Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa
File: DC0965247F5A11F186F9402F5DA30FBC.roa (raw, json)
Hash identifier: cuoA7PgRGH/OoxPi8VgKutimj5xojc1b0+TBtcza/yk=
Subject key identifier: 90:A9:04:91:A4:D9:EA:2A:46:CC:50:5A:B9:CC:E5:32:1C:F9:D3:7A
Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial: 0E6D
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa
Signing time: Sun 20 Sep 2026 06:38:41 +0000
ROA not before: Sun 20 Sep 2026 06:38:41 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137967
IP address blocks: 103.117.192.0/22 maxlen: 22
103.117.192.0/23 maxlen: 23
103.117.192.0/24 maxlen: 24
103.117.193.0/24 maxlen: 24
103.117.194.0/23 maxlen: 23
103.117.194.0/24 maxlen: 24
103.117.195.0/24 maxlen: 24
2403:1e40::/32 maxlen: 32
2403:1e40::/34 maxlen: 34
2403:1e40::/48 maxlen: 48
2403:1e40:100::/48 maxlen: 48
2403:1e40:106::/48 maxlen: 48
2403:1e40:107::/48 maxlen: 48
2403:1e40:150::/48 maxlen: 48
2403:1e40:151::/48 maxlen: 48
2403:1e40:152::/48 maxlen: 48
2403:1e40:153::/48 maxlen: 48
2403:1e40:154::/48 maxlen: 48
2403:1e40:168::/48 maxlen: 48
2403:1e40:169::/48 maxlen: 48
2403:1e40:207::/48 maxlen: 48
2403:1e40:1205::/48 maxlen: 48
2403:1e40:1206::/48 maxlen: 48
2403:1e40:1207::/48 maxlen: 48
2403:1e40:1208::/48 maxlen: 48
2403:1e40:1209::/48 maxlen: 48
2403:1e40:120a::/48 maxlen: 48
2403:1e40:1210::/48 maxlen: 48
2403:1e40:1211::/48 maxlen: 48
2403:1e40:1212::/48 maxlen: 48
2403:1e40:1213::/48 maxlen: 48
2403:1e40:1214::/48 maxlen: 48
2403:1e40:1215::/48 maxlen: 48
2403:1e40:1216::/48 maxlen: 48
2403:1e40:1217::/48 maxlen: 48
2403:1e40:1218::/48 maxlen: 48
2403:1e40:1219::/48 maxlen: 48
2403:1e40:121a::/48 maxlen: 48
2403:1e40:121b::/48 maxlen: 48
2403:1e40:121c::/48 maxlen: 48
2403:1e40:121d::/48 maxlen: 48
2403:1e40:121e::/48 maxlen: 48
2403:1e40:121f::/48 maxlen: 48
2403:1e40:1220::/48 maxlen: 48
2403:1e40:1221::/48 maxlen: 48
2403:1e40:1222::/48 maxlen: 48
2403:1e40:1223::/48 maxlen: 48
2403:1e40:1224::/48 maxlen: 48
2403:1e40:1225::/48 maxlen: 48
2403:1e40:1226::/48 maxlen: 48
2403:1e40:1227::/48 maxlen: 48
2403:1e40:1228::/48 maxlen: 48
2403:1e40:1229::/48 maxlen: 48
2403:1e40:122a::/48 maxlen: 48
2403:1e40:122b::/48 maxlen: 48
2403:1e40:122c::/48 maxlen: 48
2403:1e40:122d::/48 maxlen: 48
2403:1e40:122e::/48 maxlen: 48
2403:1e40:122f::/48 maxlen: 48
2403:1e40:1241::/48 maxlen: 48
2403:1e40:1242::/48 maxlen: 48
2403:1e40:1244::/48 maxlen: 48
2403:1e40:1245::/48 maxlen: 48
2403:1e40:1246::/48 maxlen: 48
2403:1e40:1247::/48 maxlen: 48
2403:1e40:1248::/48 maxlen: 48
2403:1e40:1249::/48 maxlen: 48
2403:1e40:124a::/48 maxlen: 48
2403:1e40:3205::/48 maxlen: 48
2403:1e40:3206::/48 maxlen: 48
2403:1e40:3207::/48 maxlen: 48
2403:1e40:3208::/48 maxlen: 48
2403:1e40:3209::/48 maxlen: 48
2403:1e40:320a::/48 maxlen: 48
2403:1e40:3c05::/48 maxlen: 48
2403:1e40:3c06::/48 maxlen: 48
2403:1e40:3c07::/48 maxlen: 48
2403:1e40:3c08::/48 maxlen: 48
2403:1e40:4000::/34 maxlen: 34
2403:1e40:5704::/48 maxlen: 48
2403:1e40:5705::/48 maxlen: 48
2403:1e40:5706::/48 maxlen: 48
2403:1e40:5804::/48 maxlen: 48
2403:1e40:5805::/48 maxlen: 48
2403:1e40:5806::/48 maxlen: 48
2403:1e40:580a::/48 maxlen: 48
2403:1e40:580b::/48 maxlen: 48
2403:1e40:5905::/48 maxlen: 48
2403:1e40:70ff::/48 maxlen: 48
2403:1e40:7205::/48 maxlen: 48
2403:1e40:7206::/48 maxlen: 48
2403:1e40:7207::/48 maxlen: 48
2403:1e40:7208::/48 maxlen: 48
2403:1e40:8000::/34 maxlen: 34
2403:1e40:80ff::/48 maxlen: 48
2403:1e40:90ff::/48 maxlen: 48
2403:1e40:97ff::/48 maxlen: 48
2403:1e40:c000::/34 maxlen: 34
2403:1e40:c305::/48 maxlen: 48
2403:1e40:c306::/48 maxlen: 48
2403:1e40:fffc::/48 maxlen: 48
2403:1e40:fffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3693 (0xe6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Validity
Not Before: Sep 20 06:38:41 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aaf7f71-1992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:ec:20:f1:69:a0:dd:21:17:e8:98:ba:4f:
ce:72:30:f1:8a:e1:87:d7:6e:4e:2c:33:4e:d8:31:
aa:a0:fa:87:53:66:31:eb:18:c3:76:dc:2d:a1:8c:
ab:ff:3e:7f:08:30:9c:e1:43:28:68:c7:a3:22:57:
59:6a:d2:e4:90:93:9a:de:ea:85:78:c4:b7:94:5e:
0b:61:a1:e7:07:cd:c1:56:c3:84:1d:dc:78:38:e4:
dc:c9:80:ce:a0:fd:e3:6d:34:6a:dc:3c:d2:dc:3e:
a8:46:5c:3d:66:b7:8b:ce:42:e1:90:f0:e4:f3:9c:
c8:16:97:86:21:59:90:5a:f5:82:9d:4a:88:7c:75:
7a:d5:96:1b:f7:0e:7f:f0:e4:ba:61:89:82:b9:8e:
e7:0d:f1:1a:8d:62:d9:03:e6:d3:95:84:cf:ba:8a:
02:e8:79:0c:61:a2:8b:30:9e:60:f9:ce:ed:5d:5e:
6c:09:af:89:73:d4:34:4c:15:74:5e:3c:b1:c2:fb:
64:52:89:04:1b:7d:44:66:85:37:b4:4c:30:a5:fe:
9c:90:37:97:18:87:40:f3:15:91:75:d8:57:26:ea:
b8:c9:8d:37:9a:83:4f:66:99:5e:7c:22:5c:64:ff:
8d:5c:f5:0e:cf:be:9d:e2:64:e8:a0:db:f7:ca:28:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A9:04:91:A4:D9:EA:2A:46:CC:50:5A:B9:CC:E5:32:1C:F9:D3:7A
X509v3 Authority Key Identifier:
keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/DC0965247F5A11F186F9402F5DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.192.0/22
IPv6:
2403:1e40::/32
Signature Algorithm: sha256WithRSAEncryption
8e:a2:c2:78:77:25:2a:e6:27:c0:92:8e:ed:8d:e5:7f:75:4c:
43:62:95:f9:ad:6b:7e:fb:3f:6e:17:83:01:18:ec:b2:9c:0d:
00:8b:64:c5:af:f3:1f:45:56:f7:cd:5c:de:92:e3:bd:f2:a6:
c5:cf:c4:b8:52:4d:ee:92:97:0d:6f:50:6e:5f:c9:81:85:0d:
37:1a:49:3d:74:70:b4:e4:8f:dc:59:90:1a:de:d6:fc:1e:30:
31:d6:86:d0:be:7c:d1:6b:2d:cb:58:54:66:25:5f:96:0d:7b:
53:9d:e4:b6:83:84:0e:ab:a4:93:c8:e4:62:ea:bd:a9:3c:37:
78:f7:bb:95:03:37:6e:04:99:f8:56:e8:9f:a4:8b:85:1a:35:
83:79:67:5d:4a:45:24:70:dc:3f:01:ad:bc:af:f6:a1:31:4b:
29:2d:c6:c4:b4:29:a3:ef:4c:e2:35:0c:30:fe:17:58:52:e9:
37:d5:9b:ab:0d:dd:55:1d:95:f6:46:db:9f:a8:33:06:b2:f0:
32:fe:0d:d9:59:f0:dc:9e:5b:6e:6d:0b:8d:2f:d4:6c:a9:15:
75:2f:68:44:69:43:ad:9f:64:44:cb:f9:f6:dd:c8:4d:57:41:
6a:af:15:30:47:9c:c6:c8:f3:b9:9a:01:0f:b9:57:ee:16:81:
4b:d7:5b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:54:51 2026 by rpki-client