Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/E7B633AABB1111F1910A51D86211F970.roa
File: E7B633AABB1111F1910A51D86211F970.roa (raw, json)
Hash identifier: f3MM7jUH2mei3SwI3jPzIoq5z5L+5zWNIG3DuxRGOZw=
Subject key identifier: 60:CF:27:BC:97:14:57:BC:0F:03:80:C3:83:32:BD:D2:CD:BF:A9:98
Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial: 277C
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/E7B633AABB1111F1910A51D86211F970.roa
Signing time: Mon 28 Sep 2026 07:55:00 +0000
ROA not before: Mon 28 Sep 2026 07:55:00 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 7590
IP address blocks: 203.124.32.0/24 maxlen: 24
203.124.33.0/24 maxlen: 24
203.124.35.0/24 maxlen: 24
203.124.36.0/24 maxlen: 24
203.124.37.0/24 maxlen: 24
203.124.39.0/24 maxlen: 24
203.124.40.0/24 maxlen: 24
203.124.41.0/24 maxlen: 24
203.124.42.0/24 maxlen: 24
203.124.43.0/24 maxlen: 24
203.124.44.0/24 maxlen: 24
203.124.45.0/24 maxlen: 24
203.124.46.0/24 maxlen: 24
203.124.47.0/24 maxlen: 24
203.124.48.0/24 maxlen: 24
203.124.50.0/24 maxlen: 24
203.124.51.0/24 maxlen: 24
203.124.52.0/24 maxlen: 24
203.124.53.0/24 maxlen: 24
203.124.54.0/24 maxlen: 24
203.124.63.0/24 maxlen: 24
210.56.0.0/24 maxlen: 24
210.56.1.0/24 maxlen: 24
210.56.2.0/24 maxlen: 24
210.56.8.0/24 maxlen: 24
210.56.9.0/24 maxlen: 24
210.56.10.0/24 maxlen: 24
210.56.11.0/24 maxlen: 24
210.56.12.0/24 maxlen: 24
210.56.13.0/24 maxlen: 24
210.56.14.0/24 maxlen: 24
210.56.15.0/24 maxlen: 24
210.56.16.0/24 maxlen: 24
210.56.17.0/24 maxlen: 24
210.56.20.0/24 maxlen: 24
210.56.21.0/24 maxlen: 24
210.56.23.0/24 maxlen: 24
210.56.24.0/24 maxlen: 24
210.56.25.0/24 maxlen: 24
210.56.27.0/24 maxlen: 24
210.56.28.0/24 maxlen: 24
210.56.29.0/24 maxlen: 24
210.56.30.0/24 maxlen: 24
210.56.31.0/24 maxlen: 24
2402:1680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 15:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10108 (0x277c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Validity
Not Before: Sep 28 07:55:00 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aba1d54-0342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:51:49:f7:a9:3a:32:93:2a:39:41:b3:19:f4:
93:10:7a:d5:95:80:21:75:71:19:26:89:61:77:af:
83:a9:b5:dd:cc:66:24:02:3a:c5:2b:17:4f:6b:ac:
e2:17:9e:de:56:45:86:5f:3b:44:8b:de:b1:a6:6a:
d4:4b:19:40:6a:47:80:c8:00:d0:e2:c8:71:00:65:
18:98:83:dc:f6:8b:f0:48:a3:00:40:5f:ad:a4:82:
49:2b:bb:20:d7:d8:49:46:be:06:6f:60:cf:a5:20:
11:75:68:b5:88:f2:ce:02:63:a9:53:00:bf:e0:cf:
a0:a2:a4:b1:0a:f9:b1:4e:a2:2c:3e:55:54:b8:6c:
83:d1:88:45:f9:37:5c:11:31:c0:fb:3c:e7:c1:c5:
ff:b6:3c:8e:cd:b5:3b:5d:af:1b:0b:a6:ae:a0:e2:
bf:2d:38:42:3f:e5:b3:1d:aa:e8:ed:50:b1:89:ae:
71:ce:53:73:01:75:ea:b9:5e:25:1f:73:3e:88:96:
64:02:cc:c2:16:b2:68:70:2b:c6:db:bb:c6:76:e5:
7c:34:b6:c6:26:c0:35:be:78:c5:9f:38:b8:91:2d:
99:f2:eb:fe:49:34:c9:c9:80:f8:ba:1e:82:18:75:
ac:03:3c:d3:66:50:bc:aa:a2:d2:57:99:41:37:d9:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:27:BC:97:14:57:BC:0F:03:80:C3:83:32:BD:D2:CD:BF:A9:98
X509v3 Authority Key Identifier:
keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/E7B633AABB1111F1910A51D86211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.124.32.0/23
203.124.35.0-203.124.37.255
203.124.39.0-203.124.48.255
203.124.50.0-203.124.54.255
203.124.63.0/24
210.56.0.0-210.56.2.255
210.56.8.0-210.56.17.255
210.56.20.0/23
210.56.23.0-210.56.25.255
210.56.27.0-210.56.31.255
IPv6:
2402:1680:1::/48
Signature Algorithm: sha256WithRSAEncryption
8a:fd:88:3d:6a:22:b8:ff:a3:f8:da:92:36:86:c5:e0:92:b8:
29:7c:4f:9f:a5:dd:39:72:41:15:b1:70:0f:99:fb:61:d4:fa:
a7:06:22:fd:fc:8c:0c:b7:9e:13:b5:31:ba:df:8a:5f:e8:f9:
55:eb:bd:8b:4e:7d:e5:80:08:a7:07:2d:8a:61:eb:4b:7f:10:
09:e1:07:6f:d2:7b:05:64:80:25:53:50:c7:3c:9e:7a:fb:42:
f8:ca:e8:81:9e:5a:26:20:28:17:fb:51:18:a2:1e:a7:de:1b:
81:bd:79:a7:ee:d7:2e:3a:dd:57:8f:e4:6d:01:5d:82:ae:71:
8d:2b:df:1f:2f:f0:8b:67:71:29:49:55:8d:6b:6d:95:63:b7:
a2:34:9a:e2:fa:1f:f0:e5:76:6b:da:6e:41:b8:57:e6:69:c5:
50:db:ec:25:8b:66:f7:2d:2a:1c:8f:b1:bc:27:aa:db:de:a7:
a1:cd:ae:41:23:ac:1d:6c:99:03:7e:f3:d5:1e:64:e6:f3:fb:
43:2c:68:e6:cc:ef:97:dd:1c:80:95:37:19:db:b0:f8:74:fc:
0b:32:be:e7:8d:72:2f:3c:b8:e8:67:f6:96:d1:6c:e1:f2:3c:
3e:d7:1c:5e:2b:48:b2:18:36:5f:0b:92:29:6d:56:84:cf:80:
ce:42:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 19:46:08 2026 by rpki-client