Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
File: 3AF0F3E028CB11F195C91CE1BF833773.roa (raw, json)
Hash identifier: HjtXlASFfUyesyuq12S6h4/nNp1al3EbTL9dYMiuAwA=
Subject key identifier: 1B:28:DC:7F:58:E7:08:C2:63:FA:B8:AB:18:8B:00:0A:D0:AC:40:4C
Certificate issuer: /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial: 3540
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
Signing time: Tue 28 Apr 2026 15:13:44 +0000
ROA not before: Tue 28 Apr 2026 15:13:44 +0000
ROA not after: Fri 28 Aug 2026 00:00:00 +0000
asID: 55330
IP address blocks: 103.17.165.0/24 maxlen: 24
103.17.166.0/24 maxlen: 24
180.94.64.0/24 maxlen: 24
180.94.65.0/24 maxlen: 24
180.94.66.0/24 maxlen: 24
180.94.67.0/24 maxlen: 24
180.94.68.0/24 maxlen: 24
180.94.69.0/24 maxlen: 24
180.94.70.0/24 maxlen: 24
180.94.71.0/24 maxlen: 24
180.94.72.0/24 maxlen: 24
180.94.73.0/24 maxlen: 24
180.94.74.0/24 maxlen: 24
180.94.75.0/24 maxlen: 24
180.94.76.0/24 maxlen: 24
180.94.77.0/24 maxlen: 24
180.94.78.0/24 maxlen: 24
180.94.79.0/24 maxlen: 24
180.94.80.0/24 maxlen: 24
180.94.81.0/24 maxlen: 24
180.94.82.0/24 maxlen: 24
180.94.83.0/24 maxlen: 24
180.94.84.0/24 maxlen: 24
180.94.85.0/24 maxlen: 24
180.94.86.0/24 maxlen: 24
180.94.87.0/24 maxlen: 24
180.94.88.0/24 maxlen: 24
180.94.89.0/24 maxlen: 24
180.94.90.0/24 maxlen: 24
180.94.91.0/24 maxlen: 24
180.94.92.0/24 maxlen: 24
180.94.93.0/24 maxlen: 24
180.94.94.0/24 maxlen: 24
180.94.95.0/24 maxlen: 24
203.215.32.0/24 maxlen: 24
203.215.33.0/24 maxlen: 24
203.215.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13632 (0x3540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Validity
Not Before: Apr 28 15:13:44 2026 GMT
Not After : Aug 28 00:00:00 2026 GMT
Subject: CN=69f0cea8-5205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:0c:73:c0:4c:a1:7d:1e:49:44:20:d8:16:
72:6c:2a:1f:45:50:d3:da:2a:06:c1:e3:bd:24:54:
c3:07:6e:70:de:9f:a0:5f:07:a9:a0:4a:32:ed:68:
1a:c4:a6:e6:c9:63:03:b0:71:e3:5e:2e:5c:ee:d2:
c2:b5:18:3f:04:ba:f9:a1:95:15:11:54:eb:95:18:
ae:ae:48:35:da:b1:b3:bc:1f:3a:e0:bd:cc:f1:0e:
48:1b:f4:d1:df:f8:47:06:c1:e3:cc:60:54:47:0c:
22:aa:21:81:24:c8:16:a4:6f:4b:5c:c2:a5:46:8d:
e6:53:83:f8:86:49:b2:47:89:a1:4d:8e:47:2a:5f:
b7:d3:25:bb:58:36:6c:eb:2b:92:1b:47:7a:ff:aa:
ec:0c:8a:92:82:4b:1f:d4:d0:c5:cd:de:df:64:54:
ef:67:b9:5b:cf:b6:55:d0:2e:6b:f5:44:42:81:c1:
24:58:23:80:b3:01:d3:0a:f4:a1:9e:98:fc:b2:6c:
c8:b8:fd:1e:36:2c:35:8d:46:a4:70:ee:60:d9:95:
5c:31:9c:ad:d5:01:ac:5f:aa:41:22:11:af:d1:09:
a3:e0:53:00:34:ab:2d:6a:21:b6:b2:0d:d8:d4:ed:
80:35:2d:cf:90:e7:e7:1a:90:6a:3d:27:04:23:ed:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:28:DC:7F:58:E7:08:C2:63:FA:B8:AB:18:8B:00:0A:D0:AC:40:4C
X509v3 Authority Key Identifier:
keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/3AF0F3E028CB11F195C91CE1BF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.165.0-103.17.166.255
180.94.64.0/19
203.215.32.0-203.215.34.255
Signature Algorithm: sha256WithRSAEncryption
ae:f9:2e:23:64:db:47:29:3a:f3:14:be:d2:52:e8:b3:54:74:
b8:bd:86:a5:cd:20:5c:1f:67:25:42:b0:3f:4e:92:08:5c:86:
89:ed:69:65:ce:32:a4:6c:99:a0:7d:e5:f9:2e:6f:d5:46:c8:
e2:b8:51:b0:8a:81:17:81:07:3c:bc:75:fb:98:2a:22:f5:85:
ff:71:e3:d7:30:b6:d5:73:cb:8d:af:13:82:7f:5f:f9:b0:32:
04:ae:7f:56:79:72:50:b9:94:69:df:09:12:cd:6f:c3:1e:4b:
32:79:c8:da:4d:6e:a8:51:d7:9b:4e:01:4f:9a:8e:66:c6:b8:
cb:36:10:f9:2a:dd:86:49:92:21:2c:d9:cb:a7:9c:44:08:b5:
65:59:fa:a4:50:c6:02:56:72:c8:a8:60:24:16:2f:f2:a0:ba:
4f:d8:96:44:8d:4d:40:22:34:3b:f4:bc:47:ee:3f:72:6b:38:
a1:3c:79:dd:e2:5a:db:b5:00:4f:f7:1d:c5:a6:c2:32:fc:33:
a7:2f:f0:d6:d5:14:23:6a:b5:9e:61:fa:d3:34:1c:cf:b0:2f:
ae:a6:74:9d:59:cc:9e:92:74:5a:00:61:e3:13:eb:2a:49:3c:
2e:53:d9:a8:d7:b3:e1:b9:00:73:6d:eb:28:81:35:62:c5:30:
41:63:70:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:54 2026 by rpki-client