Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/713028F48D4911EB9335E32FC4F9AE02.roa
File: 713028F48D4911EB9335E32FC4F9AE02.roa (raw, json)
Hash identifier: 2gCt/x7KidgUUiic8KeZ4+Ldk+O6Z1R5WNeHf6m8yn0=
Subject key identifier: 93:E3:C6:A0:02:44:FA:FF:02:61:A4:5E:CD:4D:28:E7:31:C3:53:C8
Certificate issuer: /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Certificate serial: 07EA
Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/713028F48D4911EB9335E32FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:03:23 +0000
ROA not before: Wed 26 Nov 2025 20:42:29 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139831
IP address blocks: 103.145.206.0/23 maxlen: 24
2405:8d40::/32 maxlen: 32
2405:8d40:a07::/48 maxlen: 48
2405:8d40:aa0::/48 maxlen: 48
2405:8d40:b00::/40 maxlen: 40
2405:8d40:c00::/40 maxlen: 40
2405:8d40:f00::/40 maxlen: 40
2405:8d40:1000::/42 maxlen: 42
2405:8d40:1040::/42 maxlen: 42
2405:8d40:1080::/42 maxlen: 42
2405:8d40:10c0::/42 maxlen: 42
2405:8d40:1100::/42 maxlen: 42
2405:8d40:1200::/42 maxlen: 42
2405:8d40:1240::/42 maxlen: 42
2405:8d40:1280::/42 maxlen: 42
2405:8d40:12c0::/42 maxlen: 42
2405:8d40:1300::/42 maxlen: 42
2405:8d40:4000::/36 maxlen: 36
2405:8d40:4000::/42 maxlen: 42
2405:8d40:4040::/42 maxlen: 42
2405:8d40:4080::/42 maxlen: 42
2405:8d40:40c0::/42 maxlen: 42
2405:8d40:4100::/42 maxlen: 42
2405:8d40:4400::/42 maxlen: 42
2405:8d40:4440::/42 maxlen: 42
2405:8d40:4480::/42 maxlen: 42
2405:8d40:44c0::/42 maxlen: 42
2405:8d40:4500::/42 maxlen: 42
2405:8d40:4800::/42 maxlen: 42
2405:8d40:4840::/42 maxlen: 42
2405:8d40:4880::/42 maxlen: 42
2405:8d40:48c0::/42 maxlen: 42
2405:8d40:4900::/42 maxlen: 42
2405:8d40:4c00::/42 maxlen: 42
2405:8d40:4c40::/42 maxlen: 42
2405:8d40:4c80::/42 maxlen: 42
2405:8d40:4cc0::/42 maxlen: 42
2405:8d40:4d00::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Validity
Not Before: Nov 26 20:42:29 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a5a6bb-096d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:28:9d:69:5f:c7:3f:b5:e8:bd:e6:41:a0:
af:a7:db:11:49:89:35:45:b7:8c:3e:5a:5c:ab:50:
32:c4:ce:c0:0f:fc:40:56:fe:87:98:f3:90:f0:2f:
41:7b:e3:84:47:cd:d2:2c:de:a1:59:1f:91:8a:ae:
39:74:70:9e:2c:d7:b0:6f:af:41:14:2d:f9:0c:06:
dd:6d:d1:1c:f6:d8:71:d5:f8:c2:31:fe:c7:ac:04:
b8:03:f2:60:1b:60:49:44:ba:05:9f:a1:62:20:6e:
8f:9d:30:46:3c:02:2d:46:f1:a0:27:8d:d4:2c:25:
e1:25:b5:2c:e2:03:42:28:14:1f:89:28:13:f5:0c:
6d:d2:2e:07:d4:b5:99:1c:40:cb:15:50:58:26:3c:
2a:a5:54:34:4b:ca:dc:85:8d:84:88:7d:79:03:17:
0a:25:87:6f:9a:68:72:b6:ca:88:bd:3b:5f:cf:7e:
8a:0b:f3:de:ed:6f:d9:8e:99:57:34:f8:92:42:4c:
36:76:84:8e:8d:04:22:b3:0b:2f:2c:9e:83:fc:19:
c6:38:8d:c8:ec:13:72:b6:38:1e:82:94:bf:af:11:
2a:55:6b:a3:60:0d:71:f3:a3:b8:96:22:3d:7b:b7:
c2:1c:5b:fd:53:6a:68:20:fb:bf:60:70:d2:6b:87:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E3:C6:A0:02:44:FA:FF:02:61:A4:5E:CD:4D:28:E7:31:C3:53:C8
X509v3 Authority Key Identifier:
keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/713028F48D4911EB9335E32FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.206.0/23
IPv6:
2405:8d40::/32
Signature Algorithm: sha256WithRSAEncryption
5b:fb:d0:c7:ae:11:cd:ad:14:32:c0:4f:87:64:f1:35:fc:8b:
6f:93:be:36:6d:81:c3:a8:19:7a:8c:57:e9:1c:a8:09:b7:52:
f0:d5:0d:99:cb:59:b5:86:40:aa:8c:ac:19:d0:28:80:13:04:
af:26:92:3f:10:16:9d:f6:28:ab:91:23:48:f8:b3:eb:19:e2:
35:05:8f:37:9b:7a:e8:f8:85:29:b0:c7:c3:1d:1d:2a:9f:99:
50:37:e8:43:69:13:7a:e6:8e:e7:5b:ff:45:7b:68:ce:9b:c8:
a9:f2:22:5e:8a:e1:4e:1e:fc:64:38:9f:83:09:6b:f4:b5:33:
66:f5:28:f0:b5:f6:40:95:ee:f3:75:1d:b1:58:55:21:f3:5c:
0a:73:55:e2:10:9a:cd:cd:9e:d8:06:0d:83:8d:c2:c4:d0:64:
c4:10:4a:3f:9f:64:61:69:5f:f9:f2:d5:53:6e:75:52:2f:0d:
fb:6e:f8:d6:a3:90:80:1b:61:94:3c:66:f3:26:53:63:81:42:
21:fb:f6:5f:df:e3:1a:b2:82:6b:4a:86:bd:dd:6b:91:e4:3b:
fa:73:26:97:35:c7:7c:38:bd:3f:b9:91:ad:c6:1c:fb:96:91:
d4:e2:54:eb:fe:df:98:27:01:c6:30:b3:08:a8:94:eb:ef:6c:
33:43:f5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:21:31 2026 by rpki-client