Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/8B41351885EB11F0B665685EC4F9AE02.roa
File: 8B41351885EB11F0B665685EC4F9AE02.roa (raw, json)
Hash identifier: nJEq5dcjdbygkdzbWZ20NZb/kFcLm8+8wcWhp21gyU8=
Subject key identifier: 09:E8:90:97:89:95:67:68:40:E2:AF:2A:56:DA:BA:E8:52:C7:2B:38
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0E2D
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/8B41351885EB11F0B665685EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:58:10 +0000
ROA not before: Sat 30 Aug 2025 21:51:55 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137935
IP address blocks: 103.117.108.0/24 maxlen: 24
103.117.109.0/24 maxlen: 24
2403:1940::/32 maxlen: 32
2403:1940::/35 maxlen: 35
2403:1940::/48 maxlen: 48
2403:1940:1::/48 maxlen: 48
2403:1940:2::/48 maxlen: 48
2403:1940:3::/48 maxlen: 48
2403:1940:4::/48 maxlen: 48
2403:1940:5::/48 maxlen: 48
2403:1940:6::/48 maxlen: 48
2403:1940:7::/48 maxlen: 48
2403:1940:8::/48 maxlen: 48
2403:1940:9::/48 maxlen: 48
2403:1940:d::/48 maxlen: 48
2403:1940:10::/48 maxlen: 48
2403:1940:11::/48 maxlen: 48
2403:1940:12::/48 maxlen: 48
2403:1940:13::/48 maxlen: 48
2403:1940:14::/48 maxlen: 48
2403:1940:15::/48 maxlen: 48
2403:1940:16::/48 maxlen: 48
2403:1940:17::/48 maxlen: 48
2403:1940:18::/48 maxlen: 48
2403:1940:19::/48 maxlen: 48
2403:1940:20::/48 maxlen: 48
2403:1940:21::/48 maxlen: 48
2403:1940:22::/48 maxlen: 48
2403:1940:23::/48 maxlen: 48
2403:1940:24::/48 maxlen: 48
2403:1940:25::/48 maxlen: 48
2403:1940:26::/48 maxlen: 48
2403:1940:27::/48 maxlen: 48
2403:1940:28::/48 maxlen: 48
2403:1940:29::/48 maxlen: 48
2403:1940:30::/48 maxlen: 48
2403:1940:31::/48 maxlen: 48
2403:1940:32::/48 maxlen: 48
2403:1940:33::/48 maxlen: 48
2403:1940:34::/48 maxlen: 48
2403:1940:35::/48 maxlen: 48
2403:1940:36::/48 maxlen: 48
2403:1940:37::/48 maxlen: 48
2403:1940:38::/48 maxlen: 48
2403:1940:39::/48 maxlen: 48
2403:1940:40::/48 maxlen: 48
2403:1940:41::/48 maxlen: 48
2403:1940:42::/48 maxlen: 48
2403:1940:43::/48 maxlen: 48
2403:1940:44::/48 maxlen: 48
2403:1940:45::/48 maxlen: 48
2403:1940:46::/48 maxlen: 48
2403:1940:47::/48 maxlen: 48
2403:1940:48::/48 maxlen: 48
2403:1940:49::/48 maxlen: 48
2403:1940:50::/48 maxlen: 48
2403:1940:60::/48 maxlen: 48
2403:1940:70::/48 maxlen: 48
2403:1940:80::/48 maxlen: 48
2403:1940:90::/48 maxlen: 48
2403:1940:100::/48 maxlen: 48
2403:1940:200::/48 maxlen: 48
2403:1940:1000::/36 maxlen: 36
2403:1940:2000::/36 maxlen: 36
2403:1940:acc1::/48 maxlen: 48
2403:1940:acc2::/48 maxlen: 48
2403:1940:acc3::/48 maxlen: 48
2403:1940:ccc1::/48 maxlen: 48
2403:1940:ccc2::/48 maxlen: 48
2403:1940:ccc3::/48 maxlen: 48
2403:1940:dac1::/48 maxlen: 48
2403:1940:dac1:dac1::/64 maxlen: 64
2403:1940:daca::/48 maxlen: 48
2403:1940:dacb::/48 maxlen: 48
2403:1940:dacc::/48 maxlen: 48
2403:1940:dacd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3629 (0xe2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: Aug 30 21:51:55 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46211-0bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:70:13:5f:ee:b8:77:9b:18:17:d6:94:4b:
22:36:d2:17:99:0b:99:e1:3b:37:b0:4a:bc:c3:53:
86:97:f4:b5:d7:a9:c6:47:8d:96:bc:0a:93:68:cb:
34:ea:f6:ac:d1:3a:f1:26:ae:2f:6d:c1:4b:9a:c1:
e8:22:e1:10:65:53:9a:d3:c1:37:c9:aa:ef:d1:c8:
8f:0e:41:09:5e:15:31:61:b2:f4:3d:2a:79:c2:f3:
62:07:15:05:8b:ca:e6:aa:ad:c4:74:be:31:88:2a:
cf:11:7c:57:e4:8a:39:44:59:ff:53:fc:54:7d:e8:
a8:c3:3f:54:56:24:2f:54:fe:ce:fa:03:4a:b5:a8:
cd:be:f6:89:23:54:56:9e:24:68:df:a7:02:4e:15:
88:35:22:44:89:bb:5c:92:0d:95:81:b4:f1:48:74:
ea:50:e8:6c:81:30:42:21:e6:4e:97:30:79:99:e8:
28:04:e6:2e:ca:86:a4:2c:4b:2a:28:2a:fd:a8:f0:
6b:5a:44:0a:ef:66:13:c9:8a:51:35:45:6c:d6:46:
44:c3:d3:aa:3f:8d:a4:e9:b9:4b:6a:57:55:97:9e:
8f:f0:39:4a:77:71:ed:a2:10:56:25:34:30:cb:5d:
ff:07:4a:1f:18:fa:d7:d3:06:a0:e9:e9:d9:20:02:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E8:90:97:89:95:67:68:40:E2:AF:2A:56:DA:BA:E8:52:C7:2B:38
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/8B41351885EB11F0B665685EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.108.0/23
IPv6:
2403:1940::/32
Signature Algorithm: sha256WithRSAEncryption
a3:65:69:fd:29:b3:58:84:aa:5a:ac:9a:c2:c1:06:00:80:4e:
43:6f:69:be:40:8b:66:b0:a6:a3:58:5e:18:bf:4b:40:d9:f5:
6e:db:22:58:92:b4:e2:76:56:32:e2:ea:4f:7c:6b:8b:21:86:
fb:6a:87:19:23:27:8e:47:59:c8:dc:60:2b:e0:2d:6c:30:a9:
e8:d9:f2:95:33:00:c6:a6:84:42:ff:ae:8d:f1:d8:67:e0:99:
b8:54:25:2e:fc:1c:28:67:e3:50:04:11:43:cc:4d:b7:61:52:
c5:51:75:82:aa:00:a6:b1:92:8f:f4:9c:3e:aa:c9:fa:99:7f:
4d:ac:3c:71:24:80:f7:ec:37:ca:40:f6:0d:d1:dc:cb:21:6b:
26:2c:f5:23:b9:10:2b:5b:89:d5:9d:b9:ce:c7:6e:e8:b9:41:
47:f5:f1:c6:07:40:4d:b8:8c:c5:d3:a4:4b:7a:01:03:42:b0:
b3:2a:04:79:02:2e:44:d9:75:17:02:87:21:f2:b7:f2:37:25:
d9:90:74:c6:8f:00:56:43:5f:62:94:9b:f3:fa:8f:4d:b9:07:
78:fa:3b:08:9f:3e:cb:f9:6e:0d:b6:79:b1:a7:5e:10:22:67:
08:e6:c5:f1:64:d7:30:b8:20:73:49:75:2d:84:ce:2f:9f:50:
8a:58:de:47
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdGNDcxMTAvBgNVBAUTKEUzMEE0Q0RERjZDMjY5QUNCQTM5Q0E1OEFBOTU5MkQ4
OTg2NDAxRjQwHhcNMjUwODMwMjE1MTU1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjIxMS0wYmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHNwE1/uuHebGBfWlEsiNtIXmQuZ4Ts3sEq8w1OGl/S116nGR42WvAqTaMs0
6vas0TrxJq4vbcFLmsHoIuEQZVOa08E3yarv0ciPDkEJXhUxYbL0PSp5wvNiBxUF
i8rmqq3EdL4xiCrPEXxX5Io5RFn/U/xUfeiowz9UViQvVP7O+gNKtajNvvaJI1RW
niRo36cCThWINSJEibtckg2VgbTxSHTqUOhsgTBCIeZOlzB5megoBOYuyoakLEsq
KCr9qPBrWkQK72YTyYpRNUVs1kZEw9OqP42k6blLaldVl56P8DlKd3HtohBWJTQw
y13/B0ofGPrX0wag6enZIALj+wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFAnokJeJ
lWdoQOKvKlbauuhSxys4MB8GA1UdIwQYMBaAFOMKTN32wmmsujnKWKqVktiYZAH0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0Y0Ny8zMzBBMDA4Q0NF
NTkxMUU5QTA5MDgyODdDNEY5QUUwMi80d3BNM2ZiQ2FheTZPY3BZcXBXUzJKaGtB
ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR3cE0zZmJDYWF5Nk9jcFlxcFdTMkpoa0FmUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjdGNDcvMzMwQTAwOENDRTU5MTFFOUEwOTA4Mjg3QzRGOUFFMDIvOEI0MTM1MTg4
NUVCMTFGMEI2NjU2ODVFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ3VsMA0EAgACMAcDBQAkAxlAMA0GCSqGSIb3DQEBCwUAA4IBAQCj
ZWn9KbNYhKparJrCwQYAgE5Db2m+QItmsKajWF4Yv0tA2fVu2yJYkrTidlYy4upP
fGuLIYb7aocZIyeOR1nI3GAr4C1sMKno2fKVMwDGpoRC/66N8dhn4Jm4VCUu/Bwo
Z+NQBBFDzE23YVLFUXWCqgCmsZKP9Jw+qsn6mX9NrDxxJID37DfKQPYN0dzLIWsm
LPUjuRArW4nVnbnOx27ouUFH9fHGB0BNuIzF06RLegEDQrCzKgR5Ai5E2XUXAoch
8rfyNyXZkHTGjwBWQ19ilJvz+o9NuQd4+jsInz7L+W4Ntnmxp14QImcI5sXxZNcw
uCBzSXUthM4vn1CKWN5H
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:29 2026 by rpki-client