Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
File: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (raw, json)
Hash identifier: kwJXUdIWIULcdvXnSltjD9IlKYTAbUqSYuR8m6iq46w=
Subject key identifier: BF:E2:6B:CA:D1:36:28:E8:B6:4E:AA:62:BA:3C:04:64:D9:80:9E:22
Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Certificate serial: 0BAF
Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:00:04 +0000
ROA not before: Sat 04 Oct 2025 13:00:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137703
IP address blocks: 103.113.192.0/24 maxlen: 24
103.113.193.0/24 maxlen: 24
103.113.194.0/24 maxlen: 24
103.113.195.0/24 maxlen: 24
2404:5e40::/48 maxlen: 48
2404:5e40:1::/48 maxlen: 48
2404:5e40:2::/48 maxlen: 48
2404:5e40:3::/48 maxlen: 48
2404:5e40:4::/48 maxlen: 48
2404:5e40:5::/48 maxlen: 48
2404:5e40:6::/48 maxlen: 48
2404:5e40:7::/48 maxlen: 48
2404:5e40:8::/48 maxlen: 48
2404:5e40:9::/48 maxlen: 48
2404:5e40:a::/48 maxlen: 48
2404:5e40:b::/48 maxlen: 48
2404:5e40:c::/48 maxlen: 48
2404:5e40:d::/48 maxlen: 48
2404:5e40:e::/48 maxlen: 48
2404:5e40:f::/48 maxlen: 48
2404:5e40:28::/48 maxlen: 48
2404:5e40:195::/48 maxlen: 48
2404:5e40:8000::/48 maxlen: 48
2404:5e40:8001::/48 maxlen: 48
2404:5e40:8002::/48 maxlen: 48
2404:5e40:8003::/48 maxlen: 48
2404:5e40:8004::/48 maxlen: 48
2404:5e40:8005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991 (0xbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Validity
Not Before: Oct 4 13:00:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a46284-f827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:65:92:99:b6:d3:b7:e8:c5:f1:38:24:dc:
15:31:b1:9e:48:54:28:02:8c:c2:22:43:d7:5c:91:
75:95:fd:ab:2a:7d:6b:d8:57:f1:2f:83:8c:ce:c7:
52:95:b7:29:7a:b5:3d:d0:2a:ad:20:0f:66:e9:ff:
7e:8c:60:71:44:d3:e0:5b:0d:0b:2b:99:19:bc:58:
a6:25:cf:21:e9:03:89:e3:5e:ed:dd:0e:73:22:8e:
01:bb:09:f2:f0:30:17:65:a9:62:50:b7:43:1a:57:
e4:2c:2b:dc:27:4f:83:99:01:5e:7b:1d:ff:fe:8f:
96:e7:5e:d3:a8:28:eb:eb:86:3a:f9:d7:67:20:ab:
9c:7e:f4:02:8a:08:31:f8:fd:18:b1:02:8c:a4:60:
7a:54:31:33:ac:12:24:4a:da:3e:79:96:81:29:b2:
4f:08:e7:a9:28:d7:d1:9c:1c:63:88:00:d2:a6:92:
8e:54:f9:44:0a:1b:85:d7:31:39:23:07:0f:80:46:
d4:c9:86:a5:91:13:b5:da:ce:15:83:45:9b:f3:80:
3c:9e:fa:b9:5b:f7:c4:ca:d2:1c:3c:53:1b:8d:bb:
95:2f:93:fa:1b:5b:27:b2:f2:8e:05:63:d1:ee:04:
d4:bf:ef:90:a1:2d:a4:b8:e0:8b:d5:e1:f0:76:97:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E2:6B:CA:D1:36:28:E8:B6:4E:AA:62:BA:3C:04:64:D9:80:9E:22
X509v3 Authority Key Identifier:
keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.192.0/22
IPv6:
2404:5e40::/44
2404:5e40:28::/48
2404:5e40:195::/48
2404:5e40:8000::-2404:5e40:8005:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
08:56:b0:3d:e7:ee:34:22:c4:c6:94:30:5b:7c:b9:76:b1:8e:
68:87:b1:35:57:af:52:51:7e:c5:56:98:1a:e0:64:fc:bd:3d:
be:09:a5:2b:2a:ff:bd:92:11:8b:24:85:59:d8:cf:35:ed:ee:
0e:e4:53:e4:d8:d1:ca:af:98:92:47:3b:31:6d:5c:1a:85:35:
64:f3:52:90:a3:29:15:a1:4f:46:a7:be:b8:33:08:06:e6:e9:
fe:23:21:e1:43:3d:a0:9e:fe:dd:d4:c5:36:fe:1e:0f:9f:36:
10:1f:8f:fb:eb:6d:71:ec:96:94:db:74:73:69:44:6b:5b:bf:
4e:be:a4:82:a3:d1:d9:c7:4f:a4:fe:d3:2e:72:51:cc:d4:23:
4c:a7:54:83:79:8d:6f:4e:7d:a6:7f:ce:ca:f3:f7:0a:9f:3a:
c6:d9:21:83:98:7c:fb:24:a7:c5:07:1d:b1:8c:f2:ab:14:81:
a6:73:fb:ec:11:25:33:74:cb:ab:82:6c:99:c8:38:2f:c1:ac:
55:e9:ff:63:a3:34:64:54:99:65:2a:89:7f:c9:1f:74:69:11:
7d:d7:ff:7e:c3:83:7c:0d:85:7c:1c:9a:24:0c:be:c2:42:1f:
eb:fa:61:5a:a6:15:e1:9f:e5:67:93:6d:1d:d3:9e:01:9a:b4:
a1:c5:cb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:17 2026 by rpki-client