Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/2DE2AC2669E311F18E29D967A047A888.roa
File: 2DE2AC2669E311F18E29D967A047A888.roa (raw, json)
Hash identifier: FXkhpuzHLKYK1MxgK0HuTpu2VmPbFJh1f+OCxLZjwRY=
Subject key identifier: 61:E2:06:94:3E:92:EE:6E:7C:73:3E:BE:A2:9E:80:8F:DA:AF:59:81
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7E5B
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/2DE2AC2669E311F18E29D967A047A888.roa
Signing time: Wed 17 Jun 2026 00:26:27 +0000
ROA not before: Wed 17 Jun 2026 00:26:27 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 3949
IP address blocks: 103.13.83.144/29 maxlen: 29
103.13.83.152/29 maxlen: 29
103.13.83.160/29 maxlen: 29
103.13.83.161/32 maxlen: 32
202.68.66.76/30 maxlen: 30
202.68.67.48/29 maxlen: 29
202.68.68.0/26 maxlen: 26
202.68.68.192/26 maxlen: 26
202.68.68.224/27 maxlen: 27
202.68.69.0/27 maxlen: 27
202.68.69.32/29 maxlen: 29
202.68.69.48/28 maxlen: 28
202.68.69.64/27 maxlen: 28
202.68.69.68/30 maxlen: 30
202.68.69.96/28 maxlen: 28
202.68.69.128/25 maxlen: 25
202.68.72.0/24 maxlen: 24
202.68.73.88/29 maxlen: 29
202.68.73.192/27 maxlen: 27
202.68.74.32/29 maxlen: 29
202.68.74.96/28 maxlen: 28
202.68.74.112/28 maxlen: 28
202.68.74.156/30 maxlen: 30
202.68.74.208/28 maxlen: 28
202.68.75.64/28 maxlen: 28
202.68.75.80/28 maxlen: 28
202.68.75.240/28 maxlen: 28
202.68.79.0/24 maxlen: 24
202.68.79.0/25 maxlen: 25
202.68.79.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32347 (0x7e5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
Validity
Not Before: Jun 17 00:26:27 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a31e9b3-665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:41:6e:a5:c8:3d:94:72:1f:5b:77:bc:77:
3b:99:fc:b9:2a:e0:ef:a3:2a:ca:57:32:c6:5e:55:
bc:0f:cb:87:44:db:42:2c:69:cb:a4:02:cc:7f:f0:
9d:7f:d0:ba:97:8b:c5:06:1c:ee:fe:33:29:51:62:
2e:fe:b8:a6:bd:db:05:31:ae:cf:2b:9d:ff:51:e6:
c3:c1:ac:8e:40:ce:67:90:9b:8b:9a:be:39:93:da:
4c:50:eb:d3:be:c4:4c:08:86:81:f2:e1:82:05:39:
36:6a:ff:0c:1c:6c:d5:7c:10:1a:9a:d7:a9:3e:b5:
d0:da:ed:29:46:2e:e1:26:6c:44:f3:32:b7:a3:45:
33:6c:2b:77:ae:bf:c1:f6:88:d1:ca:d8:c9:ce:01:
02:cb:4f:d1:f8:e9:3b:a8:df:14:c6:5c:0f:d9:6c:
a5:eb:93:7c:38:c3:ce:92:3e:7f:0a:dc:85:10:65:
05:f9:9b:d1:08:ce:b4:0f:08:d7:a8:07:13:aa:0a:
5f:e7:b8:8d:37:39:dc:ae:a9:aa:50:16:3b:f2:ad:
9b:71:b1:ec:81:57:64:b5:66:b0:a6:5f:3c:42:6b:
36:d1:ac:93:2a:a0:83:b0:be:59:2d:c6:f4:ad:de:
2e:ae:73:7e:48:25:d9:eb:02:12:b0:dd:54:f0:1f:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:06:94:3E:92:EE:6E:7C:73:3E:BE:A2:9E:80:8F:DA:AF:59:81
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/2DE2AC2669E311F18E29D967A047A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.13.83.144-103.13.83.167
202.68.66.76/30
202.68.67.48/29
202.68.68.0/26
202.68.68.192-202.68.69.39
202.68.69.48-202.68.69.111
202.68.69.128/25
202.68.72.0/24
202.68.73.88/29
202.68.73.192/27
202.68.74.32/29
202.68.74.96/27
202.68.74.156/30
202.68.74.208/28
202.68.75.64/27
202.68.75.240/28
202.68.79.0/24
Signature Algorithm: sha256WithRSAEncryption
10:6d:3b:5a:16:92:20:ad:1c:7e:b4:46:80:3e:55:05:4f:08:
cd:75:a1:05:3e:cf:f2:b2:dc:96:b4:b8:df:e6:39:f7:62:e7:
a9:95:65:3d:9b:b2:49:31:c6:0e:2c:62:f8:8c:8f:e6:de:59:
79:a0:0c:52:a5:cd:53:25:d5:82:0f:0b:6a:48:10:c7:a3:e1:
bd:5b:19:e4:a0:be:f8:c8:80:c2:a4:eb:eb:f2:04:62:e6:cd:
bd:84:61:dc:08:a1:0e:44:42:7b:ea:cb:dd:2f:af:42:05:1e:
f3:01:fa:86:d6:90:fb:a4:b9:cd:f0:bc:0e:04:e2:94:40:56:
09:d6:bf:cf:8a:d6:27:bd:7a:37:8b:09:47:9a:95:7c:0b:35:
fb:40:b5:27:96:81:4c:8f:14:14:a6:0f:96:6a:8d:c5:10:6d:
30:77:5c:5b:8e:e0:34:c8:ea:29:23:42:15:c4:c9:f7:f2:94:
70:14:e3:c6:6a:40:f7:d0:23:a1:59:fa:7c:fe:09:02:94:b2:
2e:62:2a:82:94:92:e8:a1:11:3e:79:5b:9e:fd:44:69:13:60:
5f:a2:ce:fb:97:b2:31:fa:33:41:61:ad:86:7e:7b:69:4b:59:
e5:38:85:52:aa:bc:7d:65:37:58:a7:80:dd:eb:28:b3:0e:d9:
08:ed:7c:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:01:25 2026 by rpki-client