Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/D67C31E8637511EA8A698E0BC4F9AE02.roa
File: D67C31E8637511EA8A698E0BC4F9AE02.roa (raw, json)
Hash identifier: y+7rThH6ahhguqPgkNdJc9BaMmCp5oh0wMi9xwHx2U8=
Subject key identifier: 69:83:5D:2B:E2:B5:42:AF:08:20:93:EF:E6:9E:A1:D3:E1:80:1D:6E
Certificate issuer: /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
Certificate serial: 0B28
Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/D67C31E8637511EA8A698E0BC4F9AE02.roa
Signing time: Sun 26 Apr 2026 19:24:23 +0000
ROA not before: Sun 26 Apr 2026 19:24:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137067
IP address blocks: 103.149.56.0/23 maxlen: 23
103.149.56.0/24 maxlen: 24
103.149.57.0/24 maxlen: 24
2405:e340::/32 maxlen: 32
2405:e340:40::/48 maxlen: 48
2405:e340:41::/48 maxlen: 48
2405:e340:42::/48 maxlen: 48
2405:e340:43::/48 maxlen: 48
2405:e340:44::/48 maxlen: 48
2405:e340:45::/48 maxlen: 48
2405:e340:46::/48 maxlen: 48
2405:e340:47::/48 maxlen: 48
2405:e340:48::/48 maxlen: 48
2405:e340:49::/48 maxlen: 48
2405:e340:4a::/48 maxlen: 48
2405:e340:4b::/48 maxlen: 48
2405:e340:4c::/48 maxlen: 48
2405:e340:4d::/48 maxlen: 48
2405:e340:4e::/48 maxlen: 48
2405:e340:4f::/48 maxlen: 48
2405:e340:50::/48 maxlen: 48
2405:e340:51::/48 maxlen: 48
2405:e340:52::/48 maxlen: 48
2405:e340:53::/48 maxlen: 48
2405:e340:54::/48 maxlen: 48
2405:e340:55::/48 maxlen: 48
2405:e340:56::/48 maxlen: 48
2405:e340:57::/48 maxlen: 48
2405:e340:58::/48 maxlen: 48
2405:e340:59::/48 maxlen: 48
2405:e340:5a::/48 maxlen: 48
2405:e340:5b::/48 maxlen: 48
2405:e340:5c::/48 maxlen: 48
2405:e340:5d::/48 maxlen: 48
2405:e340:5e::/48 maxlen: 48
2405:e340:5f::/48 maxlen: 48
2405:e340:60::/48 maxlen: 48
2405:e340:61::/48 maxlen: 48
2405:e340:62::/48 maxlen: 48
2405:e340:63::/48 maxlen: 48
2405:e340:64::/48 maxlen: 48
2405:e340:65::/48 maxlen: 48
2405:e340:66::/48 maxlen: 48
2405:e340:67::/48 maxlen: 48
2405:e340:68::/48 maxlen: 48
2405:e340:69::/48 maxlen: 48
2405:e340:6a::/48 maxlen: 48
2405:e340:6b::/48 maxlen: 48
2405:e340:6c::/48 maxlen: 48
2405:e340:6d::/48 maxlen: 48
2405:e340:6e::/48 maxlen: 48
2405:e340:6f::/48 maxlen: 48
2405:e340:70::/48 maxlen: 48
2405:e340:71::/48 maxlen: 48
2405:e340:72::/48 maxlen: 48
2405:e340:73::/48 maxlen: 48
2405:e340:74::/48 maxlen: 48
2405:e340:75::/48 maxlen: 48
2405:e340:76::/48 maxlen: 48
2405:e340:77::/48 maxlen: 48
2405:e340:78::/48 maxlen: 48
2405:e340:79::/48 maxlen: 48
2405:e340:80::/48 maxlen: 48
2405:e340:81::/48 maxlen: 48
2405:e340:82::/48 maxlen: 48
2405:e340:100::/48 maxlen: 48
2405:e340:101::/48 maxlen: 48
2405:e340:102::/48 maxlen: 48
2405:e340:103::/48 maxlen: 48
2405:e340:104::/48 maxlen: 48
2405:e340:105::/48 maxlen: 48
2405:e340:106::/48 maxlen: 48
2405:e340:107::/48 maxlen: 48
2405:e340:108::/48 maxlen: 48
2405:e340:109::/48 maxlen: 48
2405:e340:10a::/48 maxlen: 48
2405:e340:10b::/48 maxlen: 48
2405:e340:10c::/48 maxlen: 48
2405:e340:10d::/48 maxlen: 48
2405:e340:10e::/48 maxlen: 48
2405:e340:10f::/48 maxlen: 48
2405:e340:110::/48 maxlen: 48
2405:e340:111::/48 maxlen: 48
2405:e340:112::/48 maxlen: 48
2405:e340:113::/48 maxlen: 48
2405:e340:114::/48 maxlen: 48
2405:e340:115::/48 maxlen: 48
2405:e340:116::/48 maxlen: 48
2405:e340:117::/48 maxlen: 48
2405:e340:118::/48 maxlen: 48
2405:e340:119::/48 maxlen: 48
2405:e340:11a::/48 maxlen: 48
2405:e340:11b::/48 maxlen: 48
2405:e340:11c::/48 maxlen: 48
2405:e340:11d::/48 maxlen: 48
2405:e340:11e::/48 maxlen: 48
2405:e340:11f::/48 maxlen: 48
2405:e340:120::/48 maxlen: 48
2405:e340:121::/48 maxlen: 48
2405:e340:200::/48 maxlen: 48
2405:e340:201::/48 maxlen: 48
2405:e340:202::/48 maxlen: 48
2405:e340:203::/48 maxlen: 48
2405:e340:204::/48 maxlen: 48
2405:e340:205::/48 maxlen: 48
2405:e340:206::/48 maxlen: 48
2405:e340:207::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl
rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2856 (0xb28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183EB3, serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
Validity
Not Before: Apr 26 19:24:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ee6667-c696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:99:27:a0:36:f5:82:53:24:ca:07:71:05:c8:
43:18:82:69:2b:08:87:a3:61:91:8b:f1:51:85:6f:
d8:b8:b5:01:32:84:12:6d:95:fa:b3:25:83:04:47:
25:fa:1b:ed:71:9b:5c:61:fe:0d:5d:32:4c:c9:ce:
72:65:c4:26:a6:07:00:db:a8:52:c9:cc:0a:b0:f9:
5b:9a:9f:0f:ca:c4:8b:50:57:71:87:af:d2:31:56:
00:2f:2f:94:0b:d7:57:d1:16:ff:d2:6f:1b:5b:ea:
3c:ff:ec:c7:d8:fc:80:89:64:ed:45:1d:24:0b:50:
15:ca:9f:be:5a:eb:26:3a:48:78:05:50:6c:1c:41:
f8:3d:59:02:fe:b7:71:37:b2:cc:eb:7f:4e:91:be:
c3:b1:76:18:be:85:aa:49:64:98:dd:43:d0:22:01:
f5:c9:65:8c:a5:d6:36:80:b9:e9:e8:f6:2e:8e:f4:
7c:5b:9e:11:35:d0:f6:dc:d9:20:bf:52:75:53:f8:
f2:cc:a5:91:e5:b4:8b:21:57:12:3c:31:03:22:55:
70:c6:1a:fa:cd:a6:01:b2:4b:86:df:32:f2:29:24:
69:d2:73:d3:a6:43:e1:a3:15:83:19:b7:78:d2:10:
f7:e1:94:35:73:53:e0:26:fb:93:cb:7f:aa:e6:fd:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:83:5D:2B:E2:B5:42:AF:08:20:93:EF:E6:9E:A1:D3:E1:80:1D:6E
X509v3 Authority Key Identifier:
keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/D67C31E8637511EA8A698E0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.56.0/23
IPv6:
2405:e340::/32
Signature Algorithm: sha256WithRSAEncryption
81:f7:46:5a:47:f0:ea:98:f6:d3:3c:20:19:d7:f1:d2:d7:a0:
ba:cd:11:a0:29:19:36:af:8a:60:f1:10:7f:bb:37:c1:7c:94:
e5:4b:6a:6a:c8:a0:54:f8:5b:06:bc:c0:c8:9c:29:76:a8:ff:
9e:e3:72:6e:e8:1b:36:d9:11:29:a1:67:83:43:49:21:88:23:
b0:bf:06:d7:bc:fe:a8:7b:ae:29:bf:b1:85:20:87:6e:8b:c9:
f0:d8:15:b7:34:b6:f6:5f:12:ed:56:d7:e9:a6:13:c0:de:de:
05:8c:d1:fb:79:92:8c:7e:5a:2f:f4:e3:12:11:f0:c5:a3:ad:
58:8c:fa:55:71:b3:ae:13:b9:4e:1b:8f:b5:2a:c2:31:24:fc:
cc:5d:03:6a:b6:0b:fb:31:c9:36:3a:99:39:45:8c:15:62:46:
57:4c:e0:42:89:79:f8:8c:b8:b2:95:95:87:1a:11:60:78:24:
7b:c2:c2:f2:ca:b2:00:19:c4:db:4a:46:d4:b5:0f:d3:05:b3:
6f:3e:22:88:3f:ec:9f:39:c0:e8:ea:f7:33:b3:cb:5c:be:38:
38:fe:81:09:86:3d:ba:a8:ea:21:86:47:f2:9f:58:ce:fa:94:
db:0d:d6:47:20:17:6c:48:35:7c:6c:15:b8:24:c4:c8:f1:0a:
22:2e:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:52 2026 by rpki-client