Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/B430443A324211EFB14FB614C4F9AE02.roa
File: B430443A324211EFB14FB614C4F9AE02.roa (raw, json)
Hash identifier: tU8gaO7d0dTIsXKu63i9l0x+lorg+dCIET8GfFai5yA=
Subject key identifier: 40:6E:60:99:3F:EE:F4:E4:8E:01:A6:21:45:D9:03:3B:7E:CE:64:E7
Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Certificate serial: 0D6F
Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/B430443A324211EFB14FB614C4F9AE02.roa
Signing time: Wed 30 Sep 2026 18:36:07 +0000
ROA not before: Wed 30 Sep 2026 18:36:07 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 134572
IP address blocks: 103.89.244.0/22 maxlen: 24
103.120.160.0/22 maxlen: 22
103.120.160.0/23 maxlen: 23
103.120.160.0/24 maxlen: 24
103.120.161.0/24 maxlen: 24
103.120.162.0/23 maxlen: 23
103.120.162.0/24 maxlen: 24
103.120.163.0/24 maxlen: 24
160.238.33.0/24 maxlen: 24
202.53.131.0/24 maxlen: 24
202.53.132.0/24 maxlen: 24
2403:59c0::/32 maxlen: 32
2403:59c0:1::/48 maxlen: 48
2403:59c0:2::/48 maxlen: 48
2403:59c0:3::/48 maxlen: 48
2403:59c0:4::/48 maxlen: 48
2403:59c0:5::/48 maxlen: 48
2403:59c0:6::/48 maxlen: 48
2403:59c0:7::/48 maxlen: 48
2403:59c0:8::/48 maxlen: 48
2403:59c0:9::/48 maxlen: 48
2403:59c0:a::/48 maxlen: 48
2403:59c0:b::/48 maxlen: 48
2403:59c0:c::/48 maxlen: 48
2403:59c0:d::/48 maxlen: 48
2403:59c0:e::/48 maxlen: 48
2403:59c0:f::/48 maxlen: 48
2403:59c0:10::/48 maxlen: 48
2403:59c0:11::/48 maxlen: 48
2403:59c0:12::/48 maxlen: 48
2403:59c0:13::/48 maxlen: 48
2403:59c0:14::/48 maxlen: 48
2403:59c0:15::/48 maxlen: 48
2403:59c0:16::/48 maxlen: 48
2403:59c0:17::/48 maxlen: 48
2403:59c0:18::/48 maxlen: 48
2403:59c0:19::/48 maxlen: 48
2403:59c0:1a::/48 maxlen: 48
2403:59c0:1b::/48 maxlen: 48
2403:59c0:1c::/48 maxlen: 48
2403:59c0:1d::/48 maxlen: 48
2403:59c0:1e::/48 maxlen: 48
2403:59c0:1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3439 (0xd6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531
Validity
Not Before: Sep 30 18:36:07 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd5697-5086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:cf:ec:35:77:fc:2b:34:c3:33:d3:89:9c:
48:d5:40:b0:92:e8:89:89:c2:e8:a6:7f:87:d3:67:
e4:f5:81:df:c6:49:a2:01:b0:dd:2c:d5:34:45:ae:
10:4b:0f:d2:0c:d3:56:6b:c3:8c:27:00:87:18:d9:
21:42:34:58:07:05:e0:b8:e7:2d:15:95:fa:8c:6d:
e1:af:a6:2c:0c:d2:79:fb:0f:1a:88:77:af:3f:a6:
53:9b:11:a0:e8:20:9a:c3:2e:30:3e:ff:21:38:a3:
c6:5d:be:51:39:cf:47:44:44:68:07:50:11:7e:bb:
fe:78:d7:74:1c:59:6e:e3:8a:3c:f6:45:f8:2a:2a:
28:36:fc:52:59:a7:4c:02:9a:cb:88:99:2f:11:9d:
d4:95:bc:7f:f4:c2:b7:1d:9f:f5:2b:38:b8:f7:1d:
9d:39:8b:7e:f4:ec:6f:80:d0:9f:c8:0a:3b:97:07:
10:d8:cf:41:a2:ff:76:1b:2e:1a:b7:90:56:1d:b9:
3b:03:a1:d5:af:8b:e7:49:11:3d:4f:a6:fd:d5:97:
16:87:a6:96:60:77:35:8b:28:39:1c:7a:00:dc:95:
d0:61:d5:29:b7:8d:c8:96:2a:55:d4:d5:53:2b:bb:
ca:a6:96:6e:54:de:21:8d:62:70:4f:39:2e:a3:f4:
55:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6E:60:99:3F:EE:F4:E4:8E:01:A6:21:45:D9:03:3B:7E:CE:64:E7
X509v3 Authority Key Identifier:
keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/B430443A324211EFB14FB614C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.89.244.0/22
103.120.160.0/22
160.238.33.0/24
202.53.131.0-202.53.132.255
IPv6:
2403:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
4a:14:cf:90:08:2d:38:d9:90:85:b7:86:d2:7c:8f:bc:e0:99:
cb:0a:f1:7a:4d:e5:fa:71:3b:bd:e8:d2:e4:30:26:2d:98:3f:
91:9c:08:e7:43:4f:f9:30:dc:db:5f:b5:59:dc:68:2d:a0:fd:
77:60:64:dd:fb:4c:e4:a2:73:d9:3b:5a:7d:d5:57:06:19:d6:
fb:6e:d4:04:02:b1:da:ff:91:69:27:62:d4:d7:08:b2:bb:88:
7c:b0:79:ab:b7:a3:5d:3e:a0:0a:b8:8e:61:bb:cf:24:4b:51:
45:99:4b:2c:f6:45:26:93:2b:75:9f:c1:bf:02:c7:cc:40:c5:
6f:2c:da:04:42:23:37:0b:bc:ee:07:71:4c:3e:c9:47:45:f1:
ea:13:28:37:f8:51:7d:be:40:31:f7:4a:e0:df:01:f0:56:96:
58:82:41:a4:db:57:4d:ae:ae:5c:2a:c2:48:7f:90:e3:3a:df:
79:1e:be:49:6f:a1:ab:30:ed:1c:c2:f9:62:1d:3d:3e:9c:5c:
15:22:7c:1a:b6:9e:62:8e:db:ce:fb:30:da:d1:2d:7f:8d:17:
cb:d1:4a:92:15:3e:53:26:b2:74:35:9b:4d:be:ea:2c:c8:cf:
fb:69:a7:50:d3:70:fb:46:12:4a:49:99:86:80:75:ca:96:7e:
67:7f:f8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:19:13 2026 by rpki-client