Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/33930A2290C511F1A86DF5B63D11F970.roa
File: 33930A2290C511F1A86DF5B63D11F970.roa (raw, json)
Hash identifier: W5WRjM7yN2YAZI9GZoTzu+RbB4vd+NIEsv5YO+RYxFc=
Subject key identifier: EF:14:84:A0:BA:F9:82:A1:29:05:08:0E:53:11:2F:04:05:62:DA:7A
Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial: 050C
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/33930A2290C511F1A86DF5B63D11F970.roa
Signing time: Wed 05 Aug 2026 12:00:07 +0000
ROA not before: Wed 05 Aug 2026 12:00:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 147049
IP address blocks: 103.173.150.0/23 maxlen: 23
103.173.150.0/24 maxlen: 24
116.204.193.0/24 maxlen: 24
116.204.194.0/24 maxlen: 24
116.204.195.0/24 maxlen: 24
2407:e8c0::/48 maxlen: 48
2407:e8c0:1::/48 maxlen: 48
2407:e8c0:2::/48 maxlen: 48
2407:e8c0:3::/48 maxlen: 48
2407:e8c0:4::/48 maxlen: 48
2407:e8c0:5::/48 maxlen: 48
2407:e8c0:6::/48 maxlen: 48
2407:e8c0:7::/48 maxlen: 48
2407:e8c0:8::/48 maxlen: 48
2407:e8c0:9::/48 maxlen: 48
2407:e8c0:a::/48 maxlen: 48
2407:e8c0:b::/48 maxlen: 48
2407:e8c0:c::/48 maxlen: 48
2407:e8c0:d::/48 maxlen: 48
2407:e8c0:e::/48 maxlen: 48
2407:e8c0:f::/48 maxlen: 48
2407:e8c0:11::/48 maxlen: 48
2407:e8c0:12::/48 maxlen: 48
2407:e8c0:13::/48 maxlen: 48
2407:e8c0:1f::/48 maxlen: 48
2407:e8c0:20::/48 maxlen: 48
2407:e8c0:21::/48 maxlen: 48
2407:e8c0:22::/48 maxlen: 48
2407:e8c0:23::/48 maxlen: 48
2407:e8c0:24::/48 maxlen: 48
2407:e8c0:25::/48 maxlen: 48
2407:e8c0:26::/48 maxlen: 48
2407:e8c0:4a00::/40 maxlen: 40
2407:e8c0:4b00::/40 maxlen: 40
2407:e8c0:4c00::/40 maxlen: 40
2407:e8c0:4d00::/40 maxlen: 40
2407:e8c0:4e00::/40 maxlen: 40
2407:e8c0:4f00::/40 maxlen: 40
2407:e8c0:5000::/40 maxlen: 40
2407:e8c0:5100::/40 maxlen: 40
2407:e8c0:5200::/40 maxlen: 40
2407:e8c0:5300::/40 maxlen: 40
2407:e8c0:5400::/40 maxlen: 40
2407:e8c0:5500::/40 maxlen: 40
2407:e8c0:5600::/40 maxlen: 40
2407:e8c0:5700::/40 maxlen: 40
2407:e8c0:5800::/40 maxlen: 40
2407:e8c0:5a00::/40 maxlen: 40
2407:e8c0:5b00::/40 maxlen: 40
2407:e8c0:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 23:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Validity
Not Before: Aug 5 12:00:07 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a7325c7-c928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:72:07:b0:d8:51:57:0f:0d:57:a2:42:72:
6b:99:1a:53:b4:aa:f8:12:87:23:05:5c:2f:ce:3b:
03:8f:f5:3b:1e:38:8d:94:29:5d:1c:13:8e:97:36:
8e:18:fb:8e:72:45:6f:7f:15:a1:b6:f2:bb:3f:fb:
62:cb:33:fc:d9:39:23:73:7f:96:bf:0e:30:7e:67:
f8:e4:3e:c5:52:51:fa:88:93:5d:73:ce:f2:d9:6a:
e9:5c:77:c7:fb:13:9d:50:36:10:ce:5d:6c:72:12:
1c:4e:6c:0d:19:66:ad:ac:d8:43:e7:ac:6b:9e:4f:
05:07:98:74:8a:d4:93:9e:d8:2f:f6:7e:5c:a8:5b:
e3:33:fe:4b:e6:04:79:22:07:de:e7:f1:69:04:b6:
c6:9d:d1:9f:5c:e4:9f:7b:76:38:4d:fa:bb:23:44:
1b:17:91:a6:53:b8:b6:d2:04:1a:43:db:37:42:68:
2b:c7:8a:86:83:2d:f5:5b:a7:5a:51:53:e8:84:87:
6e:59:21:04:f3:71:c1:0b:d8:cb:7e:60:84:84:1e:
75:38:c6:58:2f:6a:48:27:a7:fe:aa:bd:51:8f:19:
7d:5c:e3:a7:fe:70:b2:62:01:55:3e:a2:17:37:dc:
79:ed:4c:d7:1d:6c:c6:8a:29:14:da:03:21:3e:7c:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:84:A0:BA:F9:82:A1:29:05:08:0E:53:11:2F:04:05:62:DA:7A
X509v3 Authority Key Identifier:
keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/33930A2290C511F1A86DF5B63D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.150.0/23
116.204.193.0-116.204.195.255
IPv6:
2407:e8c0::/44
2407:e8c0:11::-2407:e8c0:13:ffff:ffff:ffff:ffff:ffff
2407:e8c0:1f::-2407:e8c0:26:ffff:ffff:ffff:ffff:ffff
2407:e8c0:4a00::-2407:e8c0:58ff:ffff:ffff:ffff:ffff:ffff
2407:e8c0:5a00::/39
2407:e8c0:6000::/40
Signature Algorithm: sha256WithRSAEncryption
bd:60:4a:7c:1b:f1:aa:39:ea:99:02:e5:3b:7c:d1:3d:a6:89:
35:30:ef:48:d0:dc:73:40:6e:c1:af:9e:96:7e:c9:a9:20:7a:
45:70:a9:7e:f6:ca:a4:97:a5:2c:a6:1f:69:92:95:09:1c:1f:
31:0f:db:22:2f:d4:2f:d4:c7:10:ca:b3:cf:e5:66:b6:a3:6f:
ec:57:45:64:db:69:0b:9b:6a:ab:41:12:99:09:a6:d3:41:cd:
d4:d6:fc:13:34:f5:3b:50:47:05:02:39:e5:b6:01:d0:ed:68:
76:82:9b:34:d1:9a:bb:5e:90:a4:e9:4c:1b:fd:99:f7:84:b2:
a2:b6:98:78:b2:45:f2:0c:c9:ec:7d:d3:f1:63:f9:ea:39:35:
ea:2f:22:6d:d7:d4:51:04:51:bf:61:4f:44:5e:4e:9d:fe:e5:
b5:19:12:e0:4a:f9:d8:35:d8:75:4a:03:9e:96:c1:e3:05:07:
7b:d6:45:cc:5a:65:05:37:61:7b:58:34:ab:cf:6c:96:ca:6b:
47:b2:98:db:86:0a:fd:c7:f0:dd:b7:b3:56:d4:af:1d:c9:b9:
a8:dd:d6:dd:c2:4c:27:15:91:ff:e0:50:54:40:d4:50:56:3f:
3f:39:cc:04:fb:57:b2:3d:12:c6:75:f2:d0:25:1a:2f:1b:34:
fb:18:ce:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:44 2026 by rpki-client