Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/FCF99042301011EFBC350682C4F9AE02.roa
File: FCF99042301011EFBC350682C4F9AE02.roa (raw, json)
Hash identifier: G76akd+Pz3BvQnQXHM+tIAwBqY1cYkiz3eE1RRYxTew=
Subject key identifier: 44:1B:16:B6:5E:AF:13:D1:85:79:6D:71:AF:69:79:B6:FA:C3:80:BC
Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial: 0238
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/FCF99042301011EFBC350682C4F9AE02.roa
Signing time: Thu 09 Jul 2026 06:31:56 +0000
ROA not before: Thu 09 Jul 2026 06:31:56 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 53813
IP address blocks: 167.103.2.0/23 maxlen: 24
167.103.4.0/23 maxlen: 24
167.103.6.0/23 maxlen: 24
167.103.8.0/23 maxlen: 24
167.103.10.0/23 maxlen: 24
167.103.12.0/23 maxlen: 24
167.103.14.0/23 maxlen: 24
167.103.16.0/23 maxlen: 24
167.103.18.0/23 maxlen: 24
167.103.20.0/23 maxlen: 24
167.103.22.0/23 maxlen: 24
167.103.24.0/23 maxlen: 24
167.103.26.0/23 maxlen: 24
167.103.28.0/23 maxlen: 24
167.103.30.0/23 maxlen: 24
167.103.32.0/23 maxlen: 24
167.103.34.0/23 maxlen: 24
167.103.36.0/24 maxlen: 24
167.103.37.0/24 maxlen: 24
167.103.38.0/24 maxlen: 24
167.103.39.0/24 maxlen: 24
167.103.40.0/24 maxlen: 24
167.103.41.0/24 maxlen: 24
167.103.42.0/23 maxlen: 24
167.103.44.0/23 maxlen: 24
167.103.46.0/23 maxlen: 24
167.103.48.0/24 maxlen: 24
167.103.49.0/24 maxlen: 24
167.103.54.0/23 maxlen: 24
167.103.56.0/23 maxlen: 24
167.103.58.0/23 maxlen: 24
167.103.60.0/23 maxlen: 24
167.103.62.0/23 maxlen: 24
167.103.64.0/23 maxlen: 24
167.103.66.0/23 maxlen: 24
167.103.68.0/23 maxlen: 24
167.103.70.0/23 maxlen: 24
167.103.72.0/23 maxlen: 24
167.103.74.0/23 maxlen: 24
167.103.76.0/23 maxlen: 24
167.103.78.0/23 maxlen: 24
167.103.80.0/23 maxlen: 24
167.103.82.0/23 maxlen: 24
167.103.84.0/24 maxlen: 24
167.103.85.0/24 maxlen: 24
167.103.86.0/24 maxlen: 24
167.103.87.0/24 maxlen: 24
167.103.88.0/23 maxlen: 24
167.103.96.0/23 maxlen: 24
167.103.98.0/23 maxlen: 24
167.103.100.0/23 maxlen: 24
167.103.102.0/23 maxlen: 24
167.103.110.0/24 maxlen: 24
167.103.111.0/24 maxlen: 24
167.103.112.0/23 maxlen: 24
167.103.114.0/23 maxlen: 24
167.103.116.0/23 maxlen: 24
167.103.118.0/23 maxlen: 24
167.103.120.0/23 maxlen: 24
167.103.122.0/23 maxlen: 24
167.103.124.0/23 maxlen: 24
167.103.126.0/23 maxlen: 24
167.103.132.0/23 maxlen: 24
167.103.134.0/23 maxlen: 24
167.103.136.0/23 maxlen: 24
167.103.138.0/23 maxlen: 24
167.103.140.0/23 maxlen: 24
167.103.142.0/23 maxlen: 24
167.103.144.0/23 maxlen: 24
167.103.146.0/23 maxlen: 24
167.103.154.0/23 maxlen: 24
167.103.156.0/23 maxlen: 24
167.103.158.0/23 maxlen: 24
167.103.160.0/23 maxlen: 24
167.103.162.0/23 maxlen: 24
167.103.164.0/23 maxlen: 24
167.103.166.0/23 maxlen: 24
167.103.186.0/23 maxlen: 24
167.103.188.0/23 maxlen: 24
167.103.190.0/23 maxlen: 24
167.103.192.0/23 maxlen: 24
167.103.196.0/23 maxlen: 24
167.103.198.0/23 maxlen: 24
167.103.200.0/23 maxlen: 24
167.103.202.0/23 maxlen: 24
167.103.204.0/23 maxlen: 24
167.103.206.0/23 maxlen: 24
167.103.208.0/23 maxlen: 24
167.103.210.0/23 maxlen: 24
167.103.212.0/23 maxlen: 24
167.103.214.0/23 maxlen: 24
167.103.216.0/23 maxlen: 24
167.103.228.0/23 maxlen: 24
167.103.230.0/23 maxlen: 24
167.103.232.0/23 maxlen: 24
167.103.234.0/23 maxlen: 24
167.103.248.0/23 maxlen: 24
167.103.250.0/23 maxlen: 24
167.103.252.0/23 maxlen: 24
167.103.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Validity
Not Before: Jul 9 06:31:56 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4f405c-f69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:0c:9a:d7:99:75:f3:92:8c:36:1b:2b:f6:
06:16:b2:68:5d:85:b7:d3:04:ed:ee:70:96:76:ae:
1b:9c:f8:82:27:e4:53:32:b4:26:10:11:ac:a6:5d:
99:49:51:ee:13:48:fa:37:07:af:10:89:49:1c:69:
05:32:a3:a3:02:43:62:a8:5f:43:ba:58:6c:5a:cb:
1f:3d:5e:f7:34:d9:36:a5:3f:39:40:fd:7e:3a:e5:
9d:9a:0e:38:07:b8:99:d9:7e:eb:9d:4e:cf:2a:3d:
c4:02:5e:5c:4a:7a:5e:ff:dd:6d:ea:11:12:24:a8:
6f:5d:18:9a:97:4b:59:4c:60:32:d1:0d:61:6e:51:
f3:dc:8d:17:88:b0:de:50:a2:68:76:e2:24:c6:0d:
32:e9:af:2d:ae:1e:1f:70:59:35:33:e4:98:c9:a7:
41:a1:18:65:23:35:a5:8a:57:42:42:a4:07:eb:25:
22:79:98:a4:6a:fa:73:df:33:8a:57:3c:5b:0e:4c:
cc:d1:29:75:93:9b:8d:b9:f0:ae:0a:e0:3f:df:c5:
7a:50:3f:da:61:94:f6:f2:27:de:b4:cc:ad:b4:fa:
88:2d:8a:ff:50:58:43:97:69:79:1c:db:ee:f2:de:
ed:27:1a:7a:1e:d3:4f:a6:59:79:ff:85:f5:7f:63:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1B:16:B6:5E:AF:13:D1:85:79:6D:71:AF:69:79:B6:FA:C3:80:BC
X509v3 Authority Key Identifier:
keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/FCF99042301011EFBC350682C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
167.103.2.0-167.103.49.255
167.103.54.0-167.103.89.255
167.103.96.0/21
167.103.110.0-167.103.127.255
167.103.132.0-167.103.147.255
167.103.154.0-167.103.167.255
167.103.186.0-167.103.193.255
167.103.196.0-167.103.217.255
167.103.228.0-167.103.235.255
167.103.248.0/21
Signature Algorithm: sha256WithRSAEncryption
45:3a:ac:4c:e8:27:85:36:82:72:84:8c:20:df:a4:67:fd:d1:
ae:39:ec:18:38:74:f8:5a:94:3a:f1:b9:0b:4f:c9:ce:a8:55:
b7:d4:01:24:4a:59:4d:6c:66:b7:1e:19:34:81:40:29:65:f7:
7f:af:83:a4:3a:a2:57:ee:03:c8:e9:1c:3c:2f:dc:c9:9c:3a:
36:50:7d:ef:75:c7:4f:3f:bb:07:19:ee:3d:39:8b:e0:9d:19:
68:e9:88:24:2a:69:a0:2e:53:7d:92:ac:fd:79:3d:11:30:15:
26:e6:3f:9c:b3:00:12:34:15:70:3b:15:c5:d0:39:62:a2:4f:
bd:46:da:9d:72:40:2e:54:e4:66:4c:61:50:bb:61:35:88:50:
a7:2e:c3:12:37:8d:3c:15:0f:bb:58:09:fe:9c:95:fb:02:89:
30:39:eb:10:c2:b0:7b:7a:4e:e6:4c:19:ac:8e:07:f7:68:ef:
a9:ac:0c:2b:e4:dd:da:b0:70:74:9c:19:da:4c:ce:79:4a:a6:
72:8a:2f:90:2c:d5:95:19:b4:ea:83:af:6f:06:57:b0:95:25:
de:2b:a9:03:1d:e4:ae:ea:4d:75:7b:2c:b5:36:97:2b:96:fa:
59:95:ad:58:a2:86:f5:d4:a0:59:21:70:8f:52:00:01:65:10:
ae:6e:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:52 2026 by rpki-client