Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
File: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (raw, json)
Hash identifier: pdIAmEXGHFqCecA3UWlLXgTA3Tmjugj3Oz1gOaklUnk=
Subject key identifier: 0D:6E:3F:B7:C3:78:22:43:1A:B5:82:10:3D:C5:BA:8E:82:DE:F4:B4
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 07D0
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
Signing time: Tue 07 Oct 2025 12:54:38 +0000
ROA not before: Tue 07 Oct 2025 12:54:38 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17762
IP address blocks: 27.107.0.0/16 maxlen: 16
27.107.0.0/20 maxlen: 24
27.107.16.0/21 maxlen: 24
27.107.24.0/21 maxlen: 24
27.107.32.0/20 maxlen: 24
27.107.48.0/20 maxlen: 24
27.107.64.0/20 maxlen: 24
27.107.80.0/20 maxlen: 24
27.107.96.0/22 maxlen: 24
27.107.100.0/22 maxlen: 24
27.107.144.0/20 maxlen: 24
27.107.160.0/20 maxlen: 24
27.107.176.0/20 maxlen: 24
27.107.192.0/23 maxlen: 24
27.107.194.0/23 maxlen: 24
27.107.196.0/23 maxlen: 24
27.107.198.0/23 maxlen: 24
27.107.203.0/24 maxlen: 24
27.107.204.0/24 maxlen: 24
27.107.205.0/24 maxlen: 24
27.107.206.0/24 maxlen: 24
27.107.208.0/20 maxlen: 24
27.107.224.0/21 maxlen: 24
49.200.32.0/21 maxlen: 24
49.201.24.0/21 maxlen: 24
49.249.192.0/19 maxlen: 24
103.8.36.0/22 maxlen: 24
115.160.208.0/20 maxlen: 24
182.156.6.0/23 maxlen: 24
182.156.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 00:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Oct 7 12:54:38 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68e50d8e-91e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:c8:dd:9d:52:41:7f:6b:19:5e:ca:c7:9b:
af:51:1d:86:5c:1b:ef:e1:7c:73:25:be:8a:f0:cd:
47:f2:f1:4d:c1:14:9c:71:f3:ec:2e:04:10:6b:fd:
cd:e7:4f:7f:25:3a:70:99:6c:68:d5:8a:41:78:ce:
3d:6e:7a:c0:61:64:dc:49:c7:52:e3:14:67:c5:41:
fa:96:35:8d:72:22:32:7b:ad:62:53:2c:ce:88:9b:
b0:ff:9c:c9:1d:cf:e7:43:ae:6f:8a:6a:e9:ee:ab:
ea:2a:01:77:52:d8:69:0d:eb:63:48:21:fc:9a:4e:
5a:a1:c1:1b:fb:ad:e2:d6:77:94:89:c9:e7:34:3f:
e7:6b:6e:78:47:5c:7a:f2:07:f8:d5:72:39:09:7a:
62:66:1a:bf:d2:c6:7b:8c:1f:7d:9c:e5:b0:d7:85:
1f:39:a6:86:36:69:90:f7:bf:9e:21:17:ad:82:bf:
e7:aa:bb:0e:a4:6b:bb:f3:4c:56:51:d2:31:54:9f:
0d:07:36:a7:a4:cd:3e:15:e0:bc:0a:98:62:68:77:
6a:bb:3a:67:f0:18:ae:4c:22:6d:b7:12:be:1b:33:
43:7e:fa:9b:4c:cd:6f:72:79:e8:e4:73:23:11:6b:
4a:2a:cb:e5:2e:55:89:27:21:8f:f9:7f:bc:5a:3c:
e4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6E:3F:B7:C3:78:22:43:1A:B5:82:10:3D:C5:BA:8E:82:DE:F4:B4
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.107.0.0/16
49.200.32.0/21
49.201.24.0/21
49.249.192.0/19
103.8.36.0/22
115.160.208.0/20
182.156.6.0/23
182.156.20.0/23
Signature Algorithm: sha256WithRSAEncryption
52:bb:81:3a:5b:4d:78:ed:71:d4:bf:cc:9c:6c:2d:8e:a3:c2:
fc:b8:7a:3a:fe:8a:b4:bf:9a:aa:aa:07:ad:43:b4:68:af:ef:
a4:4b:82:55:12:eb:dd:ab:56:97:52:2f:e2:3c:e0:f2:70:dc:
e5:22:6e:a5:97:ca:f7:bb:69:14:3f:96:6b:4e:43:a3:5c:5c:
a4:89:97:e9:54:a0:0b:8c:3b:ab:9c:13:d8:d9:99:47:6a:72:
d7:3b:12:44:97:b7:63:82:fc:11:46:28:04:ee:53:aa:2d:85:
31:61:1c:08:2a:88:bf:50:96:e1:e3:5a:45:d0:f4:e1:c0:e4:
12:04:a3:b7:a3:3b:3b:ce:f3:1c:f4:37:ea:03:d1:85:b8:d9:
72:c9:fc:a7:a3:62:b2:40:0f:f5:87:3b:9f:3f:7e:a5:fc:06:
fa:cd:26:bc:46:31:89:4e:b5:2b:42:0b:f1:40:82:78:06:d6:
64:c6:9c:db:27:b6:4f:75:81:a1:e0:b6:84:2c:cb:8f:8e:9d:
d8:5a:4a:38:32:c4:a8:77:bf:1b:c7:a9:32:b8:4e:20:63:66:
8f:fd:0a:6d:29:83:40:1a:37:b1:50:85:26:7b:e1:52:68:c1:
82:db:0e:af:cf:1d:86:00:e6:f2:89:f6:a5:ad:62:56:f5:5c:
2d:15:2f:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:49:30 2025 by rpki-client