Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/C74924EE159F11EEBCFC135CC4F9AE02.roa
File: C74924EE159F11EEBCFC135CC4F9AE02.roa (raw, json)
Hash identifier: RliNwJOrh8ohq0egdtLbM01dmRkfXxaSAwBvI0aDXvQ=
Subject key identifier: BD:8F:B9:EA:AA:C1:A6:DF:4D:25:F5:87:31:EE:58:06:C4:19:24:18
Certificate issuer: /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
Certificate serial: 0F98
Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/C74924EE159F11EEBCFC135CC4F9AE02.roa
Signing time: Sat 20 Jun 2026 18:20:58 +0000
ROA not before: Sat 20 Jun 2026 18:20:58 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 136732
IP address blocks: 103.94.216.0/22 maxlen: 22
103.94.216.0/23 maxlen: 23
103.94.216.0/24 maxlen: 24
103.94.217.0/24 maxlen: 24
103.94.218.0/23 maxlen: 23
103.94.218.0/24 maxlen: 24
103.94.219.0/24 maxlen: 24
2401:50c0::/32 maxlen: 32
2401:50c0::/48 maxlen: 48
2401:50c0:1::/48 maxlen: 48
2401:50c0:2::/48 maxlen: 48
2401:50c0:3::/48 maxlen: 48
2401:50c0:4::/48 maxlen: 48
2401:50c0:5::/48 maxlen: 48
2401:50c0:6::/48 maxlen: 48
2401:50c0:7::/48 maxlen: 48
2401:50c0:9::/48 maxlen: 48
2401:50c0:1a::/48 maxlen: 48
2401:50c0:1000::/48 maxlen: 48
2401:50c0:1001::/48 maxlen: 48
2401:50c0:1002::/48 maxlen: 48
2401:50c0:1003::/48 maxlen: 48
2401:50c0:1004::/48 maxlen: 48
2401:50c0:1005::/48 maxlen: 48
2401:50c0:1006::/48 maxlen: 48
2401:50c0:1007::/48 maxlen: 48
2401:50c0:1008::/48 maxlen: 48
2401:50c0:1009::/48 maxlen: 48
2401:50c0:100a::/48 maxlen: 48
2401:50c0:100b::/48 maxlen: 48
2401:50c0:100c::/48 maxlen: 48
2401:50c0:100d::/48 maxlen: 48
2401:50c0:100e::/48 maxlen: 48
2401:50c0:100f::/48 maxlen: 48
2401:50c0:1010::/48 maxlen: 48
2401:50c0:1011::/48 maxlen: 48
2401:50c0:1012::/48 maxlen: 48
2401:50c0:1013::/48 maxlen: 48
2401:50c0:1014::/48 maxlen: 48
2401:50c0:1015::/48 maxlen: 48
2401:50c0:1016::/48 maxlen: 48
2401:50c0:1017::/48 maxlen: 48
2401:50c0:1018::/48 maxlen: 48
2401:50c0:1019::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl
rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:41:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3992 (0xf98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D35, serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
Validity
Not Before: Jun 20 18:20:58 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a36da0a-0e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:d9:3b:24:bc:e1:39:b8:58:99:42:5f:1b:
05:2c:7d:dd:83:00:d7:46:56:72:ba:15:3e:b7:eb:
c4:2c:19:57:21:15:e3:13:19:a4:ff:a7:2b:c5:74:
05:07:33:59:3b:46:05:30:04:71:62:e7:b1:25:8a:
31:16:48:d0:c8:6a:17:06:4b:93:ff:6b:7e:07:82:
3f:3f:41:bb:6d:77:33:2a:9d:12:60:93:f3:b8:fb:
fb:35:28:42:27:a5:67:be:6e:09:c2:62:64:df:43:
67:a8:00:39:bf:a3:33:f3:5d:61:c0:fe:5b:20:44:
15:2a:d4:3c:91:e7:d1:9b:9e:29:a0:66:b7:5e:ce:
e0:90:eb:33:38:6c:9a:1b:5d:9a:f2:b9:3a:02:44:
c6:24:36:6d:ed:07:03:31:c9:70:ce:29:e3:2f:9f:
b2:79:7d:9a:5f:d1:5b:bf:74:31:cb:f5:c7:99:92:
0c:5f:b1:89:a4:24:4c:2a:8d:e2:60:4e:35:8b:6c:
05:5b:66:44:ae:ff:45:cc:c4:2a:a6:8d:ce:8e:fb:
a7:c3:c0:6f:a5:91:08:2e:2a:77:5f:a5:71:13:21:
fc:03:2d:4a:c8:f1:62:ca:d4:8e:d6:d8:05:01:c8:
00:3d:14:88:97:f5:e6:3d:00:2c:9e:d5:b7:46:c9:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8F:B9:EA:AA:C1:A6:DF:4D:25:F5:87:31:EE:58:06:C4:19:24:18
X509v3 Authority Key Identifier:
keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/C74924EE159F11EEBCFC135CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.94.216.0/22
IPv6:
2401:50c0::/32
Signature Algorithm: sha256WithRSAEncryption
31:99:75:50:43:e5:a3:31:56:48:d0:1a:0a:8c:20:d3:dc:2a:
06:46:eb:61:ff:ca:2b:e8:f4:1c:b8:76:fb:60:15:a6:d0:3f:
d3:ed:96:e7:e2:f9:39:d2:d8:f2:cf:d5:6c:21:49:e0:60:0d:
8a:4a:dd:bf:31:f9:f1:90:33:79:cb:8f:74:01:36:b9:e3:3d:
c5:f9:4a:2c:13:83:08:3c:ef:55:ee:48:80:9e:8f:c2:94:ff:
80:10:5f:0c:1e:58:c4:36:05:9b:8f:1c:e4:58:aa:86:f6:9f:
dc:60:8c:53:7b:6e:d9:25:6f:a2:60:ef:2f:52:bb:98:b2:5c:
4f:f0:0b:4c:b7:b1:a5:38:70:0f:4c:b7:bc:49:f6:a3:5b:17:
8d:7b:9b:2a:22:4f:48:5c:67:92:26:86:91:92:c1:92:6b:d6:
ab:f1:b8:f0:46:97:9d:ca:63:84:f9:28:84:11:95:81:9f:52:
84:8c:09:93:fc:0c:53:d7:59:d8:a9:e0:f7:f0:c7:ed:86:fa:
44:7d:30:3d:80:49:e7:0d:51:5b:50:21:fa:6e:68:61:17:18:
f6:b0:29:f4:e8:d5:24:3c:aa:a4:13:24:ed:f2:c4:0c:6b:9e:
95:14:2a:4b:9a:0e:b8:f0:7a:36:13:38:25:8a:3a:79:aa:0f:
db:5b:d0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:46 2026 by rpki-client