Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7909FCC06DF211EA806B671BC4F9AE02.roa
File: 7909FCC06DF211EA806B671BC4F9AE02.roa (raw, json)
Hash identifier: MoE8Gpih6lgxSWezwl3+C76koN826O6o93C2JzoEH1Y=
Subject key identifier: 58:FC:9B:FB:99:3A:AF:60:B6:6C:AC:90:26:91:58:81:13:4A:AF:BB
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3B98
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7909FCC06DF211EA806B671BC4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:23:49 +0000
ROA not before: Thu 20 Aug 2026 16:23:49 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 23951
IP address blocks: 103.101.136.0/24 maxlen: 24
103.101.137.0/24 maxlen: 24
103.101.138.0/24 maxlen: 24
103.101.139.0/24 maxlen: 24
117.20.48.0/24 maxlen: 24
117.20.49.0/24 maxlen: 24
117.20.50.0/24 maxlen: 24
117.20.51.0/24 maxlen: 24
117.20.52.0/24 maxlen: 24
117.20.53.0/24 maxlen: 24
117.20.54.0/24 maxlen: 24
117.20.55.0/24 maxlen: 24
117.20.56.0/24 maxlen: 24
117.20.57.0/24 maxlen: 24
117.20.58.0/24 maxlen: 24
117.20.59.0/24 maxlen: 24
117.20.60.0/24 maxlen: 24
117.20.61.0/24 maxlen: 24
117.20.62.0/24 maxlen: 24
117.20.63.0/24 maxlen: 24
202.152.129.0/24 maxlen: 24
202.152.130.0/24 maxlen: 24
202.152.131.0/24 maxlen: 24
202.152.132.0/24 maxlen: 24
202.152.133.0/24 maxlen: 24
202.152.134.0/24 maxlen: 24
202.152.135.0/24 maxlen: 24
202.152.136.0/24 maxlen: 24
202.152.137.0/24 maxlen: 24
202.152.138.0/24 maxlen: 24
202.152.139.0/24 maxlen: 24
202.152.140.0/24 maxlen: 24
202.152.141.0/24 maxlen: 24
202.152.142.0/24 maxlen: 24
202.152.143.0/24 maxlen: 24
202.152.144.0/24 maxlen: 24
202.152.145.0/24 maxlen: 24
202.152.146.0/24 maxlen: 24
202.152.147.0/24 maxlen: 24
202.152.148.0/24 maxlen: 24
202.152.149.0/24 maxlen: 24
202.152.150.0/24 maxlen: 24
202.152.151.0/24 maxlen: 24
202.152.152.0/24 maxlen: 24
202.152.153.0/24 maxlen: 24
202.152.154.0/24 maxlen: 24
202.152.155.0/24 maxlen: 24
202.152.156.0/24 maxlen: 24
202.152.157.0/24 maxlen: 24
202.152.158.0/24 maxlen: 24
202.152.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15256 (0x3b98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 20 16:23:49 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a872a15-5189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:6e:b6:78:24:97:e6:08:3c:1c:2d:a2:a2:
5b:4d:95:cb:e5:a9:ca:bc:40:1e:d1:46:e4:c9:e8:
91:2b:24:2e:f8:2a:3f:76:6e:4a:23:bd:c4:25:0f:
3a:d6:ce:25:49:76:a3:84:21:c1:4c:90:cc:d6:68:
35:6d:41:31:a0:d5:50:a0:15:8b:8a:16:2f:5d:e3:
c4:a1:b6:79:80:9a:ed:00:0a:e1:8d:0a:fb:35:60:
ae:8e:4a:c6:76:46:0f:d1:7b:12:a5:36:ff:58:1d:
8d:e9:7a:44:19:fd:99:df:65:4a:a9:7d:88:43:79:
11:50:a3:e9:bc:e8:30:0c:e2:75:20:33:fd:10:0f:
d8:c8:0f:4a:4d:ea:ee:dd:40:14:15:09:1a:38:39:
48:9b:ff:ec:1b:d5:02:6d:9d:bc:73:65:b0:67:e0:
de:4a:76:b3:09:fa:07:5b:eb:cb:7c:6d:6f:8a:7e:
26:96:ed:9f:2b:d1:c7:36:d6:d8:d1:a1:8a:e9:77:
29:ce:77:d7:8f:cb:6c:e7:02:1e:ac:02:29:81:6c:
8e:3f:01:99:2d:3f:83:e8:61:00:4b:7a:81:4a:f3:
ba:9f:9f:06:f7:32:2b:9d:03:73:8d:6e:62:d2:c8:
b4:f5:46:0f:2d:4b:b7:d2:c8:99:f0:49:c1:fe:0c:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FC:9B:FB:99:3A:AF:60:B6:6C:AC:90:26:91:58:81:13:4A:AF:BB
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/7909FCC06DF211EA806B671BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.101.136.0/22
117.20.48.0/20
202.152.129.0-202.152.159.255
Signature Algorithm: sha256WithRSAEncryption
95:59:cc:4e:3e:d5:62:16:60:02:01:e7:aa:41:d1:09:b1:82:
3c:0b:ed:fc:bc:ef:57:36:92:74:9b:75:92:5b:77:91:0f:59:
d1:e6:3d:97:48:a8:a5:3f:4b:d8:c4:78:24:4a:cc:07:0a:76:
d3:df:58:97:d1:e7:30:39:3f:40:60:e9:9d:6a:08:7e:5c:36:
21:14:3d:e1:9a:ea:c8:13:80:dc:61:b0:fc:f7:f3:c0:7e:83:
0a:b9:78:db:1a:ff:85:d6:6b:63:e9:b3:98:3d:c2:73:71:9a:
22:15:7e:80:87:57:05:95:e0:69:3c:9e:6e:13:c9:52:3d:aa:
a8:5e:0d:f7:6c:04:3d:bb:da:08:79:4d:13:8c:8a:fe:56:d1:
9b:fd:41:72:55:e3:c6:a0:7b:4d:59:d0:fa:e4:36:2b:1d:c6:
f0:36:66:ed:23:c1:bc:30:36:2e:fd:bd:99:72:fd:8e:5e:df:
6e:b7:ad:e2:cd:77:ba:47:3f:c0:06:36:69:c0:77:c0:5f:eb:
ab:ef:f2:32:77:e9:53:aa:bc:b2:ad:29:cd:32:1a:9e:77:be:
b5:5f:c0:35:84:09:a1:8f:49:2d:d5:7f:ba:52:c6:48:82:b1:
37:a8:a4:d7:1e:fe:13:bc:a1:01:5d:47:e6:af:f4:09:0f:b3:
2e:c8:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:20 2026 by rpki-client