Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
File: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (raw, json)
Hash identifier: a3t2huIP4v/KR+0iTyVXI819sQKPifkEGVj9dmx8a1o=
Subject key identifier: 7C:4F:EA:83:FA:7A:7A:0B:3C:A5:2B:BC:66:21:15:F1:0E:E8:AB:4D
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 085C
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
Signing time: Sat 21 Feb 2026 12:36:52 +0000
ROA not before: Sat 21 Feb 2026 12:36:52 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17762
IP address blocks: 27.107.0.0/16 maxlen: 16
27.107.0.0/20 maxlen: 24
27.107.16.0/21 maxlen: 24
27.107.24.0/21 maxlen: 24
27.107.32.0/20 maxlen: 24
27.107.48.0/20 maxlen: 24
27.107.64.0/20 maxlen: 24
27.107.80.0/20 maxlen: 24
27.107.96.0/22 maxlen: 24
27.107.100.0/22 maxlen: 24
27.107.104.0/21 maxlen: 24
27.107.144.0/20 maxlen: 24
27.107.160.0/20 maxlen: 24
27.107.176.0/20 maxlen: 24
27.107.192.0/23 maxlen: 24
27.107.194.0/23 maxlen: 24
27.107.196.0/23 maxlen: 24
27.107.198.0/23 maxlen: 24
27.107.203.0/24 maxlen: 24
27.107.204.0/24 maxlen: 24
27.107.205.0/24 maxlen: 24
27.107.206.0/24 maxlen: 24
27.107.207.0/24 maxlen: 24
27.107.208.0/20 maxlen: 24
27.107.224.0/21 maxlen: 24
27.107.232.0/21 maxlen: 24
27.107.240.0/22 maxlen: 24
27.107.244.0/22 maxlen: 24
27.107.248.0/22 maxlen: 24
27.107.252.0/22 maxlen: 24
49.200.32.0/21 maxlen: 24
49.200.200.0/21 maxlen: 24
49.201.24.0/21 maxlen: 24
49.249.192.0/19 maxlen: 24
103.8.36.0/22 maxlen: 24
115.160.208.0/20 maxlen: 24
182.156.6.0/23 maxlen: 24
182.156.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:51:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2140 (0x85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Feb 21 12:36:52 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6999a6e4-239b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:90:b5:dd:3d:bb:42:f4:11:4e:71:6b:20:
02:f0:b3:29:b1:11:b0:4a:26:2f:d6:0c:48:95:e5:
c6:31:d2:0c:ac:15:b7:e1:58:da:e0:19:7c:0f:f3:
2e:41:33:bb:ca:aa:e1:eb:e6:46:13:28:9e:6f:30:
71:fc:5e:b7:39:b3:8f:15:df:6f:0b:d2:e0:a3:9f:
6d:d4:1a:c4:4b:ff:cc:f8:8c:92:9c:fc:88:6f:4e:
0e:e4:fc:46:04:1f:1b:53:45:99:de:0c:6f:86:d2:
17:7f:39:9e:7a:af:97:ca:08:cc:02:40:d8:36:00:
26:a7:62:be:4e:a2:6c:a2:eb:d0:fe:20:58:8a:b3:
4f:75:42:6c:29:e1:0a:69:68:90:bc:f9:01:38:c1:
0e:56:d3:0c:de:fa:2d:6b:d5:07:d1:c4:61:54:b2:
b8:fb:91:7e:96:56:78:89:0f:95:b9:8b:a7:06:a0:
cc:31:ad:96:40:5a:67:3b:7e:52:db:00:90:42:18:
0c:15:68:34:40:4c:a0:c0:a0:a2:ee:75:b9:5d:8c:
cb:12:48:16:18:d0:57:bf:77:c9:10:27:ef:d9:6a:
fe:b0:7a:97:8c:95:cc:b4:1d:6d:e5:a4:cd:d0:17:
d7:e2:99:fd:98:3d:67:c9:a0:43:78:e4:57:67:c7:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4F:EA:83:FA:7A:7A:0B:3C:A5:2B:BC:66:21:15:F1:0E:E8:AB:4D
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/324F926C3BAC11F09BF98E0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.107.0.0/16
49.200.32.0/21
49.200.200.0/21
49.201.24.0/21
49.249.192.0/19
103.8.36.0/22
115.160.208.0/20
182.156.6.0/23
182.156.20.0/23
Signature Algorithm: sha256WithRSAEncryption
13:a7:5d:10:60:68:de:9e:5e:9d:6f:7c:03:44:b6:74:bf:5c:
bf:04:c5:92:4d:a8:10:c2:17:bc:ba:f9:14:bf:39:b4:c5:7f:
64:48:85:1e:a9:d4:5b:9e:ff:23:ad:f2:50:f8:31:04:63:da:
ea:c5:3a:38:50:28:9d:43:ca:c2:35:88:df:7f:ba:9e:e5:59:
48:f0:5d:06:7e:68:9b:20:82:1a:94:ff:c4:94:6d:c6:82:77:
de:c3:24:8c:5a:2f:36:d5:f2:b4:04:cc:e1:e9:13:bd:55:b2:
e6:0a:db:ab:45:09:bd:fe:22:2c:5a:1d:33:59:6b:ad:c0:9e:
b2:9e:37:64:bd:d5:e5:9f:04:9b:dd:f5:67:42:6d:c5:bd:52:
1b:b4:47:75:5c:07:55:d8:b8:cb:82:95:50:c3:0b:6b:14:90:
1a:74:00:3b:d3:16:4b:c8:73:79:20:1f:43:3d:08:91:49:6d:
2d:be:f7:76:cc:44:e2:2c:80:8a:38:77:42:35:11:16:5e:98:
0c:fa:88:a4:f0:58:46:c3:df:2c:81:8c:2e:62:0a:40:85:83:
ff:05:12:50:79:b0:5e:c5:50:7c:35:b3:39:58:fc:41:28:79:
e2:31:55:3f:e9:fe:d6:fd:9b:83:10:c2:6d:36:fc:48:df:02:
3c:80:5f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:15:19 2026 by rpki-client