Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/D6D99A3EBE3711EDA6617C5DC4F9AE02.roa
File: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (raw, json)
Hash identifier: yEvt1EWswbQO/Y1nNlXzDVEHUkJrE0Bdp2ONLKPwkEA=
Subject key identifier: 08:30:9A:32:C9:FA:47:99:C1:83:B0:73:86:DF:16:5D:0B:80:CB:F1
Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial: 19C3
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/D6D99A3EBE3711EDA6617C5DC4F9AE02.roa
Signing time: Fri 28 Aug 2026 16:34:12 +0000
ROA not before: Fri 28 Aug 2026 16:34:12 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 9934
IP address blocks: 103.242.44.0/22 maxlen: 22
202.179.0.0/19 maxlen: 19
202.179.0.0/24 maxlen: 24
202.179.1.0/24 maxlen: 24
202.179.2.0/24 maxlen: 24
202.179.3.0/24 maxlen: 24
202.179.4.0/24 maxlen: 24
202.179.5.0/24 maxlen: 24
202.179.6.0/24 maxlen: 24
202.179.7.0/24 maxlen: 24
202.179.8.0/24 maxlen: 24
202.179.9.0/24 maxlen: 24
202.179.10.0/24 maxlen: 24
202.179.11.0/24 maxlen: 24
202.179.12.0/24 maxlen: 24
202.179.13.0/24 maxlen: 24
202.179.14.0/23 maxlen: 23
202.179.16.0/24 maxlen: 24
202.179.17.0/24 maxlen: 24
202.179.18.0/24 maxlen: 24
202.179.19.0/24 maxlen: 24
202.179.20.0/24 maxlen: 24
202.179.21.0/24 maxlen: 24
202.179.22.0/24 maxlen: 24
202.179.23.0/24 maxlen: 24
202.179.24.0/24 maxlen: 24
202.179.25.0/24 maxlen: 24
202.179.26.0/24 maxlen: 24
202.179.27.0/24 maxlen: 24
202.179.28.0/24 maxlen: 24
202.179.29.0/24 maxlen: 24
202.179.30.0/24 maxlen: 24
202.179.31.0/24 maxlen: 24
2400:7480::/32 maxlen: 32
2400:7480::/36 maxlen: 36
2400:7480:1000::/36 maxlen: 36
2400:7480:2000::/36 maxlen: 36
2400:7480:3000::/36 maxlen: 36
2400:7480:4000::/35 maxlen: 36
2400:7480:6000::/36 maxlen: 36
2400:7480:7000::/36 maxlen: 36
2400:7480:8000::/36 maxlen: 36
2400:7480:9000::/36 maxlen: 36
2400:7480:a000::/36 maxlen: 36
2400:7480:b000::/36 maxlen: 36
2400:7480:c000::/35 maxlen: 36
2400:7480:e000::/36 maxlen: 36
2400:7480:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6595 (0x19c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Validity
Not Before: Aug 28 16:34:12 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a91b884-d768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:da:5b:6c:92:68:79:5f:32:44:3a:45:2a:
92:8c:47:cc:86:f4:4c:e6:7c:c6:3f:09:6b:c2:0c:
a5:23:59:24:9d:8a:07:c9:54:0e:33:4b:5e:a5:0a:
f4:f1:fc:c6:4c:cb:d1:b0:3c:d2:7c:a2:18:32:45:
ae:62:25:44:cb:3e:0c:e4:d3:ff:7b:55:3b:23:35:
e7:d9:d8:ac:64:02:b8:cb:15:e5:91:47:b9:e5:a0:
48:62:07:5f:42:40:d2:fc:a1:ec:c6:c3:91:e3:b1:
22:52:2e:b5:d9:a7:51:ab:e3:22:6b:19:10:e6:c3:
40:26:bf:4d:ca:7a:5c:46:77:6c:b2:57:35:67:96:
28:78:70:50:0c:3e:d9:4f:6e:f0:83:85:1f:37:08:
2f:91:79:da:bf:3a:90:94:95:2c:1e:f2:c7:09:82:
11:35:31:95:85:f1:2b:02:6e:eb:54:0d:64:a8:5d:
ab:c7:87:c7:56:5f:d5:22:8d:d0:bb:a6:ca:6e:66:
31:42:56:cf:ce:ed:c0:1d:87:31:28:3e:9b:ca:b9:
17:22:5a:cf:d9:f6:8f:db:74:97:3e:4d:39:5e:c9:
6d:3e:28:7e:8a:47:c9:ca:b6:c4:61:ac:01:64:20:
cf:f0:06:28:c3:fa:e7:b3:2e:46:57:6e:6d:6f:a4:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:9A:32:C9:FA:47:99:C1:83:B0:73:86:DF:16:5D:0B:80:CB:F1
X509v3 Authority Key Identifier:
keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/D6D99A3EBE3711EDA6617C5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.242.44.0/22
202.179.0.0/19
IPv6:
2400:7480::/32
Signature Algorithm: sha256WithRSAEncryption
a3:0a:c7:20:2f:c0:4a:78:0e:f5:64:73:f8:35:0b:dc:8c:5f:
32:63:79:3f:79:7b:1c:b7:74:d8:68:3b:e6:1a:ba:3c:1e:4f:
3a:31:39:2a:66:10:35:56:63:c5:ca:d1:02:30:12:18:d7:1f:
f1:1f:09:bf:c9:c7:b1:0a:83:56:e0:6f:c3:9c:54:90:e0:6e:
f2:fa:18:5c:2e:61:a0:e9:a7:a9:f8:5d:7a:7c:12:bd:fe:0d:
a4:75:e3:28:82:db:ae:86:ca:07:46:be:f2:80:3a:06:09:5b:
26:5b:b9:b0:63:89:0f:98:07:c5:aa:79:b0:48:b8:28:71:9c:
41:07:e5:f5:93:24:46:bd:ed:36:99:0c:0c:d5:53:6b:36:15:
77:47:b2:bb:25:c2:8a:af:ef:bc:f0:40:d2:39:34:c6:3f:c5:
40:67:bd:3a:d3:77:04:7c:df:e1:95:c8:2e:c3:0e:59:d6:5d:
05:09:1e:61:de:8e:0c:e6:c0:e1:8f:32:1c:99:01:45:d3:ca:
79:25:fc:11:25:e1:88:7e:be:a8:e8:2f:b1:e1:81:c6:92:eb:
08:ce:8c:97:58:03:99:d4:6e:6d:7c:75:b8:e7:78:24:8c:9d:
e1:40:fa:a9:17:48:fe:16:d1:30:28:d1:23:69:16:22:26:2c:
98:6b:59:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:44:54 2026 by rpki-client