Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
File: 9995D8D6276011EDAF21D06DC4F9AE02.roa (raw, json)
Hash identifier: Aym5jxve33LjI4C2J3/5RXUvSZxVxuIhz7xXCYUD0pg=
Subject key identifier: B3:B7:4D:29:65:F6:CF:BD:DD:1B:65:88:79:E4:F0:15:B7:5E:AF:F7
Certificate issuer: /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Certificate serial: 02E8
Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:43:26 +0000
ROA not before: Tue 24 Feb 2026 12:11:23 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150178
IP address blocks: 103.198.94.0/23 maxlen: 23
103.198.94.0/24 maxlen: 24
103.198.95.0/24 maxlen: 24
2400:a3a0::/32 maxlen: 32
2400:a3a0::/48 maxlen: 48
2400:a3a0:1::/48 maxlen: 48
2400:a3a0:2::/48 maxlen: 48
2400:a3a0:3::/48 maxlen: 48
2400:a3a0:4::/48 maxlen: 48
2400:a3a0:5::/48 maxlen: 48
2400:a3a0:6::/48 maxlen: 48
2400:a3a0:94::/48 maxlen: 48
2400:a3a0:95::/48 maxlen: 48
2400:a3a0:fb::/48 maxlen: 48
2400:a3a0:ecc::/48 maxlen: 48
2400:a3a0:fb3::/48 maxlen: 48
2400:a3a0:1000::/36 maxlen: 36
2400:a3a0:1000::/48 maxlen: 48
2400:a3a0:2000::/36 maxlen: 36
2400:a3a0:2000::/48 maxlen: 48
2400:a3a0:3000::/48 maxlen: 48
2400:a3a0:4000::/42 maxlen: 42
2400:a3a0:4001::/48 maxlen: 48
2400:a3a0:4002::/48 maxlen: 48
2400:a3a0:4003::/48 maxlen: 48
2400:a3a0:4004::/48 maxlen: 48
2400:a3a0:4005::/48 maxlen: 48
2400:a3a0:4006::/48 maxlen: 48
2400:a3a0:4007::/48 maxlen: 48
2400:a3a0:4008::/48 maxlen: 48
2400:a3a0:4009::/48 maxlen: 48
2400:a3a0:400a::/48 maxlen: 48
2400:a3a0:400b::/48 maxlen: 48
2400:a3a0:400c::/48 maxlen: 48
2400:a3a0:400d::/48 maxlen: 48
2400:a3a0:400e::/48 maxlen: 48
2400:a3a0:400f::/48 maxlen: 48
2400:a3a0:4010::/48 maxlen: 48
2400:a3a0:4011::/48 maxlen: 48
2400:a3a0:4012::/48 maxlen: 48
2400:a3a0:4013::/48 maxlen: 48
2400:a3a0:4014::/48 maxlen: 48
2400:a3a0:4015::/48 maxlen: 48
2400:a3a0:4016::/48 maxlen: 48
2400:a3a0:4017::/48 maxlen: 48
2400:a3a0:4018::/48 maxlen: 48
2400:a3a0:4019::/48 maxlen: 48
2400:a3a0:401a::/48 maxlen: 48
2400:a3a0:401b::/48 maxlen: 48
2400:a3a0:401c::/48 maxlen: 48
2400:a3a0:401d::/48 maxlen: 48
2400:a3a0:401e::/48 maxlen: 48
2400:a3a0:401f::/48 maxlen: 48
2400:a3a0:4020::/48 maxlen: 48
2400:a3a0:4021::/48 maxlen: 48
2400:a3a0:4022::/48 maxlen: 48
2400:a3a0:4023::/48 maxlen: 48
2400:a3a0:4024::/48 maxlen: 48
2400:a3a0:4025::/48 maxlen: 48
2400:a3a0:4026::/48 maxlen: 48
2400:a3a0:4027::/48 maxlen: 48
2400:a3a0:4028::/48 maxlen: 48
2400:a3a0:4029::/48 maxlen: 48
2400:a3a0:402a::/48 maxlen: 48
2400:a3a0:402b::/48 maxlen: 48
2400:a3a0:402c::/48 maxlen: 48
2400:a3a0:402d::/48 maxlen: 48
2400:a3a0:402e::/48 maxlen: 48
2400:a3a0:402f::/48 maxlen: 48
2400:a3a0:4030::/48 maxlen: 48
2400:a3a0:4031::/48 maxlen: 48
2400:a3a0:4032::/48 maxlen: 48
2400:a3a0:4033::/48 maxlen: 48
2400:a3a0:4034::/48 maxlen: 48
2400:a3a0:4035::/48 maxlen: 48
2400:a3a0:4036::/48 maxlen: 48
2400:a3a0:4037::/48 maxlen: 48
2400:a3a0:4038::/48 maxlen: 48
2400:a3a0:4039::/48 maxlen: 48
2400:a3a0:403a::/48 maxlen: 48
2400:a3a0:403b::/48 maxlen: 48
2400:a3a0:403c::/48 maxlen: 48
2400:a3a0:403d::/48 maxlen: 48
2400:a3a0:403e::/48 maxlen: 48
2400:a3a0:403f::/48 maxlen: 48
2400:a3a0:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194522, serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Validity
Not Before: Feb 24 12:11:23 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47abe-bdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:31:a8:a7:d1:10:25:9a:62:48:30:3d:a9:30:
37:5a:02:c7:4b:40:2d:e1:86:25:85:0c:20:5b:7b:
da:40:26:1c:a9:61:18:77:9e:98:b2:27:16:08:db:
70:55:1c:79:5d:17:10:72:55:a2:01:72:74:22:38:
a6:9a:f6:3b:53:20:22:38:37:31:a1:1e:6d:d8:6c:
00:3f:64:ac:51:87:aa:13:c8:1e:bd:ff:dc:cf:49:
08:99:23:6c:6e:20:24:51:46:c8:c3:15:00:62:4f:
2f:35:09:dc:dd:98:3d:f7:8f:8d:49:3e:34:70:90:
b3:73:5d:95:3b:eb:b8:82:e8:4c:ee:35:4b:d4:df:
8c:dc:93:29:c7:aa:e6:40:24:32:fc:88:cc:b5:c8:
99:58:d7:38:d5:a8:9d:b9:82:a4:5e:b6:97:6d:68:
d6:58:bb:ee:e0:0e:2b:f4:b3:15:8f:ea:3a:41:75:
60:f6:e5:19:04:a8:77:6e:74:d3:f3:fb:22:b8:57:
68:be:5c:c8:99:c0:f7:a4:65:7b:db:16:f9:81:8d:
0a:3e:2e:00:74:62:a2:61:49:fa:f0:8f:1c:13:87:
30:13:6f:e4:58:23:50:09:27:68:80:63:9e:6e:5e:
76:c3:b4:10:f8:af:48:5c:7e:80:4a:86:ec:70:65:
e2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B7:4D:29:65:F6:CF:BD:DD:1B:65:88:79:E4:F0:15:B7:5E:AF:F7
X509v3 Authority Key Identifier:
keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.198.94.0/23
IPv6:
2400:a3a0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:34:7a:9a:54:44:ad:b9:8e:45:a2:06:26:30:81:c6:f5:a6:
66:bb:4a:8e:0b:c5:7b:3a:60:8e:47:1f:f7:67:98:6d:a9:26:
20:5c:e7:16:df:84:2d:42:40:2e:86:15:d1:57:92:61:fe:50:
80:3f:53:64:07:68:92:ef:70:74:64:4c:a6:34:db:c5:d2:24:
70:b0:a9:e2:75:36:a5:e1:69:40:0a:c8:1e:dd:d1:04:06:23:
e7:3d:08:15:d4:9d:04:2e:c9:8e:63:5a:2c:66:79:44:63:8c:
3f:1e:e9:45:77:e7:6b:1e:b0:48:fb:52:b3:47:26:42:5a:fb:
ad:bc:e4:6a:92:62:98:5c:f3:3a:22:00:68:b7:46:51:ed:db:
b3:1c:f0:4b:00:8b:8d:11:da:a9:af:2a:31:9c:c7:2a:a7:4f:
f7:3c:51:02:40:2a:72:1c:78:61:0e:fa:4f:e6:c5:b7:be:61:
f4:1b:17:30:79:91:6d:ba:a5:a1:81:ab:2e:c1:c7:f3:10:6d:
b6:45:49:53:d7:7d:44:c7:42:5f:8f:d4:c7:cf:74:77:c6:f7:
a2:b0:fb:25:85:24:05:e1:53:d0:09:4f:5a:6a:02:fa:3b:c2:
52:1f:64:85:e2:79:f8:90:b6:c2:5d:e0:4a:85:00:44:c7:aa:
8c:63:01:f3
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ1MjIxMTAvBgNVBAUTKEE2Mzg5Qzc3NERBRDY1RDg4REYyRTZENEY0M0RFMkEw
QjU3MkVFN0EwHhcNMjYwMjI0MTIxMTIzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2FiZS1iZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5jGop9EQJZpiSDA9qTA3WgLHS0At4YYlhQwgW3vaQCYcqWEYd56YsicWCNtw
VRx5XRcQclWiAXJ0IjimmvY7UyAiODcxoR5t2GwAP2SsUYeqE8gevf/cz0kImSNs
biAkUUbIwxUAYk8vNQnc3Zg994+NST40cJCzc12VO+u4guhM7jVL1N+M3JMpx6rm
QCQy/IjMtciZWNc41aiduYKkXraXbWjWWLvu4A4r9LMVj+o6QXVg9uUZBKh3bnTT
8/siuFdovlzImcD3pGV72xb5gY0KPi4AdGKiYUn68I8cE4cwE2/kWCNQCSdogGOe
bl52w7QQ+K9IXH6ASobscGXizQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLO3TSll
9s+93RtliHnk8BW3Xq/3MB8GA1UdIwQYMBaAFKY4nHdNrWXYjfLm1PQ94qC1cu56
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDUyMi9ERTIwRkM5NjI3
NUMxMUVEOERBQzZBNjhDNEY5QUUwMi9wamljZDAydFpkaU44dWJVOUQzaW9MVnk3
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BqaWNkMDJ0WmRpTjh1YlU5RDNpb0xWeTduby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTQ1MjIvREUyMEZDOTYyNzVDMTFFRDhEQUM2QTY4QzRGOUFFMDIvOTk5NUQ4RDYy
NzYwMTFFREFGMjFEMDZEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ8ZeMA0EAgACMAcDBQAkAKOgMA0GCSqGSIb3DQEBCwUAA4IBAQCP
NHqaVEStuY5FogYmMIHG9aZmu0qOC8V7OmCORx/3Z5htqSYgXOcW34QtQkAuhhXR
V5Jh/lCAP1NkB2iS73B0ZEymNNvF0iRwsKnidTal4WlACsge3dEEBiPnPQgV1J0E
LsmOY1osZnlEY4w/HulFd+drHrBI+1KzRyZCWvutvORqkmKYXPM6IgBot0ZR7duz
HPBLAIuNEdqpryoxnMcqp0/3PFECQCpyHHhhDvpP5sW3vmH0GxcweZFtuqWhgasu
wcfzEG22RUlT131Ex0Jfj9THz3R3xveisPslhSQF4VPQCU9aagL6O8JSH2SF4nn4
kLbCXeBKhQBEx6qMYwHz
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:49 2026 by rpki-client