Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/9F12E3A025A511EE87132E45C4F9AE02.roa
File: 9F12E3A025A511EE87132E45C4F9AE02.roa (raw, json)
Hash identifier: TxDaiYQZFS4Ik//q76OvD/sE28hWkwuGs5dmTlG3+ls=
Subject key identifier: FF:CC:7D:C8:BE:F7:83:33:A3:F2:75:17:00:15:7E:B9:00:48:23:26
Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial: 0DE0
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/9F12E3A025A511EE87132E45C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:27:46 +0000
ROA not before: Mon 02 Feb 2026 09:20:39 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137967
IP address blocks: 103.117.192.0/22 maxlen: 22
103.117.192.0/23 maxlen: 23
103.117.192.0/24 maxlen: 24
103.117.193.0/24 maxlen: 24
103.117.194.0/23 maxlen: 23
103.117.194.0/24 maxlen: 24
103.117.195.0/24 maxlen: 24
2403:1e40::/32 maxlen: 36
2403:1e40::/48 maxlen: 48
2403:1e40:100::/48 maxlen: 48
2403:1e40:150::/48 maxlen: 48
2403:1e40:151::/48 maxlen: 48
2403:1e40:152::/48 maxlen: 48
2403:1e40:153::/48 maxlen: 48
2403:1e40:154::/48 maxlen: 48
2403:1e40:168::/48 maxlen: 48
2403:1e40:169::/48 maxlen: 48
2403:1e40:207::/48 maxlen: 48
2403:1e40:1000::/37 maxlen: 40
2403:1e40:1000::/41 maxlen: 48
2403:1e40:1080::/41 maxlen: 48
2403:1e40:1100::/41 maxlen: 48
2403:1e40:1180::/41 maxlen: 48
2403:1e40:1200::/41 maxlen: 48
2403:1e40:1280::/41 maxlen: 48
2403:1e40:1300::/41 maxlen: 48
2403:1e40:1380::/41 maxlen: 48
2403:1e40:1400::/41 maxlen: 48
2403:1e40:1800::/37 maxlen: 40
2403:1e40:1800::/41 maxlen: 48
2403:1e40:1880::/41 maxlen: 45
2403:1e40:1880::/42 maxlen: 48
2403:1e40:18c0::/43 maxlen: 48
2403:1e40:18e0::/44 maxlen: 48
2403:1e40:18f0::/45 maxlen: 48
2403:1e40:18f8::/46 maxlen: 46
2403:1e40:18f8::/47 maxlen: 48
2403:1e40:1a00::/41 maxlen: 48
2403:1e40:1a80::/41 maxlen: 48
2403:1e40:3206::/48 maxlen: 48
2403:1e40:3207::/48 maxlen: 48
2403:1e40:3208::/48 maxlen: 48
2403:1e40:3209::/48 maxlen: 48
2403:1e40:320a::/48 maxlen: 48
2403:1e40:3c05::/48 maxlen: 48
2403:1e40:3c08::/48 maxlen: 48
2403:1e40:70ff::/48 maxlen: 48
2403:1e40:7205::/48 maxlen: 48
2403:1e40:80ff::/48 maxlen: 48
2403:1e40:90ff::/48 maxlen: 48
2403:1e40:97ff::/48 maxlen: 48
2403:1e40:c305::/48 maxlen: 48
2403:1e40:fffc::/48 maxlen: 48
2403:1e40:fffd::/48 maxlen: 48
2403:1e40:fffe::/48 maxlen: 48
2403:1e40:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3552 (0xde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Validity
Not Before: Feb 2 09:20:39 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a47712-1091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:43:09:dd:f2:b8:a4:12:59:ed:43:af:09:
db:b1:25:8c:7d:63:ee:48:df:06:b0:02:67:34:05:
33:69:38:82:f2:c5:44:8d:be:1e:e4:61:88:aa:3f:
4d:79:3f:ff:b0:0a:74:cb:4e:37:25:77:35:7d:17:
52:5b:d2:e0:e1:41:c7:1a:64:4d:f9:0d:71:e5:b2:
2e:17:5f:fc:ad:e0:a1:6c:11:a4:e1:6d:38:4f:f3:
a9:f8:bf:25:c4:9b:33:3e:15:ee:a6:4e:21:7a:37:
eb:ca:c4:e4:5e:c0:7e:e6:65:e6:ed:ef:08:cd:85:
cc:2f:69:53:39:88:3f:af:ec:08:d9:51:20:ac:a2:
98:57:f4:e9:48:f7:91:a9:63:96:06:ab:cd:46:c4:
e7:a1:f4:6c:05:78:74:cc:ca:12:09:07:35:e4:ec:
7d:dd:9c:3a:81:fa:86:66:7b:2c:b3:2f:65:5a:45:
6a:74:bd:10:eb:57:10:a9:5c:9f:92:d6:09:8b:c5:
b3:0e:8a:07:c0:69:c6:e1:a4:2f:3a:2b:b1:c5:0e:
9e:b9:22:f3:fa:1c:ad:d8:ef:60:87:fd:b9:7f:68:
a6:98:b1:1f:0c:19:df:ce:7d:6d:9d:e3:d0:f7:f2:
c1:cb:26:43:d9:a1:6b:b4:ca:f9:41:bf:57:8d:03:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:7D:C8:BE:F7:83:33:A3:F2:75:17:00:15:7E:B9:00:48:23:26
X509v3 Authority Key Identifier:
keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/9F12E3A025A511EE87132E45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.192.0/22
IPv6:
2403:1e40::/32
Signature Algorithm: sha256WithRSAEncryption
6b:76:93:d6:0a:90:e9:b7:2c:98:8a:61:ff:31:a6:c7:d1:8f:
d7:85:97:5f:f0:62:72:b1:bb:4a:99:cd:77:53:2a:39:45:97:
f9:20:10:c1:2c:37:7d:25:c2:14:33:9a:3e:c8:17:21:d6:c3:
18:0d:39:df:ce:e6:5d:88:69:aa:f1:e2:12:9b:d0:99:fb:1b:
3c:1e:de:fb:fc:40:c0:d0:65:17:fe:d9:e5:a5:3c:7b:c5:bd:
69:2a:a1:a0:2b:47:15:8f:ec:e8:d1:5c:44:4f:53:ba:d2:7d:
b4:98:17:c1:47:4e:b0:d8:e6:d4:66:a3:a6:a8:54:c4:3e:61:
c3:9d:aa:52:dc:2d:8a:06:8f:10:49:b6:57:bd:cb:a6:b2:ce:
63:84:7b:91:9e:13:56:84:cf:0a:22:a8:91:38:d2:0e:be:95:
29:01:8e:26:cd:71:20:a2:dc:c2:6e:1e:24:a4:cc:09:97:da:
ce:d0:42:ad:79:03:31:f7:81:fa:d4:30:19:18:18:5d:e2:db:
ed:9d:71:c5:c3:4a:fb:f2:4c:f6:73:ae:25:c5:b2:c4:5d:ae:
27:8b:71:c6:49:24:20:4c:74:b4:e7:28:66:78:a9:c2:b4:bb:
a5:56:b8:41:e0:28:04:62:37:57:4f:19:c3:32:c2:bf:b9:79:
64:12:06:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:52 2026 by rpki-client