Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/472DDE380B2111F19BE0F4953F3D8C67.roa
File: 472DDE380B2111F19BE0F4953F3D8C67.roa (raw, json)
Hash identifier: sCTj5r8qqEXu3bvLoN64PVkesO/DVMq2io4GoK3oYbs=
Subject key identifier: 73:BB:DA:34:B0:C1:21:8F:D1:71:61:FA:D9:E3:DD:96:1A:6C:8B:B6
Certificate issuer: /CN=A917D82E/serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
Certificate serial: 13
Authority key identifier: FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/472DDE380B2111F19BE0F4953F3D8C67.roa
Signing time: Mon 02 Mar 2026 21:50:50 +0000
ROA not before: Mon 02 Mar 2026 21:50:49 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 45570
IP address blocks: 103.1.204.0/22 maxlen: 22
113.212.96.0/22 maxlen: 22
113.212.96.0/24 maxlen: 24
113.212.97.0/24 maxlen: 24
113.212.98.0/23 maxlen: 24
125.63.48.0/20 maxlen: 20
125.63.48.0/24 maxlen: 24
125.63.49.0/24 maxlen: 24
125.63.50.0/24 maxlen: 24
125.63.51.0/24 maxlen: 24
125.63.52.0/24 maxlen: 24
125.63.53.0/24 maxlen: 24
125.63.54.0/24 maxlen: 24
125.63.55.0/24 maxlen: 24
125.63.56.0/24 maxlen: 24
125.63.57.0/24 maxlen: 24
163.47.117.0/24 maxlen: 24
163.47.118.0/24 maxlen: 24
163.47.119.0/24 maxlen: 24
203.0.155.0/24 maxlen: 24
2400:c400::/32 maxlen: 32
2400:c400::/33 maxlen: 33
2400:c400:8000::/35 maxlen: 35
2400:c400:a000::/48 maxlen: 48
2400:c400:a001::/48 maxlen: 48
2400:c400:a002::/47 maxlen: 47
2400:c400:a004::/46 maxlen: 46
2400:c400:a008::/45 maxlen: 45
2400:c400:a010::/44 maxlen: 44
2400:c400:a020::/43 maxlen: 43
2400:c400:a040::/42 maxlen: 42
2400:c400:a080::/41 maxlen: 41
2400:c400:a100::/40 maxlen: 40
2400:c400:a200::/39 maxlen: 39
2400:c400:a400::/38 maxlen: 38
2400:c400:a800::/37 maxlen: 37
2400:c400:b000::/36 maxlen: 36
2400:c400:c000::/34 maxlen: 34
2400:c401::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl
rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D82E, serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
Validity
Not Before: Mar 2 21:50:49 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a60639-efcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:8b:53:82:6d:d0:62:5b:e5:48:29:85:8d:
f8:ba:59:ee:d7:fb:27:77:7b:72:5e:3d:37:2b:57:
d0:47:13:37:fe:0d:67:4c:ce:6c:b2:02:85:09:2d:
da:39:a0:3a:86:d9:4e:b0:5f:7b:ad:7f:46:59:56:
49:5c:43:89:2b:12:24:ca:c3:98:9a:e0:cf:7b:65:
a1:12:a8:74:85:26:97:9a:08:49:b1:c5:34:5e:bc:
a5:ef:a3:0e:3a:4b:cd:5b:15:94:6f:be:81:e5:a8:
88:1d:94:43:ef:87:f2:57:a9:10:e1:d4:1d:e2:65:
f0:c3:60:fb:96:9f:0e:7c:e9:c2:5b:75:73:64:c8:
a9:9f:b4:3c:08:6c:58:d1:ee:43:0c:9a:e8:7b:d6:
2b:6c:ea:07:d0:73:68:31:ef:1a:c5:95:4a:be:64:
ba:b4:08:7e:ac:a8:59:c8:bb:7b:13:26:b5:a6:7d:
35:7e:1d:b9:14:f9:17:16:62:8b:49:5c:6b:83:09:
e2:ee:13:39:10:d8:c8:af:9e:53:c1:03:be:d4:e4:
f2:50:c5:80:6d:85:64:46:0b:b5:50:a3:bc:0a:61:
97:7f:ab:f3:5f:a9:2e:83:74:32:ef:ea:d1:cf:54:
40:79:38:bb:6f:75:02:d2:e7:7b:b2:0e:37:52:d2:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BB:DA:34:B0:C1:21:8F:D1:71:61:FA:D9:E3:DD:96:1A:6C:8B:B6
X509v3 Authority Key Identifier:
keyid:FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/472DDE380B2111F19BE0F4953F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.1.204.0/22
113.212.96.0/22
125.63.48.0/20
163.47.117.0-163.47.119.255
203.0.155.0/24
IPv6:
2400:c400::/31
Signature Algorithm: sha256WithRSAEncryption
14:f5:07:7e:f8:5b:c7:e7:5f:5f:f4:5a:c4:0a:db:7b:a1:4e:
bf:76:9d:45:1c:be:c5:96:ef:7c:99:ed:d1:d5:53:2c:a5:f7:
da:06:ea:94:46:95:e9:12:ef:ba:73:a8:ee:0a:d1:08:da:99:
38:c9:8f:f9:1d:52:16:cf:3d:b7:6c:f5:88:2d:26:d3:80:f2:
f3:fa:fc:59:1e:59:47:e3:9d:af:27:21:83:fd:92:ce:ed:09:
62:b8:2d:1e:4b:2e:a6:fd:8d:f4:28:a3:87:c2:05:54:16:40:
9a:fc:0b:6a:c6:98:19:53:88:91:d4:25:2e:70:e9:7c:3a:b8:
4f:c3:71:4d:5f:ed:85:be:62:ab:b8:3b:11:74:e6:48:5d:13:
3b:a4:4d:75:09:5c:2f:67:3a:e5:ac:92:9c:15:42:f1:dd:5c:
7c:62:53:17:dc:51:8c:ab:ab:bc:95:56:2d:64:6d:46:15:df:
03:d5:8c:79:3f:a8:ba:29:58:0a:73:80:c3:47:ea:ad:b1:6c:
c3:63:7a:f5:9a:f5:74:14:27:39:f7:27:46:3c:23:d1:4c:cb:
aa:ef:d5:1b:af:41:82:c0:b5:68:4b:8a:5c:73:af:46:20:65:
70:a4:3c:50:42:1e:2a:10:da:31:76:07:75:44:53:94:eb:0e:
8c:75:96:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:23:32 2026 by rpki-client