Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B2AB6010721811F09FD98A22C4F9AE02.roa
File: B2AB6010721811F09FD98A22C4F9AE02.roa (raw, json)
Hash identifier: oM2ZWP4gaa1Ec28NI0HOJLuGJz8huwbOd9sIWlD3wks=
Subject key identifier: 39:34:29:19:8F:B3:8F:CC:0B:0E:D7:FA:36:F9:A9:F7:42:6B:2C:57
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 109D
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B2AB6010721811F09FD98A22C4F9AE02.roa
Signing time: Mon 20 Apr 2026 18:21:50 +0000
ROA not before: Mon 20 Apr 2026 18:21:50 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 3360
IP address blocks: 103.30.186.0/23 maxlen: 23
202.53.197.0/24 maxlen: 24
202.53.204.0/23 maxlen: 23
202.53.206.0/23 maxlen: 23
2401:df00:1::/48 maxlen: 48
2401:df00:2::/48 maxlen: 48
2401:df00:7::/48 maxlen: 48
2401:df00:11::/48 maxlen: 48
2401:df00:12::/48 maxlen: 48
2401:df00:21::/48 maxlen: 48
2401:df00:22::/48 maxlen: 48
2401:df00:27::/48 maxlen: 48
2401:df00:31::/48 maxlen: 48
2401:df00:32::/48 maxlen: 48
2401:df00:41::/48 maxlen: 48
2401:df00:42::/48 maxlen: 48
2401:df00:47::/48 maxlen: 48
2401:df00:51::/48 maxlen: 48
2401:df00:52::/48 maxlen: 48
2401:df00:57::/48 maxlen: 48
2401:df00:61::/48 maxlen: 48
2401:df00:62::/48 maxlen: 48
2401:df00:181::/48 maxlen: 48
2401:df00:182::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4253 (0x109d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Apr 20 18:21:50 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e66ebe-40c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1d:bf:29:10:c4:67:94:75:3f:e0:9c:5a:55:
f4:ec:cc:a4:c2:27:ba:6c:0d:57:7a:1e:d8:0f:4e:
48:93:3a:cc:f3:bd:8b:45:bf:8f:52:e2:72:73:01:
88:5e:43:f6:f4:d4:f1:7e:a0:08:45:a7:7d:75:3e:
a1:1b:f7:f9:9f:48:38:6e:1b:15:7a:81:50:19:d7:
1f:9f:89:f4:5b:5b:32:19:8d:dc:7a:42:d1:45:20:
17:6c:45:dc:65:3b:12:f8:85:d9:65:31:10:ac:51:
1b:14:08:2a:35:f5:0c:d2:11:04:d0:89:86:f7:63:
3a:46:0f:68:e4:a2:f9:b9:33:51:e0:ec:71:e4:4b:
12:9c:45:8f:c0:a2:94:5c:b7:ca:ac:4f:c7:58:97:
f0:ca:8c:22:de:76:48:6d:0e:86:7a:09:03:4c:7d:
33:76:19:a4:48:6b:8a:5f:a6:7b:2e:7f:67:26:78:
4c:a6:e6:56:f8:5b:94:60:dc:7a:cd:f8:45:48:f7:
99:2d:c0:24:c9:88:79:77:c5:33:61:8f:11:6e:ca:
e6:40:8b:1c:02:08:bb:db:39:20:3e:3d:c9:42:23:
71:c9:9b:63:5c:85:36:97:95:62:f2:f5:96:0f:66:
aa:21:ca:f0:15:fe:f7:3e:2c:4f:73:21:fc:a2:c7:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:34:29:19:8F:B3:8F:CC:0B:0E:D7:FA:36:F9:A9:F7:42:6B:2C:57
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B2AB6010721811F09FD98A22C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.30.186.0/23
202.53.197.0/24
202.53.204.0/22
IPv6:
2401:df00:1::-2401:df00:2:ffff:ffff:ffff:ffff:ffff
2401:df00:7::/48
2401:df00:11::-2401:df00:12:ffff:ffff:ffff:ffff:ffff
2401:df00:21::-2401:df00:22:ffff:ffff:ffff:ffff:ffff
2401:df00:27::/48
2401:df00:31::-2401:df00:32:ffff:ffff:ffff:ffff:ffff
2401:df00:41::-2401:df00:42:ffff:ffff:ffff:ffff:ffff
2401:df00:47::/48
2401:df00:51::-2401:df00:52:ffff:ffff:ffff:ffff:ffff
2401:df00:57::/48
2401:df00:61::-2401:df00:62:ffff:ffff:ffff:ffff:ffff
2401:df00:181::-2401:df00:182:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:8c:b0:f0:0d:61:00:1a:a6:65:40:d9:12:3a:49:a8:6d:c7:
62:5f:47:aa:22:56:5f:01:4b:35:e1:54:93:64:4c:42:b7:e2:
b5:4e:b8:7f:53:6d:e2:b2:46:3e:e1:34:a7:60:4a:2e:a0:be:
7c:70:f7:c6:8b:17:3b:60:45:9f:ad:f9:44:ef:8d:21:0d:3c:
75:ee:61:88:8b:2a:fb:df:5c:ee:76:86:be:ea:91:5d:8e:f4:
de:23:b7:44:9b:bd:18:6a:b3:57:5a:1f:42:cf:4a:1b:20:3a:
a7:19:09:47:c1:c7:ca:3d:f6:11:28:ee:11:25:d8:a7:0a:db:
e8:fe:aa:a4:a6:7f:b5:12:57:f2:1c:aa:de:f2:ae:96:33:c7:
f8:fd:be:ad:9f:57:51:4a:94:50:45:a8:0c:ee:ff:7c:e4:a6:
05:a3:90:40:57:8d:7c:8b:d1:70:7e:d2:cc:e0:31:04:4c:db:
1f:48:83:a8:65:18:bd:4e:16:18:c2:82:d6:c1:23:1d:25:ca:
e6:77:db:15:16:d7:3a:76:83:61:2f:63:b5:0c:f8:f9:f4:d2:
5b:7d:ba:09:59:7d:26:e6:8a:cf:77:a1:09:92:66:ce:04:6e:
ec:7d:86:8a:84:a8:55:41:3e:c1:df:4b:78:80:dc:aa:10:9c:
74:83:5a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:17 2026 by rpki-client