Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa
File: E007C458C1F111F0BF3C4B61C4F9AE02.roa (raw, json)
Hash identifier: oOMFQEz7Z0dlH9Kxe9lCaXlC2P93gTrGpTMlqfnNL/g=
Subject key identifier: 7E:A9:C7:7A:EF:52:97:D6:05:4E:8F:FC:4D:6D:65:19:AC:E7:4A:42
Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial: 1C8E
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:59:27 +0000
ROA not before: Sat 06 Dec 2025 06:32:26 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 38713
IP address blocks: 103.25.136.0/22 maxlen: 22
103.25.136.0/24 maxlen: 24
103.25.137.0/24 maxlen: 24
103.25.138.0/24 maxlen: 24
103.25.139.0/24 maxlen: 24
103.205.176.0/22 maxlen: 22
103.205.176.0/24 maxlen: 24
103.205.177.0/24 maxlen: 24
103.205.178.0/24 maxlen: 24
103.205.179.0/24 maxlen: 24
116.206.140.0/24 maxlen: 24
116.206.141.0/24 maxlen: 24
116.206.142.0/24 maxlen: 24
116.206.143.0/24 maxlen: 24
202.143.112.0/24 maxlen: 24
202.143.113.0/24 maxlen: 24
202.143.114.0/24 maxlen: 24
202.143.115.0/24 maxlen: 24
202.143.116.0/24 maxlen: 24
202.143.117.0/24 maxlen: 24
202.143.118.0/24 maxlen: 24
202.143.119.0/24 maxlen: 24
202.143.120.0/24 maxlen: 24
202.143.121.0/24 maxlen: 24
202.143.122.0/24 maxlen: 24
202.143.123.0/24 maxlen: 24
202.143.124.0/24 maxlen: 24
202.143.125.0/24 maxlen: 24
202.143.126.0/24 maxlen: 24
202.143.127.0/24 maxlen: 24
2406:1300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7310 (0x1c8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Validity
Not Before: Dec 6 06:32:26 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4706f-fabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:ce:5d:fc:e3:9e:59:b8:58:16:2b:e5:d4:
0d:1c:b4:01:5c:e3:93:f9:48:09:8f:0b:b8:7f:9d:
c0:1a:13:13:be:56:d5:d7:b2:f6:18:b1:ef:ff:74:
c2:35:c3:27:14:39:d9:cd:97:a3:34:0c:de:81:0a:
72:f1:1e:36:73:9e:b1:46:21:7c:ee:e3:ef:9b:92:
78:e7:95:87:f0:45:b0:4b:64:e3:3b:f7:8b:20:62:
4d:fb:7e:0b:71:e6:ea:04:34:fe:1c:98:37:34:f8:
79:0b:ad:ac:01:a3:a3:41:9b:6e:d5:23:67:f5:80:
76:7a:92:a9:bc:ec:b7:e5:49:94:8a:00:c6:9a:e7:
9d:42:c5:44:f7:ca:5c:d0:84:40:da:85:29:98:b7:
69:e8:e1:ed:77:60:77:56:6e:30:e6:35:f0:71:82:
5b:de:bb:ff:bb:45:20:e9:84:cb:ef:6f:f1:0a:ca:
d0:3c:92:08:9e:8e:16:d1:3f:70:04:c2:49:fe:cd:
02:87:6b:7e:63:49:7c:56:3e:58:fd:df:63:35:9e:
d4:18:ed:08:d9:d3:65:30:ef:3a:df:cc:94:67:67:
38:24:10:61:00:a3:63:be:d9:54:b3:d8:31:13:70:
c8:18:d1:5b:47:eb:8f:2c:60:cf:aa:18:5e:df:17:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A9:C7:7A:EF:52:97:D6:05:4E:8F:FC:4D:6D:65:19:AC:E7:4A:42
X509v3 Authority Key Identifier:
keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.25.136.0/22
103.205.176.0/22
116.206.140.0/22
202.143.112.0/20
IPv6:
2406:1300::/32
Signature Algorithm: sha256WithRSAEncryption
1a:fd:4c:cb:d2:90:df:36:dd:40:41:60:8c:15:b4:76:0b:23:
b7:f5:6f:82:07:17:ee:55:0b:4b:e1:50:74:57:97:01:88:5f:
d6:a4:fd:cb:04:65:85:d4:2f:60:c8:4f:ac:bc:a6:30:90:de:
13:24:82:8b:a3:61:fc:3c:d7:78:65:9e:67:8e:e6:8a:ce:63:
d0:6b:63:94:6d:26:70:20:52:b3:d5:88:fe:ff:2a:1b:c7:71:
3f:9e:ef:a1:ec:a1:26:69:b0:4c:e1:c7:ee:da:d3:83:d7:d1:
59:f1:6c:1d:ae:c2:0c:07:7e:8d:4b:34:d6:ac:2b:a9:8e:db:
3f:e9:5a:66:11:72:0b:2d:dd:69:6b:03:3f:bc:32:52:4c:95:
db:91:55:93:4a:a0:fd:5b:49:a0:d7:87:e5:17:89:4c:93:e6:
6b:8b:8b:3a:d0:cb:5a:44:75:18:c6:2b:09:67:67:64:86:5f:
65:db:d6:51:95:33:90:ea:8d:48:b3:94:6a:d5:06:5a:61:5a:
c9:41:b3:a8:74:69:2d:d0:28:94:80:01:5a:78:87:d1:10:6a:
95:1d:f1:bf:a2:01:10:c4:2d:ce:38:0c:2e:88:12:79:5f:1c:
aa:e3:45:52:2f:48:b1:84:36:33:16:e5:50:db:11:df:68:d9:
21:9a:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:09 2026 by rpki-client