Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
File: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (raw, json)
Hash identifier: uK14L6szXso9y/ayZJafpdIZkYO3iKXSZfPpTPuyD+c=
Subject key identifier: 91:BD:20:1D:32:28:7C:9A:A5:5B:95:63:E4:AD:12:E4:32:C7:69:3A
Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Certificate serial: 17DF
Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
Signing time: Sat 26 Sep 2026 07:34:19 +0000
ROA not before: Sat 26 Sep 2026 07:34:19 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137403
IP address blocks: 103.107.160.0/22 maxlen: 22
103.107.160.0/23 maxlen: 23
103.107.160.0/24 maxlen: 24
103.107.161.0/24 maxlen: 24
103.107.162.0/23 maxlen: 23
103.107.162.0/24 maxlen: 24
103.107.163.0/24 maxlen: 24
2402:5840::/32 maxlen: 32
2402:5840::/40 maxlen: 40
2402:5840::/48 maxlen: 48
2402:5840::/64 maxlen: 64
2402:5840:0:1::/64 maxlen: 64
2402:5840:0:2::/64 maxlen: 64
2402:5840:1::/48 maxlen: 48
2402:5840:2::/48 maxlen: 48
2402:5840:3::/48 maxlen: 48
2402:5840:4::/48 maxlen: 48
2402:5840:5::/48 maxlen: 48
2402:5840:6::/48 maxlen: 48
2402:5840:7::/48 maxlen: 48
2402:5840:8::/48 maxlen: 48
2402:5840:9::/48 maxlen: 48
2402:5840:a::/48 maxlen: 48
2402:5840:b::/48 maxlen: 48
2402:5840:c::/48 maxlen: 48
2402:5840:d::/48 maxlen: 48
2402:5840:e::/48 maxlen: 48
2402:5840:f::/48 maxlen: 48
2402:5840:10::/48 maxlen: 48
2402:5840:11::/48 maxlen: 48
2402:5840:12::/48 maxlen: 48
2402:5840:13::/48 maxlen: 48
2402:5840:14::/48 maxlen: 48
2402:5840:15::/48 maxlen: 48
2402:5840:16::/48 maxlen: 48
2402:5840:17::/48 maxlen: 48
2402:5840:18::/48 maxlen: 48
2402:5840:19::/48 maxlen: 48
2402:5840:20::/48 maxlen: 48
2402:5840:21::/48 maxlen: 48
2402:5840:22::/48 maxlen: 48
2402:5840:23::/48 maxlen: 48
2402:5840:24::/48 maxlen: 48
2402:5840:25::/48 maxlen: 48
2402:5840:26::/48 maxlen: 48
2402:5840:27::/48 maxlen: 48
2402:5840:28::/48 maxlen: 48
2402:5840:29::/48 maxlen: 48
2402:5840:30::/48 maxlen: 48
2402:5840:31::/48 maxlen: 48
2402:5840:32::/48 maxlen: 48
2402:5840:33::/48 maxlen: 48
2402:5840:34::/48 maxlen: 48
2402:5840:45::/48 maxlen: 48
2402:5840:46::/48 maxlen: 48
2402:5840:47::/48 maxlen: 48
2402:5840:48::/48 maxlen: 48
2402:5840:49::/48 maxlen: 48
2402:5840:50::/48 maxlen: 48
2402:5840:51::/48 maxlen: 48
2402:5840:52::/48 maxlen: 48
2402:5840:53::/48 maxlen: 48
2402:5840:54::/48 maxlen: 48
2402:5840:70::/48 maxlen: 48
2402:5840:71::/48 maxlen: 48
2402:5840:72::/48 maxlen: 48
2402:5840:73::/48 maxlen: 48
2402:5840:100::/48 maxlen: 48
2402:5840:2001::/48 maxlen: 48
2402:5840:2002::/48 maxlen: 48
2402:5840:2003::/48 maxlen: 48
2402:5840:2004::/48 maxlen: 48
2402:5840:5840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 16:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6111 (0x17df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Validity
Not Before: Sep 26 07:34:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6ab7757a-0d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:9f:c7:8e:c2:e3:4c:45:47:d2:51:86:68:
ad:ba:9f:47:01:0b:12:dd:7e:e4:e1:29:05:a6:48:
43:63:09:67:1f:49:e9:10:c1:21:b4:df:6f:72:d3:
06:b5:31:3b:ef:7b:72:84:e4:b2:49:b1:bb:4f:15:
df:10:94:69:a1:da:57:f2:b4:94:24:66:1b:0a:40:
64:bd:0e:9d:d6:79:74:65:3e:d2:cb:72:b8:ed:ee:
70:b9:f3:6a:72:40:d0:b0:c8:ea:9c:d9:06:6e:47:
9e:91:f4:df:3b:3d:46:66:07:a5:5f:99:ec:bc:0f:
99:f4:2f:fb:42:5f:07:27:cb:6e:7e:be:d0:07:d5:
5c:97:2e:6a:0b:2a:c5:67:bb:29:f7:79:0b:71:36:
ea:ca:c0:a9:3d:fc:6c:09:6f:1d:86:ba:f9:ea:a1:
cc:ed:2b:44:87:db:cd:68:38:e6:1f:76:dd:59:66:
b9:ad:da:55:6d:7d:fb:0d:9e:7f:ac:a0:9e:63:0e:
a5:a3:df:40:f9:9a:af:8d:b0:4c:95:e7:48:5a:c1:
61:e5:28:1e:0b:95:cf:b3:0a:77:67:bb:6e:d7:97:
b8:d4:77:ae:6b:dd:c3:fd:c9:14:11:1e:83:59:a2:
cb:35:00:f2:ed:f4:da:73:5f:97:11:fd:84:b7:68:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BD:20:1D:32:28:7C:9A:A5:5B:95:63:E4:AD:12:E4:32:C7:69:3A
X509v3 Authority Key Identifier:
keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.107.160.0/22
IPv6:
2402:5840::/32
Signature Algorithm: sha256WithRSAEncryption
79:4f:f6:ce:1b:bd:51:db:a4:7f:77:74:9d:73:71:74:ad:26:
b0:ce:cf:65:93:3e:d1:d3:45:0c:bc:ef:e3:5a:28:d9:a1:34:
49:4a:30:98:77:f5:f5:c3:d1:3e:ab:29:72:e6:12:c0:c1:34:
dd:e7:bb:f8:9e:b9:f5:ca:3d:83:55:98:db:0b:71:2e:22:db:
b1:67:e8:ef:33:91:7f:cd:db:81:ed:28:36:0a:01:98:93:f8:
2f:2a:ec:1a:c9:48:b9:55:8f:23:f5:1b:18:8f:5a:48:52:ac:
49:62:f8:75:c6:e8:35:68:6a:66:46:73:da:7c:37:4c:b2:22:
56:da:8d:b6:aa:34:63:c5:ab:8b:55:6f:aa:0e:56:ce:66:60:
d6:27:a7:3b:c4:76:54:b6:19:25:25:bd:b9:79:f6:15:b1:0b:
6f:d0:00:9f:4e:bf:c3:26:f6:3f:29:7c:06:71:ac:c7:a1:af:
1e:9d:d9:fd:d3:17:52:ef:5e:23:21:c5:53:df:0e:7d:58:df:
38:1b:9b:d0:1c:0d:5f:7a:04:94:e4:91:16:4b:d4:c3:ab:45:
e9:a1:27:46:06:86:ce:cb:72:34:55:4c:a7:39:b7:1e:eb:17:
38:58:9d:8e:cb:38:8e:ff:5c:0e:9f:64:41:a3:d1:7a:89:36:
e2:cc:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:01 2026 by rpki-client