Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/BAB6F18CC98F11F1BE89D5246211F970.roa
File: BAB6F18CC98F11F1BE89D5246211F970.roa (raw, json)
Hash identifier: +5gDZUyO7W1ca+VApcEfrvU3T22UADBqHypNIqhhFrA=
Subject key identifier: 01:6D:50:43:6F:27:D2:27:EE:38:0D:DD:CB:04:8D:3D:6E:3C:A8:55
Certificate issuer: /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial: 03AB
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/BAB6F18CC98F11F1BE89D5246211F970.roa
Signing time: Fri 16 Oct 2026 18:31:32 +0000
ROA not before: Fri 16 Oct 2026 18:31:32 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138998
IP address blocks: 103.7.4.0/24 maxlen: 24
103.7.5.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939 (0x3ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914661C, serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Validity
Not Before: Oct 16 18:31:32 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6ad26d84-e12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:49:67:7c:bf:c9:b5:97:79:f1:8f:7a:84:
4a:18:26:a6:81:17:52:ee:d3:91:83:e1:ed:7b:45:
ed:06:e5:b6:17:a9:66:eb:6a:e6:63:3f:cd:ec:eb:
12:76:6b:e7:03:d4:c2:b1:cc:88:5c:77:98:dc:97:
38:77:fa:af:26:83:41:f3:7e:be:b4:fc:72:61:cf:
94:56:91:09:05:25:52:f1:39:f5:5b:b4:59:1b:a2:
cb:85:55:34:0b:21:f2:f1:9a:09:43:c3:69:57:ba:
58:6b:f6:98:c2:38:b4:7a:76:9a:61:08:11:4c:00:
91:25:74:be:45:c9:93:ab:67:9c:ad:2a:7f:ee:a9:
97:80:fe:ad:5b:3d:8c:a3:cd:ef:d9:10:6a:23:eb:
1a:b9:1d:a7:06:3f:15:d7:1e:ba:04:2e:4f:59:dc:
6d:05:b0:cb:8b:17:c7:8f:db:f8:aa:cf:d2:f9:08:
63:8e:cb:85:9a:1a:a1:a1:d7:29:bc:5f:d6:fa:81:
a2:03:da:2a:72:1a:31:af:30:be:19:db:f1:5a:13:
6c:df:94:cc:b4:48:23:b8:3c:cc:cd:ba:25:15:4a:
18:40:f5:4a:1e:56:68:ec:f2:49:f4:d9:39:9d:f6:
3a:68:87:8d:aa:fd:07:54:92:de:5d:5d:db:8e:8b:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6D:50:43:6F:27:D2:27:EE:38:0D:DD:CB:04:8D:3D:6E:3C:A8:55
X509v3 Authority Key Identifier:
keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/BAB6F18CC98F11F1BE89D5246211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.7.4.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:92:69:84:b7:fc:3e:2d:30:a1:be:72:ad:c9:26:31:3d:23:
16:8b:15:e6:67:2a:17:26:ae:81:3b:52:59:12:aa:c7:19:d6:
90:99:a6:8b:c6:c9:db:a9:e4:18:f6:5d:6c:b3:6a:fa:56:dc:
81:4f:a5:05:e6:1c:0e:d3:c3:5f:a0:7e:19:a9:e6:fe:7e:b2:
da:02:57:d7:04:c6:42:99:70:39:ed:76:f8:92:09:b0:88:ac:
68:b5:be:16:79:e4:b1:48:f0:b3:43:79:4a:06:56:97:e3:39:
ef:09:fe:44:48:99:47:a9:d5:26:45:39:e5:0a:48:d6:7b:bb:
50:b7:e2:e5:7f:45:5d:b0:e6:1e:02:3c:cf:2b:f3:f4:85:92:
8e:de:aa:00:89:1d:05:10:1a:80:74:c9:72:11:99:64:b4:0c:
77:4e:c2:cd:ae:11:66:bd:56:38:45:39:2e:af:8e:1a:12:dd:
28:0c:15:37:4c:57:24:32:08:cd:fa:6d:1c:17:ba:12:21:06:
cf:58:95:7e:86:1e:8f:48:32:89:d1:7b:d0:36:94:eb:bb:5b:
60:3d:f3:74:09:9f:9f:e7:3a:7d:b0:ae:59:26:ad:cc:b5:87:
ef:00:c4:a4:23:d2:9d:9f:c0:72:14:c6:15:5d:5f:88:61:1a:
e4:a8:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:08 2026 by rpki-client