Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
File: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (raw, json)
Hash identifier: oVc9ie8a6B1nd2FUgOUdTAiLK8d0VbRKl6P+xyTHsR4=
Subject key identifier: 6E:24:F1:62:BA:28:66:2A:00:84:F6:06:33:A0:93:B9:55:72:18:F2
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 07EB
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
Signing time: Wed 29 Oct 2025 14:50:18 +0000
ROA not before: Wed 29 Oct 2025 14:50:18 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17762
IP address blocks: 27.107.0.0/16 maxlen: 16
27.107.0.0/20 maxlen: 24
27.107.16.0/21 maxlen: 24
27.107.24.0/21 maxlen: 24
27.107.32.0/20 maxlen: 24
27.107.48.0/20 maxlen: 24
27.107.64.0/20 maxlen: 24
27.107.80.0/20 maxlen: 24
27.107.96.0/22 maxlen: 24
27.107.100.0/22 maxlen: 24
27.107.104.0/21 maxlen: 24
27.107.144.0/20 maxlen: 24
27.107.160.0/20 maxlen: 24
27.107.176.0/20 maxlen: 24
27.107.192.0/23 maxlen: 24
27.107.194.0/23 maxlen: 24
27.107.196.0/23 maxlen: 24
27.107.198.0/23 maxlen: 24
27.107.203.0/24 maxlen: 24
27.107.204.0/24 maxlen: 24
27.107.205.0/24 maxlen: 24
27.107.206.0/24 maxlen: 24
27.107.208.0/20 maxlen: 24
27.107.224.0/21 maxlen: 24
27.107.232.0/21 maxlen: 24
49.200.32.0/21 maxlen: 24
49.201.24.0/21 maxlen: 24
49.249.192.0/19 maxlen: 24
103.8.36.0/22 maxlen: 24
115.160.208.0/20 maxlen: 24
182.156.6.0/23 maxlen: 24
182.156.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2027 (0x7eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Oct 29 14:50:18 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=690229a9-5a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:4d:9c:e5:0d:a6:00:16:79:e9:8d:c1:16:
d2:f2:cd:0e:f8:98:c6:90:71:82:cc:d4:19:1b:24:
ae:1f:c3:25:4a:80:bd:69:97:d6:08:3c:42:28:21:
0c:f9:40:4d:f5:1e:59:67:5c:4b:0e:ed:ba:1b:ec:
cf:12:d0:d1:ff:22:d3:d7:5b:3c:3f:6b:db:78:cd:
18:cb:92:d6:18:3f:c8:05:d9:50:12:6c:64:bb:c6:
e6:2a:06:7f:ff:69:2e:35:11:51:ac:9a:ea:bd:07:
5d:07:d3:bc:74:bf:30:7c:9f:02:09:89:53:33:0c:
83:ef:8a:3c:83:47:8b:5b:e6:f0:2b:9a:b4:cc:41:
e6:57:9d:8c:ba:65:f6:de:05:8e:86:29:d0:a2:3c:
d0:da:4b:60:06:ae:a0:3b:39:eb:63:2b:c2:eb:e6:
68:97:7e:b4:96:c0:8f:3a:4a:89:e3:e9:f5:6f:10:
dd:43:84:51:87:43:57:b7:6c:4e:27:fd:9b:0a:2c:
27:81:b3:6f:dd:64:3c:c6:b2:4d:d2:0a:e5:45:17:
5c:18:49:73:be:bc:15:0a:79:52:4b:02:c7:29:5a:
20:3a:e9:76:d8:2e:44:4e:79:48:1c:dc:23:ce:f2:
6d:00:21:d9:f1:6a:81:33:a7:ad:ab:ad:d1:d3:de:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:24:F1:62:BA:28:66:2A:00:84:F6:06:33:A0:93:B9:55:72:18:F2
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.107.0.0/16
49.200.32.0/21
49.201.24.0/21
49.249.192.0/19
103.8.36.0/22
115.160.208.0/20
182.156.6.0/23
182.156.20.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:8c:4d:58:95:be:b6:9b:87:6c:1d:17:5f:fc:a5:89:a1:3e:
42:07:4d:06:cf:a9:fb:9b:ac:63:89:34:32:f9:53:a0:02:39:
37:ff:e8:cf:fa:8b:ff:85:03:30:08:4a:f8:e2:67:95:30:79:
e3:a6:d7:3c:dc:56:85:3d:10:9d:61:0d:2b:e4:e7:37:3d:a4:
39:c8:e4:00:30:57:e9:2d:21:76:bb:b5:81:57:ca:82:9d:1d:
86:d5:f0:86:e7:66:8c:6e:b6:c4:71:2d:ac:59:60:4c:be:10:
e1:5c:fe:fa:c6:8b:fd:c9:f8:7a:10:fd:28:2f:47:88:a8:4c:
71:97:5d:61:05:3a:53:10:3e:22:9d:53:35:6a:f3:b1:50:00:
91:a5:42:d5:93:b0:ed:09:c9:dd:65:46:a6:d7:fc:0a:40:ea:
cd:a7:b0:54:f7:a1:56:da:64:0e:ac:1a:8b:d0:cc:f3:79:6f:
f4:1b:00:73:36:73:37:ac:df:79:0d:83:02:c4:5e:73:ff:70:
51:7c:eb:c3:1d:47:b5:97:ce:c5:d7:7f:c3:15:12:a9:63:ef:
56:e3:58:14:36:b2:b0:c1:a2:71:46:da:a0:4b:ab:7c:23:fd:
38:45:ce:b8:3e:ad:a3:3b:54:7f:1d:30:c2:91:3d:c5:51:73:
d7:58:4a:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:13:27 2025 by rpki-client