Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
File: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (raw, json)
Hash identifier: /xTj7xTsm7Y+p1ZvSo9zIww3Yk7EBjybsYmXsD416bI=
Subject key identifier: 33:02:99:E7:1C:9A:01:D0:6A:F0:BD:95:19:78:2A:3B:1E:6B:D2:8A
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 0893
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
Signing time: Tue 28 Apr 2026 23:29:20 +0000
ROA not before: Tue 28 Apr 2026 23:29:20 +0000
ROA not after: Fri 28 Aug 2026 00:00:00 +0000
asID: 17762
IP address blocks: 27.107.0.0/16 maxlen: 16
27.107.0.0/20 maxlen: 24
27.107.16.0/21 maxlen: 24
27.107.24.0/21 maxlen: 24
27.107.32.0/20 maxlen: 24
27.107.48.0/20 maxlen: 24
27.107.64.0/20 maxlen: 24
27.107.80.0/20 maxlen: 24
27.107.96.0/22 maxlen: 24
27.107.100.0/22 maxlen: 24
27.107.104.0/21 maxlen: 24
27.107.144.0/20 maxlen: 24
27.107.160.0/20 maxlen: 24
27.107.176.0/20 maxlen: 24
27.107.192.0/23 maxlen: 24
27.107.194.0/23 maxlen: 24
27.107.196.0/23 maxlen: 24
27.107.198.0/23 maxlen: 24
27.107.203.0/24 maxlen: 24
27.107.204.0/24 maxlen: 24
27.107.205.0/24 maxlen: 24
27.107.206.0/24 maxlen: 24
27.107.207.0/24 maxlen: 24
27.107.208.0/20 maxlen: 24
27.107.224.0/21 maxlen: 24
27.107.232.0/21 maxlen: 24
27.107.240.0/22 maxlen: 24
27.107.244.0/22 maxlen: 24
27.107.248.0/22 maxlen: 24
27.107.252.0/22 maxlen: 24
49.200.32.0/21 maxlen: 24
49.200.200.0/21 maxlen: 24
49.200.208.0/21 maxlen: 24
49.201.24.0/21 maxlen: 24
49.249.192.0/19 maxlen: 24
103.8.36.0/22 maxlen: 24
115.160.208.0/20 maxlen: 24
182.156.6.0/23 maxlen: 24
182.156.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2195 (0x893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Apr 28 23:29:20 2026 GMT
Not After : Aug 28 00:00:00 2026 GMT
Subject: CN=69f142d0-37c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:4b:b6:16:34:a4:e4:d9:3b:c6:6f:ff:14:
af:01:22:b5:58:d9:ac:39:e9:28:db:16:ec:08:ed:
3e:8a:df:7c:9e:3e:4a:e4:0a:4c:ca:cc:15:26:f6:
c0:45:a8:f5:51:ad:31:08:ad:ad:03:42:b7:66:07:
f4:19:03:22:96:71:0f:c7:ba:65:e8:07:d1:f8:68:
72:9b:5b:51:3e:80:63:9d:be:d8:8a:98:78:9d:e8:
f8:09:86:a2:39:e6:9a:df:0f:1b:ac:96:42:22:ee:
dc:84:a4:bd:a8:d1:03:95:76:d4:e8:be:52:7c:e2:
d3:15:72:ff:06:55:fc:dc:31:85:ee:7b:5e:4a:bb:
bf:f9:12:f0:ab:06:34:20:0c:4c:4a:3c:5c:59:c8:
90:70:17:8c:f5:66:12:af:62:59:56:11:28:06:a6:
12:f4:97:64:7c:24:28:4b:f0:d5:ce:cf:71:d2:1b:
8c:6a:f6:be:62:69:22:a2:95:4c:34:22:64:64:2f:
c2:3f:ef:e6:78:2b:bb:4e:de:bd:8f:30:19:21:4f:
ab:78:7f:2e:f9:a8:e3:cc:be:52:e1:07:ca:bd:27:
83:95:a7:2d:a0:69:14:ae:15:6f:c7:8e:60:5c:fe:
0c:dc:b2:21:10:24:b4:43:19:1d:52:d0:ed:50:7f:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:02:99:E7:1C:9A:01:D0:6A:F0:BD:95:19:78:2A:3B:1E:6B:D2:8A
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.107.0.0/16
49.200.32.0/21
49.200.200.0-49.200.215.255
49.201.24.0/21
49.249.192.0/19
103.8.36.0/22
115.160.208.0/20
182.156.6.0/23
182.156.20.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:aa:fb:4b:7d:db:c0:c2:80:d0:1a:36:b9:d9:53:f4:1a:dc:
5a:94:8a:2f:09:71:e5:af:d0:6d:cc:ec:06:3b:6d:6d:dc:af:
d1:9d:18:3c:f0:75:22:b5:02:61:e5:03:f3:af:f3:74:0d:4f:
f9:43:e8:ee:3c:1f:ff:e2:81:a6:70:b0:75:ba:56:17:6e:db:
4e:33:6a:0f:ef:e0:82:a6:e8:79:2c:a1:7d:ff:21:d9:19:78:
12:16:a1:3c:ad:0e:7a:4d:c8:fa:09:51:d0:da:59:71:37:97:
00:f3:a6:ad:10:bc:bb:2d:3e:6c:1c:9f:90:da:95:6f:ba:bf:
ad:00:b0:5d:66:0c:aa:4f:0c:73:dc:e3:83:ae:3a:49:30:5e:
65:90:99:51:d0:33:74:1f:99:f2:37:35:07:b8:17:bf:3f:4d:
c2:71:06:84:55:0d:d7:19:9b:ed:a5:15:39:bc:93:68:ca:3d:
ea:a9:0a:fa:31:52:b6:c8:b0:3a:97:a3:d3:18:a8:a6:02:d7:
82:cb:83:ca:12:a1:ea:da:72:2f:b3:11:6b:18:c9:39:d9:56:
1c:12:6d:d5:aa:f0:ed:c3:69:04:b9:90:14:26:1b:ae:64:f0:
04:80:19:89:07:1a:83:c2:f7:a7:3a:ff:ce:4d:ce:92:ce:ff:
4c:d5:e0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:43 2026 by rpki-client