Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/26F87D4A272711EC88E40644C4F9AE02.roa
File: 26F87D4A272711EC88E40644C4F9AE02.roa (raw, json)
Hash identifier: pwRV1whdBhsxXWa6MxJlTQJ85CahQGHwcKN+GErVOaQ=
Subject key identifier: 87:C3:C8:96:1D:C5:A0:E8:CE:AF:85:31:F6:26:80:B9:10:C4:97:BD
Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial: 0740
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/26F87D4A272711EC88E40644C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:30:55 +0000
ROA not before: Mon 05 May 2025 04:06:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17477
IP address blocks: 103.7.164.0/22 maxlen: 24
103.232.116.0/22 maxlen: 24
119.161.32.0/20 maxlen: 24
124.47.128.0/18 maxlen: 24
125.7.0.0/17 maxlen: 24
163.47.60.0/22 maxlen: 24
202.2.92.0/22 maxlen: 24
202.191.48.0/21 maxlen: 24
203.12.216.0/23 maxlen: 24
203.15.95.0/24 maxlen: 24
203.22.107.0/24 maxlen: 24
203.26.130.0/24 maxlen: 24
203.110.128.0/19 maxlen: 24
210.193.128.0/17 maxlen: 24
2400:cc00::/32 maxlen: 35
2400:cc00::/35 maxlen: 36
2400:cc00:2000::/36 maxlen: 36
2400:cc00:4000::/34 maxlen: 36
2400:cc00:8000::/33 maxlen: 36
2400:cc00:8000::/37 maxlen: 40
2400:cc00:8800::/37 maxlen: 40
2402:17c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1856 (0x740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Validity
Not Before: May 5 04:06:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5910f-44ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:f6:27:17:a2:f7:2d:2c:8a:e9:3e:13:1b:
ce:a1:24:81:21:39:e4:7b:78:a6:07:cb:2b:45:90:
19:36:4d:38:83:23:e4:bd:0f:45:b4:04:20:f1:d5:
8d:ee:90:6b:32:15:63:31:8f:0c:93:55:1a:02:28:
53:49:97:92:cb:96:c1:12:cb:01:25:2f:04:36:6b:
e7:ab:68:97:42:80:df:a6:b8:92:33:8f:f9:fa:bc:
0d:5c:06:49:b1:fd:85:65:fd:1f:d9:b8:c9:04:80:
9b:76:78:b8:fd:7f:04:96:74:6d:46:ef:fe:f1:0f:
4f:c7:08:fb:97:a4:2e:e7:9d:1e:b9:52:ed:3a:82:
53:00:3c:c6:f8:b6:d7:26:47:48:3c:3d:ee:b4:5c:
11:89:60:62:84:27:57:08:50:e4:04:01:7f:f8:36:
b8:6c:4e:8e:84:ec:ec:16:7b:fb:79:32:d5:71:3f:
8b:03:66:6a:a4:22:b6:ed:03:40:2f:66:a7:0c:a3:
9a:62:ae:01:c7:39:0e:a0:c8:85:fc:30:94:24:ca:
4c:13:40:4c:15:6d:39:01:2e:8b:f9:18:53:dc:8e:
13:39:58:f3:77:14:5b:c9:66:90:1f:50:17:98:8f:
cd:65:a9:e9:ea:1e:59:98:2e:89:a6:58:84:6e:5f:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C3:C8:96:1D:C5:A0:E8:CE:AF:85:31:F6:26:80:B9:10:C4:97:BD
X509v3 Authority Key Identifier:
keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/26F87D4A272711EC88E40644C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.7.164.0/22
103.232.116.0/22
119.161.32.0/20
124.47.128.0/18
125.7.0.0/17
163.47.60.0/22
202.2.92.0/22
202.191.48.0/21
203.12.216.0/23
203.15.95.0/24
203.22.107.0/24
203.26.130.0/24
203.110.128.0/19
210.193.128.0/17
IPv6:
2400:cc00::/32
2402:17c0::/32
Signature Algorithm: sha256WithRSAEncryption
31:27:8d:a5:00:1e:2a:8e:64:81:6b:10:01:fb:00:17:de:71:
16:5e:28:a8:3f:3a:b4:e2:70:7b:3a:38:99:f8:17:95:aa:20:
e3:e6:0a:61:4c:af:6a:73:e9:36:ed:c3:be:25:e1:a1:7f:77:
6c:2e:47:94:45:33:90:25:b3:ec:cf:b6:51:7c:b7:3c:3f:c8:
cb:b8:10:83:6e:39:e0:97:a3:2c:0d:d2:6e:b2:bc:2f:0b:68:
7a:c8:ca:22:dd:38:90:71:40:c7:cb:b3:bf:9b:8d:36:9e:e6:
b6:be:8e:39:45:87:bd:40:46:63:9d:fb:74:e0:86:31:17:16:
fc:44:4f:8b:bd:7f:01:56:85:76:08:ff:97:07:0f:43:f8:36:
6c:a6:3d:f2:03:80:e9:75:e4:f4:6b:a1:1b:62:56:24:b9:62:
1f:97:38:68:b7:c1:e1:4c:b0:c4:c2:98:75:66:cd:76:2e:c2:
e5:ee:36:ce:22:3f:bd:22:8b:12:b9:84:82:13:e8:6a:0a:c6:
e8:57:65:39:3b:38:81:4c:08:56:c1:99:2b:e6:c0:3a:f8:5a:
48:c5:5a:70:93:3a:ff:f1:80:36:21:b2:82:e5:ea:3b:c2:89:
d5:99:21:ed:17:68:12:25:01:5f:5a:17:c8:d0:01:f4:e6:37:
5e:d6:a9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:46 2026 by rpki-client