Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/7BC4E6DE322C11EFBC879F31C4F9AE02.roa
File: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (raw, json)
Hash identifier: OdqgeiSOjeBAmIPLoFgaP/a6OQ13sSbWpiRXsmgLMhc=
Subject key identifier: F8:E7:76:9C:9D:AB:B6:3D:2A:51:B4:0A:FD:13:00:F2:AD:F8:2F:73
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 1797
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/7BC4E6DE322C11EFBC879F31C4F9AE02.roa
Signing time: Wed 23 Sep 2026 14:45:17 +0000
ROA not before: Wed 23 Sep 2026 14:45:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24435
IP address blocks: 27.0.184.0/22 maxlen: 22
103.27.22.0/24 maxlen: 24
175.111.0.0/23 maxlen: 24
175.111.2.0/24 maxlen: 24
175.111.3.0/24 maxlen: 24
175.111.4.0/23 maxlen: 24
203.130.0.0/20 maxlen: 20
203.130.0.0/24 maxlen: 24
203.130.1.0/24 maxlen: 24
203.130.2.0/24 maxlen: 24
203.130.3.0/24 maxlen: 24
203.130.4.0/24 maxlen: 24
203.130.5.0/24 maxlen: 24
203.130.6.0/24 maxlen: 24
203.130.7.0/24 maxlen: 24
203.130.8.0/24 maxlen: 24
203.130.9.0/24 maxlen: 24
203.130.10.0/24 maxlen: 24
203.130.11.0/24 maxlen: 24
203.130.12.0/24 maxlen: 24
203.130.13.0/24 maxlen: 24
203.130.14.0/24 maxlen: 24
203.130.15.0/24 maxlen: 24
203.130.16.0/24 maxlen: 24
203.130.17.0/24 maxlen: 24
203.130.18.0/24 maxlen: 24
203.130.19.0/24 maxlen: 24
203.130.20.0/24 maxlen: 24
203.130.21.0/24 maxlen: 24
203.130.22.0/24 maxlen: 24
203.130.23.0/24 maxlen: 24
203.130.24.0/24 maxlen: 24
203.130.25.0/24 maxlen: 24
203.130.26.0/23 maxlen: 24
203.130.28.0/22 maxlen: 22
203.130.28.0/24 maxlen: 24
203.130.29.0/24 maxlen: 24
203.130.30.0/24 maxlen: 24
203.130.31.0/24 maxlen: 24
2001:fe8::/48 maxlen: 48
2001:fe8:1::/48 maxlen: 48
2001:fe8:2::/48 maxlen: 48
2001:fe8:3::/48 maxlen: 48
2001:fe8:9::/48 maxlen: 48
2001:fe8:10::/48 maxlen: 48
2001:fe8:11::/48 maxlen: 48
2001:fe8:48::/48 maxlen: 48
2001:fe8:4000::/48 maxlen: 48
2001:fe8:4001::/48 maxlen: 48
2001:fe8:4002::/48 maxlen: 48
2001:fe8:4003::/48 maxlen: 48
2001:fe8:4011::/48 maxlen: 48
2001:fe8:4100::/48 maxlen: 48
2001:fe8:4101::/48 maxlen: 48
2001:fe8:5000::/48 maxlen: 48
2001:fe8:5001::/48 maxlen: 48
2001:fe8:5002::/48 maxlen: 48
2001:fe8:5003::/48 maxlen: 48
2001:fe8:5004::/48 maxlen: 48
2001:fe8:5005::/48 maxlen: 48
2001:fe8:5006::/48 maxlen: 48
2001:fe8:5007::/48 maxlen: 48
2001:fe8:6000::/48 maxlen: 48
2001:fe8:6001::/48 maxlen: 48
2001:fe8:6002::/48 maxlen: 48
2001:fe8:6003::/48 maxlen: 48
2001:fe8:6004::/48 maxlen: 48
2001:fe8:6005::/48 maxlen: 48
2001:fe8:6006::/48 maxlen: 48
2001:fe8:6007::/48 maxlen: 48
2001:fe8:8100::/48 maxlen: 48
2001:fe8:8101::/48 maxlen: 48
2001:fe8:8110::/48 maxlen: 48
2001:fe8:8111::/48 maxlen: 48
2001:fe8:8121::/48 maxlen: 48
2001:fe8:8130::/48 maxlen: 48
2001:fe8:8131::/48 maxlen: 48
2001:fe8:9000::/48 maxlen: 48
2001:fe8:c001::/48 maxlen: 48
2001:fe8:c002::/48 maxlen: 48
2001:fe8:c003::/48 maxlen: 48
2001:fe8:c100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 16:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6039 (0x1797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Sep 23 14:45:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ab3e5fd-ef68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:73:2b:70:b3:67:b0:8a:9c:9a:63:c4:d3:49:
cf:83:4a:fe:8e:31:08:f2:63:63:a6:98:c3:3c:05:
1e:4a:54:ee:37:06:3d:cb:a4:43:9a:bc:cb:5e:6d:
81:ce:9f:80:67:0e:f1:2a:30:76:fb:32:ec:fd:fb:
54:a3:6d:1b:ef:0b:60:52:60:4a:44:5e:0a:92:31:
da:99:11:69:99:be:9e:b0:4a:3d:ba:fc:50:d0:81:
22:bb:0a:4e:d9:6c:cd:8d:ac:36:ab:93:79:b6:20:
b8:32:82:4e:82:2a:32:bd:d7:6f:dc:63:d6:23:3b:
d6:56:32:ec:76:d6:e5:90:11:74:72:fa:88:78:5d:
5f:04:fc:3e:55:48:c6:4d:ab:62:20:73:18:db:9c:
e4:42:14:ff:80:3e:c0:d9:f9:36:0a:c4:0b:88:f7:
87:5b:8c:51:ed:fb:72:9a:bb:2e:4d:6c:07:47:87:
c8:16:55:2c:c5:e8:45:c7:e0:ea:8c:45:b4:6c:63:
28:b5:56:20:d2:c3:f5:8f:d7:75:13:6d:dc:ed:45:
21:dc:a1:e1:27:34:52:a9:01:91:90:45:11:cf:d5:
a2:72:f8:a6:89:ff:05:b9:19:d2:0d:9a:f8:ef:5f:
89:a1:05:d7:59:b5:26:76:23:72:77:aa:df:50:3c:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E7:76:9C:9D:AB:B6:3D:2A:51:B4:0A:FD:13:00:F2:AD:F8:2F:73
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/7BC4E6DE322C11EFBC879F31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.184.0/22
103.27.22.0/24
175.111.0.0-175.111.5.255
203.130.0.0/19
IPv6:
2001:fe8::/46
2001:fe8:9::/48
2001:fe8:10::/47
2001:fe8:48::/48
2001:fe8:4000::/46
2001:fe8:4011::/48
2001:fe8:4100::/47
2001:fe8:5000::/45
2001:fe8:6000::/45
2001:fe8:8100::/47
2001:fe8:8110::/47
2001:fe8:8121::/48
2001:fe8:8130::/47
2001:fe8:9000::/48
2001:fe8:c001::-2001:fe8:c003:ffff:ffff:ffff:ffff:ffff
2001:fe8:c100::/48
Signature Algorithm: sha256WithRSAEncryption
6d:5a:67:d0:18:bb:e2:27:75:fa:3a:eb:d7:4a:30:03:6a:75:
e5:8e:76:d8:4c:aa:51:66:0f:b2:e6:b1:d4:9c:4b:60:96:df:
6e:4c:ca:e1:bc:60:0a:14:07:ca:26:c7:93:79:b5:f6:7e:da:
26:b3:9c:6d:79:22:02:98:30:15:4b:d3:dd:a0:d1:0b:74:64:
d0:65:a8:f5:36:a4:08:d8:f3:9c:8a:dc:52:38:dc:5b:bd:53:
5d:6e:c3:a6:67:06:6c:4c:d9:b7:ec:57:0c:c5:11:0a:9f:7a:
b7:84:96:d7:4a:51:9f:62:57:e5:5e:91:5b:a8:8f:ba:73:24:
bf:dd:10:ba:c7:a6:a8:b9:4c:67:dd:b9:e2:6c:7f:fe:92:be:
3d:af:ed:4f:36:03:6b:5e:e5:55:7e:18:b2:a3:f4:7b:4e:cd:
25:15:75:e5:b4:2e:a7:45:76:a4:3c:0c:87:ae:ed:da:8f:f3:
e8:be:ed:64:87:4a:f7:41:e3:78:55:3f:f4:8c:aa:29:bc:b7:
c3:a3:03:e6:7c:76:e8:93:db:4b:ca:52:fe:fc:43:1f:58:a8:
00:2e:59:cd:eb:7f:4c:27:cc:96:72:c3:69:34:66:2c:88:f7:
8f:9e:b1:f5:d3:81:68:0a:0e:7f:39:37:4f:47:b3:e3:d2:64:
64:38:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:12:18 2026 by rpki-client