Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
File: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (raw, json)
Hash identifier: pl0/lukDP1q/2w7idnWs5tNeVGS68HUei/8CKE2Uzyo=
Subject key identifier: 95:E6:BC:93:BE:02:25:16:97:E1:5A:FD:9F:E1:FC:2C:13:45:71:2C
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 3599
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
Signing time: Mon 20 Apr 2026 15:13:05 +0000
ROA not before: Mon 20 Apr 2026 15:13:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7604
IP address blocks: 103.6.12.0/22 maxlen: 22
103.6.12.0/24 maxlen: 24
103.6.13.0/24 maxlen: 24
103.6.14.0/24 maxlen: 24
103.6.15.0/24 maxlen: 24
103.25.112.0/23 maxlen: 23
103.241.200.0/22 maxlen: 22
103.241.200.0/24 maxlen: 24
103.241.201.0/24 maxlen: 24
119.252.64.0/22 maxlen: 22
119.252.64.0/24 maxlen: 24
119.252.68.0/22 maxlen: 22
119.252.72.0/22 maxlen: 22
119.252.72.0/23 maxlen: 23
119.252.74.0/24 maxlen: 24
119.252.76.0/22 maxlen: 22
119.252.80.0/22 maxlen: 22
119.252.84.0/22 maxlen: 22
119.252.86.0/24 maxlen: 24
119.252.88.0/22 maxlen: 22
119.252.88.0/23 maxlen: 23
119.252.91.0/24 maxlen: 24
119.252.92.0/22 maxlen: 23
122.202.64.0/20 maxlen: 20
180.233.129.0/24 maxlen: 24
180.233.130.0/24 maxlen: 24
180.233.131.0/24 maxlen: 24
202.74.160.0/20 maxlen: 20
202.74.160.0/22 maxlen: 22
202.74.164.0/22 maxlen: 24
202.74.168.0/22 maxlen: 22
202.74.172.0/22 maxlen: 22
202.74.174.0/24 maxlen: 24
202.74.176.0/22 maxlen: 22
202.74.178.0/24 maxlen: 24
202.74.180.0/22 maxlen: 22
202.74.184.0/22 maxlen: 22
202.74.188.0/22 maxlen: 22
202.74.188.0/23 maxlen: 23
202.191.4.0/22 maxlen: 24
203.7.224.0/23 maxlen: 23
203.7.224.0/24 maxlen: 24
203.19.12.0/24 maxlen: 24
203.23.208.0/21 maxlen: 21
203.23.216.0/22 maxlen: 22
203.23.220.0/22 maxlen: 22
203.23.220.0/23 maxlen: 24
203.23.223.0/24 maxlen: 24
203.24.54.0/24 maxlen: 24
203.25.26.0/23 maxlen: 23
203.30.19.0/24 maxlen: 24
203.30.34.0/24 maxlen: 24
203.31.0.0/24 maxlen: 24
203.32.124.0/22 maxlen: 22
203.32.125.0/24 maxlen: 24
203.34.30.0/23 maxlen: 23
203.34.30.0/24 maxlen: 24
203.55.198.0/24 maxlen: 24
203.124.176.0/20 maxlen: 20
203.196.92.0/22 maxlen: 22
203.209.160.0/20 maxlen: 20
203.209.160.0/22 maxlen: 22
203.209.164.0/24 maxlen: 24
203.209.166.0/23 maxlen: 23
203.209.168.0/24 maxlen: 24
203.209.169.0/24 maxlen: 24
203.209.170.0/23 maxlen: 23
203.209.172.0/22 maxlen: 22
2401:400::/32 maxlen: 32
2401:402::/31 maxlen: 32
2403:3400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13721 (0x3599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Apr 20 15:13:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e64281-db2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:73:3b:13:f8:e0:3f:6e:78:55:95:f7:da:
5c:97:24:74:39:47:19:a1:86:b3:fc:88:fa:4f:16:
c7:bc:94:85:73:4c:c8:11:80:7d:6a:b6:e9:e4:ec:
8f:c4:91:6f:64:bd:61:81:b6:7f:7a:76:d8:94:18:
92:cd:57:f0:83:35:81:57:6d:eb:a1:ca:98:d9:3b:
4b:9c:2c:6b:1c:8d:e6:0f:fd:e6:52:a1:e0:d3:b7:
9b:a7:ab:c9:00:98:e4:66:b6:61:0c:fe:de:04:7e:
1e:d0:e8:ca:ee:f7:27:77:d7:c4:d5:b5:b1:84:73:
5b:de:05:2e:55:90:34:32:94:60:1c:d0:30:ae:db:
be:6b:4c:11:48:b0:51:71:42:42:c7:82:9e:3b:96:
12:4d:e8:0f:85:e2:27:71:5f:87:fc:d6:b3:e5:3e:
bf:82:aa:38:60:7d:21:6c:8e:7d:37:bb:56:19:f7:
84:c4:bf:c6:03:64:b6:b0:0d:11:97:ac:54:cb:05:
c3:15:ae:b6:a1:28:a1:41:9d:36:d1:53:3d:b7:14:
f4:d0:4c:3c:16:c2:fd:a8:70:a6:32:f6:89:8c:de:
91:43:aa:92:8f:0a:dc:ee:31:46:64:2d:f6:20:51:
3a:88:c5:29:fc:c1:bf:fd:91:e7:a8:9e:4d:a7:9a:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E6:BC:93:BE:02:25:16:97:E1:5A:FD:9F:E1:FC:2C:13:45:71:2C
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.6.12.0/22
103.25.112.0/23
103.241.200.0/22
119.252.64.0/19
122.202.64.0/20
180.233.129.0-180.233.131.255
202.74.160.0/19
202.191.4.0/22
203.7.224.0/23
203.19.12.0/24
203.23.208.0/20
203.24.54.0/24
203.25.26.0/23
203.30.19.0/24
203.30.34.0/24
203.31.0.0/24
203.32.124.0/22
203.34.30.0/23
203.55.198.0/24
203.124.176.0/20
203.196.92.0/22
203.209.160.0/20
IPv6:
2401:400::/32
2401:402::/31
2403:3400::/32
Signature Algorithm: sha256WithRSAEncryption
5a:37:02:1a:cb:4f:95:7b:0d:eb:7e:49:2b:ce:67:58:47:e6:
98:da:c3:4d:1b:66:38:67:fa:fe:ee:b7:b6:cc:79:ec:fa:d2:
99:33:d7:6e:de:a9:86:fa:d1:74:52:b4:0e:c1:b7:01:91:a1:
39:46:b0:50:6b:0f:dc:f7:b3:0f:7c:2d:c5:30:af:69:23:ce:
57:b1:94:dc:2b:0b:46:b7:d4:b1:ed:18:04:9d:c5:8d:b6:dd:
30:73:74:b9:e4:51:c4:2a:b6:14:a3:69:b1:bb:31:2a:d4:79:
45:af:24:b3:fb:da:c4:ef:9f:d5:30:9f:99:00:9c:4a:b5:33:
8a:ff:84:02:b8:4a:b4:e5:14:29:d4:3e:bf:b7:c5:e7:0d:09:
7c:fc:0f:aa:15:ce:4c:66:ca:a1:29:83:6f:d0:8f:36:44:9d:
dc:21:85:04:2a:65:2f:42:0f:25:f2:e1:2e:a4:2c:32:49:8f:
36:84:05:4b:f6:64:40:98:ab:a7:58:39:50:cc:0f:f7:24:04:
9d:84:68:e8:99:73:2b:58:a3:44:82:a0:e4:89:a3:d9:4d:8c:
0d:f0:3c:5a:ac:7d:4d:3b:7f:33:d7:63:ff:f2:0d:ad:39:1b:
85:2a:09:4d:1d:44:2e:c5:10:1c:fe:88:3d:94:2b:13:9f:40:
6f:65:f5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:30 2026 by rpki-client