Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/7BC4E6DE322C11EFBC879F31C4F9AE02.roa
File: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (raw, json)
Hash identifier: gTs7ErT29ODm4I2PW/8cn4DNflw+we74b7wIEYEwoK0=
Subject key identifier: FF:90:49:86:F4:3A:47:CE:29:03:06:03:4A:1D:72:27:7A:1A:7E:74
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 171A
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/7BC4E6DE322C11EFBC879F31C4F9AE02.roa
Signing time: Thu 12 Mar 2026 17:21:46 +0000
ROA not before: Thu 12 Mar 2026 17:21:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24435
IP address blocks: 27.0.184.0/22 maxlen: 22
103.27.22.0/24 maxlen: 24
175.111.0.0/23 maxlen: 24
175.111.3.0/24 maxlen: 24
175.111.4.0/23 maxlen: 24
203.130.0.0/20 maxlen: 20
203.130.0.0/24 maxlen: 24
203.130.1.0/24 maxlen: 24
203.130.2.0/24 maxlen: 24
203.130.3.0/24 maxlen: 24
203.130.4.0/24 maxlen: 24
203.130.5.0/24 maxlen: 24
203.130.6.0/24 maxlen: 24
203.130.7.0/24 maxlen: 24
203.130.8.0/24 maxlen: 24
203.130.9.0/24 maxlen: 24
203.130.10.0/24 maxlen: 24
203.130.11.0/24 maxlen: 24
203.130.12.0/24 maxlen: 24
203.130.13.0/24 maxlen: 24
203.130.14.0/24 maxlen: 24
203.130.15.0/24 maxlen: 24
203.130.16.0/24 maxlen: 24
203.130.17.0/24 maxlen: 24
203.130.18.0/24 maxlen: 24
203.130.19.0/24 maxlen: 24
203.130.20.0/24 maxlen: 24
203.130.21.0/24 maxlen: 24
203.130.22.0/24 maxlen: 24
203.130.23.0/24 maxlen: 24
203.130.24.0/24 maxlen: 24
203.130.25.0/24 maxlen: 24
203.130.26.0/23 maxlen: 24
203.130.28.0/22 maxlen: 22
203.130.28.0/24 maxlen: 24
203.130.29.0/24 maxlen: 24
203.130.30.0/24 maxlen: 24
203.130.31.0/24 maxlen: 24
2001:fe8::/48 maxlen: 48
2001:fe8:1::/48 maxlen: 48
2001:fe8:2::/48 maxlen: 48
2001:fe8:3::/48 maxlen: 48
2001:fe8:9::/48 maxlen: 48
2001:fe8:10::/48 maxlen: 48
2001:fe8:11::/48 maxlen: 48
2001:fe8:48::/48 maxlen: 48
2001:fe8:4000::/48 maxlen: 48
2001:fe8:4001::/48 maxlen: 48
2001:fe8:4002::/48 maxlen: 48
2001:fe8:4003::/48 maxlen: 48
2001:fe8:4100::/48 maxlen: 48
2001:fe8:4101::/48 maxlen: 48
2001:fe8:8100::/48 maxlen: 48
2001:fe8:8101::/48 maxlen: 48
2001:fe8:8110::/48 maxlen: 48
2001:fe8:8111::/48 maxlen: 48
2001:fe8:8130::/48 maxlen: 48
2001:fe8:8131::/48 maxlen: 48
2001:fe8:9000::/48 maxlen: 48
2001:fe8:c001::/48 maxlen: 48
2001:fe8:c002::/48 maxlen: 48
2001:fe8:c100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5914 (0x171a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Mar 12 17:21:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69b2f62a-f38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:9b:88:51:b1:fa:3d:a9:92:5f:74:6a:15:
97:86:e2:8d:03:9a:c7:29:7d:a6:b9:98:da:99:04:
6e:ed:dc:88:89:0d:3f:9f:26:c3:23:cd:3f:9a:cc:
08:64:3a:2a:3a:d0:a6:1c:07:a2:22:b3:52:95:89:
6a:5c:ac:5a:b0:42:d1:b6:f9:47:a6:34:98:73:b4:
91:32:a4:e8:e7:37:47:cc:b0:63:2c:0a:e5:14:12:
28:ef:ec:bb:13:8c:69:46:d2:8e:f0:33:d6:56:7e:
31:f3:b5:74:96:a0:eb:96:05:b2:fe:7b:c1:d6:ed:
01:5f:4e:e7:b9:d1:d9:db:ec:6c:af:ad:fd:fb:01:
fb:be:81:a4:d7:ec:96:d0:1b:a4:22:42:9e:a6:be:
b8:b9:b1:72:9b:f6:f1:77:2c:1c:3c:0d:d6:a0:4d:
88:dc:fc:ea:c8:7c:34:65:ce:18:f6:2b:80:2f:99:
39:ec:c2:64:5b:81:11:a7:22:aa:a5:d9:2d:37:7a:
35:13:10:34:86:d2:63:02:26:cd:86:5a:87:cd:45:
87:6a:9b:fe:17:1d:71:e8:7c:fb:e9:2c:11:f9:a7:
97:4c:0b:71:dd:a8:a4:a1:ee:0b:a9:1a:03:47:f1:
7e:d5:bc:24:ac:36:24:00:4e:01:79:2c:05:0a:9a:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:90:49:86:F4:3A:47:CE:29:03:06:03:4A:1D:72:27:7A:1A:7E:74
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/7BC4E6DE322C11EFBC879F31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.184.0/22
103.27.22.0/24
175.111.0.0/23
175.111.3.0-175.111.5.255
203.130.0.0/19
IPv6:
2001:fe8::/46
2001:fe8:9::/48
2001:fe8:10::/47
2001:fe8:48::/48
2001:fe8:4000::/46
2001:fe8:4100::/47
2001:fe8:8100::/47
2001:fe8:8110::/47
2001:fe8:8130::/47
2001:fe8:9000::/48
2001:fe8:c001::-2001:fe8:c002:ffff:ffff:ffff:ffff:ffff
2001:fe8:c100::/48
Signature Algorithm: sha256WithRSAEncryption
19:de:aa:50:bc:24:09:7a:ae:1b:45:24:2d:d1:93:b0:89:57:
70:01:67:14:23:41:e5:72:65:98:f2:c9:45:12:1f:36:69:7a:
d0:aa:54:6e:17:40:57:6d:89:86:11:74:13:2b:6e:78:98:07:
67:58:91:25:8d:de:f7:ae:12:89:d6:35:54:ab:38:8e:3f:dc:
95:17:39:3a:74:e2:b3:07:c1:ab:c5:c2:3f:60:15:a4:7f:6a:
b8:ee:75:4d:3b:77:71:fb:59:bc:03:04:09:90:60:6d:02:9d:
fa:b5:d0:35:cc:56:25:ee:a9:80:6b:ea:82:6d:de:53:fc:98:
ab:4a:a8:8d:2a:06:42:5d:37:82:55:e3:93:41:e3:cb:b5:ba:
df:ff:12:5c:09:e2:0d:64:56:6c:08:f0:aa:55:7e:cb:66:0d:
e2:58:b3:5b:df:41:bf:fa:7b:09:c7:b2:d5:3c:69:f6:20:c1:
87:d9:56:b8:3b:9c:a6:f4:c0:52:d2:d6:36:04:79:f8:59:f5:
d8:a0:82:77:d5:ec:ee:c2:0d:94:54:38:72:f3:aa:9d:6b:cb:
4d:e6:61:3a:9f:c9:ae:35:fb:aa:04:17:f7:21:ee:a8:76:97:
5f:a7:0b:66:96:73:c5:f7:e7:1c:b9:e8:34:30:2c:03:ab:3a:
11:8a:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:07 2026 by rpki-client