Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/3556F236591D11F1B1E1CE2EC9833773.roa
File: 3556F236591D11F1B1E1CE2EC9833773.roa (raw, json)
Hash identifier: xZnAAlTCl+JT5OotaR0JxL8HG25CqlkoxYP53N4yaTg=
Subject key identifier: 69:C5:AE:16:A3:81:A6:71:9E:7C:D1:A7:2C:38:49:86:86:E5:8E:25
Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
Certificate serial: 363C
Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/3556F236591D11F1B1E1CE2EC9833773.roa
Signing time: Tue 26 May 2026 16:09:01 +0000
ROA not before: Tue 26 May 2026 16:09:01 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 23955
IP address blocks: 43.241.136.0/22 maxlen: 22
43.241.136.0/24 maxlen: 24
43.241.137.0/24 maxlen: 24
43.241.138.0/24 maxlen: 24
103.29.224.0/22 maxlen: 22
103.29.224.0/24 maxlen: 24
103.29.225.0/24 maxlen: 24
103.29.226.0/24 maxlen: 24
103.29.227.0/24 maxlen: 24
103.71.40.0/22 maxlen: 22
103.71.40.0/24 maxlen: 24
103.71.41.0/24 maxlen: 24
103.71.42.0/24 maxlen: 24
103.71.43.0/24 maxlen: 24
118.103.136.0/21 maxlen: 21
118.103.136.0/24 maxlen: 24
118.103.137.0/24 maxlen: 24
118.103.139.0/24 maxlen: 24
118.103.140.0/24 maxlen: 24
118.103.141.0/24 maxlen: 24
118.103.142.0/24 maxlen: 24
118.103.143.0/24 maxlen: 24
2405:ec00::/32 maxlen: 32
2405:ec00:2::/48 maxlen: 48
2405:ec00:3::/48 maxlen: 48
2405:ec00:4::/48 maxlen: 48
2405:ec00:5::/48 maxlen: 48
2405:ec00:6::/48 maxlen: 48
2405:ec00:10a::/48 maxlen: 48
2405:ec00:10b::/48 maxlen: 48
2405:ec00:10c::/48 maxlen: 48
2405:ec00:10d::/48 maxlen: 48
2405:ec00:10e::/48 maxlen: 48
2405:ec00:10f::/48 maxlen: 48
2405:ec00:110::/48 maxlen: 48
2405:ec00:1000::/48 maxlen: 48
2405:ec00:1001::/48 maxlen: 48
2405:ec00:1002::/48 maxlen: 48
2405:ec00:1003::/48 maxlen: 48
2405:ec00:1004::/48 maxlen: 48
2405:ec00:1005::/48 maxlen: 48
2405:ec00:1100::/48 maxlen: 48
2405:ec00:1101::/48 maxlen: 48
2405:ec00:1201::/48 maxlen: 48
2405:ec00:1202::/48 maxlen: 48
2405:ec00:1203::/48 maxlen: 48
2405:ec00:1204::/48 maxlen: 48
2405:ec00:1205::/48 maxlen: 48
2405:ec00:1206::/48 maxlen: 48
2405:ec00:1208::/48 maxlen: 48
2405:ec00:1209::/48 maxlen: 48
2405:ec00:1210::/48 maxlen: 48
2405:ec00:1300::/48 maxlen: 48
2405:ec00:1301::/48 maxlen: 48
2405:ec00:7000::/40 maxlen: 40
2405:ec00:7100::/40 maxlen: 40
2405:ec00:9011::/48 maxlen: 48
2405:ec00:9012::/48 maxlen: 48
2405:ec00:9013::/48 maxlen: 48
2405:ec00:9014::/48 maxlen: 48
2405:ec00:9015::/48 maxlen: 48
2405:ec00:9016::/48 maxlen: 48
2405:ec00:9017::/48 maxlen: 48
2405:ec00:9018::/48 maxlen: 48
2405:ec00:9019::/48 maxlen: 48
2405:ec00:901a::/48 maxlen: 48
2405:ec00:901b::/48 maxlen: 48
2405:ec00:9021::/48 maxlen: 48
2405:ec00:9022::/48 maxlen: 48
2405:ec00:9023::/48 maxlen: 48
2405:ec00:9024::/48 maxlen: 48
2405:ec00:9025::/48 maxlen: 48
2405:ec00:9051::/48 maxlen: 48
2405:ec00:9052::/48 maxlen: 48
2405:ec00:9053::/48 maxlen: 48
2405:ec00:9054::/48 maxlen: 48
2405:ec00:9055::/48 maxlen: 48
2405:ec00:9071::/48 maxlen: 48
2405:ec00:9072::/48 maxlen: 48
2405:ec00:9073::/48 maxlen: 48
2405:ec00:9074::/48 maxlen: 48
2405:ec00:9075::/48 maxlen: 48
2405:ec00:9081::/48 maxlen: 48
2405:ec00:9082::/48 maxlen: 48
2405:ec00:9083::/48 maxlen: 48
2405:ec00:9100::/48 maxlen: 48
2405:ec00:9101::/48 maxlen: 48
2405:ec00:a1ca::/48 maxlen: 48
2405:ec00:f000::/36 maxlen: 36
2405:ec00:fa00::/48 maxlen: 48
2405:ec00:face::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl
rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13884 (0x363c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
Validity
Not Before: May 26 16:09:01 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a15c59d-ba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:b2:81:ff:ef:c9:1f:74:1f:e0:cb:98:7c:
e7:d3:a9:e1:e3:2a:5d:b0:4d:98:ce:27:a9:84:59:
df:07:55:47:fd:1e:ab:36:b2:13:dd:74:c7:1b:d4:
d5:68:88:0d:6e:2b:75:74:27:a6:a7:ea:25:db:cc:
f9:e0:e7:e8:ba:5e:b7:73:36:de:65:e9:76:ab:68:
50:4f:42:74:2e:ab:a7:67:c1:9c:6e:45:9b:0e:bd:
82:66:52:14:40:b4:36:fe:cc:c0:3a:74:01:1e:e6:
32:8b:5d:d9:3e:34:33:9f:2e:27:e5:ae:2d:3b:64:
3c:44:94:c0:7c:86:b4:5d:0d:71:0c:ad:62:d6:64:
f9:b2:53:d8:14:39:72:86:a9:04:23:b8:35:68:d3:
bf:db:f6:93:3c:18:cd:21:e3:f4:a8:55:ef:07:2d:
99:92:a7:43:70:a1:58:47:b6:90:11:08:fb:fc:6c:
8a:52:be:dd:88:c8:91:e4:c5:d4:51:3a:1f:e3:b3:
03:49:19:a2:01:bc:36:8f:15:53:3c:6a:66:de:14:
df:9a:ab:aa:4d:c8:64:a8:47:b9:d4:0a:9b:15:53:
e7:6b:d8:42:f3:6a:22:b1:a2:ef:0d:32:b7:e7:f6:
97:a8:30:f4:f4:60:ca:1f:dc:10:ff:48:9e:df:60:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C5:AE:16:A3:81:A6:71:9E:7C:D1:A7:2C:38:49:86:86:E5:8E:25
X509v3 Authority Key Identifier:
keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/3556F236591D11F1B1E1CE2EC9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.241.136.0/22
103.29.224.0/22
103.71.40.0/22
118.103.136.0/21
IPv6:
2405:ec00::/32
Signature Algorithm: sha256WithRSAEncryption
7c:78:d8:b2:40:49:33:15:dc:e8:07:dc:b5:5d:b2:f8:6c:80:
04:97:6d:64:ea:a8:13:2d:24:bd:c7:da:ec:9c:e5:a7:32:2a:
d3:42:d1:48:e5:14:19:49:b6:f4:0b:bf:1f:31:6d:2a:4c:5d:
44:58:e1:5f:71:ab:e4:87:ae:a1:8a:2c:8a:d9:41:7c:de:6e:
2c:15:27:94:f9:be:04:4c:eb:77:1a:93:1d:84:83:27:b6:6c:
4f:1e:6f:a1:10:3b:ae:3d:61:13:34:5d:91:a9:80:09:19:69:
89:2a:e9:0f:42:1c:c2:80:d3:ec:50:ca:48:c2:ec:ff:9f:c3:
86:88:e0:74:66:d5:7a:bb:f2:4e:f9:92:76:26:80:5c:03:59:
8e:6d:89:04:e4:76:fe:c9:9b:dc:c6:8e:e4:a7:bb:11:9d:21:
96:9f:d3:1d:29:49:b2:ca:a0:93:3f:69:db:9d:c3:e0:fb:c3:
08:ba:35:11:a8:fb:2a:b1:30:4c:2d:40:03:28:88:be:69:94:
0a:a5:81:21:58:6a:24:eb:ee:7b:89:85:9d:0d:6c:ec:a4:a0:
ce:2a:b1:61:a5:a1:08:0c:be:97:8c:7e:e4:82:82:98:de:7d:
39:02:d6:10:7c:9c:e3:64:69:c4:a8:4b:7d:bb:0c:b2:04:73:
59:b5:4b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:34:39 2026 by rpki-client