Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/0FAA7244A7D211F0BEE84D58C4F9AE02.roa
File: 0FAA7244A7D211F0BEE84D58C4F9AE02.roa (raw, json)
Hash identifier: AlymbExV8oEUR9AGjMS6/XmXiFrOWjjjg6e09oggXfc=
Subject key identifier: 90:30:7A:D9:A4:4D:9D:FB:CE:0E:E4:1C:C6:27:CB:7A:48:45:AE:79
Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial: 05F5
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/0FAA7244A7D211F0BEE84D58C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:58:31 +0000
ROA not before: Mon 13 Oct 2025 01:44:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7628
IP address blocks: 103.68.202.0/24 maxlen: 24
103.212.217.0/24 maxlen: 24
103.212.218.0/24 maxlen: 24
103.212.219.0/24 maxlen: 24
203.56.23.0/24 maxlen: 24
2402:1b40:1001::/48 maxlen: 48
2402:1b40:1002::/48 maxlen: 48
2402:1b40:1003::/48 maxlen: 48
2402:1b40:1004::/48 maxlen: 48
2402:1b40:1005::/48 maxlen: 48
2402:1b40:2000::/37 maxlen: 37
2402:1b40:2000::/48 maxlen: 48
2402:1b40:2004::/48 maxlen: 48
2402:1b40:2008::/48 maxlen: 48
2402:1b40:200c::/48 maxlen: 48
2402:1b40:2010::/48 maxlen: 48
2402:1b40:2014::/48 maxlen: 48
2402:1b40:2018::/48 maxlen: 48
2402:1b40:8000::/36 maxlen: 36
2402:1b40:9000::/36 maxlen: 36
2402:1b40:a000::/36 maxlen: 36
2402:1b40:b000::/36 maxlen: 36
2402:1b40:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Validity
Not Before: Oct 13 01:44:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a45416-017f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:58:b0:7a:b1:95:54:17:97:7e:6b:2c:f0:
12:3d:a3:aa:99:15:6a:79:d1:8e:79:2e:10:94:e8:
7b:51:0f:2e:e4:f4:69:f1:fa:c2:f9:88:07:67:63:
dc:6f:b2:ae:66:87:10:9c:07:db:c9:33:dc:11:40:
d7:50:d1:b6:8c:c7:5d:f1:ef:a9:7d:df:03:9c:5f:
90:f0:7f:c4:2c:19:07:fe:4f:34:96:1b:83:1b:70:
23:9d:3d:a2:66:61:30:ce:95:ca:f3:10:33:4f:55:
81:b7:f1:21:ab:4f:4d:82:93:d8:3b:d9:bf:65:31:
5d:43:92:ec:3d:f6:7d:4b:ad:ba:ef:b0:07:02:71:
58:1b:c8:61:32:1c:54:24:62:3b:a2:dc:22:2f:94:
a0:5f:52:65:1c:fe:a3:e0:13:ad:95:db:bc:1f:3c:
e9:89:ac:a6:51:f0:6d:8d:bf:c0:08:35:1d:56:b9:
19:3c:26:c0:ce:4a:11:2e:49:e0:e1:26:4b:b7:15:
d0:c5:70:0e:0d:f0:7b:c5:e3:ef:69:15:7f:0a:ea:
eb:cd:04:9d:18:cf:be:6b:a3:98:e5:ec:6c:2e:ec:
d5:63:ee:16:dc:36:ea:18:ca:99:ee:1d:1d:1c:7d:
26:ed:30:40:39:6a:ab:63:58:b4:bb:00:d4:d0:56:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:30:7A:D9:A4:4D:9D:FB:CE:0E:E4:1C:C6:27:CB:7A:48:45:AE:79
X509v3 Authority Key Identifier:
keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/0FAA7244A7D211F0BEE84D58C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.202.0/24
103.212.217.0-103.212.219.255
203.56.23.0/24
IPv6:
2402:1b40:1001::-2402:1b40:1005:ffff:ffff:ffff:ffff:ffff
2402:1b40:2000::/37
2402:1b40:8000::-2402:1b40:cfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0c:cb:3b:4f:60:ed:ab:92:9f:b6:f4:27:ee:eb:84:b1:07:7e:
3c:e5:bd:c6:73:96:21:47:bf:fa:d1:f7:1b:63:f3:7e:f1:71:
ec:8a:1c:97:ed:9d:30:8d:01:4c:75:f2:a1:47:95:aa:f3:5d:
9d:81:89:db:18:ef:04:05:45:64:85:12:f6:75:e3:0e:20:47:
16:80:d2:bf:ee:50:d7:59:fd:a2:df:96:be:b8:c5:d1:82:c2:
75:2f:b5:c5:15:bd:fa:2b:4e:52:61:34:8b:e7:fe:71:2c:8e:
e6:df:22:b9:b4:10:7b:e5:d4:01:3b:5d:3a:a1:66:57:15:dc:
88:ce:5c:ce:ba:53:47:a3:8e:a6:57:7f:0c:ec:70:0b:23:59:
44:4c:02:e0:22:e4:8f:8a:25:f1:64:d3:81:88:60:2b:56:8f:
13:07:a2:c8:58:11:86:d5:88:93:b9:76:44:3f:81:15:bd:92:
55:93:1a:4e:c9:49:7b:e5:f2:a7:91:a9:e3:2c:76:5c:ea:03:
e0:d6:a5:ec:70:83:62:39:98:70:14:0f:1b:b7:1b:44:e7:49:
a2:a8:f8:34:d8:f7:2a:f5:ed:ac:6e:a9:22:93:28:a2:22:bc:
38:23:58:8e:f5:47:28:67:11:d5:cf:0b:aa:5a:0a:91:c2:93:
b2:1b:7c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:25 2026 by rpki-client