Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/3CC1BACC620811F091BDA035C4F9AE02.roa
File: 3CC1BACC620811F091BDA035C4F9AE02.roa (raw, json)
Hash identifier: ZyrkgOdS2CMVpPMVwiikQSmBmkf/Q62a7PKdJPSjlLw=
Subject key identifier: 28:E8:8B:73:F3:86:4F:FD:AB:DC:42:8E:6E:2B:B5:41:6F:54:B0:04
Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial: 2020
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/3CC1BACC620811F091BDA035C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:33:38 +0000
ROA not before: Fri 08 Aug 2025 16:24:13 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 17501
IP address blocks: 27.34.0.0/17 maxlen: 24
103.211.148.0/23 maxlen: 24
103.254.184.0/22 maxlen: 22
103.254.184.0/24 maxlen: 24
103.254.185.0/24 maxlen: 24
103.254.186.0/24 maxlen: 24
103.254.187.0/24 maxlen: 24
124.41.192.0/18 maxlen: 20
124.41.192.0/19 maxlen: 24
124.41.224.0/20 maxlen: 24
124.41.240.0/22 maxlen: 24
124.41.248.0/21 maxlen: 21
124.41.248.0/22 maxlen: 22
124.41.248.0/23 maxlen: 24
124.41.250.0/24 maxlen: 24
124.41.251.0/24 maxlen: 24
124.41.252.0/24 maxlen: 24
124.41.253.0/24 maxlen: 24
124.41.254.0/24 maxlen: 24
124.41.255.0/24 maxlen: 24
139.5.68.0/22 maxlen: 24
139.5.72.0/22 maxlen: 24
202.79.32.0/19 maxlen: 24
202.129.248.0/22 maxlen: 24
202.166.192.0/19 maxlen: 24
2400:1a00::/32 maxlen: 32
2400:1a00::/36 maxlen: 36
2400:1a00::/48 maxlen: 48
2400:1a00:4::/48 maxlen: 48
2400:1a00:1000::/36 maxlen: 36
2400:1a00:2000::/36 maxlen: 36
2400:1a00:3000::/36 maxlen: 36
2400:1a00:4000::/36 maxlen: 36
2400:1a00:5000::/36 maxlen: 36
2400:1a00:6000::/36 maxlen: 36
2400:1a00:7000::/36 maxlen: 36
2400:1a00:8000::/36 maxlen: 36
2400:1a00:8000::/48 maxlen: 48
2400:1a00:9000::/36 maxlen: 36
2400:1a00:a000::/36 maxlen: 36
2400:1a00:b000::/36 maxlen: 36
2400:1a00:b000::/40 maxlen: 40
2400:1a00:b100::/40 maxlen: 40
2400:1a00:ba00::/40 maxlen: 40
2400:1a00:bb00::/40 maxlen: 40
2400:1a00:bc00::/40 maxlen: 40
2400:1a00:bd00::/40 maxlen: 40
2400:1a00:c000::/36 maxlen: 36
2400:1a00:d000::/36 maxlen: 36
2400:1a00:d000::/40 maxlen: 40
2400:1a00:d100::/40 maxlen: 40
2400:1a00:d200::/40 maxlen: 40
2400:1a00:d300::/40 maxlen: 40
2400:1a00:d400::/40 maxlen: 40
2400:1a00:d500::/40 maxlen: 40
2400:1a00:d600::/40 maxlen: 40
2400:1a00:e000::/36 maxlen: 36
2400:1a00:efff::/48 maxlen: 48
2400:1a00:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8224 (0x2020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Validity
Not Before: Aug 8 16:24:13 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a44e42-c390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:4f:36:2b:68:6f:96:62:f7:ec:54:a9:e3:
09:a8:14:fa:fd:ff:d0:c6:b9:24:66:e9:38:2c:84:
e9:a4:a8:4f:af:61:fe:d8:3d:bd:93:68:fc:bb:ba:
55:d2:c7:5c:68:7c:e6:eb:9d:6b:36:a0:f5:5f:d0:
f2:6b:5e:91:6a:e5:18:1d:6b:1d:8b:47:ae:71:31:
e3:b8:d1:f0:25:7f:04:8e:04:6f:f6:e1:75:62:c4:
22:55:c0:b1:4b:ab:ad:6e:13:2d:e9:10:fd:ef:c4:
bc:0b:43:2c:d8:28:3b:99:2c:a1:47:c6:71:36:93:
4b:7c:74:fa:d7:72:e4:21:ab:cc:1c:6f:0d:78:8b:
7b:76:aa:c1:a3:0d:7f:f1:43:2f:a1:7e:ce:37:c6:
72:a9:d8:b0:66:f6:f1:07:c7:52:56:4a:a2:d3:b0:
41:1f:2a:cb:ce:25:06:9d:b7:fa:d4:df:93:f3:33:
1e:00:c1:4b:ea:54:23:9f:d5:48:7d:1a:a1:61:21:
34:7d:a6:e2:5b:6b:cc:3d:79:ad:41:0c:10:2b:28:
7d:fc:86:6c:21:f7:23:ef:d9:5a:11:de:7e:8e:f3:
dd:d2:ee:10:91:42:82:e0:9f:49:41:61:1d:3a:46:
c5:80:25:a1:81:5f:93:3f:df:81:fb:2e:7c:80:a2:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E8:8B:73:F3:86:4F:FD:AB:DC:42:8E:6E:2B:B5:41:6F:54:B0:04
X509v3 Authority Key Identifier:
keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/3CC1BACC620811F091BDA035C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.34.0.0/17
103.211.148.0/23
103.254.184.0/22
124.41.192.0/18
139.5.68.0-139.5.75.255
202.79.32.0/19
202.129.248.0/22
202.166.192.0/19
IPv6:
2400:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
1a:57:24:4f:0b:20:90:5e:27:7a:e5:1a:93:8c:79:0a:7a:39:
8c:61:27:9e:96:a1:d0:f3:c2:ef:0e:7a:2b:fd:45:b6:66:0d:
7f:fa:ac:99:ed:92:1e:30:86:02:47:c0:3e:0b:ef:5a:a0:5f:
51:59:78:0f:a7:80:5b:02:88:81:e4:88:8b:e8:95:68:5f:94:
6c:fc:b8:ee:1b:4e:32:2a:05:51:83:55:fe:d8:4c:1e:2f:f6:
b1:b1:6e:5a:0e:ad:59:f3:e0:84:f4:fa:42:6d:20:b7:46:07:
72:42:76:91:60:f8:26:e1:65:f7:4d:4a:54:54:77:0c:d6:f8:
fd:df:97:61:bf:bc:de:16:47:3e:15:97:b6:f1:ce:c3:d3:61:
b8:46:75:35:7a:f2:cc:7b:9c:24:f2:36:45:a2:08:f4:15:e5:
cc:f1:d0:ed:47:f7:11:8d:82:29:19:b7:63:bc:63:7b:81:45:
3c:9f:3b:77:d3:b7:d1:3d:ea:52:23:56:c4:0a:07:c7:43:d6:
3d:31:88:28:c5:fb:68:eb:d2:f6:20:ab:d2:ae:ec:fa:12:a7:
47:e4:96:cf:56:9b:85:59:65:d3:d7:89:8c:13:bb:8f:35:47:
de:0a:1a:77:64:7a:e9:7d:00:71:f5:26:ea:a6:8c:ce:3f:f2:
b8:74:be:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:15 2026 by rpki-client