Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
File: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (raw, json)
Hash identifier: ohdawFztGAM0Gs09vQc5Ov4qrrZjKmoqnhXK3FzIz7U=
Subject key identifier: BF:CE:CF:41:C7:0B:A0:60:60:0F:8D:0B:DF:CD:32:FB:70:3D:9D:85
Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Certificate serial: 0BE7
Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
Signing time: Sun 31 May 2026 20:59:27 +0000
ROA not before: Sun 31 May 2026 20:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137703
IP address blocks: 103.113.192.0/24 maxlen: 24
103.113.193.0/24 maxlen: 24
103.113.194.0/24 maxlen: 24
103.113.195.0/24 maxlen: 24
2404:5e40::/48 maxlen: 48
2404:5e40:1::/48 maxlen: 48
2404:5e40:2::/48 maxlen: 48
2404:5e40:3::/48 maxlen: 48
2404:5e40:4::/48 maxlen: 48
2404:5e40:5::/48 maxlen: 48
2404:5e40:6::/48 maxlen: 48
2404:5e40:7::/48 maxlen: 48
2404:5e40:8::/48 maxlen: 48
2404:5e40:9::/48 maxlen: 48
2404:5e40:a::/48 maxlen: 48
2404:5e40:b::/48 maxlen: 48
2404:5e40:c::/48 maxlen: 48
2404:5e40:d::/48 maxlen: 48
2404:5e40:e::/48 maxlen: 48
2404:5e40:f::/48 maxlen: 48
2404:5e40:28::/48 maxlen: 48
2404:5e40:195::/48 maxlen: 48
2404:5e40:3e8::/48 maxlen: 48
2404:5e40:8000::/48 maxlen: 48
2404:5e40:8001::/48 maxlen: 48
2404:5e40:8002::/48 maxlen: 48
2404:5e40:8003::/48 maxlen: 48
2404:5e40:8004::/48 maxlen: 48
2404:5e40:8005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3047 (0xbe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Validity
Not Before: May 31 20:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a1ca12f-40f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:40:3f:60:8f:81:8d:15:cf:94:2e:aa:e3:
f2:fe:7b:98:23:2d:78:30:32:09:03:04:a4:c6:62:
19:1c:68:28:43:ef:00:a6:c2:8c:58:ce:12:84:0e:
2a:df:2a:bc:2c:c4:47:e5:04:e2:18:16:7a:95:ee:
e5:25:70:8b:97:ff:a7:69:2e:7b:7c:6f:2f:b4:66:
f7:9b:46:b4:af:76:c6:e7:67:1b:89:e9:0e:de:0c:
42:2b:de:d6:41:e8:b0:2b:0e:af:69:5c:25:d5:63:
92:ec:7f:c7:05:7b:dd:9b:6b:04:b3:00:e0:54:ed:
f6:86:0a:56:f0:6d:6f:3e:81:37:bf:35:84:7a:da:
c8:59:5c:9a:18:17:f8:28:2e:3e:3d:12:06:45:b8:
db:0c:a2:be:5d:05:42:71:c7:ba:0c:07:62:b3:f3:
f2:d7:9b:ef:f5:d2:b3:7c:e9:27:8f:6b:c7:41:50:
87:bd:d8:80:26:82:7f:cc:a9:64:98:fe:eb:52:4f:
95:86:71:2d:27:85:68:87:ef:e2:d4:5f:55:a1:52:
7c:6c:53:53:be:47:fb:c4:b4:77:06:3e:d7:0f:56:
be:2c:2f:4c:a8:a2:26:7a:8a:48:fb:a6:f0:f4:ba:
d0:88:f2:2b:73:68:c7:c1:f2:d8:8f:a9:08:57:ef:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CE:CF:41:C7:0B:A0:60:60:0F:8D:0B:DF:CD:32:FB:70:3D:9D:85
X509v3 Authority Key Identifier:
keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.192.0/22
IPv6:
2404:5e40::/44
2404:5e40:28::/48
2404:5e40:195::/48
2404:5e40:3e8::/48
2404:5e40:8000::-2404:5e40:8005:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a1:88:3b:9a:b2:60:3d:9e:f8:f2:a4:bf:02:c2:74:e4:c6:a7:
d5:9a:06:0b:98:6a:ed:9b:c8:8a:ea:48:2c:e3:ec:23:75:61:
17:fb:5a:8e:9a:bd:50:9b:66:07:33:38:f3:34:a4:78:28:70:
ec:04:b0:e0:d0:f9:79:38:f8:9c:5a:ce:b4:82:58:87:71:40:
c2:27:01:c2:7f:22:01:90:71:b9:6e:56:14:60:73:a7:d3:bb:
3e:26:03:28:e8:18:f9:26:bc:f3:d8:da:1f:a1:e6:20:57:87:
8a:37:00:2d:bd:50:61:98:34:5b:f6:4c:2e:1a:f1:04:00:da:
2b:f9:02:94:d6:32:9c:f2:b6:41:a1:0c:1f:3b:7b:6a:2c:c3:
e4:31:0a:ed:2a:d5:50:d9:2b:46:92:be:46:19:be:4f:91:fa:
0c:5e:19:74:9f:20:d7:69:8e:d6:98:70:59:22:6f:61:ee:36:
46:25:a1:93:9a:0c:2f:46:c6:1e:66:b3:f4:c9:a2:98:17:12:
bc:e0:20:cd:3c:94:b5:7b:c8:00:46:af:e9:49:5b:9e:0f:15:
89:40:93:42:06:e2:0f:6f:ac:cd:fc:0a:ad:f4:20:3f:a4:f7:
ef:65:a6:fe:de:65:44:97:ea:55:16:ae:50:dd:6f:05:5d:b4:
df:8e:ef:08
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgICC+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y3MjExMTAvBgNVBAUTKDFERDcxN0IyMjk5MzYxOTBDRUI2NjdDN0NFMUNBOUY5
QkZCNUZBQzQwHhcNMjYwNTMxMjA1OTI3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjYTEyZi00MGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzU9AP2CPgY0Vz5QuquPy/nuYIy14MDIJAwSkxmIZHGgoQ+8ApsKMWM4ShA4q
3yq8LMRH5QTiGBZ6le7lJXCLl/+naS57fG8vtGb3m0a0r3bG52cbiekO3gxCK97W
QeiwKw6vaVwl1WOS7H/HBXvdm2sEswDgVO32hgpW8G1vPoE3vzWEetrIWVyaGBf4
KC4+PRIGRbjbDKK+XQVCcce6DAdis/Py15vv9dKzfOknj2vHQVCHvdiAJoJ/zKlk
mP7rUk+VhnEtJ4Voh+/i1F9VoVJ8bFNTvkf7xLR3Bj7XD1a+LC9MqKImeopI+6bw
9LrQiPIrc2jHwfLYj6kIV+8a2QIDAQABo4ICnzCCApswHQYDVR0OBBYEFL/Oz0HH
C6BgYA+NC9/NMvtwPZ2FMB8GA1UdIwQYMBaAFB3XF7Ipk2GQzrZnx84cqfm/tfrE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjcyMS82NDQyNDM3QTUz
QUMxMUVBOUFENTRCMkZDNEY5QUUwMi9IZGNYc2ltVFlaRE90bWZIemh5cC1iLTEt
c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hkY1hzaW1UWVpET3RtZkh6aHlwLWItMS1zUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0Y3MjEvNjQ0MjQzN0E1M0FDMTFFQTlBRDU0QjJGQzRGOUFFMDIvMUFCNkIyNEE1
MDIyMTFGMEFGRjJFMzBGQzRGOUFFMDIucm9hMF4GCCsGAQUFBwEHAQH/BE8wTTAM
BAIAATAGAwQCZ3HAMD0EAgACMDcDBwQkBF5AAAADBwAkBF5AACgDBwAkBF5AAZUD
BwAkBF5AA+gwEQMGByQEXkCAAwcBJAReQIAEMA0GCSqGSIb3DQEBCwUAA4IBAQCh
iDuasmA9nvjypL8CwnTkxqfVmgYLmGrtm8iK6kgs4+wjdWEX+1qOmr1Qm2YHMzjz
NKR4KHDsBLDg0Pl5OPicWs60gliHcUDCJwHCfyIBkHG5blYUYHOn07s+JgMo6Bj5
Jrzz2NofoeYgV4eKNwAtvVBhmDRb9kwuGvEEANor+QKU1jKc8rZBoQwfO3tqLMPk
MQrtKtVQ2StGkr5GGb5PkfoMXhl0nyDXaY7WmHBZIm9h7jZGJaGTmgwvRsYeZrP0
yaKYFxK84CDNPJS1e8gARq/pSVueDxWJQJNCBuIPb6zN/Aqt9CA/pPfvZab+3mVE
l+pVFq5Q3W8FXbTfju8I
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:53:45 2026 by rpki-client