Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BBF567AEB0F011E5A08A224DC4F9AE02.roa
File: BBF567AEB0F011E5A08A224DC4F9AE02.roa (raw, json)
Hash identifier: YJfAoBkyrE+KczU7YG1IOLfGOIMvqyD7LgGEH0JL+no=
Subject key identifier: E3:B4:ED:03:D1:BF:9F:4B:98:C2:26:12:FA:4A:32:19:A7:F8:E2:8D
Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial: 2875
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BBF567AEB0F011E5A08A224DC4F9AE02.roa
Signing time: Mon 20 Jul 2026 16:15:26 +0000
ROA not before: Mon 20 Jul 2026 16:15:26 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 17887
IP address blocks: 43.247.56.0/22 maxlen: 22
43.247.56.0/24 maxlen: 24
43.247.57.0/24 maxlen: 24
103.11.12.0/22 maxlen: 22
103.106.8.0/22 maxlen: 22
103.106.8.0/24 maxlen: 24
103.213.204.0/22 maxlen: 22
103.213.204.0/24 maxlen: 24
103.213.205.0/24 maxlen: 24
202.60.192.0/20 maxlen: 20
202.60.192.0/21 maxlen: 21
202.60.192.0/22 maxlen: 22
202.60.195.0/24 maxlen: 24
202.60.196.0/22 maxlen: 22
202.60.198.0/24 maxlen: 24
202.60.199.0/24 maxlen: 24
202.60.200.0/21 maxlen: 21
202.60.200.0/22 maxlen: 22
202.60.200.0/24 maxlen: 24
202.60.203.0/24 maxlen: 24
202.60.204.0/22 maxlen: 22
202.60.204.0/24 maxlen: 24
202.60.205.0/24 maxlen: 24
202.60.207.0/24 maxlen: 24
203.159.72.0/22 maxlen: 22
203.159.72.0/24 maxlen: 24
203.159.73.0/24 maxlen: 24
203.159.74.0/24 maxlen: 24
203.159.75.0/24 maxlen: 24
203.159.96.0/19 maxlen: 19
203.159.96.0/24 maxlen: 24
203.159.100.0/24 maxlen: 24
203.159.101.0/24 maxlen: 24
203.159.103.0/24 maxlen: 24
203.159.104.0/24 maxlen: 24
203.159.107.0/24 maxlen: 24
203.159.108.0/24 maxlen: 24
203.159.111.0/24 maxlen: 24
203.159.112.0/24 maxlen: 24
203.159.120.0/24 maxlen: 24
203.159.124.0/24 maxlen: 24
203.159.125.0/24 maxlen: 24
203.159.126.0/24 maxlen: 24
203.159.127.0/24 maxlen: 24
2405:6d00::/32 maxlen: 32
2405:6d00:100::/48 maxlen: 48
2405:6d00:101::/48 maxlen: 48
2405:6d00:104::/48 maxlen: 48
2405:6d00:105::/48 maxlen: 48
2405:6d00:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10357 (0x2875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Validity
Not Before: Jul 20 16:15:26 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5e499e-765d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:df:56:c8:42:c3:3d:1f:33:bf:2d:00:37:29:
57:3a:ac:a3:ee:eb:af:5a:a2:dc:30:f6:f8:4b:b7:
11:a1:0d:4f:bf:9d:0f:eb:1f:06:59:05:eb:dc:00:
97:3d:16:a6:f2:82:16:79:a0:77:24:6d:35:0b:d8:
b4:6c:58:42:70:46:92:fe:d5:d5:2b:ff:b3:08:86:
50:b7:b0:6c:04:7e:6b:ea:03:a0:3c:a3:33:5a:71:
b3:6e:f2:7c:67:94:76:43:db:32:f9:8d:82:1a:66:
14:bc:1b:16:27:6d:c6:b7:d0:ce:80:bb:ff:f8:4a:
0c:f9:23:83:b1:a1:b6:0a:d6:b1:ff:b4:b1:3b:2e:
8e:0c:5b:b5:a5:f7:8d:f0:bc:40:af:59:f1:fe:b9:
ac:fe:e7:5f:2f:fe:be:11:86:ea:0b:71:b6:4b:2b:
21:ac:c9:4f:16:c7:15:cc:b6:63:1c:e9:30:6a:d4:
79:9f:0c:99:43:df:18:a4:9a:0c:d2:b7:32:85:fc:
3e:bd:09:65:84:f9:6d:ba:6c:ab:15:27:21:65:9f:
9f:d4:c4:59:d0:7e:17:48:6f:a2:e7:85:f2:23:c5:
54:82:13:76:68:49:7e:fa:2d:1c:5c:c2:52:cf:c7:
06:1c:99:c4:72:80:a1:ff:78:64:17:83:b4:59:3c:
4f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B4:ED:03:D1:BF:9F:4B:98:C2:26:12:FA:4A:32:19:A7:F8:E2:8D
X509v3 Authority Key Identifier:
keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BBF567AEB0F011E5A08A224DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.247.56.0/22
103.11.12.0/22
103.106.8.0/22
103.213.204.0/22
202.60.192.0/20
203.159.72.0/22
203.159.96.0/19
IPv6:
2405:6d00::/32
Signature Algorithm: sha256WithRSAEncryption
84:b1:7c:b7:bb:ce:57:84:45:42:76:59:12:f2:55:0e:be:8b:
2b:7d:54:71:22:ae:f6:a9:1a:d7:d0:19:5a:f0:4d:0d:16:2e:
e8:a5:5e:95:e0:d0:7c:a3:1b:0a:d2:8e:b0:56:d2:e5:7b:50:
ef:2e:bc:19:8e:5a:da:a0:9d:0b:51:7e:12:9f:70:87:0a:04:
33:10:d6:b8:b7:c0:73:e0:bc:65:fa:41:38:28:1a:7f:07:49:
97:c3:ba:44:03:90:c1:01:d0:8e:ab:02:39:a3:08:a9:64:3a:
48:0f:88:0b:73:b4:be:46:a6:6d:fc:34:f7:5d:4f:2f:15:ab:
90:e6:90:36:0e:2d:7f:36:dd:f5:74:25:1d:30:13:d8:e2:7c:
96:3b:de:2b:9b:bf:b7:11:cc:11:19:d2:33:97:0f:6a:ff:80:
0c:21:e2:f2:80:4b:05:d4:27:5a:cb:06:d1:de:bc:72:25:c0:
36:d7:a0:26:f5:62:72:32:f6:20:d5:0d:55:4d:b4:87:81:86:
43:c4:d6:81:17:23:ab:11:c5:8b:ff:59:a8:8d:67:6e:b0:02:
91:98:41:77:b2:b6:86:d5:bd:d3:dd:22:7b:c7:02:a5:e4:0c:
91:cf:19:6e:ff:da:e0:ce:3c:97:65:35:e7:2b:ed:36:94:94:
f6:66:3a:be
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgICKHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFNjAxMTAvBgNVBAUTKDIwMDgzRDRERkE4NDRDNTcyNzU1OEM0Qzc1NkRCMjBE
RjgwN0NEODEwHhcNMjYwNzIwMTYxNTI2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVlNDk5ZS03NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4N9WyELDPR8zvy0ANylXOqyj7uuvWqLcMPb4S7cRoQ1Pv50P6x8GWQXr3ACX
PRam8oIWeaB3JG01C9i0bFhCcEaS/tXVK/+zCIZQt7BsBH5r6gOgPKMzWnGzbvJ8
Z5R2Q9sy+Y2CGmYUvBsWJ23Gt9DOgLv/+EoM+SODsaG2Ctax/7SxOy6ODFu1pfeN
8LxAr1nx/rms/udfL/6+EYbqC3G2SyshrMlPFscVzLZjHOkwatR5nwyZQ98YpJoM
0rcyhfw+vQllhPltumyrFSchZZ+f1MRZ0H4XSG+i54XyI8VUghN2aEl++i0cXMJS
z8cGHJnEcoCh/3hkF4O0WTxPywIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFOO07QPR
v59LmMImEvpKMhmn+OKNMB8GA1UdIwQYMBaAFCAIPU36hExXJ1WMTHVtsg34B82B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUU2MC9GMTk5NjcxMkM3
Q0YxMUU0QjEzQkUxMjFDNEY5QUUwMi9JQWc5VGZxRVRGY25WWXhNZFcyeURmZ0h6
WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lBZzlUZnFFVEZjblZZeE1kVzJ5RGZnSHpZRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFFNjAvRjE5OTY3MTJDN0NGMTFFNEIxM0JFMTIxQzRGOUFFMDIvQkJGNTY3QUVC
MEYwMTFFNUEwOEEyMjREQzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw
BAIAATAqAwQCK/c4AwQCZwsMAwQCZ2oIAwQCZ9XMAwQEyjzAAwQCy59IAwQFy59g
MA0EAgACMAcDBQAkBW0AMA0GCSqGSIb3DQEBCwUAA4IBAQCEsXy3u85XhEVCdlkS
8lUOvosrfVRxIq72qRrX0Bla8E0NFi7opV6V4NB8oxsK0o6wVtLle1DvLrwZjlra
oJ0LUX4Sn3CHCgQzENa4t8Bz4Lxl+kE4KBp/B0mXw7pEA5DBAdCOqwI5owipZDpI
D4gLc7S+RqZt/DT3XU8vFauQ5pA2Di1/Nt31dCUdMBPY4nyWO94rm7+3EcwRGdIz
lw9q/4AMIeLygEsF1CdaywbR3rxyJcA216Am9WJyMvYg1Q1VTbSHgYZDxNaBFyOr
EcWL/1mojWdusAKRmEF3sraG1b3T3SJ7xwKl5AyRzxlu/9rgzjyXZTXnK+02lJT2
Zjq+
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:51:17 2026 by rpki-client