Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa
File: E007C458C1F111F0BF3C4B61C4F9AE02.roa (raw, json)
Hash identifier: +sznSsLpxwABFqIXGcKAK/MdimW/M560JkAZUoLd0ko=
Subject key identifier: 84:C3:8E:05:4D:15:42:FC:C1:E5:CB:BB:DD:29:B4:63:FA:20:85:7D
Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial: 1CC3
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa
Signing time: Tue 12 May 2026 06:56:24 +0000
ROA not before: Tue 12 May 2026 06:56:24 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 38713
IP address blocks: 103.25.136.0/22 maxlen: 22
103.25.136.0/24 maxlen: 24
103.25.137.0/24 maxlen: 24
103.25.138.0/24 maxlen: 24
103.25.139.0/24 maxlen: 24
103.121.40.0/22 maxlen: 22
103.121.40.0/24 maxlen: 24
103.121.41.0/24 maxlen: 24
103.121.42.0/24 maxlen: 24
103.121.43.0/24 maxlen: 24
103.205.176.0/22 maxlen: 22
103.205.176.0/24 maxlen: 24
103.205.177.0/24 maxlen: 24
103.205.178.0/24 maxlen: 24
103.205.179.0/24 maxlen: 24
116.206.140.0/24 maxlen: 24
116.206.141.0/24 maxlen: 24
116.206.142.0/24 maxlen: 24
116.206.143.0/24 maxlen: 24
160.19.20.0/22 maxlen: 22
160.19.20.0/24 maxlen: 24
160.19.21.0/24 maxlen: 24
160.19.22.0/24 maxlen: 24
160.19.23.0/24 maxlen: 24
202.143.112.0/24 maxlen: 24
202.143.113.0/24 maxlen: 24
202.143.114.0/24 maxlen: 24
202.143.115.0/24 maxlen: 24
202.143.116.0/24 maxlen: 24
202.143.117.0/24 maxlen: 24
202.143.118.0/24 maxlen: 24
202.143.119.0/24 maxlen: 24
202.143.120.0/24 maxlen: 24
202.143.121.0/24 maxlen: 24
202.143.122.0/24 maxlen: 24
202.143.123.0/24 maxlen: 24
202.143.124.0/24 maxlen: 24
202.143.125.0/24 maxlen: 24
202.143.126.0/24 maxlen: 24
202.143.127.0/24 maxlen: 24
2406:1300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7363 (0x1cc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Validity
Not Before: May 12 06:56:24 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6a02cf18-c547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:16:7f:71:b9:4d:b9:c2:04:ad:a1:06:7d:
b5:6a:06:f1:63:50:f1:9f:2d:d8:ae:6f:20:a5:39:
ea:92:a8:82:2e:56:08:f0:59:8a:34:0b:0e:99:29:
47:cb:94:d8:29:0a:b2:5a:2a:75:67:4e:2e:b3:82:
44:a1:38:99:f1:e2:53:b3:e1:f5:db:b1:eb:8b:ff:
fe:29:2a:dc:17:c1:4d:87:33:e3:a0:f8:ce:22:b0:
c1:a1:42:bb:20:ec:74:ee:8e:48:40:09:b9:ab:88:
7a:b5:4c:34:af:87:c3:78:69:86:7d:44:97:8e:4f:
78:02:56:eb:81:91:57:1d:f2:dd:fb:5e:dc:83:aa:
e3:dc:ff:02:24:53:95:9d:cf:ea:28:0a:75:f8:ff:
83:28:4c:49:85:3b:ff:0f:06:56:8e:b1:ad:79:fb:
03:ce:8f:54:fd:c4:c6:e6:de:47:6e:8f:db:a1:e4:
1d:f4:27:d4:d5:10:e3:48:32:af:3e:cc:97:87:3b:
d3:a2:12:a8:5a:82:7f:ef:a2:70:f2:cb:dc:ec:48:
15:82:bf:a5:c7:86:ee:63:00:50:e7:2e:f4:7a:b8:
97:4c:09:e9:dc:4c:d6:f8:60:fb:4e:c8:ca:64:0f:
4f:c0:5c:30:98:7d:76:65:1c:44:69:80:58:44:c8:
2a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C3:8E:05:4D:15:42:FC:C1:E5:CB:BB:DD:29:B4:63:FA:20:85:7D
X509v3 Authority Key Identifier:
keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.25.136.0/22
103.121.40.0/22
103.205.176.0/22
116.206.140.0/22
160.19.20.0/22
202.143.112.0/20
IPv6:
2406:1300::/32
Signature Algorithm: sha256WithRSAEncryption
d1:33:01:e8:1c:fe:75:e5:80:23:ff:c0:d7:41:13:b0:4f:ee:
f6:39:7a:73:57:1e:a4:5d:2d:99:8a:cf:3a:0e:8d:29:ae:86:
31:15:3c:b3:96:06:15:46:35:f3:ad:58:25:f2:c1:2a:22:f8:
5b:10:43:87:b3:01:34:4f:ea:84:6b:34:b1:07:39:c7:76:0a:
bd:4e:10:38:5c:78:0f:a9:48:de:13:5b:5d:87:20:8c:a8:57:
20:05:b3:18:c0:69:c6:cb:59:ad:e4:34:34:02:61:60:2a:37:
c2:1e:9c:3b:27:e6:d8:50:5e:52:f8:d2:53:b5:1e:73:e3:5b:
68:9c:1a:67:0d:4b:26:eb:2a:5d:55:7e:a2:d9:07:bf:66:e0:
ff:f6:26:9a:2d:5f:01:f2:76:3d:22:7b:e1:80:4f:3a:df:ed:
4d:ae:ab:6b:cc:8f:0b:e5:08:40:23:e2:4f:8e:02:dd:20:46:
3b:59:56:3a:8c:05:29:5b:d0:d5:38:06:42:6d:f2:2b:00:2d:
11:44:fc:20:77:b5:56:ff:ee:14:b9:aa:e1:bf:0a:c6:85:4b:
eb:ff:1d:0f:f8:14:81:7c:42:ea:7f:c8:3f:80:d2:3e:a9:67:
43:28:61:0d:fb:3c:54:a5:bc:92:08:70:e7:09:73:c4:2c:ca:
e4:2d:c6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:56 2026 by rpki-client