Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/F79267D61E4011E6945BEB0DC4F9AE02.roa
File: F79267D61E4011E6945BEB0DC4F9AE02.roa (raw, json)
Hash identifier: o/MzyN7ge/ypeEuVIYd4HleoRWxXy+d/s8ghiWxojiQ=
Subject key identifier: E9:18:B7:D0:5C:FB:DE:C1:36:5B:F4:70:B9:4E:4B:2D:D5:39:C3:ED
Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial: 2156
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/F79267D61E4011E6945BEB0DC4F9AE02.roa
Signing time: Mon 08 Jun 2026 16:18:39 +0000
ROA not before: Mon 08 Jun 2026 16:18:39 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135310
IP address blocks: 103.213.236.0/22 maxlen: 22
103.213.236.0/23 maxlen: 23
103.213.236.0/24 maxlen: 24
103.213.237.0/24 maxlen: 24
103.213.238.0/23 maxlen: 23
103.213.238.0/24 maxlen: 24
103.213.239.0/24 maxlen: 24
192.140.252.0/22 maxlen: 22
192.140.252.0/23 maxlen: 23
192.140.252.0/24 maxlen: 24
192.140.253.0/24 maxlen: 24
192.140.254.0/23 maxlen: 23
192.140.254.0/24 maxlen: 24
192.140.255.0/24 maxlen: 24
2404:b180::/32 maxlen: 32
2404:b180::/48 maxlen: 48
2404:b180:1::/48 maxlen: 48
2404:b180:2::/48 maxlen: 48
2404:b180:1000::/48 maxlen: 48
2404:b180:1001::/48 maxlen: 48
2404:b180:1002::/48 maxlen: 48
2404:b180:1003::/48 maxlen: 48
2404:b180:1004::/48 maxlen: 48
2404:b180:1005::/48 maxlen: 48
2404:b180:1006::/48 maxlen: 48
2404:b180:1007::/48 maxlen: 48
2404:b180:1008::/48 maxlen: 48
2404:b180:1009::/48 maxlen: 48
2404:b180:100a::/48 maxlen: 48
2404:b180:100b::/48 maxlen: 48
2404:b180:100c::/48 maxlen: 48
2404:b180:100d::/48 maxlen: 48
2404:b180:100e::/48 maxlen: 48
2404:b180:100f::/48 maxlen: 48
2404:b180:1200::/44 maxlen: 44
2404:b180:1210::/44 maxlen: 44
2404:b180:1220::/44 maxlen: 44
2404:b180:1230::/44 maxlen: 44
2404:b180:1240::/44 maxlen: 44
2404:b180:1260::/44 maxlen: 44
2404:b180:1270::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8534 (0x2156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Validity
Not Before: Jun 8 16:18:39 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a26eb5f-1846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:0c:61:c5:e7:7f:7e:98:eb:27:d1:54:9f:
e0:61:39:39:d7:39:1c:9e:dd:b5:75:c4:7a:00:52:
64:6d:96:bb:e9:6d:26:14:ae:fc:c8:5d:b2:02:f3:
21:3e:45:2c:2c:0d:be:6c:2c:c8:f0:34:68:f0:7f:
a1:2a:65:7e:59:04:b9:a0:d5:75:b8:ba:7f:a1:32:
77:7b:17:64:9c:41:d9:ee:fe:d2:f5:37:33:13:3a:
c8:1b:e7:47:83:37:95:63:d7:f6:00:9a:57:60:0e:
5a:3b:a4:1d:fb:80:7a:8c:fb:87:15:2d:84:48:77:
73:54:93:d7:db:e0:78:83:47:a9:2c:4b:74:3f:d3:
dc:32:d4:ee:42:7b:d4:ac:3d:c5:3a:65:05:3d:62:
58:e2:5c:dc:b9:84:c5:bc:6f:f7:9b:ea:86:1f:b5:
af:73:1f:49:3f:04:66:b6:7d:6d:e3:bb:9c:e8:73:
71:e8:00:5a:15:41:be:eb:bb:b5:e1:78:26:74:c7:
07:61:e3:c0:0f:1a:2e:c2:22:8d:85:2f:c7:62:cb:
bd:93:2a:e5:24:46:48:fe:58:48:fb:9d:b4:87:b1:
e0:9e:6a:8f:4a:b2:37:9d:f5:44:98:8f:cb:51:28:
bd:99:ec:79:49:0a:8f:b6:4f:b9:61:30:95:1d:c5:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:B7:D0:5C:FB:DE:C1:36:5B:F4:70:B9:4E:4B:2D:D5:39:C3:ED
X509v3 Authority Key Identifier:
keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/F79267D61E4011E6945BEB0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.236.0/22
192.140.252.0/22
IPv6:
2404:b180::/32
Signature Algorithm: sha256WithRSAEncryption
59:03:8c:6c:42:91:14:dc:c3:15:d1:96:c2:08:e7:47:34:1f:
47:24:5a:c9:40:10:eb:82:ec:34:58:f0:21:18:09:56:2f:0c:
33:9f:a4:15:d0:86:3d:f7:bc:24:ce:aa:af:67:4a:88:a5:5c:
f9:6a:02:6a:3e:38:ad:df:29:29:96:6f:92:c0:fd:57:f1:0a:
8e:ff:16:85:0c:76:a0:bd:a6:08:45:cf:6c:7c:33:fa:e5:87:
6d:d8:d7:15:37:4d:a1:c0:10:7a:49:51:92:9b:fd:b8:eb:a7:
9d:7a:2b:96:1a:67:8d:4a:91:52:0c:0d:c2:56:3a:2a:fd:a6:
bb:e3:4f:54:50:bb:49:fe:2a:bc:a1:5a:c9:4a:dc:87:34:a8:
b3:69:ce:59:4e:fa:df:fd:fd:eb:05:6b:16:df:c6:b1:aa:0b:
1e:ee:ec:2e:99:04:3f:a6:37:8d:2c:d5:d5:46:27:7b:3d:23:
38:07:a5:10:e7:7d:41:3a:81:9f:b1:a7:54:73:e0:8b:08:7f:
df:17:21:2e:1b:64:f2:ea:f4:7d:3a:82:86:27:5f:1d:00:5c:
1e:5f:c8:2e:6e:19:51:09:ab:93:c4:34:b5:e1:76:ab:80:21:
56:d7:3f:fd:5f:04:86:79:1b:cd:02:3b:f5:d9:c9:6e:17:26:
b7:76:5c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:23 2026 by rpki-client