Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa
File: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (raw, json)
Hash identifier: gko9Q35KdBOiYMYQc7V0na7o/2+tf0Ti0oIVrHZBvXA=
Subject key identifier: A3:AD:4F:78:FA:7B:D2:0A:F2:4F:C8:96:64:0A:9B:7F:5A:C9:52:7E
Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Certificate serial: 314C
Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:54:17 +0000
ROA not before: Wed 30 Apr 2025 15:52:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6421
IP address blocks: 43.241.40.0/24 maxlen: 24
103.16.252.0/23 maxlen: 23
103.16.254.0/23 maxlen: 23
116.0.66.0/24 maxlen: 24
180.87.13.0/24 maxlen: 24
180.87.27.0/24 maxlen: 24
180.87.29.0/24 maxlen: 24
180.87.68.0/24 maxlen: 24
180.87.76.0/24 maxlen: 24
180.87.91.0/24 maxlen: 24
180.87.92.0/24 maxlen: 24
180.87.115.0/24 maxlen: 24
180.87.117.0/24 maxlen: 24
180.87.119.0/24 maxlen: 24
180.87.120.0/24 maxlen: 24
180.87.121.0/24 maxlen: 24
180.87.122.0/24 maxlen: 24
180.87.124.0/24 maxlen: 24
180.87.126.0/24 maxlen: 24
180.87.127.0/24 maxlen: 24
180.87.129.0/24 maxlen: 24
180.87.138.0/24 maxlen: 24
180.87.139.0/24 maxlen: 24
180.87.140.0/24 maxlen: 24
180.87.141.0/24 maxlen: 24
180.87.152.0/24 maxlen: 24
180.87.153.0/24 maxlen: 24
180.87.182.0/24 maxlen: 24
180.87.190.0/24 maxlen: 24
180.87.191.0/24 maxlen: 24
202.183.64.0/24 maxlen: 24
202.183.65.0/24 maxlen: 24
202.183.66.0/24 maxlen: 24
202.183.69.0/24 maxlen: 24
202.183.70.0/24 maxlen: 24
202.183.72.0/24 maxlen: 24
202.183.73.0/24 maxlen: 24
202.183.74.0/24 maxlen: 24
202.183.75.0/24 maxlen: 24
202.183.76.0/24 maxlen: 24
202.183.77.0/24 maxlen: 24
202.183.79.0/24 maxlen: 24
2405:2001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12620 (0x314c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B
Validity
Not Before: Apr 30 15:52:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47d49-16e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:4c:4b:55:e9:d1:b1:18:8a:52:ce:e8:58:
94:30:8a:07:3d:d3:68:8b:d6:45:cc:0a:aa:33:a4:
5e:35:33:50:37:62:b8:58:b9:66:2c:fb:35:9b:b6:
b9:95:79:d9:3d:e4:16:3a:d3:5d:90:db:f5:97:03:
6f:44:81:7a:61:d7:01:76:13:79:52:f3:c6:dd:a6:
06:2a:ee:f7:c7:55:31:9b:24:72:9f:ce:a6:dd:3e:
2a:99:49:a2:8d:2c:f5:63:53:d8:70:1b:26:dd:4a:
9e:7b:98:fa:64:fc:05:04:4a:15:66:5d:89:d7:17:
c8:f1:e0:10:98:67:25:e7:3e:60:bd:55:23:4b:26:
37:4d:38:1e:c0:ec:88:ba:6a:43:77:6d:5b:59:0b:
2e:5c:01:ef:f8:70:1b:aa:90:80:11:8d:dc:b6:5c:
36:07:f2:1e:b3:13:ef:25:2b:0a:a1:96:97:d6:6e:
59:da:c9:10:67:71:fb:20:9d:9d:78:d2:36:22:dc:
6f:6a:3c:51:61:fd:17:86:81:3b:7a:43:7b:0a:13:
95:b8:74:18:31:59:a8:c6:04:5d:a6:0b:b4:df:6e:
fe:7b:e5:e5:32:bc:1d:30:13:30:f0:1f:71:ad:65:
1f:4d:e7:24:5b:d8:f2:13:c5:59:a0:e0:b9:fa:85:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AD:4F:78:FA:7B:D2:0A:F2:4F:C8:96:64:0A:9B:7F:5A:C9:52:7E
X509v3 Authority Key Identifier:
keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.241.40.0/24
103.16.252.0/22
116.0.66.0/24
180.87.13.0/24
180.87.27.0/24
180.87.29.0/24
180.87.68.0/24
180.87.76.0/24
180.87.91.0-180.87.92.255
180.87.115.0/24
180.87.117.0/24
180.87.119.0-180.87.122.255
180.87.124.0/24
180.87.126.0/23
180.87.129.0/24
180.87.138.0-180.87.141.255
180.87.152.0/23
180.87.182.0/24
180.87.190.0/23
202.183.64.0-202.183.66.255
202.183.69.0-202.183.70.255
202.183.72.0-202.183.77.255
202.183.79.0/24
IPv6:
2405:2001::/48
Signature Algorithm: sha256WithRSAEncryption
84:1f:1c:da:ec:3b:83:3b:d6:01:a5:f4:f1:14:4f:fa:7c:2e:
a3:9c:8f:e2:40:f2:31:d8:07:f5:fa:de:8e:b3:05:7b:80:52:
0a:60:dc:df:c9:cc:35:fc:9f:62:68:d4:f2:5c:f9:8f:82:d9:
b8:93:18:80:a3:b5:49:e6:60:dc:74:cb:fc:00:4b:93:16:19:
a7:7f:4f:06:b0:03:de:f2:fe:06:6b:50:bb:fb:63:b4:d4:07:
f6:5f:3f:e5:92:16:44:4c:0b:a6:b8:af:b5:2c:ea:4a:86:56:
d2:9b:b0:c2:c4:d4:8f:ea:fe:35:48:e0:79:37:84:c7:71:2c:
c0:92:a9:d0:ca:28:46:6e:1d:c2:f3:e3:32:03:70:eb:ee:2f:
68:4e:8b:46:cc:f8:29:19:a5:68:71:2d:72:d5:ab:cb:25:6a:
32:30:4e:41:63:5b:23:cb:cd:1e:61:a2:f5:55:a7:5c:29:4a:
18:79:c4:72:63:7a:11:bb:e0:52:c7:63:81:27:ff:e0:4f:cc:
ec:a8:af:bb:5d:5f:01:c4:67:00:de:a1:c5:c4:f6:04:1f:1d:
8b:9e:ac:e7:04:3d:28:e5:28:af:9d:68:1d:87:df:10:0e:8d:
32:08:46:f9:ee:78:a7:58:91:08:ef:93:51:e9:98:6f:21:44:
c0:3b:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:13 2026 by rpki-client