Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/638483FACB0911F0AF79E43DC4F9AE02.roa
File: 638483FACB0911F0AF79E43DC4F9AE02.roa (raw, json)
Hash identifier: 7S6GqTogESgTpBUNMZpPgMS9/jS5HSy2eI/QoMqfxH8=
Subject key identifier: DA:82:E0:30:7D:7F:C9:7A:21:63:0A:42:3B:E2:91:3F:44:A3:EC:44
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7E21
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/638483FACB0911F0AF79E43DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:06:47 +0000
ROA not before: Wed 26 Nov 2025 20:49:23 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 3949
IP address blocks: 103.13.83.144/29 maxlen: 29
103.13.83.152/29 maxlen: 29
103.13.83.160/29 maxlen: 29
103.13.83.161/32 maxlen: 32
202.68.66.76/30 maxlen: 30
202.68.67.48/29 maxlen: 29
202.68.68.0/26 maxlen: 26
202.68.68.96/27 maxlen: 27
202.68.68.96/28 maxlen: 28
202.68.68.112/28 maxlen: 28
202.68.68.192/26 maxlen: 26
202.68.68.224/27 maxlen: 27
202.68.69.0/27 maxlen: 27
202.68.69.32/29 maxlen: 29
202.68.69.48/28 maxlen: 28
202.68.69.64/27 maxlen: 28
202.68.69.68/30 maxlen: 30
202.68.69.96/28 maxlen: 28
202.68.69.128/25 maxlen: 25
202.68.72.0/24 maxlen: 24
202.68.73.88/29 maxlen: 29
202.68.73.192/27 maxlen: 27
202.68.74.32/29 maxlen: 29
202.68.74.96/28 maxlen: 28
202.68.74.112/28 maxlen: 28
202.68.74.156/30 maxlen: 30
202.68.74.208/28 maxlen: 28
202.68.75.64/28 maxlen: 28
202.68.75.80/28 maxlen: 28
202.68.75.240/28 maxlen: 28
202.68.79.0/24 maxlen: 24
202.68.79.0/25 maxlen: 25
202.68.79.128/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32289 (0x7e21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
Validity
Not Before: Nov 26 20:49:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48037-ea28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:cb:28:dc:e9:1b:b3:4e:59:4e:93:16:4a:
6d:00:d8:95:0a:8a:b1:af:d4:3e:c3:89:f1:95:71:
fe:fd:bc:ee:72:3e:58:87:54:41:d2:d8:d3:d0:77:
96:d6:09:9e:28:cc:2d:06:4c:df:e2:aa:9b:c4:28:
ab:7e:04:4b:05:01:52:fd:a6:7d:db:69:f0:e4:d8:
2c:25:48:5a:3c:5e:ec:59:a3:87:45:24:a3:b5:e5:
d1:6f:01:56:47:c9:e3:80:fa:60:43:89:1e:c3:03:
7d:60:2b:72:31:ab:e2:82:78:1a:85:61:9b:44:61:
59:6f:35:ff:5d:ed:ab:46:b5:57:c8:50:d2:c3:9e:
66:49:64:44:3b:9b:ed:29:2c:94:da:22:54:1d:ba:
08:4c:ad:43:a6:75:40:db:ce:d8:ae:14:a4:8a:89:
27:c3:dd:46:dd:ad:41:5f:5c:87:07:8f:4d:12:47:
66:e0:31:36:ec:b7:fd:ad:40:58:f2:a3:de:38:47:
5a:b5:6c:a4:2d:e9:42:66:b3:11:ab:d9:d0:1e:76:
67:ab:b2:fa:04:89:8b:b4:27:ae:77:f6:ee:fe:1b:
3b:39:d8:2e:ac:da:92:39:82:a7:05:60:af:06:22:
c5:77:45:ba:29:62:0a:e9:cb:72:ad:05:d3:3e:7d:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:82:E0:30:7D:7F:C9:7A:21:63:0A:42:3B:E2:91:3F:44:A3:EC:44
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/638483FACB0911F0AF79E43DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.13.83.144-103.13.83.167
202.68.66.76/30
202.68.67.48/29
202.68.68.0/26
202.68.68.96/27
202.68.68.192-202.68.69.39
202.68.69.48-202.68.69.111
202.68.69.128/25
202.68.72.0/24
202.68.73.88/29
202.68.73.192/27
202.68.74.32/29
202.68.74.96/27
202.68.74.156/30
202.68.74.208/28
202.68.75.64/27
202.68.75.240/28
202.68.79.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6d:30:96:d1:22:19:91:db:14:52:11:72:2f:e8:7a:70:45:
28:2e:3a:d9:40:c9:71:8a:38:c6:72:50:f6:b8:02:9b:b0:a7:
10:0a:19:0f:40:6e:a0:15:e2:3f:6c:40:52:ce:4d:d2:6c:f0:
40:a6:28:e6:cc:fe:fa:9a:47:25:95:09:28:47:b9:47:e5:c8:
12:31:6a:9e:92:7d:16:4a:1c:28:e9:04:2d:d4:52:96:64:2c:
75:68:0c:1b:5b:57:05:56:b4:e5:60:2c:0d:0e:c8:64:75:15:
83:ee:d2:f2:f6:a7:42:7f:f7:f5:2c:c2:b1:a7:a5:fd:af:0d:
cd:fb:1b:ee:71:32:69:16:b3:8c:53:82:9e:06:82:b5:9b:9e:
c0:2f:8a:28:41:9e:c9:ef:3d:a4:5c:1d:b8:f2:e5:67:4a:4e:
8f:ca:ee:3a:1b:91:8f:22:34:ea:bc:2a:38:7d:ac:6b:91:a6:
c0:b6:02:d8:f0:05:85:d9:f9:ae:73:ab:95:da:ff:83:1d:60:
6b:54:74:1d:ff:b0:ff:83:d8:c8:db:44:2f:25:c1:e2:55:34:
b0:18:49:d3:d8:54:de:b8:89:fd:b8:60:8c:26:22:69:e5:ed:
80:d1:9f:d0:82:13:b9:6b:d2:54:cf:f9:61:65:3d:df:fa:94:
aa:db:7a:3b
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgICfiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkwMEQxMTAvBgNVBAUTKEM2MDM3ODZENTVBOTA0MTI0RTc1OTJFRUQyODk5RUY1
Nzg5MjExMDAwHhcNMjUxMTI2MjA0OTIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODAzNy1lYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy//LKNzpG7NOWU6TFkptANiVCoqxr9Q+w4nxlXH+/bzucj5Yh1RB0tjT0HeW
1gmeKMwtBkzf4qqbxCirfgRLBQFS/aZ922nw5NgsJUhaPF7sWaOHRSSjteXRbwFW
R8njgPpgQ4kewwN9YCtyMavigngahWGbRGFZbzX/Xe2rRrVXyFDSw55mSWREO5vt
KSyU2iJUHboITK1DpnVA287YrhSkioknw91G3a1BX1yHB49NEkdm4DE27Lf9rUBY
8qPeOEdatWykLelCZrMRq9nQHnZnq7L6BImLtCeud/bu/hs7OdgurNqSOYKnBWCv
BiLFd0W6KWIK6ctyrQXTPn2uMwIDAQABo4IC9jCCAvIwHQYDVR0OBBYEFNqC4DB9
f8l6IWMKQjvikT9Eo+xEMB8GA1UdIwQYMBaAFMYDeG1VqQQSTnWS7tKJnvV4khEA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTAwRC9GQ0RDRDNBMEFD
OUQxMUU4OTJDREFEMERDNEY5QUUwMi94Z040YlZXcEJCSk9kWkx1MG9tZTlYaVNF
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hnTjRiVldwQkJKT2RaTHUwb21lOVhpU0VRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzkwMEQvRkNEQ0QzQTBBQzlEMTFFODkyQ0RBRDBEQzRGOUFFMDIvNjM4NDgzRkFD
QjA5MTFGMEFGNzlFNDNEQzRGOUFFMDIucm9hMIG0BggrBgEFBQcBBwEB/wSBpDCB
oTCBngQCAAEwgZcwDgMFBGcNU5ADBQNnDVOgAwUCykRCTAMFA8pEQzADBQbKREQA
AwUFykREYDAOAwUGykREwAMFA8pERSAwDgMFBMpERTADBQTKREVgAwUHykRFgAME
AMpESAMFA8pESVgDBQXKREnAAwUDykRKIAMFBcpESmADBQLKREqcAwUEykRK0AMF
BcpES0ADBQTKREvwAwQAykRPMA0GCSqGSIb3DQEBCwUAA4IBAQAdbTCW0SIZkdsU
UhFyL+h6cEUoLjrZQMlxijjGclD2uAKbsKcQChkPQG6gFeI/bEBSzk3SbPBApijm
zP76mkcllQkoR7lH5cgSMWqekn0WShwo6QQt1FKWZCx1aAwbW1cFVrTlYCwNDshk
dRWD7tLy9qdCf/f1LMKxp6X9rw3N+xvucTJpFrOMU4KeBoK1m57AL4ooQZ7J7z2k
XB248uVnSk6Pyu46G5GPIjTqvCo4faxrkabAtgLY8AWF2fmuc6uV2v+DHWBrVHQd
/7D/g9jI20QvJcHiVTSwGEnT2FTeuIn9uGCMJiJp5e2A0Z/QghO5a9JUz/lhZT3f
+pSq23o7
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:48 2026 by rpki-client