Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/3FC484EE710211F0BD347869C4F9AE02.roa
File: 3FC484EE710211F0BD347869C4F9AE02.roa (raw, json)
Hash identifier: 2IWuioS/nodqvph5IdFPsL2bu4c6VdvpfkdYbMecCC4=
Subject key identifier: 60:59:15:BB:BE:0B:D6:44:88:EC:54:C6:08:58:EF:0A:35:6C:C7:54
Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial: 2501
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/3FC484EE710211F0BD347869C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:39:26 +0000
ROA not before: Mon 04 Aug 2025 07:11:32 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 58923
IP address blocks: 36.255.68.0/22 maxlen: 22
36.255.68.0/24 maxlen: 24
36.255.69.0/24 maxlen: 24
36.255.70.0/24 maxlen: 24
36.255.71.0/24 maxlen: 24
103.23.40.0/22 maxlen: 22
103.23.40.0/24 maxlen: 24
103.23.41.0/24 maxlen: 24
103.23.42.0/24 maxlen: 24
103.23.43.0/24 maxlen: 24
103.120.192.0/22 maxlen: 22
103.209.40.0/22 maxlen: 23
103.248.12.0/22 maxlen: 24
118.67.208.0/20 maxlen: 20
118.67.208.0/24 maxlen: 24
118.67.209.0/24 maxlen: 24
118.67.210.0/24 maxlen: 24
118.67.211.0/24 maxlen: 24
118.67.212.0/24 maxlen: 24
118.67.213.0/24 maxlen: 24
118.67.214.0/24 maxlen: 24
118.67.215.0/24 maxlen: 24
118.67.216.0/24 maxlen: 24
118.67.217.0/24 maxlen: 24
118.67.218.0/24 maxlen: 24
118.67.219.0/24 maxlen: 24
118.67.220.0/24 maxlen: 24
118.67.221.0/24 maxlen: 24
118.67.222.0/24 maxlen: 24
118.67.223.0/24 maxlen: 24
163.53.149.0/24 maxlen: 24
163.53.150.0/24 maxlen: 24
163.53.151.0/24 maxlen: 24
2406:f100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9473 (0x2501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Validity
Not Before: Aug 4 07:11:32 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4418e-b374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:87:86:18:88:8b:72:35:2f:d3:3f:bb:41:
8b:b4:94:6a:c4:e7:cf:36:52:3b:4f:99:b7:99:56:
94:b1:cd:17:72:d6:5e:5d:79:9b:a6:d4:53:34:55:
bb:7b:7a:6c:75:8b:1c:cf:9d:de:ec:e2:f1:6f:54:
ef:a5:4a:9d:93:fd:bb:2a:36:53:82:ae:63:43:80:
e0:76:78:d1:c4:4b:f2:8c:44:14:14:fc:e4:0c:68:
d2:8a:81:8a:93:98:50:f2:61:5a:fc:e4:cc:7a:e9:
5d:eb:ee:3a:5b:66:f5:ab:ce:9d:64:32:50:68:89:
4d:cf:1b:25:c7:e6:23:62:43:f1:16:ec:bf:ff:b4:
8f:b3:30:64:e9:1a:cf:fd:bd:35:32:70:2c:44:b0:
64:68:b6:8a:b7:7d:38:f8:37:52:e0:32:28:2f:b5:
e9:06:64:46:3d:c5:6d:22:c7:25:8a:d1:9a:dd:9c:
84:d7:7a:78:4e:44:22:c1:2c:e3:31:c3:65:50:49:
f0:fc:f3:48:0e:1f:2a:d7:da:79:ed:8d:b1:c7:83:
43:45:51:ef:99:3a:e7:c7:e7:b8:e4:e7:a4:02:61:
65:83:cb:fb:8a:8b:a3:25:c9:83:c1:ed:9c:39:73:
2e:d8:36:e5:46:bd:30:a9:85:86:61:18:39:f7:87:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:59:15:BB:BE:0B:D6:44:88:EC:54:C6:08:58:EF:0A:35:6C:C7:54
X509v3 Authority Key Identifier:
keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/3FC484EE710211F0BD347869C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.68.0/22
103.23.40.0/22
103.120.192.0/22
103.209.40.0/22
103.248.12.0/22
118.67.208.0/20
163.53.149.0-163.53.151.255
IPv6:
2406:f100::/32
Signature Algorithm: sha256WithRSAEncryption
b4:9b:b2:3c:2d:12:fb:1b:41:18:4e:56:7e:54:81:3d:a5:4f:
df:94:65:02:2f:14:94:ef:5f:13:52:6a:cc:72:54:3d:aa:b4:
78:2f:53:aa:65:17:aa:4a:10:91:9c:fe:37:9b:46:0c:63:d5:
e5:d8:8e:04:01:fa:30:99:38:fc:13:6a:27:0d:b1:74:76:10:
2c:38:a7:e3:ec:eb:eb:80:8d:04:52:50:7d:6d:07:5f:e2:1c:
bf:b4:43:d4:19:75:66:e7:a0:a5:ed:6d:d9:c9:15:de:68:4f:
5d:88:fa:79:53:67:47:9d:8a:ea:82:d5:40:77:25:11:a9:24:
74:47:d8:92:55:2f:37:9c:00:61:19:7a:61:55:da:0e:4d:66:
e0:68:1b:f0:d5:6b:81:2c:eb:6d:3c:40:82:4c:dc:77:bb:3a:
f4:99:3b:25:95:3a:f5:07:cf:b0:b9:aa:a1:9d:26:30:12:d4:
53:55:f2:0b:b6:a9:7f:30:6b:bc:d8:b0:66:9a:e0:05:42:8d:
b6:9f:2b:0a:3b:22:0f:18:fe:38:08:28:e0:c6:1c:2a:94:a7:
91:06:9c:cc:ce:f5:0c:bb:d6:97:24:ae:dc:3e:bc:3b:c0:b5:
15:1a:39:1f:d7:57:df:f9:b9:7c:02:9a:90:2b:91:5d:6c:74:
95:0a:78:31
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICJQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy
ODM1MkFFMjgwHhcNMjUwODA0MDcxMTMyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDE4ZS1iMzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx6mHhhiIi3I1L9M/u0GLtJRqxOfPNlI7T5m3mVaUsc0XctZeXXmbptRTNFW7
e3psdYscz53e7OLxb1TvpUqdk/27KjZTgq5jQ4DgdnjRxEvyjEQUFPzkDGjSioGK
k5hQ8mFa/OTMeuld6+46W2b1q86dZDJQaIlNzxslx+YjYkPxFuy//7SPszBk6RrP
/b01MnAsRLBkaLaKt304+DdS4DIoL7XpBmRGPcVtIsclitGa3ZyE13p4TkQiwSzj
McNlUEnw/PNIDh8q19p57Y2xx4NDRVHvmTrnx+e45OekAmFlg8v7ioujJcmDwe2c
OXMu2DblRr0wqYWGYRg594dx2wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGBZFbu+
C9ZEiOxUxghY7wo1bMdUMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0
OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy
aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg5NEIvNURFOTIxRkM1NDlCMTFFNTgzQUFDMTZFQzRGOUFFMDIvM0ZDNDg0RUU3
MTAyMTFGMEJEMzQ3ODY5QzRGOUFFMDIucm9hMFoGCCsGAQUFBwEHAQH/BEswSTA4
BAIAATAyAwQCJP9EAwQCZxcoAwQCZ3jAAwQCZ9EoAwQCZ/gMAwQEdkPQMAwDBACj
NZUDBAOjNZAwDQQCAAIwBwMFACQG8QAwDQYJKoZIhvcNAQELBQADggEBALSbsjwt
EvsbQRhOVn5UgT2lT9+UZQIvFJTvXxNSasxyVD2qtHgvU6plF6pKEJGc/jebRgxj
1eXYjgQB+jCZOPwTaicNsXR2ECw4p+Ps6+uAjQRSUH1tB1/iHL+0Q9QZdWbnoKXt
bdnJFd5oT12I+nlTZ0ediuqC1UB3JRGpJHRH2JJVLzecAGEZemFV2g5NZuBoG/DV
a4Es6208QIJM3He7OvSZOyWVOvUHz7C5qqGdJjAS1FNV8gu2qX8wa7zYsGaa4AVC
jbafKwo7Ig8Y/jgIKODGHCqUp5EGnMzO9Qy71pckrtw+vDvAtRUaOR/XV9/5uXwC
mpArkV1sdJUKeDE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:38:56 2026 by rpki-client