Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
File: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (raw, json)
Hash identifier: VUy2fh459MBH6GZVoQsHe0CBL0sp3m9ttymLjDxTLy8=
Subject key identifier: FC:C0:C9:1B:D3:66:6B:62:65:EC:41:E5:B4:0E:86:89:63:39:E2:DE
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 3579
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:11:12 +0000
ROA not before: Mon 28 Apr 2025 14:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7604
IP address blocks: 103.6.12.0/22 maxlen: 22
103.6.12.0/24 maxlen: 24
103.6.13.0/24 maxlen: 24
103.6.14.0/24 maxlen: 24
103.6.15.0/24 maxlen: 24
103.25.112.0/23 maxlen: 23
103.241.200.0/22 maxlen: 22
103.241.200.0/24 maxlen: 24
103.241.201.0/24 maxlen: 24
119.252.64.0/22 maxlen: 22
119.252.64.0/24 maxlen: 24
119.252.68.0/22 maxlen: 22
119.252.72.0/22 maxlen: 22
119.252.72.0/23 maxlen: 23
119.252.74.0/24 maxlen: 24
119.252.76.0/22 maxlen: 22
119.252.80.0/22 maxlen: 22
119.252.84.0/22 maxlen: 22
119.252.86.0/24 maxlen: 24
119.252.88.0/22 maxlen: 22
119.252.88.0/23 maxlen: 23
119.252.91.0/24 maxlen: 24
119.252.92.0/22 maxlen: 23
122.202.64.0/20 maxlen: 20
180.233.129.0/24 maxlen: 24
180.233.130.0/24 maxlen: 24
180.233.131.0/24 maxlen: 24
202.74.160.0/20 maxlen: 20
202.74.160.0/22 maxlen: 22
202.74.164.0/22 maxlen: 24
202.74.168.0/22 maxlen: 22
202.74.172.0/22 maxlen: 22
202.74.174.0/24 maxlen: 24
202.74.176.0/22 maxlen: 22
202.74.178.0/24 maxlen: 24
202.74.180.0/22 maxlen: 22
202.74.184.0/22 maxlen: 22
202.74.188.0/22 maxlen: 22
202.74.188.0/23 maxlen: 23
202.191.4.0/22 maxlen: 24
203.7.224.0/23 maxlen: 23
203.7.224.0/24 maxlen: 24
203.19.12.0/24 maxlen: 24
203.23.208.0/21 maxlen: 21
203.23.216.0/22 maxlen: 22
203.23.220.0/22 maxlen: 22
203.23.220.0/23 maxlen: 24
203.23.223.0/24 maxlen: 24
203.24.54.0/24 maxlen: 24
203.25.26.0/23 maxlen: 23
203.30.19.0/24 maxlen: 24
203.30.34.0/24 maxlen: 24
203.31.0.0/24 maxlen: 24
203.32.124.0/22 maxlen: 22
203.32.125.0/24 maxlen: 24
203.34.30.0/23 maxlen: 23
203.34.30.0/24 maxlen: 24
203.55.198.0/24 maxlen: 24
203.124.176.0/20 maxlen: 20
203.196.92.0/22 maxlen: 22
203.209.160.0/20 maxlen: 20
203.209.160.0/22 maxlen: 22
203.209.164.0/24 maxlen: 24
203.209.166.0/23 maxlen: 23
203.209.168.0/24 maxlen: 24
203.209.169.0/24 maxlen: 24
203.209.170.0/23 maxlen: 23
203.209.172.0/22 maxlen: 22
2401:400::/32 maxlen: 32
2401:402::/31 maxlen: 32
2403:3400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13689 (0x3579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Apr 28 14:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a42ce0-b7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:3c:c5:5a:ab:e8:39:43:6b:87:0f:32:a3:
8b:d7:4a:01:50:c8:30:77:fa:cd:33:50:4b:29:0a:
c0:f0:bf:71:88:0d:c5:a6:6e:f7:40:58:b2:6d:88:
ce:07:2e:24:b8:26:e3:a2:70:bf:68:1c:38:fb:88:
e4:56:61:15:13:c9:e8:fc:cc:82:9e:33:23:7d:46:
45:6f:98:0b:d7:e5:b9:11:af:ae:b9:96:1e:eb:40:
96:aa:56:8a:85:e0:b9:22:50:3b:47:0b:22:4c:b1:
24:4d:bf:60:d9:0a:eb:83:66:71:49:d1:9d:a5:f0:
1b:4e:ad:24:ff:e9:80:12:da:ea:63:56:90:44:cc:
2e:e8:47:b4:69:77:d9:25:23:bb:42:75:11:38:02:
6b:75:7b:a1:8b:0e:44:b8:bd:4f:19:82:92:bf:be:
09:79:f7:3e:27:49:61:6e:da:93:8f:02:56:d8:02:
eb:95:0d:a0:03:2e:ef:4f:b3:d3:62:4d:44:6c:c9:
31:d6:5a:52:88:3b:1f:b5:10:a9:6c:3b:30:f2:e7:
82:59:65:6f:4d:4b:bd:ac:79:c8:99:af:3c:db:5e:
02:83:71:6c:a0:87:76:1e:b7:ce:12:ca:22:ea:a2:
ba:ad:87:77:4a:6c:c4:0d:fb:a2:1a:c0:88:08:c8:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C0:C9:1B:D3:66:6B:62:65:EC:41:E5:B4:0E:86:89:63:39:E2:DE
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.12.0/22
103.25.112.0/23
103.241.200.0/22
119.252.64.0/19
122.202.64.0/20
180.233.129.0-180.233.131.255
202.74.160.0/19
202.191.4.0/22
203.7.224.0/23
203.19.12.0/24
203.23.208.0/20
203.24.54.0/24
203.25.26.0/23
203.30.19.0/24
203.30.34.0/24
203.31.0.0/24
203.32.124.0/22
203.34.30.0/23
203.55.198.0/24
203.124.176.0/20
203.196.92.0/22
203.209.160.0/20
IPv6:
2401:400::/32
2401:402::/31
2403:3400::/32
Signature Algorithm: sha256WithRSAEncryption
b4:9f:de:94:e9:85:61:fd:71:f2:3b:d9:ae:8a:45:b9:6b:b5:
2c:31:df:e5:11:60:4c:af:c5:4e:77:b1:fc:9b:63:d1:e7:cf:
fe:ab:6c:ae:b6:ce:17:69:78:ce:2a:75:03:9c:e7:b4:9d:e2:
b0:f3:63:ec:2e:aa:f0:58:92:9a:85:5f:7b:3d:f3:4f:32:a2:
f8:74:ff:f9:68:f2:95:34:95:3b:07:b5:31:0b:82:fb:20:3c:
03:56:08:38:80:dd:5a:89:1b:39:2c:7b:b8:85:e5:6a:82:04:
7c:5a:e3:6a:ee:68:b4:40:ff:15:ff:37:aa:7e:7f:76:ea:ec:
67:84:d0:76:99:ef:9d:b9:10:4b:0c:37:f3:88:60:89:5c:cb:
a9:a3:1f:b9:9e:1f:1a:9a:48:38:62:44:89:12:a2:88:aa:7f:
35:21:7f:13:ba:aa:6a:17:74:40:b9:17:36:03:a9:c3:87:5b:
15:4a:e4:a4:b8:e8:70:37:bd:8c:0a:93:9e:5f:05:f4:d4:58:
92:cb:6b:25:02:b5:bd:31:f8:e7:7f:be:e8:58:dd:77:77:aa:
d2:68:da:49:ec:19:4e:75:a0:8c:9b:ba:f2:6a:e4:91:02:53:
6a:15:f0:49:ab:68:72:b2:74:42:6f:21:ad:33:17:2b:2a:3f:
03:7b:f2:6f
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgICNXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY1OUMxMTAvBgNVBAUTKEMxMjk2RkZBRDM0RjI5RjA0RTBFRkFENUQ5MjQ0QzAy
QTdEODdEOEQwHhcNMjUwNDI4MTQ1MDQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmNlMC1iN2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsPo8xVqr6DlDa4cPMqOL10oBUMgwd/rNM1BLKQrA8L9xiA3Fpm73QFiybYjO
By4kuCbjonC/aBw4+4jkVmEVE8no/MyCnjMjfUZFb5gL1+W5Ea+uuZYe60CWqlaK
heC5IlA7RwsiTLEkTb9g2Qrrg2ZxSdGdpfAbTq0k/+mAEtrqY1aQRMwu6Ee0aXfZ
JSO7QnUROAJrdXuhiw5EuL1PGYKSv74Jefc+J0lhbtqTjwJW2ALrlQ2gAy7vT7PT
Yk1EbMkx1lpSiDsftRCpbDsw8ueCWWVvTUu9rHnIma88214Cg3FsoId2HrfOEsoi
6qK6rYd3SmzEDfuiGsCICMh2UQIDAQABo4IDCDCCAwQwHQYDVR0OBBYEFPzAyRvT
ZmtiZexB5bQOholjOeLeMB8GA1UdIwQYMBaAFMEpb/rTTynwTg761dkkTAKn2H2N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjU5Qy83MzVEQzRENjFE
OEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtmQk9EdnJWMlNSTUFxZllm
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dTbHYtdE5QS2ZCT0R2clYyU1JNQXFmWWZZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUY1OUMvNzM1REM0RDYxRDhEMTFFMjlBNzU0M0VCMDhCMDJDRDIvMTE3RTFGMUE2
OEQ0MTFFRUIxMzEzRjdEQzRGOUFFMDIucm9hMIHGBggrBgEFBQcBBwEB/wSBtjCB
szCBkwQCAAEwgYwDBAJnBgwDBAFnGXADBAJn8cgDBAV3/EADBAR6ykAwDAMEALTp
gQMEArTpgAMEBcpKoAMEAsq/BAMEAcsH4AMEAMsTDAMEBMsX0AMEAMsYNgMEAcsZ
GgMEAMseEwMEAMseIgMEAMsfAAMEAssgfAMEAcsiHgMEAMs3xgMEBMt8sAMEAsvE
XAMEBMvRoDAbBAIAAjAVAwUAJAEEAAMFASQBBAIDBQAkAzQAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0n96U6YVh/XHyO9muikW5a7UsMd/lEWBMr8VOd7H8m2PR58/+q2yu
ts4XaXjOKnUDnOe0neKw82PsLqrwWJKahV97PfNPMqL4dP/5aPKVNJU7B7UxC4L7
IDwDVgg4gN1aiRs5LHu4heVqggR8WuNq7mi0QP8V/zeqfn926uxnhNB2me+duRBL
DDfziGCJXMupox+5nh8amkg4YkSJEqKIqn81IX8TuqpqF3RAuRc2A6nDh1sVSuSk
uOhwN72MCpOeXwX01FiSy2slArW9Mfjnf77oWN13d6rSaNpJ7BlOdaCMm7ryauSR
AlNqFfBJq2hysnRCbyGtMxcrKj8De/Jv
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:55 2026 by rpki-client