Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/58AAED74E1E211ED8F1ACF4DC4F9AE02.roa
File: 58AAED74E1E211ED8F1ACF4DC4F9AE02.roa (raw, json)
Hash identifier: 5x+a+cbxcgpb98M+0xhl05QHZh3kzB/PJjAUSQXv7co=
Subject key identifier: 80:2A:03:A1:C1:2B:72:10:50:8C:0B:6E:A8:CD:E5:47:47:8D:AA:89
Certificate issuer: /CN=A9182545/serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4
Certificate serial: 05EB
Authority key identifier: 73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/58AAED74E1E211ED8F1ACF4DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:17:14 +0000
ROA not before: Mon 02 Feb 2026 23:19:22 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 141676
IP address blocks: 103.161.240.0/23 maxlen: 23
103.161.240.0/24 maxlen: 24
103.161.241.0/24 maxlen: 24
2001:df5:d680::/48 maxlen: 48
2400:78a0::/32 maxlen: 32
2400:78a0::/36 maxlen: 36
2400:78a0::/40 maxlen: 40
2400:78a0::/44 maxlen: 44
2400:78a0::/48 maxlen: 48
2400:78a0:10::/44 maxlen: 44
2400:78a0:1000::/36 maxlen: 36
2400:78a0:1000::/40 maxlen: 40
2400:78a0:1100::/40 maxlen: 40
2400:78a0:1100::/44 maxlen: 44
2400:78a0:1110::/44 maxlen: 44
2400:78a0:1110::/47 maxlen: 47
2400:78a0:1112::/47 maxlen: 47
2400:78a0:1114::/47 maxlen: 47
2400:78a0:1116::/47 maxlen: 47
2400:78a0:1118::/47 maxlen: 47
2400:78a0:111a::/47 maxlen: 47
2400:78a0:111c::/47 maxlen: 47
2400:78a0:111e::/47 maxlen: 47
2400:78a0:1120::/44 maxlen: 44
2400:78a0:1120::/47 maxlen: 47
2400:78a0:1122::/47 maxlen: 47
2400:78a0:1124::/47 maxlen: 47
2400:78a0:1126::/47 maxlen: 47
2400:78a0:1128::/47 maxlen: 47
2400:78a0:112a::/47 maxlen: 47
2400:78a0:112c::/47 maxlen: 47
2400:78a0:112e::/47 maxlen: 47
2400:78a0:1200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl
rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:55:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1515 (0x5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182545, serialNumber=7393DA9A60E010AD902051F30BDA497374F851A4
Validity
Not Before: Feb 2 23:19:22 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a44a6a-21dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:86:8f:74:5a:30:d6:4a:d1:e7:5f:08:4e:
62:d9:29:94:e1:90:2d:70:9e:c0:72:c5:cc:3f:7b:
63:2a:8a:a1:1d:2c:60:45:a5:17:1b:82:fe:cb:03:
4e:f9:19:66:bc:eb:b5:76:f4:e5:17:b2:84:97:59:
5f:73:d4:06:96:b9:3d:f2:45:32:34:8c:fd:86:87:
3b:df:52:ef:c7:2e:f6:29:a6:f8:ed:59:5f:df:96:
a1:44:06:60:47:c3:12:74:ae:f0:c8:1d:f6:c5:f0:
23:30:c1:10:fe:a2:e5:93:db:2a:e5:d0:d3:09:7e:
bf:0d:4f:4b:62:73:b2:73:1c:d5:d9:88:43:7e:2d:
e1:0c:3a:36:09:30:3d:ad:cb:df:82:35:7b:2f:b3:
59:89:2f:36:de:42:c6:57:c0:d2:b6:5f:13:f9:db:
bd:20:08:de:ba:44:a6:2a:7d:1e:a5:f4:b6:45:81:
62:ee:76:54:36:3b:a3:a7:ef:7e:ab:c5:d7:2e:7a:
69:9d:58:77:dd:2c:f6:0c:6b:cb:40:40:c9:c9:05:
0e:5e:04:87:da:40:5f:0f:a7:37:f2:10:0a:b3:b5:
1a:69:70:fa:c5:20:74:e5:79:23:12:b2:cb:f6:31:
07:b8:db:4c:9f:4f:0d:17:15:34:25:ea:72:98:77:
d8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2A:03:A1:C1:2B:72:10:50:8C:0B:6E:A8:CD:E5:47:47:8D:AA:89
X509v3 Authority Key Identifier:
keyid:73:93:DA:9A:60:E0:10:AD:90:20:51:F3:0B:DA:49:73:74:F8:51:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/c5PammDgEK2QIFHzC9pJc3T4UaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5PammDgEK2QIFHzC9pJc3T4UaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182545/B90BA192032A11EC8B4FC84FC4F9AE02/58AAED74E1E211ED8F1ACF4DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.240.0/23
IPv6:
2001:df5:d680::/48
2400:78a0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:6a:47:f0:6a:90:27:77:1b:2e:98:f9:6c:f6:be:15:4f:97:
5b:2c:38:3a:29:a1:71:be:95:5f:7e:71:12:c5:d4:e9:26:53:
16:b7:a7:6a:eb:86:09:d9:7d:c6:19:db:d0:4f:1a:ef:ee:f0:
e1:89:4f:ad:9b:5d:41:94:ad:6b:3a:45:8c:dd:e6:13:c7:58:
b3:f6:42:78:40:24:29:78:20:66:f8:af:71:62:6e:7e:1c:12:
38:2b:16:76:b6:53:11:a4:6f:63:73:37:b1:3f:c4:a5:30:d7:
07:ec:61:0f:d8:6a:99:e0:8d:72:d2:f8:56:47:70:c8:74:47:
52:2f:96:9b:f7:90:05:9c:74:58:54:8d:0d:7d:22:06:87:3d:
96:54:5e:a2:d4:68:3c:0c:99:ab:3c:22:5f:26:b0:63:9b:60:
ff:20:ae:3f:98:20:1b:c0:b9:55:5d:66:9b:85:27:66:22:21:
2a:e4:12:98:e4:8a:18:3a:a9:88:ec:a0:17:40:ce:75:74:ce:
15:56:e8:6c:84:3d:1d:b5:46:31:6d:d8:21:fc:6c:93:1e:3a:
78:fc:7f:6a:b1:d2:2c:99:86:5e:4a:a0:cc:6a:59:59:de:24:
0f:9b:2e:ff:5f:a3:03:ea:66:89:fb:f4:8a:7a:23:a5:0f:17:
92:a2:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:47 2026 by rpki-client