Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
File: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (raw, json)
Hash identifier: RfIwQugUF5e4NxZfyETqjmTf0Zh9v0gdDlStWYdhYuI=
Subject key identifier: C3:4B:36:50:EE:F3:34:6D:65:45:B2:5E:A3:0D:8F:07:24:3D:92:E0
Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Certificate serial: 17AC
Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
Signing time: Mon 29 Jun 2026 14:09:29 +0000
ROA not before: Mon 29 Jun 2026 14:09:29 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137403
IP address blocks: 103.107.160.0/22 maxlen: 22
103.107.160.0/23 maxlen: 23
103.107.160.0/24 maxlen: 24
103.107.161.0/24 maxlen: 24
103.107.162.0/23 maxlen: 23
103.107.162.0/24 maxlen: 24
103.107.163.0/24 maxlen: 24
2402:5840::/32 maxlen: 32
2402:5840::/48 maxlen: 48
2402:5840::/64 maxlen: 64
2402:5840:0:1::/64 maxlen: 64
2402:5840:0:2::/64 maxlen: 64
2402:5840:1::/48 maxlen: 48
2402:5840:2::/48 maxlen: 48
2402:5840:3::/48 maxlen: 48
2402:5840:4::/48 maxlen: 48
2402:5840:5::/48 maxlen: 48
2402:5840:6::/48 maxlen: 48
2402:5840:7::/48 maxlen: 48
2402:5840:8::/48 maxlen: 48
2402:5840:9::/48 maxlen: 48
2402:5840:a::/48 maxlen: 48
2402:5840:10::/48 maxlen: 48
2402:5840:11::/48 maxlen: 48
2402:5840:12::/48 maxlen: 48
2402:5840:13::/48 maxlen: 48
2402:5840:14::/48 maxlen: 48
2402:5840:15::/48 maxlen: 48
2402:5840:16::/48 maxlen: 48
2402:5840:17::/48 maxlen: 48
2402:5840:18::/48 maxlen: 48
2402:5840:19::/48 maxlen: 48
2402:5840:20::/48 maxlen: 48
2402:5840:21::/48 maxlen: 48
2402:5840:22::/48 maxlen: 48
2402:5840:23::/48 maxlen: 48
2402:5840:24::/48 maxlen: 48
2402:5840:25::/48 maxlen: 48
2402:5840:26::/48 maxlen: 48
2402:5840:27::/48 maxlen: 48
2402:5840:28::/48 maxlen: 48
2402:5840:29::/48 maxlen: 48
2402:5840:30::/48 maxlen: 48
2402:5840:31::/48 maxlen: 48
2402:5840:32::/48 maxlen: 48
2402:5840:33::/48 maxlen: 48
2402:5840:34::/48 maxlen: 48
2402:5840:45::/48 maxlen: 48
2402:5840:46::/48 maxlen: 48
2402:5840:47::/48 maxlen: 48
2402:5840:48::/48 maxlen: 48
2402:5840:49::/48 maxlen: 48
2402:5840:50::/48 maxlen: 48
2402:5840:51::/48 maxlen: 48
2402:5840:52::/48 maxlen: 48
2402:5840:53::/48 maxlen: 48
2402:5840:54::/48 maxlen: 48
2402:5840:70::/48 maxlen: 48
2402:5840:71::/48 maxlen: 48
2402:5840:72::/48 maxlen: 48
2402:5840:73::/48 maxlen: 48
2402:5840:100::/48 maxlen: 48
2402:5840:2001::/48 maxlen: 48
2402:5840:2002::/48 maxlen: 48
2402:5840:2003::/48 maxlen: 48
2402:5840:2004::/48 maxlen: 48
2402:5840:5840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6060 (0x17ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Validity
Not Before: Jun 29 14:09:29 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a427c99-ee22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:f0:fb:b1:7d:42:8d:00:97:e8:ea:7d:c8:
f7:5b:ef:77:3f:25:e9:5e:23:49:3c:0c:5e:a0:ee:
36:df:9f:31:fb:20:cf:8b:2e:96:cf:6e:2b:c5:f8:
a5:34:75:71:76:dd:40:86:a4:fb:e3:0e:e6:d5:b9:
36:b9:15:41:bb:b3:08:27:97:15:1e:a1:44:ba:ea:
9b:66:55:6b:1f:06:30:78:2c:5a:ea:6b:e6:05:8b:
b1:4d:85:f0:c3:ac:9c:31:02:09:e7:8f:bf:75:c0:
7f:17:2a:39:6b:4b:e2:9a:4c:73:c7:a1:39:d8:6a:
bd:84:7e:fc:e8:84:c7:79:94:e1:7f:ff:93:3d:87:
a9:c2:52:25:49:ec:60:15:51:54:83:14:1c:fc:14:
14:00:34:50:29:5e:3a:57:66:9e:d9:e4:3f:d2:07:
a5:cd:00:a3:f8:d4:89:f5:74:58:1c:fe:dc:f1:4b:
c2:19:87:2d:1f:d9:3e:3f:ae:bb:1e:c4:84:a7:f0:
33:52:5d:87:2b:98:6c:bb:6b:22:46:26:be:b0:80:
0b:da:31:33:7a:c0:26:b9:65:80:bc:6b:66:2c:7a:
0a:c6:20:99:eb:83:5c:d5:74:cc:5e:7a:0d:14:8b:
57:56:e6:d8:ca:e8:67:85:12:36:d1:be:18:ba:3e:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4B:36:50:EE:F3:34:6D:65:45:B2:5E:A3:0D:8F:07:24:3D:92:E0
X509v3 Authority Key Identifier:
keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.107.160.0/22
IPv6:
2402:5840::/32
Signature Algorithm: sha256WithRSAEncryption
00:be:d7:4d:b7:aa:90:96:55:5a:1d:6a:af:de:25:26:39:20:
8c:3d:90:7d:16:0e:c1:7d:84:6a:4d:e0:8f:c8:36:d7:d3:ba:
f9:bc:db:13:90:ac:7f:e0:97:eb:8a:ee:12:e3:c0:af:e8:94:
12:80:6e:47:b9:c1:b4:e3:80:8b:4f:48:b8:36:38:fe:fc:f6:
87:98:c0:43:8a:c5:01:94:c5:a3:6a:a0:5f:b9:2e:13:01:09:
98:07:3e:96:16:b4:ee:ef:6a:93:01:29:4d:49:cb:a8:0e:d0:
78:3e:af:e3:19:f1:f9:01:6f:34:84:87:3b:92:0f:f8:16:59:
53:ae:9f:5e:8f:bf:cd:65:95:64:e2:03:14:0c:ce:a0:3f:43:
06:02:5b:98:4c:75:f3:89:52:29:e0:2d:c8:a2:ad:60:9e:8c:
4b:52:de:c2:be:29:9c:ff:bf:28:83:cd:26:0d:c7:d2:4e:c7:
83:8f:fe:3b:d7:6f:19:d3:07:ee:9f:cd:ff:4f:2e:20:92:f0:
3e:34:ee:ac:f4:24:1c:8a:e5:cc:aa:c9:ea:7a:37:1d:19:7e:
53:c8:d6:a4:0b:56:2b:5a:bc:64:92:cc:e1:7a:86:cf:f2:96:
4b:46:42:ff:ba:93:6b:a1:3a:e8:c8:a9:b8:72:d3:54:07:64:
51:6f:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:53:15 2026 by rpki-client