Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/2DE2AC2669E311F18E29D967A047A888.roa
File: 2DE2AC2669E311F18E29D967A047A888.roa (raw, json)
Hash identifier: y0np8i3XvwHRXGyvtfQ1quYALwf4BO+BBv/DSGvYscU=
Subject key identifier: D2:24:EE:92:34:8A:7A:CA:4B:66:D2:0E:31:98:B1:75:0B:23:30:1B
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7E8F
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/2DE2AC2669E311F18E29D967A047A888.roa
Signing time: Wed 02 Sep 2026 17:33:22 +0000
ROA not before: Wed 02 Sep 2026 17:33:22 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 3949
IP address blocks: 103.13.83.144/29 maxlen: 29
103.13.83.152/29 maxlen: 29
103.13.83.160/29 maxlen: 29
103.13.83.161/32 maxlen: 32
202.68.66.76/30 maxlen: 30
202.68.67.48/29 maxlen: 29
202.68.68.0/26 maxlen: 26
202.68.68.192/26 maxlen: 26
202.68.68.224/27 maxlen: 27
202.68.69.0/27 maxlen: 27
202.68.69.32/29 maxlen: 29
202.68.69.48/28 maxlen: 28
202.68.69.64/27 maxlen: 28
202.68.69.68/30 maxlen: 30
202.68.69.96/28 maxlen: 28
202.68.69.128/25 maxlen: 25
202.68.72.0/24 maxlen: 24
202.68.73.88/29 maxlen: 29
202.68.73.192/27 maxlen: 27
202.68.74.32/29 maxlen: 29
202.68.74.96/28 maxlen: 28
202.68.74.112/28 maxlen: 28
202.68.74.156/30 maxlen: 30
202.68.74.208/28 maxlen: 28
202.68.75.64/28 maxlen: 28
202.68.75.80/28 maxlen: 28
202.68.75.240/28 maxlen: 28
202.68.79.0/24 maxlen: 24
202.68.79.0/25 maxlen: 25
202.68.79.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32399 (0x7e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
Validity
Not Before: Sep 2 17:33:22 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a985de2-3301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:15:36:d6:d9:24:84:7e:66:96:b7:76:cc:
1e:78:4e:02:eb:59:d0:a3:83:36:f4:43:2c:08:6a:
24:43:ab:2d:a4:bc:1a:59:2d:8b:9c:7e:c4:c9:ad:
83:8c:dc:1a:59:1a:24:82:22:42:84:46:57:58:f4:
97:f2:f0:93:60:34:8a:1d:99:ce:bd:8f:7d:b5:f2:
a4:45:e3:be:87:e6:54:61:a7:af:4a:2f:b1:77:a2:
46:be:b7:26:e9:58:48:54:5e:4f:6f:81:9f:0a:e7:
17:9c:c0:36:24:cb:80:3e:8a:34:56:c3:b2:e7:11:
b5:ac:aa:18:6e:7e:86:7b:bc:9b:49:ee:93:6e:00:
f6:61:16:95:12:7e:28:17:9c:ed:ac:94:d2:22:1d:
6b:95:1c:95:5b:1a:0f:b9:80:51:9c:f9:d5:00:c5:
65:3b:e6:1e:c7:d1:82:6b:7a:70:31:6e:5e:09:93:
11:60:ae:64:3b:79:6b:99:43:f1:90:87:aa:5a:d0:
67:62:fe:0d:d3:f1:ad:36:a5:45:72:df:91:b3:8e:
5d:0d:c8:a2:d3:e3:17:68:2f:c9:22:30:04:a5:ca:
31:fa:1a:ca:d8:c7:d7:70:66:88:92:c6:8b:25:46:
7f:74:68:a1:2a:e4:99:b2:be:88:13:f6:d3:a8:cf:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:24:EE:92:34:8A:7A:CA:4B:66:D2:0E:31:98:B1:75:0B:23:30:1B
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/2DE2AC2669E311F18E29D967A047A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.13.83.144-103.13.83.167
202.68.66.76/30
202.68.67.48/29
202.68.68.0/26
202.68.68.192-202.68.69.39
202.68.69.48-202.68.69.111
202.68.69.128/25
202.68.72.0/24
202.68.73.88/29
202.68.73.192/27
202.68.74.32/29
202.68.74.96/27
202.68.74.156/30
202.68.74.208/28
202.68.75.64/27
202.68.75.240/28
202.68.79.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f4:19:1b:93:e7:8b:d4:e2:07:09:c2:4a:a9:67:71:c6:95:
a2:6c:6e:d5:8f:96:dd:4d:30:2f:83:d9:5d:02:1e:54:8e:ec:
dc:2f:30:24:0c:61:56:bd:a4:2b:e6:01:1c:1f:52:b6:da:6d:
ae:0c:8b:3b:55:57:2a:bb:ee:73:50:0a:6f:4a:c4:7f:cf:46:
bd:d8:f1:f9:c8:55:24:0c:58:4d:21:5f:91:bb:07:78:a9:89:
a1:a1:50:c9:23:ab:e9:5e:d5:e9:31:50:5d:77:62:10:07:a0:
f5:be:1e:a9:8e:38:3b:0d:3f:7a:d7:06:b3:c7:9a:8d:be:d3:
41:ee:98:9f:7b:fd:48:64:04:54:9e:43:76:a3:68:d3:27:cf:
f2:a5:29:a5:11:d2:46:72:7c:6d:9d:d9:fe:91:48:ad:b3:d9:
8e:fb:4d:26:d3:9e:00:56:9e:69:86:fc:b8:af:52:de:cd:25:
e7:b8:be:09:2d:ab:5c:35:c4:0c:c0:1f:79:40:c1:3f:65:4b:
a7:95:c4:a4:5c:dd:5b:da:61:c9:e6:4a:b0:c8:f4:1d:5f:22:
02:97:3a:c1:e9:b7:b1:fd:5e:8f:6c:b9:bc:f9:bd:e6:ad:c0:
48:20:78:19:67:15:dc:bf:ac:c8:7d:57:4d:5d:3c:0c:64:5b:
6e:e1:e2:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:03 2026 by rpki-client