Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
File: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (raw, json)
Hash identifier: vOm+pbDHxKwyyNp9RqSy58tWUaVe2Myl+yG6lhh5wgQ=
Subject key identifier: C8:FB:47:4E:4A:B4:0D:66:E3:E5:20:64:89:5E:4A:6F:BF:13:BC:75
Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Certificate serial: 1761
Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:16:10 +0000
ROA not before: Wed 26 Feb 2025 17:14:44 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137403
IP address blocks: 103.107.160.0/22 maxlen: 22
103.107.160.0/23 maxlen: 23
103.107.160.0/24 maxlen: 24
103.107.161.0/24 maxlen: 24
103.107.162.0/23 maxlen: 23
103.107.162.0/24 maxlen: 24
103.107.163.0/24 maxlen: 24
2402:5840::/32 maxlen: 32
2402:5840::/48 maxlen: 48
2402:5840::/64 maxlen: 64
2402:5840:0:1::/64 maxlen: 64
2402:5840:0:2::/64 maxlen: 64
2402:5840:1::/48 maxlen: 48
2402:5840:2::/48 maxlen: 48
2402:5840:3::/48 maxlen: 48
2402:5840:4::/48 maxlen: 48
2402:5840:5::/48 maxlen: 48
2402:5840:6::/48 maxlen: 48
2402:5840:7::/48 maxlen: 48
2402:5840:8::/48 maxlen: 48
2402:5840:9::/48 maxlen: 48
2402:5840:a::/48 maxlen: 48
2402:5840:70::/48 maxlen: 48
2402:5840:71::/48 maxlen: 48
2402:5840:72::/48 maxlen: 48
2402:5840:73::/48 maxlen: 48
2402:5840:100::/48 maxlen: 48
2402:5840:2001::/48 maxlen: 48
2402:5840:2002::/48 maxlen: 48
2402:5840:2003::/48 maxlen: 48
2402:5840:2004::/48 maxlen: 48
2402:5840:5840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5985 (0x1761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Validity
Not Before: Feb 26 17:14:44 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a403da-4ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:f9:b0:17:24:ab:37:e8:12:75:50:86:46:
c2:fb:aa:5e:e0:e5:fc:86:aa:74:6e:f6:71:c4:ee:
f1:de:f2:1c:8c:f0:4c:e3:6a:36:e3:8c:5d:5f:a6:
c2:78:c6:43:c1:4f:2e:a3:46:3c:50:8a:3c:74:b2:
d3:6f:63:b7:75:95:8d:04:72:96:5a:d9:31:49:cb:
86:2f:97:e2:a3:72:fe:83:a2:24:a5:4d:9c:3f:ac:
81:77:21:74:c2:3f:61:62:83:03:ae:44:4d:de:c2:
ff:df:9c:cd:8e:ef:3b:11:6b:39:f4:40:0f:9e:79:
08:27:ce:c4:f8:0a:9e:87:be:b5:07:44:33:43:32:
3f:57:82:5b:34:c7:f8:ce:aa:0d:51:8a:8e:3b:4e:
55:e4:27:29:27:2b:bb:f8:f6:2b:fb:62:e5:50:ab:
61:08:0e:a6:ce:66:22:ae:b4:2f:3c:6d:2c:ca:97:
ff:13:a9:b1:ae:ca:83:49:5b:bf:5f:2b:f5:6b:ab:
f5:87:2d:26:cc:8c:da:6e:c4:b5:80:93:09:69:c7:
a9:71:54:5b:93:22:1d:88:35:33:7b:99:85:7f:5e:
83:d5:4b:de:2f:85:83:57:78:90:b5:b8:db:45:82:
3a:e3:bb:61:3b:0e:07:70:96:54:1a:47:bd:e9:8e:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FB:47:4E:4A:B4:0D:66:E3:E5:20:64:89:5E:4A:6F:BF:13:BC:75
X509v3 Authority Key Identifier:
keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.107.160.0/22
IPv6:
2402:5840::/32
Signature Algorithm: sha256WithRSAEncryption
13:f9:a5:3d:da:21:08:39:d6:8a:dc:a1:b7:5f:63:a9:a5:fb:
44:21:42:7e:ca:9b:e0:47:d6:1b:aa:5c:8b:9a:f3:f4:b1:ba:
b6:56:86:cc:a2:50:92:a7:7c:08:20:5c:db:14:b7:ad:82:64:
ec:61:53:02:a3:21:f1:e6:ac:c8:98:59:33:bf:c9:4a:57:bd:
94:fe:4f:06:f8:60:a7:95:01:21:0a:57:87:58:95:93:ec:8b:
ce:47:6e:c9:bd:cd:2b:95:42:37:97:72:cc:d1:58:5d:d9:f7:
6d:a3:69:d0:24:0e:d1:49:3f:70:0e:88:a4:b4:57:99:92:fa:
5a:db:b5:c8:57:29:16:9b:53:68:bc:14:95:17:af:66:d1:7c:
3c:f9:37:58:96:3a:8e:fb:b3:f5:64:18:66:cb:09:cf:5e:f9:
2b:5c:66:fd:e9:02:9d:57:15:26:a9:fa:fc:ae:ab:c8:78:6e:
b6:11:ca:9e:95:ff:18:75:7b:ac:95:cf:15:6f:eb:d3:f8:d7:
a5:74:b4:ea:fe:a1:f0:e8:b3:d2:3b:24:46:ed:cc:d0:76:47:
69:21:92:84:1e:ea:eb:e4:33:52:47:6c:38:a8:f7:29:4e:db:
c7:54:ba:b6:78:cb:7d:59:a9:68:e0:51:5f:a3:f0:b5:e5:89:
ed:42:59:7a
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICF2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD
M0MwMkVDRjQwHhcNMjUwMjI2MTcxNDQ0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDNkYS00YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArID5sBckqzfoEnVQhkbC+6pe4OX8hqp0bvZxxO7x3vIcjPBM42o244xdX6bC
eMZDwU8uo0Y8UIo8dLLTb2O3dZWNBHKWWtkxScuGL5fio3L+g6IkpU2cP6yBdyF0
wj9hYoMDrkRN3sL/35zNju87EWs59EAPnnkIJ87E+Aqeh761B0QzQzI/V4JbNMf4
zqoNUYqOO05V5CcpJyu7+PYr+2LlUKthCA6mzmYirrQvPG0sypf/E6mxrsqDSVu/
Xyv1a6v1hy0mzIzabsS1gJMJacepcVRbkyIdiDUze5mFf16D1UveL4WDV3iQtbjb
RYI647thOw4HcJZUGke96Y50bQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMj7R05K
tA1m4+UgZIleSm+/E7x1MB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB
NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzJFQzcvMjkzNDcyNkFGQTc4MTFFNzlDQjYwODdEQzRGOUFFMDIvMEQ0RjU5MDZG
QTc5MTFFN0I4NUY0RTdFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2ugMA0EAgACMAcDBQAkAlhAMA0GCSqGSIb3DQEBCwUAA4IBAQAT
+aU92iEIOdaK3KG3X2OppftEIUJ+ypvgR9YbqlyLmvP0sbq2VobMolCSp3wIIFzb
FLetgmTsYVMCoyHx5qzImFkzv8lKV72U/k8G+GCnlQEhCleHWJWT7IvOR27Jvc0r
lUI3l3LM0Vhd2fdto2nQJA7RST9wDoiktFeZkvpa27XIVykWm1NovBSVF69m0Xw8
+TdYljqO+7P1ZBhmywnPXvkrXGb96QKdVxUmqfr8rqvIeG62Ecqelf8YdXuslc8V
b+vT+NeldLTq/qHw6LPSOyRG7czQdkdpIZKEHurr5DNSR2w4qPcpTtvHVLq2eMt9
Walo4FFfo/C15YntQll6
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:42 2026 by rpki-client