Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/7BC4E6DE322C11EFBC879F31C4F9AE02.roa
File: 7BC4E6DE322C11EFBC879F31C4F9AE02.roa (raw, json)
Hash identifier: LVZcm4QcCpBGd0sLGUs3XziuPCcTgdcuVKbmAAw/hpc=
Subject key identifier: C0:8F:F6:58:4B:B3:03:E1:E5:EB:7C:FE:00:25:A3:12:50:A3:A1:6E
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 1731
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/7BC4E6DE322C11EFBC879F31C4F9AE02.roa
Signing time: Sat 18 Apr 2026 17:17:50 +0000
ROA not before: Sat 18 Apr 2026 17:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24435
IP address blocks: 27.0.184.0/22 maxlen: 22
103.27.22.0/24 maxlen: 24
175.111.0.0/23 maxlen: 24
175.111.3.0/24 maxlen: 24
175.111.4.0/23 maxlen: 24
203.130.0.0/20 maxlen: 20
203.130.0.0/24 maxlen: 24
203.130.1.0/24 maxlen: 24
203.130.2.0/24 maxlen: 24
203.130.3.0/24 maxlen: 24
203.130.4.0/24 maxlen: 24
203.130.5.0/24 maxlen: 24
203.130.6.0/24 maxlen: 24
203.130.7.0/24 maxlen: 24
203.130.8.0/24 maxlen: 24
203.130.9.0/24 maxlen: 24
203.130.10.0/24 maxlen: 24
203.130.11.0/24 maxlen: 24
203.130.12.0/24 maxlen: 24
203.130.13.0/24 maxlen: 24
203.130.14.0/24 maxlen: 24
203.130.15.0/24 maxlen: 24
203.130.16.0/24 maxlen: 24
203.130.17.0/24 maxlen: 24
203.130.18.0/24 maxlen: 24
203.130.19.0/24 maxlen: 24
203.130.20.0/24 maxlen: 24
203.130.21.0/24 maxlen: 24
203.130.22.0/24 maxlen: 24
203.130.23.0/24 maxlen: 24
203.130.24.0/24 maxlen: 24
203.130.25.0/24 maxlen: 24
203.130.26.0/23 maxlen: 24
203.130.28.0/22 maxlen: 22
203.130.28.0/24 maxlen: 24
203.130.29.0/24 maxlen: 24
203.130.30.0/24 maxlen: 24
203.130.31.0/24 maxlen: 24
2001:fe8::/48 maxlen: 48
2001:fe8:1::/48 maxlen: 48
2001:fe8:2::/48 maxlen: 48
2001:fe8:3::/48 maxlen: 48
2001:fe8:9::/48 maxlen: 48
2001:fe8:10::/48 maxlen: 48
2001:fe8:11::/48 maxlen: 48
2001:fe8:48::/48 maxlen: 48
2001:fe8:4000::/48 maxlen: 48
2001:fe8:4001::/48 maxlen: 48
2001:fe8:4002::/48 maxlen: 48
2001:fe8:4003::/48 maxlen: 48
2001:fe8:4100::/48 maxlen: 48
2001:fe8:4101::/48 maxlen: 48
2001:fe8:5000::/48 maxlen: 48
2001:fe8:5001::/48 maxlen: 48
2001:fe8:5002::/48 maxlen: 48
2001:fe8:5003::/48 maxlen: 48
2001:fe8:5004::/48 maxlen: 48
2001:fe8:5005::/48 maxlen: 48
2001:fe8:5006::/48 maxlen: 48
2001:fe8:5007::/48 maxlen: 48
2001:fe8:6000::/48 maxlen: 48
2001:fe8:6001::/48 maxlen: 48
2001:fe8:6002::/48 maxlen: 48
2001:fe8:6003::/48 maxlen: 48
2001:fe8:6004::/48 maxlen: 48
2001:fe8:6005::/48 maxlen: 48
2001:fe8:6006::/48 maxlen: 48
2001:fe8:6007::/48 maxlen: 48
2001:fe8:8100::/48 maxlen: 48
2001:fe8:8101::/48 maxlen: 48
2001:fe8:8110::/48 maxlen: 48
2001:fe8:8111::/48 maxlen: 48
2001:fe8:8130::/48 maxlen: 48
2001:fe8:8131::/48 maxlen: 48
2001:fe8:9000::/48 maxlen: 48
2001:fe8:c001::/48 maxlen: 48
2001:fe8:c002::/48 maxlen: 48
2001:fe8:c100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:39:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5937 (0x1731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Apr 18 17:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e3bcbd-cd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:7f:c3:12:9e:b5:0f:14:d3:be:3f:7f:26:
e4:d5:6a:d0:76:f6:a5:b2:fb:18:25:36:41:10:dc:
d1:c3:b0:e0:23:e0:bd:64:bf:1d:a9:44:21:e3:7c:
21:e6:e5:7d:9d:64:a6:8e:87:5d:d4:1c:9d:5a:a5:
8d:08:9b:85:b5:ea:3d:3f:4a:c6:1a:82:07:37:5d:
01:8a:9f:ca:d0:f0:8a:34:7c:fb:f6:34:46:a2:48:
e0:8a:35:61:64:5d:3e:65:90:1f:ac:25:77:cf:dc:
eb:84:a6:1a:be:d3:93:21:04:e0:6c:65:4e:da:a6:
d4:ec:3a:c9:6b:62:c6:39:45:a8:7c:37:73:39:1b:
39:93:fc:f5:ee:77:73:9c:45:c4:89:62:26:84:01:
df:fd:e2:27:56:ea:61:55:2f:93:61:04:43:3a:ed:
8b:86:f9:1f:04:80:9c:61:02:82:04:7e:76:8e:e4:
1b:0a:d4:4d:60:1a:5a:83:0e:01:71:93:2c:71:30:
fc:e6:94:0a:a8:f3:f7:2d:8e:82:d1:b3:63:30:2e:
9b:ac:7d:05:f3:93:14:78:26:d9:79:82:95:30:79:
bc:44:d2:2a:f9:ed:f4:1f:8f:3b:2b:26:1c:ae:84:
bd:0c:2d:dc:c0:73:08:6e:b8:4e:fa:17:22:a1:4a:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8F:F6:58:4B:B3:03:E1:E5:EB:7C:FE:00:25:A3:12:50:A3:A1:6E
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/7BC4E6DE322C11EFBC879F31C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.184.0/22
103.27.22.0/24
175.111.0.0/23
175.111.3.0-175.111.5.255
203.130.0.0/19
IPv6:
2001:fe8::/46
2001:fe8:9::/48
2001:fe8:10::/47
2001:fe8:48::/48
2001:fe8:4000::/46
2001:fe8:4100::/47
2001:fe8:5000::/45
2001:fe8:6000::/45
2001:fe8:8100::/47
2001:fe8:8110::/47
2001:fe8:8130::/47
2001:fe8:9000::/48
2001:fe8:c001::-2001:fe8:c002:ffff:ffff:ffff:ffff:ffff
2001:fe8:c100::/48
Signature Algorithm: sha256WithRSAEncryption
a2:bb:b0:d2:5b:15:66:5e:5e:f2:e4:60:ea:fa:e6:3d:cf:22:
40:6b:4d:b3:22:98:b8:bb:9d:b2:93:44:36:03:ef:4d:3e:30:
b6:7e:18:88:34:34:0b:7d:61:de:c1:90:a5:69:42:f8:59:2e:
58:93:ed:5f:a2:f1:4c:c8:21:d3:db:98:1a:5e:03:d8:c3:6b:
ba:69:ba:c9:e6:95:c8:cc:58:33:7d:15:d6:0c:c0:9b:d3:7a:
99:79:46:3e:f1:ff:c3:db:19:07:89:66:01:3c:de:a2:0b:b8:
78:4e:9f:91:6a:5d:e3:55:ed:5a:0c:d7:b0:12:c8:ef:d2:e9:
4f:25:0d:60:aa:ac:d6:18:8e:10:a4:2f:f9:d4:fb:e1:bb:83:
89:03:fb:3f:6b:f8:bf:a8:14:e3:55:73:41:3d:e2:0f:07:b8:
8d:b2:26:a3:e5:1e:55:85:22:d5:2a:21:57:32:e0:9a:ce:4e:
8d:88:31:87:33:e0:e5:d8:75:47:5f:38:84:f3:e0:c1:6f:f4:
e6:cc:c4:9e:1d:53:96:de:54:0b:c0:ff:5c:a4:5f:a8:23:d1:
5a:bb:bc:f8:ca:ad:cf:61:55:cf:bb:ad:0c:84:7a:8d:94:67:
6a:d2:ea:d7:9c:5d:9c:76:4a:89:3d:e0:9c:b7:a9:93:7d:b8:
ba:2e:5d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:58:17 2026 by rpki-client