Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/3556F236591D11F1B1E1CE2EC9833773.roa
File: 3556F236591D11F1B1E1CE2EC9833773.roa (raw, json)
Hash identifier: yuGYengovCUZQoU7yyNyCediRoyhB2ZeEtOZfuAxhDo=
Subject key identifier: A6:72:70:62:C1:3B:95:20:0D:81:CF:43:C9:29:39:A3:18:78:A4:76
Certificate issuer: /CN=A91C4F06/serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
Certificate serial: 3696
Authority key identifier: 3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/3556F236591D11F1B1E1CE2EC9833773.roa
Signing time: Fri 02 Oct 2026 15:40:18 +0000
ROA not before: Fri 02 Oct 2026 15:40:18 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 23955
IP address blocks: 43.241.136.0/22 maxlen: 22
43.241.136.0/24 maxlen: 24
43.241.137.0/24 maxlen: 24
43.241.138.0/24 maxlen: 24
103.29.224.0/22 maxlen: 22
103.29.224.0/24 maxlen: 24
103.29.225.0/24 maxlen: 24
103.29.226.0/24 maxlen: 24
103.29.227.0/24 maxlen: 24
103.71.40.0/22 maxlen: 22
103.71.40.0/24 maxlen: 24
103.71.41.0/24 maxlen: 24
103.71.42.0/24 maxlen: 24
103.71.43.0/24 maxlen: 24
118.103.136.0/21 maxlen: 21
118.103.136.0/24 maxlen: 24
118.103.137.0/24 maxlen: 24
118.103.139.0/24 maxlen: 24
118.103.140.0/24 maxlen: 24
118.103.141.0/24 maxlen: 24
118.103.142.0/24 maxlen: 24
118.103.143.0/24 maxlen: 24
2405:ec00::/32 maxlen: 32
2405:ec00:2::/48 maxlen: 48
2405:ec00:3::/48 maxlen: 48
2405:ec00:4::/48 maxlen: 48
2405:ec00:5::/48 maxlen: 48
2405:ec00:6::/48 maxlen: 48
2405:ec00:10a::/48 maxlen: 48
2405:ec00:10b::/48 maxlen: 48
2405:ec00:10c::/48 maxlen: 48
2405:ec00:10d::/48 maxlen: 48
2405:ec00:10e::/48 maxlen: 48
2405:ec00:10f::/48 maxlen: 48
2405:ec00:110::/48 maxlen: 48
2405:ec00:1000::/48 maxlen: 48
2405:ec00:1001::/48 maxlen: 48
2405:ec00:1002::/48 maxlen: 48
2405:ec00:1003::/48 maxlen: 48
2405:ec00:1004::/48 maxlen: 48
2405:ec00:1005::/48 maxlen: 48
2405:ec00:1100::/48 maxlen: 48
2405:ec00:1101::/48 maxlen: 48
2405:ec00:1201::/48 maxlen: 48
2405:ec00:1202::/48 maxlen: 48
2405:ec00:1203::/48 maxlen: 48
2405:ec00:1204::/48 maxlen: 48
2405:ec00:1205::/48 maxlen: 48
2405:ec00:1206::/48 maxlen: 48
2405:ec00:1208::/48 maxlen: 48
2405:ec00:1209::/48 maxlen: 48
2405:ec00:1210::/48 maxlen: 48
2405:ec00:1300::/48 maxlen: 48
2405:ec00:1301::/48 maxlen: 48
2405:ec00:7000::/40 maxlen: 40
2405:ec00:7100::/40 maxlen: 40
2405:ec00:9011::/48 maxlen: 48
2405:ec00:9012::/48 maxlen: 48
2405:ec00:9013::/48 maxlen: 48
2405:ec00:9014::/48 maxlen: 48
2405:ec00:9015::/48 maxlen: 48
2405:ec00:9016::/48 maxlen: 48
2405:ec00:9017::/48 maxlen: 48
2405:ec00:9018::/48 maxlen: 48
2405:ec00:9019::/48 maxlen: 48
2405:ec00:901a::/48 maxlen: 48
2405:ec00:901b::/48 maxlen: 48
2405:ec00:9021::/48 maxlen: 48
2405:ec00:9022::/48 maxlen: 48
2405:ec00:9023::/48 maxlen: 48
2405:ec00:9024::/48 maxlen: 48
2405:ec00:9025::/48 maxlen: 48
2405:ec00:9051::/48 maxlen: 48
2405:ec00:9052::/48 maxlen: 48
2405:ec00:9053::/48 maxlen: 48
2405:ec00:9054::/48 maxlen: 48
2405:ec00:9055::/48 maxlen: 48
2405:ec00:9071::/48 maxlen: 48
2405:ec00:9072::/48 maxlen: 48
2405:ec00:9073::/48 maxlen: 48
2405:ec00:9074::/48 maxlen: 48
2405:ec00:9075::/48 maxlen: 48
2405:ec00:9081::/48 maxlen: 48
2405:ec00:9082::/48 maxlen: 48
2405:ec00:9083::/48 maxlen: 48
2405:ec00:9100::/48 maxlen: 48
2405:ec00:9101::/48 maxlen: 48
2405:ec00:a1ca::/48 maxlen: 48
2405:ec00:f000::/36 maxlen: 36
2405:ec00:fa00::/48 maxlen: 48
2405:ec00:face::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl
rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13974 (0x3696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4F06, serialNumber=3AAF80EA97E99B9525B33BC1335BB095C2D278A7
Validity
Not Before: Oct 2 15:40:18 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abfd062-b556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:fc:f2:96:ec:e9:48:ab:6f:ba:82:f8:d2:
4b:f6:b7:48:2c:55:af:77:c6:04:53:9f:43:21:e3:
66:82:c5:bd:ad:98:c6:1f:83:23:c0:6c:3d:66:57:
83:68:dc:93:30:77:d2:cd:4b:cb:0f:3c:42:ec:3c:
b9:d8:37:f1:78:17:73:de:05:e2:cf:47:7c:39:7a:
2f:10:7f:ea:74:94:39:e8:e1:00:d6:b1:38:1b:8a:
3a:78:b6:d0:6b:dc:41:95:95:99:6b:75:3c:fb:17:
ef:55:1e:ea:cb:1a:f0:40:ab:fa:a2:77:d6:70:0a:
5d:02:e5:f1:1b:d6:df:e9:dc:e2:cd:dc:9b:48:2b:
3f:94:f4:3f:98:b7:ef:10:26:b7:e7:41:3c:29:59:
e1:bc:24:e2:e7:1c:b2:42:b4:12:98:83:6b:81:c9:
b6:24:32:cd:3d:13:d2:5f:9a:b0:a9:1e:2f:56:5e:
fd:70:23:47:ea:1e:2a:a5:91:a3:20:81:9e:dd:f2:
7f:7c:b3:e9:bd:6d:be:f9:66:cd:23:da:9f:57:4e:
9c:ea:01:f7:2f:4a:72:33:a8:d8:8f:55:b8:21:60:
aa:1b:36:50:31:6f:b7:fb:1c:de:90:67:e7:05:66:
ed:3a:23:92:bb:92:05:c3:96:a7:11:26:c3:d3:c8:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:70:62:C1:3B:95:20:0D:81:CF:43:C9:29:39:A3:18:78:A4:76
X509v3 Authority Key Identifier:
keyid:3A:AF:80:EA:97:E9:9B:95:25:B3:3B:C1:33:5B:B0:95:C2:D2:78:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Oq-A6pfpm5UlszvBM1uwlcLSeKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F06/76E1C47E1D9511E2BE595E7D08B02CD2/3556F236591D11F1B1E1CE2EC9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.241.136.0/22
103.29.224.0/22
103.71.40.0/22
118.103.136.0/21
IPv6:
2405:ec00::/32
Signature Algorithm: sha256WithRSAEncryption
bc:83:9f:38:c3:3e:97:ce:2d:cd:0f:1e:75:7f:d8:d2:ed:4c:
29:59:2f:40:4f:a3:d3:fa:c1:92:7e:c9:57:34:f4:77:26:05:
53:7b:0b:30:09:84:4b:fd:a9:1e:85:ef:4c:3e:10:79:0e:22:
37:0d:e1:59:c2:5f:2f:29:0f:66:e1:b6:5c:9a:ad:39:af:7c:
e7:4f:1b:c6:4b:95:f5:af:85:09:01:47:b8:99:eb:ca:ce:85:
c2:54:da:a9:9d:99:84:71:7a:ce:18:8b:36:0f:25:6a:87:40:
bc:1f:f0:fc:2e:f5:a6:8a:9f:f9:ed:fa:9a:fc:09:39:3f:d1:
5d:af:22:d9:72:45:4f:4d:8e:12:b4:69:da:85:20:e0:05:0d:
1f:f5:b1:a8:27:cd:4b:8d:e3:80:06:f3:06:38:59:5b:1b:85:
e0:cf:94:69:ea:29:32:c5:41:59:9d:fb:7e:6d:47:67:5b:30:
22:68:76:f9:69:c0:fa:be:9a:7c:73:43:49:f7:22:6d:1c:97:
aa:7e:dc:8a:6f:ef:80:6e:14:48:d3:79:04:fd:6d:83:1b:22:
32:01:57:35:21:bb:2d:e2:be:25:69:44:6e:53:ca:33:14:c6:
76:e1:a5:a8:2b:09:01:9b:4b:b3:6c:f3:c7:b7:9e:68:cc:43:
68:c1:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:19:57 2026 by rpki-client