Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/8AE913AED18811F08493AE11C4F9AE02.roa
File: 8AE913AED18811F08493AE11C4F9AE02.roa (raw, json)
Hash identifier: aSymJnexrg1u767E/fsEUjs4CyF2cy6zWX0QemHP05I=
Subject key identifier: AF:89:FC:1D:61:F7:D8:CE:DA:93:C2:F9:60:78:9A:99:96:EA:C2:C7
Certificate issuer: /CN=A9146B24/serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Certificate serial: 01F7
Authority key identifier: 39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/8AE913AED18811F08493AE11C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:19:54 +0000
ROA not before: Fri 05 Dec 2025 03:14:42 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 55832
IP address blocks: 27.123.216.0/22 maxlen: 22
27.123.216.0/24 maxlen: 24
27.123.217.0/24 maxlen: 24
27.123.218.0/24 maxlen: 24
27.123.219.0/24 maxlen: 24
103.4.208.0/22 maxlen: 22
103.4.208.0/24 maxlen: 24
103.4.209.0/24 maxlen: 24
103.4.210.0/24 maxlen: 24
103.4.211.0/24 maxlen: 24
120.88.176.0/20 maxlen: 20
120.88.176.0/24 maxlen: 24
120.88.177.0/24 maxlen: 24
120.88.178.0/24 maxlen: 24
120.88.179.0/24 maxlen: 24
120.88.180.0/24 maxlen: 24
120.88.181.0/24 maxlen: 24
120.88.182.0/23 maxlen: 24
120.88.184.0/24 maxlen: 24
120.88.185.0/24 maxlen: 24
120.88.186.0/24 maxlen: 24
120.88.187.0/24 maxlen: 24
120.88.188.0/24 maxlen: 24
120.88.189.0/24 maxlen: 24
120.88.190.0/24 maxlen: 24
120.88.191.0/24 maxlen: 24
2407:2a00::/32 maxlen: 32
2407:2a00::/44 maxlen: 44
2407:2a00::/48 maxlen: 48
2407:2a00:1::/48 maxlen: 48
2407:2a00:2::/48 maxlen: 48
2407:2a00:3::/48 maxlen: 48
2407:2a00:4::/48 maxlen: 48
2407:2a00:5::/48 maxlen: 48
2407:2a00:6::/48 maxlen: 48
2407:2a00:7::/48 maxlen: 48
2407:2a00:8::/48 maxlen: 48
2407:2a00:10::/44 maxlen: 44
2407:2a00:20::/44 maxlen: 44
2407:2a00:30::/44 maxlen: 44
2407:2a00:40::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B24, serialNumber=3918D80BCB702ECACF84CB7ACA880F878A14FE48
Validity
Not Before: Dec 5 03:14:42 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4591a-d9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:eb:1e:82:9a:a4:ce:48:73:24:4b:11:b2:
92:14:60:80:f2:2f:2c:f3:b7:53:5e:80:52:69:12:
d9:8f:63:25:c7:d9:e8:1d:b5:23:28:24:f0:d6:1f:
77:f4:8a:96:d7:ed:9b:4e:28:4e:a7:d5:eb:7d:59:
45:cc:67:e8:f8:e1:e4:7e:91:6d:54:05:27:85:43:
11:ee:2e:06:91:cb:8e:c9:77:10:4d:6e:2b:44:9a:
8c:6d:bc:8b:97:13:32:6f:e1:34:ff:1b:36:0d:14:
06:66:49:f5:c0:c4:56:f6:06:36:81:2d:cb:b1:f7:
55:68:8b:4e:91:61:f7:7a:1f:a6:a1:bf:7f:6f:c5:
94:2d:a3:e9:35:ab:38:2b:59:6a:c2:97:db:8d:be:
9d:9b:c5:d3:e0:ee:7d:9f:e0:c4:13:6a:85:2f:7d:
a5:bf:f9:0c:fd:08:f1:ef:a5:5d:42:e9:bf:b0:c5:
49:ad:1c:2a:07:60:60:98:18:a2:f1:12:b8:93:ae:
57:a8:45:c6:1b:a7:a3:c7:49:80:d6:8b:68:14:b3:
1e:6a:28:e2:1f:97:6c:c9:6e:65:6e:5d:b7:9d:3b:
d9:65:29:c3:45:fa:9e:82:43:d7:eb:9e:a5:cf:6c:
bd:89:8f:e9:aa:2c:70:06:c8:06:f5:d5:b9:5a:d2:
00:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:89:FC:1D:61:F7:D8:CE:DA:93:C2:F9:60:78:9A:99:96:EA:C2:C7
X509v3 Authority Key Identifier:
keyid:39:18:D8:0B:CB:70:2E:CA:CF:84:CB:7A:CA:88:0F:87:8A:14:FE:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/ORjYC8twLsrPhMt6yogPh4oU_kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORjYC8twLsrPhMt6yogPh4oU_kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B24/B473C4BE933011EE82308059C4F9AE02/8AE913AED18811F08493AE11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.123.216.0/22
103.4.208.0/22
120.88.176.0/20
IPv6:
2407:2a00::/32
Signature Algorithm: sha256WithRSAEncryption
44:2e:62:3d:46:0e:95:9f:dc:fe:fb:ca:41:de:85:62:8a:0e:
e3:23:b1:ef:5c:3a:97:95:d1:0b:d7:ad:ac:fe:4f:48:cf:c1:
de:04:5b:a5:a9:ce:7c:b8:0a:16:2a:48:c0:d0:d5:de:a5:35:
2f:c5:d9:16:67:26:d0:c0:0c:f9:d6:30:31:34:6f:73:d3:90:
45:c8:4c:a1:71:a5:4b:04:ae:41:3b:c6:9b:b0:76:08:b1:f0:
df:c5:17:19:14:b0:52:92:a0:e0:cf:70:c3:f6:32:44:64:67:
df:52:62:82:c6:a1:c5:5e:f2:d2:07:ff:b3:0e:38:63:81:3b:
ab:05:d6:1f:c7:20:1d:70:1d:3e:6d:09:0c:38:07:42:c2:e6:
c8:f5:92:36:5a:db:45:54:bf:62:31:fb:e8:e1:b6:fb:00:38:
a2:7b:29:1a:87:74:c8:64:5e:7f:46:56:4b:1d:bb:2f:77:49:
ab:db:74:5f:23:c5:a9:92:b6:2b:08:f1:5c:4e:2b:59:06:82:
04:5c:29:6b:56:2b:1f:6f:e7:0f:87:d7:01:02:db:23:21:fe:
07:a9:83:cd:a6:ed:e5:0e:1b:81:a6:96:87:23:d3:b3:ce:f0:
92:89:11:63:33:32:c5:89:3f:0d:8d:d9:02:f1:d8:84:51:d2:
78:9d:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:09 2026 by rpki-client