Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
File: 3AF0F3E028CB11F195C91CE1BF833773.roa (raw, json)
Hash identifier: H6MyZAwL1N2/89I0jCajMU0eiEbSrWAvn6d7upb1hyk=
Subject key identifier: 5D:B5:BD:93:8C:67:24:A4:89:8D:EE:42:13:16:EF:6B:DF:7B:D4:D7
Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial: 3571
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
Signing time: Tue 28 Jul 2026 15:17:16 +0000
ROA not before: Tue 28 Jul 2026 15:17:16 +0000
ROA not after: Sat 28 Nov 2026 00:00:00 +0000
asID: 55330
IP address blocks: 103.17.165.0/24 maxlen: 24
103.17.166.0/24 maxlen: 24
180.94.64.0/24 maxlen: 24
180.94.65.0/24 maxlen: 24
180.94.66.0/24 maxlen: 24
180.94.67.0/24 maxlen: 24
180.94.68.0/24 maxlen: 24
180.94.69.0/24 maxlen: 24
180.94.70.0/24 maxlen: 24
180.94.71.0/24 maxlen: 24
180.94.72.0/24 maxlen: 24
180.94.73.0/24 maxlen: 24
180.94.74.0/24 maxlen: 24
180.94.75.0/24 maxlen: 24
180.94.76.0/24 maxlen: 24
180.94.77.0/24 maxlen: 24
180.94.78.0/24 maxlen: 24
180.94.79.0/24 maxlen: 24
180.94.80.0/24 maxlen: 24
180.94.81.0/24 maxlen: 24
180.94.82.0/24 maxlen: 24
180.94.83.0/24 maxlen: 24
180.94.84.0/24 maxlen: 24
180.94.85.0/24 maxlen: 24
180.94.86.0/24 maxlen: 24
180.94.87.0/24 maxlen: 24
180.94.88.0/24 maxlen: 24
180.94.89.0/24 maxlen: 24
180.94.90.0/24 maxlen: 24
180.94.91.0/24 maxlen: 24
180.94.92.0/24 maxlen: 24
180.94.93.0/24 maxlen: 24
180.94.94.0/24 maxlen: 24
180.94.95.0/24 maxlen: 24
203.215.32.0/24 maxlen: 24
203.215.33.0/24 maxlen: 24
203.215.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13681 (0x3571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Validity
Not Before: Jul 28 15:17:16 2026 GMT
Not After : Nov 28 00:00:00 2026 GMT
Subject: CN=6a68c7fc-4f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:25:e8:83:b4:47:95:a6:96:cb:50:1b:49:
5c:3a:b5:fc:72:f9:59:71:28:57:f4:b2:69:8e:bb:
7b:f8:2d:74:a7:a0:3b:c8:a1:c1:00:2d:9f:3c:b4:
3d:bc:af:ca:9f:7a:1d:23:39:56:08:ba:b1:5c:db:
db:77:35:53:4b:d6:69:fe:c9:df:38:59:c3:d2:6b:
44:ae:04:1c:7a:15:86:08:83:32:c5:9a:51:74:a1:
7f:91:59:a8:66:82:b5:ea:b6:3a:79:0a:f2:fb:18:
b1:a6:9e:ed:8c:de:f5:75:ab:5a:15:3c:02:9c:5d:
f0:d3:33:73:0a:8c:33:5e:95:4c:6a:5b:17:c7:52:
7c:88:7c:2b:fc:8b:e3:24:0c:95:a1:0e:49:16:a7:
1a:45:7a:a0:da:44:37:78:3d:df:8f:29:5a:1d:a8:
e6:67:ee:2d:f3:a9:4d:ac:d5:57:80:87:59:c8:b7:
5f:9c:9c:5e:fb:69:11:6e:c6:63:88:65:73:a5:f6:
b8:f5:f1:50:e9:38:ba:2e:72:b1:09:f5:03:d8:bb:
8c:ac:49:c4:45:b4:ca:b6:18:bb:89:70:bf:b7:f7:
1c:51:f0:5f:43:36:de:05:c8:36:84:7a:eb:a6:f6:
9e:ea:f9:11:ba:e1:88:ac:36:1c:4b:c7:33:4d:b2:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:BD:93:8C:67:24:A4:89:8D:EE:42:13:16:EF:6B:DF:7B:D4:D7
X509v3 Authority Key Identifier:
keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.165.0-103.17.166.255
180.94.64.0/19
203.215.32.0-203.215.34.255
Signature Algorithm: sha256WithRSAEncryption
32:e4:d9:83:31:b4:09:0b:d0:7a:83:1a:f9:84:c6:36:50:f4:
8b:0b:30:13:e2:7f:95:29:dc:55:97:ab:e8:cf:bc:b0:27:d1:
2d:5e:0b:e9:31:45:f2:7c:4f:21:08:0d:85:c6:ee:7d:55:bc:
29:d3:a6:07:d8:df:be:31:95:65:06:55:d7:ff:4f:7a:40:8d:
38:90:98:09:2f:42:6b:f4:a1:96:57:a6:fb:1d:d7:c2:12:a0:
29:c5:9f:25:3f:11:e9:26:57:af:3d:7c:33:9e:53:aa:03:d7:
60:18:c8:c9:db:c1:5f:59:5d:a2:c2:45:b2:e5:88:fa:1b:38:
d6:eb:0b:86:96:6f:33:06:58:71:71:96:1a:f9:d5:a2:22:a3:
0c:a6:0d:af:9e:9f:87:05:8f:9d:9a:0c:4e:82:6f:17:c0:f8:
33:0d:f3:0a:62:91:79:64:47:c3:93:8a:e9:7a:5d:4b:37:ac:
1e:92:e0:a8:99:97:14:71:61:f2:d7:ce:90:41:b5:da:2e:1c:
6a:26:82:f2:8e:a3:8e:63:39:38:af:b6:94:82:a0:60:55:24:
eb:23:06:24:1a:57:61:96:44:48:ac:9e:fd:dd:2e:de:d4:09:
89:e0:7f:be:92:4e:73:1c:15:dc:51:3a:88:a9:b6:e1:6a:a6:
bc:36:ab:85
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1
RDk3MzY4NkQwHhcNMjYwNzI4MTUxNzE2WhcNMjYxMTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY4YzdmYy00ZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqQIl6IO0R5WmlstQG0lcOrX8cvlZcShX9LJpjrt7+C10p6A7yKHBAC2fPLQ9
vK/Kn3odIzlWCLqxXNvbdzVTS9Zp/snfOFnD0mtErgQcehWGCIMyxZpRdKF/kVmo
ZoK16rY6eQry+xixpp7tjN71dataFTwCnF3w0zNzCowzXpVMalsXx1J8iHwr/Ivj
JAyVoQ5JFqcaRXqg2kQ3eD3fjylaHajmZ+4t86lNrNVXgIdZyLdfnJxe+2kRbsZj
iGVzpfa49fFQ6Ti6LnKxCfUD2LuMrEnERbTKthi7iXC/t/ccUfBfQzbeBcg2hHrr
pvae6vkRuuGIrDYcS8czTbJMFwIDAQABo4ICfDCCAngwHQYDVR0OBBYEFF21vZOM
ZySkiY3uQhMW72vfe9TXMB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE
OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REYyNkYvODc5Njg0OTYxRDhFMTFFMkIxNTFGMEVDMDhCMDJDRDIvM0FGMEYzRTAy
OENCMTFGMTk1QzkxQ0UxQkY4MzM3NzMucm9hMDsGCCsGAQUFBwEHAQH/BCwwKjAo
BAIAATAiMAwDBABnEaUDBABnEaYDBAW0XkAwDAMEBcvXIAMEAMvXIjANBgkqhkiG
9w0BAQsFAAOCAQEAMuTZgzG0CQvQeoMa+YTGNlD0iwswE+J/lSncVZer6M+8sCfR
LV4L6TFF8nxPIQgNhcbufVW8KdOmB9jfvjGVZQZV1/9PekCNOJCYCS9Ca/Shllem
+x3XwhKgKcWfJT8R6SZXrz18M55TqgPXYBjIydvBX1ldosJFsuWI+hs41usLhpZv
MwZYcXGWGvnVoiKjDKYNr56fhwWPnZoMToJvF8D4Mw3zCmKReWRHw5OK6XpdSzes
HpLgqJmXFHFh8tfOkEG12i4caiaC8o6jjmM5OK+2lIKgYFUk6yMGJBpXYZZESKye
/d0u3tQJieB/vpJOcxwV3FE6iKm24WqmvDarhQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:40 2026 by rpki-client