Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa
File: E007C458C1F111F0BF3C4B61C4F9AE02.roa (raw, json)
Hash identifier: CUmgiDbzwbQpCrmzIVG8aB3235V6JStS3CWUqJZ04yg=
Subject key identifier: 1A:91:8F:F9:08:D2:DD:D1:6C:36:01:24:1B:B9:81:FD:7C:A9:E6:5C
Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial: 1CF9
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa
Signing time: Sat 15 Aug 2026 05:56:52 +0000
ROA not before: Sat 15 Aug 2026 05:56:52 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 38713
IP address blocks: 103.25.136.0/22 maxlen: 22
103.25.136.0/24 maxlen: 24
103.25.137.0/24 maxlen: 24
103.25.138.0/24 maxlen: 24
103.25.139.0/24 maxlen: 24
103.121.40.0/22 maxlen: 22
103.121.40.0/24 maxlen: 24
103.121.41.0/24 maxlen: 24
103.121.42.0/24 maxlen: 24
103.121.43.0/24 maxlen: 24
103.205.176.0/22 maxlen: 22
103.205.176.0/24 maxlen: 24
103.205.177.0/24 maxlen: 24
103.205.178.0/24 maxlen: 24
103.205.179.0/24 maxlen: 24
116.206.140.0/24 maxlen: 24
116.206.141.0/24 maxlen: 24
116.206.142.0/24 maxlen: 24
116.206.143.0/24 maxlen: 24
160.19.20.0/22 maxlen: 22
160.19.20.0/24 maxlen: 24
160.19.21.0/24 maxlen: 24
160.19.22.0/24 maxlen: 24
160.19.23.0/24 maxlen: 24
202.143.112.0/20 maxlen: 20
202.143.112.0/24 maxlen: 24
202.143.113.0/24 maxlen: 24
202.143.114.0/24 maxlen: 24
202.143.115.0/24 maxlen: 24
202.143.116.0/24 maxlen: 24
202.143.117.0/24 maxlen: 24
202.143.118.0/24 maxlen: 24
202.143.119.0/24 maxlen: 24
202.143.120.0/24 maxlen: 24
202.143.121.0/24 maxlen: 24
202.143.122.0/24 maxlen: 24
202.143.123.0/24 maxlen: 24
202.143.124.0/24 maxlen: 24
202.143.125.0/24 maxlen: 24
202.143.126.0/24 maxlen: 24
202.143.127.0/24 maxlen: 24
2406:1300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7417 (0x1cf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Validity
Not Before: Aug 15 05:56:52 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a7fffa3-fc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:e1:72:36:2d:4a:8a:2e:c9:fd:d3:2e:55:
19:ed:c6:17:b6:f4:3a:42:39:ae:04:b3:46:d8:79:
b8:89:9c:21:6f:04:48:c5:68:ad:c7:71:44:4c:2e:
03:6c:f1:5d:5f:83:8f:95:e5:72:6a:47:57:67:dd:
ff:b5:b3:b4:65:e7:42:e5:ac:45:03:fd:f9:1b:71:
91:3e:0e:ef:39:49:40:71:0e:7e:8a:7b:f7:0a:ed:
bf:58:7c:00:70:56:fd:44:39:8d:c4:3d:6c:67:58:
4b:54:a4:be:e2:e8:9f:c1:ac:59:d1:50:92:c2:eb:
85:28:11:7f:0c:85:21:72:1f:a1:19:45:6c:d3:a7:
22:0a:44:b3:41:5a:bf:27:2a:6f:63:3d:98:99:ec:
b8:79:7c:81:63:89:02:1a:be:8c:82:ca:a7:8b:a3:
36:d2:d1:c4:9f:dc:f9:b4:13:72:4a:a1:9c:8a:06:
6a:0e:f5:be:e4:a6:08:93:48:05:b2:de:fb:bb:0b:
0c:f1:51:f3:7e:17:bd:b6:96:98:59:4f:98:6f:e7:
eb:2c:78:21:dc:e5:29:89:8b:b1:80:db:42:dd:0e:
e6:eb:a9:36:6b:6d:09:af:65:7c:84:4d:d3:89:31:
15:be:a8:e7:a4:7e:9f:b4:dd:68:3c:c1:59:6a:bd:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:91:8F:F9:08:D2:DD:D1:6C:36:01:24:1B:B9:81:FD:7C:A9:E6:5C
X509v3 Authority Key Identifier:
keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/E007C458C1F111F0BF3C4B61C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.25.136.0/22
103.121.40.0/22
103.205.176.0/22
116.206.140.0/22
160.19.20.0/22
202.143.112.0/20
IPv6:
2406:1300::/32
Signature Algorithm: sha256WithRSAEncryption
a0:b0:83:71:77:c8:23:03:ff:b8:5c:d7:ec:f2:e8:5e:17:ad:
92:0e:fe:5c:ad:a1:22:95:fa:2d:35:a5:18:a0:1a:cd:91:17:
97:b7:7f:4b:38:3a:9b:e1:3c:a0:4e:1f:29:f4:f6:61:40:dd:
b4:3d:e7:58:5b:dc:60:c9:ab:fa:0c:22:4e:bd:e4:42:66:eb:
6c:b6:6b:51:cb:a0:5e:6f:ff:be:a4:de:c1:a9:b0:6b:e5:8b:
4c:a7:d8:d5:3e:b3:a7:b5:90:08:7e:2c:d6:76:29:fa:5a:30:
e2:ef:bc:2d:d5:79:f4:c7:11:5b:ae:a2:da:91:9a:ba:56:1a:
67:19:31:50:28:b5:d3:5f:06:47:5f:aa:87:db:0f:a1:3b:e7:
0f:b6:3c:f7:99:1a:71:03:07:e8:97:46:e9:41:fe:86:ad:97:
5d:ad:93:80:06:c4:1e:b7:7e:0b:2c:54:cc:de:78:b9:5c:60:
9f:b8:51:9f:62:ef:a7:6c:fb:6f:d2:8a:2b:a6:8e:02:3d:bf:
fd:cf:49:0a:56:5d:72:39:2e:e2:ea:7f:3f:25:98:fb:91:07:
1f:3f:ec:b8:0b:cf:52:df:d7:a3:bd:3f:91:65:21:42:d2:b1:
92:77:a0:7c:fb:14:4f:c9:4d:55:cc:b0:c5:3f:87:24:ff:ca:
ae:9f:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:08 2026 by rpki-client