Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
File: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (raw, json)
Hash identifier: VwsX+aayGFk3FRmuL/HgkrJaCVx405LJHEL44d7J7/w=
Subject key identifier: A1:1B:6F:27:65:9A:7E:C8:75:A3:45:8F:B2:C4:4A:BD:EF:DC:E0:95
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 08F2
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
Signing time: Wed 16 Sep 2026 07:33:37 +0000
ROA not before: Wed 16 Sep 2026 07:33:37 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 17762
IP address blocks: 27.107.0.0/16 maxlen: 16
27.107.0.0/20 maxlen: 24
27.107.16.0/21 maxlen: 24
27.107.24.0/21 maxlen: 24
27.107.32.0/20 maxlen: 24
27.107.48.0/20 maxlen: 24
27.107.64.0/20 maxlen: 24
27.107.80.0/20 maxlen: 24
27.107.96.0/22 maxlen: 24
27.107.100.0/22 maxlen: 24
27.107.104.0/21 maxlen: 24
27.107.144.0/20 maxlen: 24
27.107.160.0/20 maxlen: 24
27.107.176.0/20 maxlen: 24
27.107.192.0/23 maxlen: 24
27.107.194.0/23 maxlen: 24
27.107.196.0/23 maxlen: 24
27.107.198.0/23 maxlen: 24
27.107.203.0/24 maxlen: 24
27.107.204.0/24 maxlen: 24
27.107.205.0/24 maxlen: 24
27.107.206.0/24 maxlen: 24
27.107.207.0/24 maxlen: 24
27.107.208.0/20 maxlen: 24
27.107.224.0/21 maxlen: 24
27.107.232.0/21 maxlen: 24
27.107.240.0/22 maxlen: 24
27.107.244.0/22 maxlen: 24
27.107.248.0/22 maxlen: 24
27.107.252.0/22 maxlen: 24
49.200.32.0/21 maxlen: 24
49.200.200.0/21 maxlen: 24
49.200.208.0/21 maxlen: 24
49.200.216.0/21 maxlen: 24
49.201.0.0/21 maxlen: 24
49.201.8.0/21 maxlen: 24
49.201.16.0/21 maxlen: 24
49.201.24.0/21 maxlen: 24
49.249.192.0/19 maxlen: 24
103.8.36.0/22 maxlen: 24
115.160.208.0/20 maxlen: 24
182.156.6.0/23 maxlen: 24
182.156.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290 (0x8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Sep 16 07:33:37 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6aaa4651-cb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:d4:31:fd:4e:68:4d:75:ab:d6:2a:2f:70:
8d:f5:fa:5f:10:34:d0:ee:27:b6:ca:1f:03:72:95:
9d:61:16:e4:08:74:f0:e6:6a:c9:a1:dd:e8:b6:d8:
32:cd:f5:c1:87:69:88:e9:66:25:27:6e:3f:25:ed:
1a:bc:b3:c6:7d:81:c5:a2:3e:84:c9:27:78:21:7d:
74:a5:62:7b:de:78:9b:a7:2c:78:99:48:56:92:fe:
4c:f4:51:37:85:17:55:f8:0c:b1:27:30:b3:32:ac:
d9:9e:47:d7:12:5e:7e:f8:15:0f:65:02:dd:37:f5:
1b:ed:b4:02:17:11:77:66:6d:4b:50:2b:e8:6b:1a:
d5:6e:52:60:95:eb:9e:d1:9a:9b:21:50:68:4b:b0:
f1:8e:68:61:fa:7b:19:cf:a0:ce:a6:ec:2f:28:80:
d0:ae:ca:22:5f:b0:a3:0a:0b:6b:0c:8b:ab:d9:1e:
3b:7b:fe:2d:e9:6e:d9:4e:f3:a2:27:ba:70:a9:c4:
3c:4e:3f:e1:de:ce:b8:4e:42:f4:2f:72:62:74:f0:
34:63:a7:2a:5a:bf:ce:a3:39:a3:15:08:5f:77:82:
9f:2c:56:55:5b:4e:43:45:6d:ce:d1:b1:5f:60:85:
72:51:40:8c:91:4b:ab:55:75:66:ff:d8:19:f2:45:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:6F:27:65:9A:7E:C8:75:A3:45:8F:B2:C4:4A:BD:EF:DC:E0:95
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.107.0.0/16
49.200.32.0/21
49.200.200.0-49.200.223.255
49.201.0.0/19
49.249.192.0/19
103.8.36.0/22
115.160.208.0/20
182.156.6.0/23
182.156.20.0/23
Signature Algorithm: sha256WithRSAEncryption
10:2f:09:eb:ba:2c:67:9f:3b:db:22:0b:ac:e6:4c:82:8d:2f:
7e:4f:cd:75:a9:85:55:69:ed:87:96:06:38:ef:57:15:a5:87:
c8:a0:64:1f:8c:5d:15:91:aa:b9:8e:32:78:d9:34:b6:62:49:
c8:d2:08:0f:5d:0f:e4:78:b9:ac:36:ff:48:1d:0b:70:64:df:
3a:01:5b:2d:d6:83:25:8c:71:f5:7b:94:9b:88:ab:c6:b4:5f:
33:b6:00:e7:3d:48:a9:b6:70:5a:ac:b3:6c:e6:08:a1:f2:0a:
2c:ad:d9:79:ff:b1:d6:91:a0:b0:b6:0f:09:06:6d:c6:79:08:
0f:35:4a:df:71:d3:8a:b7:64:eb:46:79:45:13:31:b6:94:52:
77:df:a8:b3:e1:b5:b5:5e:80:77:2e:e2:28:f5:33:c1:2c:bc:
a1:e7:1e:0b:05:c4:75:89:79:83:7a:65:31:0b:c0:7b:39:56:
2b:e6:f9:71:45:97:9a:db:f9:c2:d8:24:14:1e:00:bd:8a:a7:
45:8f:1b:03:c7:3e:dd:c9:54:da:66:7a:58:9b:6b:06:5a:9f:
81:91:79:5e:f4:0d:88:4f:63:c0:d1:45:5c:f3:31:17:bf:38:
13:60:63:3f:43:ac:30:58:e4:92:27:a4:c3:2c:66:5c:12:de:
b3:16:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:13:22 2026 by rpki-client