Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/38FA1FDE135711EAACF3565BC4F9AE02.roa
File: 38FA1FDE135711EAACF3565BC4F9AE02.roa (raw, json)
Hash identifier: PYg8vYLqddzplZL7Imsshpo8zF5g3CAK9J3XuN6h1WU=
Subject key identifier: E8:FA:82:D3:B2:40:DB:97:C0:F0:2B:DF:1D:E8:13:EC:63:60:6E:B3
Certificate issuer: /CN=A91192A0/serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Certificate serial: 0CCD
Authority key identifier: 0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/38FA1FDE135711EAACF3565BC4F9AE02.roa
Signing time: Wed 29 Apr 2026 16:48:07 +0000
ROA not before: Wed 29 Apr 2026 16:48:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137554
IP address blocks: 103.113.12.0/22 maxlen: 22
103.113.12.0/23 maxlen: 23
103.113.12.0/24 maxlen: 24
103.113.13.0/24 maxlen: 24
103.113.14.0/23 maxlen: 23
103.113.14.0/24 maxlen: 24
103.113.15.0/24 maxlen: 24
2402:b540::/32 maxlen: 32
2402:b540:1::/48 maxlen: 48
2402:b540:2::/48 maxlen: 48
2402:b540:3::/48 maxlen: 48
2402:b540:4::/48 maxlen: 48
2402:b540:5::/48 maxlen: 48
2402:b540:6::/48 maxlen: 48
2402:b540:7::/48 maxlen: 48
2402:b540:8::/48 maxlen: 48
2402:b540:9::/48 maxlen: 48
2402:b540:a::/48 maxlen: 48
2402:b540:b::/48 maxlen: 48
2402:b540:c::/48 maxlen: 48
2402:b540:d::/48 maxlen: 48
2402:b540:e::/48 maxlen: 48
2402:b540:f::/48 maxlen: 48
2402:b540:2a::/48 maxlen: 48
2402:b540:2b::/48 maxlen: 48
2402:b540:2c::/48 maxlen: 48
2402:b540:2d::/48 maxlen: 48
2402:b540:2e::/48 maxlen: 48
2402:b540:2f::/48 maxlen: 48
2402:b540:200::/48 maxlen: 48
2402:b540:202::/48 maxlen: 48
2402:b540:203::/48 maxlen: 48
2402:b540:204::/48 maxlen: 48
2402:b540:205::/48 maxlen: 48
2402:b540:400::/48 maxlen: 48
2402:b540:410::/48 maxlen: 48
2402:b540:600::/40 maxlen: 40
2402:b540:600::/48 maxlen: 48
2402:b540:601::/48 maxlen: 48
2402:b540:602::/48 maxlen: 48
2402:b540:603::/48 maxlen: 48
2402:b540:604::/48 maxlen: 48
2402:b540:605::/48 maxlen: 48
2402:b540:606::/48 maxlen: 48
2402:b540:607::/48 maxlen: 48
2402:b540:608::/48 maxlen: 48
2402:b540:609::/48 maxlen: 48
2402:b540:60a::/48 maxlen: 48
2402:b540:60b::/48 maxlen: 48
2402:b540:60c::/48 maxlen: 48
2402:b540:60d::/48 maxlen: 48
2402:b540:60e::/48 maxlen: 48
2402:b540:60f::/48 maxlen: 48
2402:b540:610::/48 maxlen: 48
2402:b540:611::/48 maxlen: 48
2402:b540:612::/48 maxlen: 48
2402:b540:613::/48 maxlen: 48
2402:b540:614::/48 maxlen: 48
2402:b540:615::/48 maxlen: 48
2402:b540:616::/48 maxlen: 48
2402:b540:617::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91192A0, serialNumber=0DF6330115EC45F531FF56131EB8455AAFB776CC
Validity
Not Before: Apr 29 16:48:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f23647-bf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:84:d1:5d:d8:24:24:b9:44:2d:f5:93:21:04:
91:96:71:a3:8c:ed:60:17:22:9b:e9:da:72:b1:c5:
82:cd:ea:ef:69:59:69:04:1c:c7:e1:79:29:ee:60:
f2:23:ce:f8:03:0f:75:71:77:05:91:dd:12:88:02:
cd:d2:f2:be:5d:22:e0:66:e1:25:8b:62:6f:5e:f5:
7a:0f:20:ab:39:c7:9a:de:e2:55:d2:9a:74:50:10:
4c:21:e0:38:de:2f:49:e6:80:e8:08:60:43:3f:5f:
62:d0:c0:fc:2f:ce:8b:91:2f:90:88:f9:28:8e:2e:
fb:47:fb:c3:2f:38:a0:c3:97:fe:96:45:c6:de:39:
63:13:ea:3d:7e:0f:94:09:8c:fe:d7:68:78:e5:00:
4d:8e:59:ae:ca:4c:1c:4e:ea:c4:c8:da:79:a0:c0:
a0:52:49:52:dc:c0:f0:e9:46:f3:ac:91:b1:4e:0a:
e6:06:d4:c9:22:77:2e:e0:43:ee:28:8b:8c:76:3c:
07:2d:cb:2c:21:13:43:ae:33:1c:7a:d4:af:cf:58:
08:31:10:2f:72:7c:16:d5:e6:4d:5a:92:5d:44:43:
3e:b5:c7:08:a4:2c:c1:3c:74:92:fa:b9:de:f8:10:
fd:ee:53:8b:e0:22:f9:b8:e6:95:55:8f:85:ae:49:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FA:82:D3:B2:40:DB:97:C0:F0:2B:DF:1D:E8:13:EC:63:60:6E:B3
X509v3 Authority Key Identifier:
keyid:0D:F6:33:01:15:EC:45:F5:31:FF:56:13:1E:B8:45:5A:AF:B7:76:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/DfYzARXsRfUx_1YTHrhFWq-3dsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfYzARXsRfUx_1YTHrhFWq-3dsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91192A0/4F1EAE84135611EA992B115AC4F9AE02/38FA1FDE135711EAACF3565BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.12.0/22
IPv6:
2402:b540::/32
Signature Algorithm: sha256WithRSAEncryption
1f:70:65:db:16:66:a6:b7:54:44:6a:5a:d9:ff:52:20:3b:31:
bc:19:d9:60:09:2a:42:c9:64:6e:bd:4a:f8:5e:ae:da:29:63:
1f:a3:37:31:74:d7:bc:0b:68:dc:b5:61:4f:cf:a5:a0:13:6b:
c4:6c:ba:09:c2:70:d8:2e:00:15:08:34:2b:5e:33:67:94:e8:
34:85:8c:94:46:7c:cb:78:fd:52:2d:83:13:d8:ae:bc:6a:0d:
c7:29:0a:92:d8:5d:ee:d4:44:24:1b:3b:62:88:22:dc:cf:db:
01:79:72:8e:eb:e3:2c:ce:d0:ac:23:37:4b:29:62:46:ef:90:
b6:60:88:53:f3:0e:c2:a8:38:8d:b0:9a:9f:4e:77:a8:3d:ca:
d3:8b:28:ed:80:12:72:9a:00:9f:fd:bf:93:2f:9b:40:06:9d:
67:5e:10:ad:ed:d6:8d:f3:bf:e4:72:3e:5b:2c:ac:fc:27:d2:
9c:bb:76:9f:b6:63:b5:32:48:3a:42:85:d1:e3:86:80:e2:60:
cf:3f:aa:72:ac:2b:7c:8d:fc:89:7e:b2:fa:15:c9:ba:e9:96:
11:f1:7f:cb:4a:2e:d5:59:3f:0a:aa:c4:13:1f:f6:bc:6e:e3:
f7:c9:ad:bd:54:53:43:0a:1d:b4:f0:14:33:b0:41:eb:c4:3a:
a1:e9:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:17 2026 by rpki-client