Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
File: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (raw, json)
Hash identifier: ciQdL+R/QTv4BS979NtnhsuRMh1R4si7XZpfgBuGCJ0=
Subject key identifier: CC:2A:61:2A:09:7C:97:C1:8E:21:FE:92:22:E8:E9:C8:C0:47:B0:4E
Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Certificate serial: 0C06
Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
Signing time: Sat 11 Jul 2026 21:08:24 +0000
ROA not before: Sat 11 Jul 2026 21:08:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137703
IP address blocks: 103.113.192.0/24 maxlen: 24
103.113.193.0/24 maxlen: 24
103.113.194.0/24 maxlen: 24
103.113.195.0/24 maxlen: 24
2404:5e40::/32 maxlen: 32
2404:5e40::/33 maxlen: 33
2404:5e40::/48 maxlen: 48
2404:5e40:1::/48 maxlen: 48
2404:5e40:2::/48 maxlen: 48
2404:5e40:3::/48 maxlen: 48
2404:5e40:4::/48 maxlen: 48
2404:5e40:5::/48 maxlen: 48
2404:5e40:6::/48 maxlen: 48
2404:5e40:7::/48 maxlen: 48
2404:5e40:8::/48 maxlen: 48
2404:5e40:9::/48 maxlen: 48
2404:5e40:a::/48 maxlen: 48
2404:5e40:b::/48 maxlen: 48
2404:5e40:c::/48 maxlen: 48
2404:5e40:d::/48 maxlen: 48
2404:5e40:e::/48 maxlen: 48
2404:5e40:f::/48 maxlen: 48
2404:5e40:17::/48 maxlen: 48
2404:5e40:28::/48 maxlen: 48
2404:5e40:113::/48 maxlen: 48
2404:5e40:195::/48 maxlen: 48
2404:5e40:3e8::/48 maxlen: 48
2404:5e40:8000::/33 maxlen: 33
2404:5e40:8000::/48 maxlen: 48
2404:5e40:8001::/48 maxlen: 48
2404:5e40:8002::/48 maxlen: 48
2404:5e40:8003::/48 maxlen: 48
2404:5e40:8004::/48 maxlen: 48
2404:5e40:8005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3078 (0xc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Validity
Not Before: Jul 11 21:08:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a52b0c8-153a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:45:6c:a3:ae:bc:1c:49:a7:83:65:51:e7:
a7:d7:04:f6:ef:c3:22:cb:9e:01:86:64:e3:b6:3f:
bb:75:2a:48:a0:4a:28:57:8c:15:80:d6:b1:41:b4:
95:74:7a:07:bd:d6:4b:b5:25:7e:4a:a5:b7:3f:18:
cc:5b:a1:cf:61:5e:4f:0f:e5:91:61:e1:1d:20:71:
cc:8f:76:23:02:b5:c7:9f:fa:dd:aa:3e:b4:38:c0:
4c:17:65:6c:69:26:36:b7:cd:a5:6d:3d:5a:b8:cb:
9b:c3:68:6b:2c:1b:ef:50:8e:fc:db:a2:a6:f7:eb:
a9:f5:65:4e:40:63:a2:09:97:5a:8d:ac:50:9a:41:
e3:26:6d:2b:e4:94:4d:56:48:0a:15:7e:40:61:8a:
dc:52:0a:76:b4:ae:5e:0f:a1:41:cc:0d:6a:02:6e:
38:48:b3:9b:54:b4:bf:2e:8a:86:73:c3:90:fe:e8:
49:a4:0e:fe:ed:11:f9:47:b2:22:6c:82:8a:f0:59:
fc:43:12:00:36:9c:f7:ac:ff:e0:59:ec:f3:55:b7:
7b:ed:63:56:e1:08:9e:a3:b9:67:50:95:34:76:79:
01:3b:5f:be:24:88:6a:8a:ea:85:83:95:bd:05:80:
04:83:e8:2a:ad:ec:db:64:81:c5:fd:13:75:64:05:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2A:61:2A:09:7C:97:C1:8E:21:FE:92:22:E8:E9:C8:C0:47:B0:4E
X509v3 Authority Key Identifier:
keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.192.0/22
IPv6:
2404:5e40::/32
Signature Algorithm: sha256WithRSAEncryption
43:6d:8a:eb:06:33:e0:ca:7c:04:51:a6:23:22:3b:a9:4f:b8:
56:ce:ce:a1:c9:ce:8b:27:ac:0e:83:cf:6d:80:08:8b:b0:d5:
63:1c:42:b8:2f:6a:3d:37:83:a2:1e:ee:dc:80:7a:75:df:d9:
d3:19:99:63:f3:e8:b2:bf:05:49:ce:c6:ba:fa:19:70:fb:b6:
55:57:60:49:ef:e3:cd:cf:75:c2:b7:89:9f:53:8e:7b:cd:69:
bb:0e:6a:db:61:fc:ee:1e:ac:3d:2c:50:10:8b:fb:2c:50:fd:
67:dd:2c:a3:8e:fd:90:ce:39:1e:12:9d:9f:4a:4d:f1:50:9b:
f5:95:8c:8f:85:ed:7b:4c:7b:b8:52:31:7a:5f:e5:47:4f:91:
c7:04:d9:27:7a:74:fe:8a:74:a2:10:54:3c:0c:4c:f8:11:6f:
25:e4:0f:70:69:cc:e4:ac:17:db:be:aa:22:c1:53:54:a0:52:
88:76:55:2a:38:2f:bc:bb:f5:5d:88:1b:4f:8e:0b:ba:08:9e:
22:d8:7a:7d:83:48:c5:11:ca:0c:fd:51:fb:35:57:a2:bc:07:
37:2e:66:eb:e6:d8:aa:ff:4b:a7:1b:a4:75:cf:b4:79:b8:5f:
d6:02:82:f9:6c:e0:84:f3:bc:0d:d0:51:cf:e8:e5:8c:c7:54:
6c:cf:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:06 2026 by rpki-client