Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/6996CEB84E7011EFA4A32D5CC4F9AE02.roa
File: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (raw, json)
Hash identifier: 7MyVSleZnWfkmq0xHUwH+VcMTyYARFBA5ijsZwrRfPo=
Subject key identifier: E3:FE:BA:57:27:4E:75:7A:CE:C0:A8:C4:9A:EC:D0:4E:B0:4D:9E:9C
Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial: 1CFE
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/6996CEB84E7011EFA4A32D5CC4F9AE02.roa
Signing time: Thu 13 Aug 2026 14:56:53 +0000
ROA not before: Thu 13 Aug 2026 14:56:53 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 7342
IP address blocks: 103.87.108.0/24 maxlen: 24
103.87.109.0/24 maxlen: 24
103.87.110.0/24 maxlen: 24
103.87.111.0/24 maxlen: 24
203.144.51.0/24 maxlen: 24
203.144.52.0/24 maxlen: 24
203.144.53.0/24 maxlen: 24
203.144.58.0/24 maxlen: 24
203.144.59.0/24 maxlen: 24
203.144.60.0/24 maxlen: 24
203.144.61.0/24 maxlen: 24
2402:79c0::/48 maxlen: 48
2402:79c0:1::/48 maxlen: 48
2402:79c0:3::/48 maxlen: 48
2402:79c0:100::/48 maxlen: 48
2402:79c0:100:101::7/128 maxlen: 128
2402:79c0:101::/48 maxlen: 48
2402:79c0:102::/48 maxlen: 48
2402:79c0:103::/48 maxlen: 48
2402:79c0:104::/48 maxlen: 48
2402:79c0:105::/48 maxlen: 48
2402:79c0:106::/48 maxlen: 48
2402:79c0:107::/48 maxlen: 48
2402:79c0:108::/48 maxlen: 48
2402:79c0:109::/48 maxlen: 48
2402:79c0:10a::/48 maxlen: 48
2402:79c0:10b::/48 maxlen: 48
2402:79c0:1144::/48 maxlen: 48
2402:79c0:1148::/48 maxlen: 48
2402:79c0:1178::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7422 (0x1cfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Validity
Not Before: Aug 13 14:56:53 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a7ddb35-1075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:a1:76:7a:d8:7b:a6:bb:d9:75:03:78:5a:
2f:06:7c:64:f2:91:43:bc:6f:57:e9:dd:0a:59:b7:
b4:6e:cb:c5:61:7a:12:c6:fe:7f:c3:0b:51:79:e2:
c6:8a:31:df:eb:3d:53:26:fe:20:58:91:f2:4f:8c:
16:c7:0e:72:c1:41:c5:18:91:a8:aa:cd:8b:5e:75:
ab:71:cc:86:b5:5d:a2:14:3b:fd:6e:72:ae:aa:51:
80:99:c7:80:68:32:be:ad:e5:bf:31:00:3f:dd:de:
46:17:fb:93:3b:a1:bb:04:3e:29:1a:15:59:43:66:
c8:2c:26:80:6d:d1:72:76:9d:ff:20:8a:c0:eb:1d:
ed:c8:dc:8b:71:e2:e8:63:61:6c:79:b0:a8:a8:21:
c9:17:33:92:09:80:3a:b5:c1:54:be:b2:8f:49:65:
58:bd:1f:ef:87:f3:b2:a8:b9:f1:44:b4:60:37:59:
5a:84:b1:9e:ae:a7:f2:38:3a:0e:b3:06:b8:94:36:
19:f1:10:2a:f3:c4:50:94:16:c9:be:49:2c:ee:f8:
9b:c8:f1:29:0e:04:98:7e:42:b3:30:4b:d4:19:03:
6b:df:4c:ce:e4:70:1e:8a:a4:6a:00:1e:e2:81:3c:
c0:e6:6b:04:ec:da:b5:39:d7:ee:eb:ca:6a:6d:53:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:BA:57:27:4E:75:7A:CE:C0:A8:C4:9A:EC:D0:4E:B0:4D:9E:9C
X509v3 Authority Key Identifier:
keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/6996CEB84E7011EFA4A32D5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.87.108.0/22
203.144.51.0-203.144.53.255
203.144.58.0-203.144.61.255
IPv6:
2402:79c0::/47
2402:79c0:3::/48
2402:79c0:100::-2402:79c0:10b:ffff:ffff:ffff:ffff:ffff
2402:79c0:1144::/48
2402:79c0:1148::/48
2402:79c0:1178::/48
Signature Algorithm: sha256WithRSAEncryption
73:a1:54:18:30:ff:16:a8:75:64:80:ce:9f:27:ba:7e:e0:04:
0f:65:88:0e:18:86:65:a5:39:f7:ac:72:7b:72:3e:50:48:0a:
50:7c:1a:21:db:5f:36:b8:ea:22:cd:39:b6:bd:e6:b0:97:37:
d3:c5:71:47:b5:a8:29:2f:7a:75:18:fd:b9:8d:07:f5:9a:a0:
3b:e6:50:31:85:3f:53:0d:3f:fa:43:56:ac:8e:97:50:3b:64:
08:71:e3:78:29:74:40:30:bb:b3:47:65:e8:23:16:5c:71:ba:
b9:fc:e1:49:83:96:ba:46:e5:e3:49:b2:c8:35:26:d9:27:83:
e9:33:9a:86:be:2c:47:e6:31:36:30:ad:cc:55:4e:ae:16:30:
74:28:4a:7a:dc:2c:19:ca:2e:c8:d0:d4:5d:18:40:63:1c:65:
7e:fb:63:5f:75:16:3d:f1:94:5b:aa:08:51:71:c2:f1:24:d5:
fc:18:9b:78:2c:5d:ca:16:c8:63:20:8a:77:24:03:69:0a:a3:
dd:11:c7:c6:a4:48:ca:5b:f0:60:1f:3a:4c:59:f2:b0:f6:2f:
f0:70:d2:8c:be:8e:1d:32:66:90:d7:6b:f5:b9:f9:3f:b8:7d:
9d:7f:0c:e1:65:9b:f2:bf:9e:72:6f:f3:bf:5c:40:91:14:b0:
b0:fa:b8:25
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgICHP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw
MDNFNEJCNzUwHhcNMjYwODEzMTQ1NjUzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdkZGIzNS0xMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHShdnrYe6a72XUDeFovBnxk8pFDvG9X6d0KWbe0bsvFYXoSxv5/wwtReeLG
ijHf6z1TJv4gWJHyT4wWxw5ywUHFGJGoqs2LXnWrccyGtV2iFDv9bnKuqlGAmceA
aDK+reW/MQA/3d5GF/uTO6G7BD4pGhVZQ2bILCaAbdFydp3/IIrA6x3tyNyLceLo
Y2FsebCoqCHJFzOSCYA6tcFUvrKPSWVYvR/vh/OyqLnxRLRgN1lahLGerqfyODoO
swa4lDYZ8RAq88RQlBbJvkks7vibyPEpDgSYfkKzMEvUGQNr30zO5HAeiqRqAB7i
gTzA5msE7Nq1Odfu68pqbVPqLwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFOP+ulcn
TnV6zsCoxJrs0E6wTZ6cMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE
NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1
M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEFBNzgvNjhEMzM0OTBGRDY0MTFFNkExMDk1NDgzQzRGOUFFMDIvNjk5NkNFQjg0
RTcwMTFFRkE0QTMyRDVDQzRGOUFFMDIucm9hMIGDBggrBgEFBQcBBwEB/wR0MHIw
KAQCAAEwIgMEAmdXbDAMAwQAy5AzAwQBy5A0MAwDBAHLkDoDBAHLkDwwRgQCAAIw
QAMHASQCecAAAAMHACQCecAAAzARAwYAJAJ5wAEDBwIkAnnAAQgDBwAkAnnAEUQD
BwAkAnnAEUgDBwAkAnnAEXgwDQYJKoZIhvcNAQELBQADggEBAHOhVBgw/xaodWSA
zp8nun7gBA9liA4YhmWlOfescntyPlBIClB8GiHbXza46iLNOba95rCXN9PFcUe1
qCkvenUY/bmNB/WaoDvmUDGFP1MNP/pDVqyOl1A7ZAhx43gpdEAwu7NHZegjFlxx
urn84UmDlrpG5eNJssg1Jtkng+kzmoa+LEfmMTYwrcxVTq4WMHQoSnrcLBnKLsjQ
1F0YQGMcZX77Y191Fj3xlFuqCFFxwvEk1fwYm3gsXcoWyGMginckA2kKo90Rx8ak
SMpb8GAfOkxZ8rD2L/Bw0oy+jh0yZpDXa/W5+T+4fZ1/DOFlm/K/nnJv879cQJEU
sLD6uCU=
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:01 2026 by rpki-client