d4:2b:eb:
6c:5c:1e:63:f6:62:0a:3a:f2:50:7b:23:9b:99:47:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:44:79:66:87:96:93:2C:4B:9D:BC:A5:E1:CF:D1:07:A0:5E:9B:AA
X509v3 Authority Key Identifier:
keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/036356DC573611F08FD0E718C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.105.192.0/21
203.105.201.0-203.105.202.255
203.105.205.0-203.105.209.255
203.105.212.0-203.105.223.255
IPv6:
2402:3780::/48
2402:3780:2::/48
2402:3780:1000::/48
2402:3780:f001::-2402:3780:f002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c4:a6:b9:51:22:4a:0b:85:6b:ff:95:33:f1:64:db:92:40:84:
13:54:e7:bf:23:b9:0b:9e:b5:d7:9f:9c:81:bc:55:88:f2:46:
06:f8:14:01:f1:84:c1:ef:2c:cd:48:3e:ac:b9:91:c2:f6:16:
db:1b:e4:1b:e8:01:bb:78:cb:15:a1:27:c8:55:14:6e:2d:71:
c4:6d:70:64:c3:59:79:6e:cc:98:ac:66:d8:80:46:6a:1e:cd:
94:13:80:14:31:28:1c:24:c0:10:dd:fa:f8:32:1a:5c:73:b6:
0a:cf:de:fe:fd:ab:c9:26:a6:f1:2b:90:c0:f9:74:71:d2:21:
f4:a1:b2:e2:de:97:f9:28:cd:4d:58:57:c6:a5:c4:e2:e7:26:
5f:86:8b:f2:0c:e4:ae:9d:21:90:2a:8f:5c:93:9f:25:53:b7:
e8:40:d0:2a:b9:de:02:87:cd:3a:cd:15:8c:18:99:e2:0d:d6:
5b:57:a9:5c:77:98:43:59:b0:3e:f5:7a:ba:0b:90:3d:fb:52:
0d:d4:95:42:13:dc:5a:8c:b0:e4:d3:97:ff:3e:a5:b5:0f:c2:
c0:32:5d:25:3c:8f:13:52:32:52:c0:1e:e2:49:53:46:83:ff:
f1:d4:93:5c:84:e5:d3:d9:a4:55:8b:46:43:49:99:01:1e:90:
44:42:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:57 2026 by rpki-client