Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
File: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (raw, json)
Hash identifier: Lm/etLW+a8iA8U3fIGSLVJlAVzOtMN4HXySfF1Iy9aw=
Subject key identifier: 43:65:12:BA:32:FF:D5:B3:9E:FC:6D:7C:E0:E3:1D:85:17:19:E8:A2
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 086E
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
Signing time: Thu 05 Mar 2026 15:54:19 +0000
ROA not before: Thu 05 Mar 2026 15:54:19 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17762
IP address blocks: 27.107.0.0/16 maxlen: 16
27.107.0.0/20 maxlen: 24
27.107.16.0/21 maxlen: 24
27.107.24.0/21 maxlen: 24
27.107.32.0/20 maxlen: 24
27.107.48.0/20 maxlen: 24
27.107.64.0/20 maxlen: 24
27.107.80.0/20 maxlen: 24
27.107.96.0/22 maxlen: 24
27.107.100.0/22 maxlen: 24
27.107.104.0/21 maxlen: 24
27.107.144.0/20 maxlen: 24
27.107.160.0/20 maxlen: 24
27.107.176.0/20 maxlen: 24
27.107.192.0/23 maxlen: 24
27.107.194.0/23 maxlen: 24
27.107.196.0/23 maxlen: 24
27.107.198.0/23 maxlen: 24
27.107.203.0/24 maxlen: 24
27.107.204.0/24 maxlen: 24
27.107.205.0/24 maxlen: 24
27.107.206.0/24 maxlen: 24
27.107.207.0/24 maxlen: 24
27.107.208.0/20 maxlen: 24
27.107.224.0/21 maxlen: 24
27.107.232.0/21 maxlen: 24
27.107.240.0/22 maxlen: 24
27.107.244.0/22 maxlen: 24
27.107.248.0/22 maxlen: 24
27.107.252.0/22 maxlen: 24
49.200.32.0/21 maxlen: 24
49.200.200.0/21 maxlen: 24
49.200.208.0/21 maxlen: 24
49.201.24.0/21 maxlen: 24
49.249.192.0/19 maxlen: 24
103.8.36.0/22 maxlen: 24
115.160.208.0/20 maxlen: 24
182.156.6.0/23 maxlen: 24
182.156.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 06:19:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Mar 5 15:54:19 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a9a72b-6542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:06:2f:02:98:48:46:da:4f:ba:77:fe:0a:
6e:fe:1d:60:3f:0c:04:fa:94:20:4f:5b:f7:39:f4:
3d:fc:de:32:e2:0b:60:c0:1c:91:90:ff:bb:0f:36:
ba:41:08:4a:d3:25:8a:db:6e:c4:3a:b5:b7:7e:44:
ed:40:e8:b1:8c:e1:c3:9f:7c:0f:c3:e4:81:33:f2:
b3:b2:59:ca:44:48:d7:ff:a1:59:73:cf:3a:e8:d9:
ec:f0:b4:9f:a7:f0:12:cf:61:04:12:ce:53:63:03:
a0:c9:80:a2:7f:0d:ad:7e:01:36:41:44:2a:ab:aa:
5a:86:c6:27:71:fd:a6:85:a5:3d:ea:4a:4e:4e:db:
1a:24:f9:f9:c4:b9:bb:78:db:6b:4c:49:d5:1f:e0:
0c:8b:b1:72:29:95:2f:92:0d:cf:c6:3e:c4:b6:89:
6b:f5:63:2f:8e:c6:75:6c:85:19:ab:10:fc:3d:90:
2c:96:cf:6f:45:44:20:b5:f3:b4:b5:5b:ed:49:96:
5a:bd:04:fe:74:b8:41:38:26:02:ba:e5:97:82:81:
b4:76:a6:a9:3b:41:f3:4b:0c:fe:ed:c4:33:e5:61:
d8:6d:87:b0:30:5f:77:1d:ee:67:b9:4a:8a:ae:2c:
5d:f3:61:ca:cf:86:e3:cc:17:89:8b:1e:df:a9:78:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:12:BA:32:FF:D5:B3:9E:FC:6D:7C:E0:E3:1D:85:17:19:E8:A2
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.107.0.0/16
49.200.32.0/21
49.200.200.0-49.200.215.255
49.201.24.0/21
49.249.192.0/19
103.8.36.0/22
115.160.208.0/20
182.156.6.0/23
182.156.20.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:e6:61:b2:f1:1e:45:2f:db:76:2d:8f:68:7f:41:55:32:66:
5d:d2:fb:97:a3:a4:98:cc:7d:6b:58:94:be:a7:70:94:81:d4:
ff:48:d2:37:08:07:18:94:27:68:3a:20:68:a6:a1:33:3e:e9:
24:a1:1f:e1:32:f0:4f:45:a4:af:78:03:4b:6e:45:83:8a:5a:
05:df:79:b4:3e:21:a5:e0:ba:e7:87:57:8d:f3:fd:dc:b5:2e:
fc:06:60:15:79:0d:04:be:db:fd:5d:6d:a5:c9:ac:46:9c:eb:
9b:8b:0d:e2:85:d9:73:3c:12:eb:29:ab:61:7d:c2:85:6d:66:
aa:90:c8:a1:4f:bb:c4:2b:b7:e5:20:64:4c:90:c3:79:55:7c:
45:78:b2:1b:2d:50:d4:22:ce:58:6d:aa:9a:65:b0:8b:63:21:
89:00:14:a2:a4:3e:08:1e:36:d4:23:74:5a:8e:a6:cc:ad:be:
25:89:2c:79:2b:78:cd:b4:d2:a3:f7:bf:07:88:26:96:cc:93:
93:09:22:c5:b4:18:51:9e:5c:ae:57:d6:86:4a:e6:47:69:2c:
c7:9f:8b:e8:7c:01:8b:d8:9c:92:1b:1b:cc:9e:bc:35:60:04:
a9:70:80:37:46:f7:e3:9d:4a:af:a0:40:ae:8a:d5:c9:3a:cd:
da:e4:3a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:22 2026 by rpki-client