Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/FCF99042301011EFBC350682C4F9AE02.roa
File: FCF99042301011EFBC350682C4F9AE02.roa (raw, json)
Hash identifier: eSUAI4AAApfP7epJ5sEwL+VCggzqIoTDDfYr32F9B9I=
Subject key identifier: 56:FA:E9:C6:53:64:CB:3D:D2:EB:B6:E2:24:AF:73:B5:6D:2D:44:07
Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial: 0262
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/FCF99042301011EFBC350682C4F9AE02.roa
Signing time: Wed 23 Sep 2026 14:31:27 +0000
ROA not before: Wed 23 Sep 2026 14:31:27 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 53813
IP address blocks: 167.103.2.0/23 maxlen: 24
167.103.4.0/23 maxlen: 24
167.103.6.0/23 maxlen: 24
167.103.8.0/23 maxlen: 24
167.103.10.0/23 maxlen: 24
167.103.12.0/23 maxlen: 24
167.103.14.0/23 maxlen: 24
167.103.16.0/23 maxlen: 24
167.103.18.0/23 maxlen: 24
167.103.20.0/23 maxlen: 24
167.103.22.0/23 maxlen: 24
167.103.24.0/23 maxlen: 24
167.103.26.0/23 maxlen: 24
167.103.28.0/23 maxlen: 24
167.103.30.0/23 maxlen: 24
167.103.32.0/23 maxlen: 24
167.103.34.0/23 maxlen: 24
167.103.36.0/24 maxlen: 24
167.103.37.0/24 maxlen: 24
167.103.38.0/24 maxlen: 24
167.103.39.0/24 maxlen: 24
167.103.40.0/24 maxlen: 24
167.103.41.0/24 maxlen: 24
167.103.42.0/23 maxlen: 24
167.103.44.0/23 maxlen: 24
167.103.46.0/23 maxlen: 24
167.103.48.0/24 maxlen: 24
167.103.49.0/24 maxlen: 24
167.103.54.0/23 maxlen: 24
167.103.56.0/23 maxlen: 24
167.103.58.0/23 maxlen: 24
167.103.60.0/23 maxlen: 24
167.103.62.0/23 maxlen: 24
167.103.64.0/23 maxlen: 24
167.103.66.0/23 maxlen: 24
167.103.68.0/23 maxlen: 24
167.103.70.0/23 maxlen: 24
167.103.72.0/23 maxlen: 24
167.103.74.0/23 maxlen: 24
167.103.76.0/23 maxlen: 24
167.103.78.0/23 maxlen: 24
167.103.80.0/23 maxlen: 24
167.103.82.0/23 maxlen: 24
167.103.84.0/24 maxlen: 24
167.103.85.0/24 maxlen: 24
167.103.86.0/24 maxlen: 24
167.103.87.0/24 maxlen: 24
167.103.88.0/23 maxlen: 24
167.103.96.0/23 maxlen: 24
167.103.98.0/23 maxlen: 24
167.103.100.0/23 maxlen: 24
167.103.102.0/23 maxlen: 24
167.103.110.0/24 maxlen: 24
167.103.111.0/24 maxlen: 24
167.103.112.0/23 maxlen: 24
167.103.114.0/23 maxlen: 24
167.103.116.0/23 maxlen: 24
167.103.118.0/23 maxlen: 24
167.103.120.0/23 maxlen: 24
167.103.122.0/23 maxlen: 24
167.103.124.0/23 maxlen: 24
167.103.126.0/23 maxlen: 24
167.103.128.0/23 maxlen: 24
167.103.132.0/23 maxlen: 24
167.103.134.0/23 maxlen: 24
167.103.136.0/23 maxlen: 24
167.103.138.0/23 maxlen: 24
167.103.140.0/23 maxlen: 24
167.103.142.0/23 maxlen: 24
167.103.144.0/23 maxlen: 24
167.103.146.0/23 maxlen: 24
167.103.154.0/23 maxlen: 24
167.103.156.0/23 maxlen: 24
167.103.158.0/23 maxlen: 24
167.103.160.0/23 maxlen: 24
167.103.162.0/23 maxlen: 24
167.103.164.0/23 maxlen: 24
167.103.166.0/23 maxlen: 24
167.103.186.0/23 maxlen: 24
167.103.188.0/23 maxlen: 24
167.103.190.0/23 maxlen: 24
167.103.192.0/23 maxlen: 24
167.103.196.0/23 maxlen: 24
167.103.198.0/23 maxlen: 24
167.103.200.0/23 maxlen: 24
167.103.202.0/23 maxlen: 24
167.103.204.0/23 maxlen: 24
167.103.206.0/23 maxlen: 24
167.103.208.0/23 maxlen: 24
167.103.210.0/23 maxlen: 24
167.103.212.0/23 maxlen: 24
167.103.214.0/23 maxlen: 24
167.103.216.0/23 maxlen: 24
167.103.228.0/23 maxlen: 24
167.103.230.0/23 maxlen: 24
167.103.232.0/23 maxlen: 24
167.103.234.0/23 maxlen: 24
167.103.248.0/23 maxlen: 24
167.103.250.0/23 maxlen: 24
167.103.252.0/23 maxlen: 24
167.103.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 14:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Validity
Not Before: Sep 23 14:31:27 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ab3e2be-4e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ae:f2:81:db:b7:d8:b8:aa:30:bd:1d:fe:bb:
ed:29:0f:15:87:3c:86:90:40:0a:f9:0e:33:6e:57:
ab:04:62:af:6e:05:a0:ce:64:c5:3e:67:5a:d2:39:
e8:79:e9:eb:28:66:8c:3c:b7:9b:9a:14:8c:c9:fb:
ad:a4:fc:a9:ed:da:87:08:fd:01:77:fa:5b:6f:fc:
f8:5c:0f:f7:bb:7e:c4:a7:40:18:17:d1:cc:a5:f7:
ee:6a:a5:92:ce:00:e2:c3:46:f6:db:2c:ec:cd:e9:
38:31:b8:6a:aa:ea:31:c4:19:06:28:26:de:cb:d1:
85:74:62:42:8d:14:f3:ae:48:70:d4:6f:24:a5:f1:
19:af:f7:6c:79:e1:13:cd:b0:c6:61:da:2a:5f:2c:
6a:da:4b:58:38:96:dc:dd:bc:73:3c:de:d3:0c:ff:
fb:b8:4f:0c:c5:3f:46:c2:1c:80:6c:68:9d:40:b3:
5e:97:08:3e:d9:9a:32:7f:4b:22:3a:55:e8:57:6e:
c6:bd:6c:ab:30:ea:4b:93:db:c9:f5:81:03:95:4e:
96:ff:47:4c:d8:c7:d7:94:61:f4:aa:1c:29:e4:63:
5b:8f:bc:d4:49:63:d9:08:1e:95:49:a1:34:9d:8a:
1c:c2:5f:18:22:0e:a2:66:84:b1:2c:ce:dc:5a:98:
11:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FA:E9:C6:53:64:CB:3D:D2:EB:B6:E2:24:AF:73:B5:6D:2D:44:07
X509v3 Authority Key Identifier:
keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/FCF99042301011EFBC350682C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
167.103.2.0-167.103.49.255
167.103.54.0-167.103.89.255
167.103.96.0/21
167.103.110.0-167.103.129.255
167.103.132.0-167.103.147.255
167.103.154.0-167.103.167.255
167.103.186.0-167.103.193.255
167.103.196.0-167.103.217.255
167.103.228.0-167.103.235.255
167.103.248.0/21
Signature Algorithm: sha256WithRSAEncryption
61:a1:5d:44:a2:85:e3:4b:a1:78:25:3e:a6:6e:0a:aa:5d:dd:
73:fc:9c:92:09:87:2b:cc:ae:a9:94:b6:50:c7:85:a5:2f:41:
28:92:76:38:86:fd:75:18:23:91:a0:eb:68:a4:9a:fc:65:32:
8c:ff:d5:e9:a7:c3:ee:96:c5:19:c6:c3:ba:c0:10:24:e0:ef:
0f:74:00:cb:ba:e1:51:c9:93:06:1a:19:87:83:c3:07:46:78:
52:47:e0:22:76:b3:7c:95:5b:c8:cd:8c:e9:6b:07:95:5d:3d:
4c:2b:cd:27:84:9d:83:df:78:04:ac:b2:15:0c:7e:7a:3f:95:
c0:e4:b8:48:19:44:e6:71:68:3d:86:14:56:d0:3d:bc:cd:54:
ce:21:c7:5b:e3:56:ae:b5:af:ff:ae:3c:97:90:7c:52:72:5b:
09:fa:19:b6:3e:8d:84:86:8c:f7:ba:a2:9a:2d:b3:b0:a6:16:
4e:dc:01:bc:15:70:9c:98:06:c5:e4:34:8c:63:d6:b0:2f:94:
b5:ea:ba:d7:20:1e:21:21:7f:a7:1d:f9:47:11:f6:69:6f:6e:
b7:dc:09:80:8d:db:8f:ed:5e:39:04:48:53:bb:d2:df:d1:30:
87:b2:1c:c8:56:d9:d8:0e:3a:2d:05:bc:6d:42:55:5a:bc:44:
03:4f:e7:21
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw
QkVDQUE5QTkwHhcNMjYwOTIzMTQzMTI3WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIzZTJiZS00ZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlK7ygdu32LiqML0d/rvtKQ8VhzyGkEAK+Q4zblerBGKvbgWgzmTFPmda0jno
eenrKGaMPLebmhSMyfutpPyp7dqHCP0Bd/pbb/z4XA/3u37Ep0AYF9HMpffuaqWS
zgDiw0b22yzszek4MbhqquoxxBkGKCbey9GFdGJCjRTzrkhw1G8kpfEZr/dseeET
zbDGYdoqXyxq2ktYOJbc3bxzPN7TDP/7uE8MxT9GwhyAbGidQLNelwg+2Zoyf0si
OlXoV27GvWyrMOpLk9vJ9YEDlU6W/0dM2MfXlGH0qhwp5GNbj7zUSWPZCB6VSaE0
nYocwl8YIg6iZoSxLM7cWpgRjQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFFb66cZT
ZMs90uu24iSvc7VtLUQHMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC
QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx
YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTcxNjkvNjIzM0REM0VFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvRkNGOTkwNDIz
MDEwMTFFRkJDMzUwNjgyQzRGOUFFMDIucm9hMIGYBggrBgEFBQcBBwEB/wSBiDCB
hTCBggQCAAEwfDAMAwQBp2cCAwQBp2cwMAwDBAGnZzYDBAGnZ1gDBAOnZ2AwDAME
AadnbgMEAadngDAMAwQCp2eEAwQCp2eQMAwDBAGnZ5oDBAOnZ6AwDAMEAadnugME
AadnwDAMAwQCp2fEAwQBp2fYMAwDBAKnZ+QDBAKnZ+gDBAOnZ/gwDQYJKoZIhvcN
AQELBQADggEBAGGhXUSiheNLoXglPqZuCqpd3XP8nJIJhyvMrqmUtlDHhaUvQSiS
djiG/XUYI5Gg62ikmvxlMoz/1emnw+6WxRnGw7rAECTg7w90AMu64VHJkwYaGYeD
wwdGeFJH4CJ2s3yVW8jNjOlrB5VdPUwrzSeEnYPfeASsshUMfno/lcDkuEgZROZx
aD2GFFbQPbzNVM4hx1vjVq61r/+uPJeQfFJyWwn6GbY+jYSGjPe6opots7CmFk7c
AbwVcJyYBsXkNIxj1rAvlLXqutcgHiEhf6cd+UcR9mlvbrfcCYCN24/tXjkESFO7
0t/RMIeyHMhW2dgOOi0FvG1CVVq8RANP5yE=
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:49:41 2026 by rpki-client