Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/C0743AE8A6B611E9AB731B69C4F9AE02.roa
File: C0743AE8A6B611E9AB731B69C4F9AE02.roa (raw, json)
Hash identifier: iihOs73vGdIvHbM2jbGXnunoWi4oTaT680dFjp4s8/Y=
Subject key identifier: 7F:1E:CE:BA:EF:FB:99:1D:94:E4:3C:8B:8D:96:94:55:D1:5D:CD:5D
Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Certificate serial: 0EC3
Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/C0743AE8A6B611E9AB731B69C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:36:41 +0000
ROA not before: Wed 18 Jun 2025 18:20:56 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 23881
IP address blocks: 45.121.196.0/24 maxlen: 24
45.121.197.0/24 maxlen: 24
45.121.198.0/24 maxlen: 24
45.121.199.0/24 maxlen: 24
103.15.196.0/24 maxlen: 24
103.15.197.0/24 maxlen: 24
103.15.198.0/24 maxlen: 24
103.15.199.0/24 maxlen: 24
103.19.24.0/24 maxlen: 24
103.19.25.0/24 maxlen: 24
103.19.26.0/24 maxlen: 24
103.19.27.0/24 maxlen: 24
203.135.128.0/24 maxlen: 24
203.135.129.0/24 maxlen: 24
203.135.130.0/24 maxlen: 24
203.135.131.0/24 maxlen: 24
203.135.132.0/24 maxlen: 24
203.135.133.0/24 maxlen: 24
203.135.134.0/24 maxlen: 24
203.135.135.0/24 maxlen: 24
203.135.136.0/24 maxlen: 24
203.135.137.0/24 maxlen: 24
203.135.138.0/24 maxlen: 24
203.135.139.0/24 maxlen: 24
203.135.140.0/24 maxlen: 24
203.135.141.0/24 maxlen: 24
203.135.142.0/24 maxlen: 24
203.135.143.0/24 maxlen: 24
203.135.144.0/24 maxlen: 24
203.135.145.0/24 maxlen: 24
203.135.146.0/24 maxlen: 24
203.135.147.0/24 maxlen: 24
203.135.148.0/24 maxlen: 24
203.135.149.0/24 maxlen: 24
203.135.150.0/24 maxlen: 24
203.135.151.0/24 maxlen: 24
203.135.152.0/24 maxlen: 24
203.135.153.0/24 maxlen: 24
203.135.154.0/24 maxlen: 24
203.135.155.0/24 maxlen: 24
203.135.156.0/24 maxlen: 24
203.135.157.0/24 maxlen: 24
203.135.158.0/24 maxlen: 24
203.135.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3779 (0xec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Validity
Not Before: Jun 18 18:20:56 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a424c9-6139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:99:79:e2:7d:54:09:cb:3b:fc:f6:3b:d9:
0c:cd:21:66:7f:2c:40:ba:e3:6f:ab:cc:2c:3b:06:
23:b8:cb:c2:b5:4f:92:ed:ce:ac:ac:dd:42:c8:a6:
c9:d7:ad:20:40:fc:e1:c8:32:5a:f2:6a:0d:ec:7d:
3e:04:36:03:04:db:be:92:d3:ba:59:51:a9:cf:ae:
57:3e:f3:93:25:f3:bb:71:da:0c:b1:47:31:d4:3e:
e6:c0:5d:f0:62:47:c2:5d:70:de:dc:58:93:84:e9:
73:e4:76:d6:f8:80:02:f9:2c:7c:16:b5:c4:a7:3e:
de:cc:16:af:5f:70:04:26:5f:60:49:08:69:f8:6c:
94:06:1d:d2:80:b1:bf:96:91:d7:3d:ad:5d:3d:17:
68:5f:a8:34:52:b7:41:14:25:21:56:7e:ce:01:53:
16:0b:34:f5:53:bb:30:6f:a5:e1:7e:3f:a1:a4:cd:
f7:5f:9f:d9:42:23:51:d9:95:01:fa:f1:e0:ad:e8:
bb:a3:76:6f:23:01:54:1a:6f:ee:56:54:13:aa:c2:
a7:30:9a:58:9f:2e:d0:dc:a4:c4:5c:c2:68:55:03:
63:57:0e:1b:bc:df:82:4b:08:5b:8c:b5:eb:f0:7b:
dd:70:2a:6f:35:15:2b:1d:35:27:f3:cd:6d:cb:a6:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1E:CE:BA:EF:FB:99:1D:94:E4:3C:8B:8D:96:94:55:D1:5D:CD:5D
X509v3 Authority Key Identifier:
keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/C0743AE8A6B611E9AB731B69C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.121.196.0/22
103.15.196.0/22
103.19.24.0/22
203.135.128.0/19
Signature Algorithm: sha256WithRSAEncryption
58:46:df:e7:9a:a5:a6:7a:60:e3:b0:57:e7:1f:a5:c8:10:80:
88:9a:13:77:50:9e:fb:27:aa:82:73:d5:78:2b:d7:82:ce:49:
0c:8d:67:a1:07:aa:13:02:69:78:41:14:f9:49:b3:05:9b:73:
06:19:b1:a4:7c:96:b9:77:c1:aa:cc:27:b2:3c:81:70:f1:e6:
1c:21:2a:40:df:4e:63:55:4c:d0:21:ff:25:54:bd:11:61:7f:
e7:52:46:d8:e1:ed:6e:3a:7a:32:96:4d:1f:10:a5:4a:25:91:
00:95:0e:c3:39:df:32:40:c5:f7:68:0f:60:b4:09:d7:59:3d:
4d:20:9f:c7:70:71:06:82:fa:15:bf:41:ef:e5:b4:23:68:68:
7f:34:e9:1f:15:76:11:71:89:2e:80:ba:f4:5e:a4:95:26:6c:
79:93:95:98:bd:76:ad:35:b8:fe:80:6b:12:20:87:e4:06:15:
a8:bb:db:eb:9b:fb:b6:29:e5:a7:ce:53:88:69:ef:26:6e:0a:
e0:52:a3:ee:39:43:45:82:84:ff:7d:2d:ee:d4:09:ed:8c:99:
02:a8:93:6a:2c:f8:38:4f:60:1f:69:b8:d2:2c:77:2a:8b:25:
ea:69:23:32:99:7c:1b:51:e2:fe:f6:6d:31:75:56:95:d4:2a:
52:42:18:0d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICDsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1
MTRBNUJBNEUwHhcNMjUwNjE4MTgyMDU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjRjOS02MTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlSmZeeJ9VAnLO/z2O9kMzSFmfyxAuuNvq8wsOwYjuMvCtU+S7c6srN1CyKbJ
160gQPzhyDJa8moN7H0+BDYDBNu+ktO6WVGpz65XPvOTJfO7cdoMsUcx1D7mwF3w
YkfCXXDe3FiThOlz5HbW+IAC+Sx8FrXEpz7ezBavX3AEJl9gSQhp+GyUBh3SgLG/
lpHXPa1dPRdoX6g0UrdBFCUhVn7OAVMWCzT1U7swb6Xhfj+hpM33X5/ZQiNR2ZUB
+vHgrei7o3ZvIwFUGm/uVlQTqsKnMJpYny7Q3KTEXMJoVQNjVw4bvN+CSwhbjLXr
8HvdcCpvNRUrHTUn881ty6bBJwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFH8ezrrv
+5kdlOQ8i42WlFXRXc1dMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2
QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDU4RjYvNTZCRTBDN0NBNkIyMTFFOUFBQ0ZCNDVCQzRGOUFFMDIvQzA3NDNBRThB
NkI2MTFFOUFCNzMxQjY5QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQCLXnEAwQCZw/EAwQCZxMYAwQFy4eAMA0GCSqGSIb3DQEBCwUAA4IB
AQBYRt/nmqWmemDjsFfnH6XIEICImhN3UJ77J6qCc9V4K9eCzkkMjWehB6oTAml4
QRT5SbMFm3MGGbGkfJa5d8GqzCeyPIFw8eYcISpA305jVUzQIf8lVL0RYX/nUkbY
4e1uOnoylk0fEKVKJZEAlQ7DOd8yQMX3aA9gtAnXWT1NIJ/HcHEGgvoVv0Hv5bQj
aGh/NOkfFXYRcYkugLr0XqSVJmx5k5WYvXatNbj+gGsSIIfkBhWou9vrm/u2KeWn
zlOIae8mbgrgUqPuOUNFgoT/fS3u1AntjJkCqJNqLPg4T2AfabjSLHcqiyXqaSMy
mXwbUeL+9m0xdVaV1CpSQhgN
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:47:52 2026 by rpki-client