Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
File: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (raw, json)
Hash identifier: tBd/IumJTmt6lgfO1XEOgc68XMugh0pEAslIa6KWSe4=
Subject key identifier: 79:1F:1D:25:35:08:08:D3:20:4D:18:A3:D0:D5:DD:34:B7:0A:AC:08
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 08D1
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
Signing time: Thu 06 Aug 2026 07:37:00 +0000
ROA not before: Thu 06 Aug 2026 07:37:00 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 17762
IP address blocks: 27.107.0.0/16 maxlen: 16
27.107.0.0/20 maxlen: 24
27.107.16.0/21 maxlen: 24
27.107.24.0/21 maxlen: 24
27.107.32.0/20 maxlen: 24
27.107.48.0/20 maxlen: 24
27.107.64.0/20 maxlen: 24
27.107.80.0/20 maxlen: 24
27.107.96.0/22 maxlen: 24
27.107.100.0/22 maxlen: 24
27.107.104.0/21 maxlen: 24
27.107.144.0/20 maxlen: 24
27.107.160.0/20 maxlen: 24
27.107.176.0/20 maxlen: 24
27.107.192.0/23 maxlen: 24
27.107.194.0/23 maxlen: 24
27.107.196.0/23 maxlen: 24
27.107.198.0/23 maxlen: 24
27.107.203.0/24 maxlen: 24
27.107.204.0/24 maxlen: 24
27.107.205.0/24 maxlen: 24
27.107.206.0/24 maxlen: 24
27.107.207.0/24 maxlen: 24
27.107.208.0/20 maxlen: 24
27.107.224.0/21 maxlen: 24
27.107.232.0/21 maxlen: 24
27.107.240.0/22 maxlen: 24
27.107.244.0/22 maxlen: 24
27.107.248.0/22 maxlen: 24
27.107.252.0/22 maxlen: 24
49.200.32.0/21 maxlen: 24
49.200.200.0/21 maxlen: 24
49.200.208.0/21 maxlen: 24
49.200.216.0/21 maxlen: 24
49.201.24.0/21 maxlen: 24
49.249.192.0/19 maxlen: 24
103.8.36.0/22 maxlen: 24
115.160.208.0/20 maxlen: 24
182.156.6.0/23 maxlen: 24
182.156.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 21:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2257 (0x8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Aug 6 07:37:00 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a74399c-83ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:1b:a6:4f:76:8a:3b:d0:cf:7d:49:f4:3b:
44:b9:aa:8b:0e:b6:fe:9c:dd:b4:b9:4b:49:44:14:
b3:fa:de:36:89:9f:a7:cb:06:70:b5:16:60:46:63:
4b:a8:c4:6e:e6:17:d1:d0:af:06:86:02:73:9a:76:
15:b2:24:18:05:f2:8a:23:c5:b9:b2:1f:1e:51:54:
c4:98:4a:f1:88:6f:4a:20:56:28:bb:1b:78:95:fc:
4e:af:b0:38:35:1c:7e:87:aa:d0:49:1f:e4:82:a2:
2f:cc:7c:ff:6e:41:a3:bd:4f:3d:a3:94:15:7d:60:
7a:05:60:9e:6f:75:b0:4d:07:7f:e4:11:6e:aa:95:
4e:0e:e1:4d:00:74:b3:c1:0d:31:b0:30:26:ba:e3:
77:92:a0:e9:cf:bb:60:1c:ac:79:c3:d3:e3:a5:2e:
d1:51:e6:54:6c:76:b6:3e:1c:30:4e:53:ff:c4:a4:
41:53:2a:ef:86:49:12:3a:83:97:3c:1c:ef:e7:e8:
f3:db:b9:9f:e2:9a:c7:29:18:91:4b:83:5e:0d:15:
78:be:6f:d8:16:f5:e3:46:80:39:01:43:8a:c0:fc:
e8:81:fa:cb:b1:4c:88:e5:39:e1:fc:c1:f5:66:91:
af:e3:d0:28:24:02:21:0b:e8:f1:4b:0e:58:c8:d3:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1F:1D:25:35:08:08:D3:20:4D:18:A3:D0:D5:DD:34:B7:0A:AC:08
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.107.0.0/16
49.200.32.0/21
49.200.200.0-49.200.223.255
49.201.24.0/21
49.249.192.0/19
103.8.36.0/22
115.160.208.0/20
182.156.6.0/23
182.156.20.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:11:28:c5:a9:b9:6d:85:47:6e:95:0d:c9:c2:92:a1:e7:7c:
6d:8e:b7:9f:2a:42:4f:b9:17:f0:d4:a7:d5:c7:a9:95:8c:51:
5f:ba:08:dc:25:98:1d:18:63:b7:f5:ad:c0:e3:45:02:35:e2:
ff:ed:ab:52:05:20:2a:35:5e:56:34:de:23:9b:17:87:3a:d7:
c2:95:d5:45:4e:a5:41:fe:08:fd:0f:53:ee:5f:6e:a7:86:f0:
56:7b:27:b1:77:c2:a6:b3:03:85:58:45:4b:9a:62:f2:d5:34:
13:75:35:4d:c1:b5:45:91:a0:94:54:d6:21:5b:88:de:69:82:
37:04:c9:1f:40:75:87:d7:8e:7d:04:c9:9c:8c:ac:8b:dc:83:
22:af:e5:fa:d6:e1:e5:41:21:25:5a:c3:1f:f4:ce:b4:af:42:
0f:29:fb:88:97:31:14:d1:11:db:2e:74:bb:f8:95:d7:8b:9b:
14:55:cc:ff:7a:c6:35:23:cd:30:a8:28:4b:1a:78:10:85:8f:
5f:42:74:e8:d5:04:68:a4:7d:35:fe:49:4e:54:40:e5:60:8c:
3f:a8:99:53:a1:77:45:92:41:c6:8e:9d:06:2a:7f:02:89:7b:
de:d4:3e:20:da:13:ca:8e:7d:55:61:f0:22:2e:7d:9e:df:4b:
66:b3:9c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:28:43 2026 by rpki-client