Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/F79267D61E4011E6945BEB0DC4F9AE02.roa
File: F79267D61E4011E6945BEB0DC4F9AE02.roa (raw, json)
Hash identifier: ybHfR/5xx3UHYBd525TGkptsJesZi6Lna1QGzoVxLoo=
Subject key identifier: 9E:8B:0F:AD:1E:DE:83:1C:17:23:40:75:A8:62:0D:FB:44:89:4E:C2
Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial: 211F
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/F79267D61E4011E6945BEB0DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:14:02 +0000
ROA not before: Thu 10 Jul 2025 08:22:09 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 135310
IP address blocks: 103.213.236.0/22 maxlen: 22
103.213.236.0/23 maxlen: 23
103.213.236.0/24 maxlen: 24
103.213.237.0/24 maxlen: 24
103.213.238.0/23 maxlen: 23
103.213.238.0/24 maxlen: 24
103.213.239.0/24 maxlen: 24
192.140.252.0/22 maxlen: 22
192.140.252.0/23 maxlen: 23
192.140.252.0/24 maxlen: 24
192.140.253.0/24 maxlen: 24
192.140.254.0/23 maxlen: 23
192.140.254.0/24 maxlen: 24
192.140.255.0/24 maxlen: 24
2404:b180::/32 maxlen: 32
2404:b180::/48 maxlen: 48
2404:b180:1::/48 maxlen: 48
2404:b180:2::/48 maxlen: 48
2404:b180:1000::/48 maxlen: 48
2404:b180:1001::/48 maxlen: 48
2404:b180:1002::/48 maxlen: 48
2404:b180:1003::/48 maxlen: 48
2404:b180:1004::/48 maxlen: 48
2404:b180:1005::/48 maxlen: 48
2404:b180:1006::/48 maxlen: 48
2404:b180:1007::/48 maxlen: 48
2404:b180:1008::/48 maxlen: 48
2404:b180:1009::/48 maxlen: 48
2404:b180:100a::/48 maxlen: 48
2404:b180:100b::/48 maxlen: 48
2404:b180:100c::/48 maxlen: 48
2404:b180:100d::/48 maxlen: 48
2404:b180:100e::/48 maxlen: 48
2404:b180:100f::/48 maxlen: 48
2404:b180:1200::/44 maxlen: 44
2404:b180:1210::/44 maxlen: 44
2404:b180:1220::/44 maxlen: 44
2404:b180:1230::/44 maxlen: 44
2404:b180:1240::/44 maxlen: 44
2404:b180:1260::/44 maxlen: 44
2404:b180:1270::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8479 (0x211f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Validity
Not Before: Jul 10 08:22:09 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a42d8a-ba16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:53:0e:97:3d:e7:9a:a9:ac:62:39:c8:99:
a4:8f:3a:e0:c5:d9:d8:dd:e2:c4:83:8b:48:7e:6d:
fa:f8:ba:93:84:68:40:c8:a3:8b:77:49:ca:a0:c9:
89:56:2a:99:dd:a0:43:ba:31:03:cd:80:ef:62:3a:
da:3b:4a:ea:44:f8:ae:ca:ce:4f:2d:a1:1f:ea:73:
b8:69:ee:d3:3c:2f:70:34:69:a1:35:97:82:34:d3:
17:80:0f:4a:ad:a5:f0:cb:c1:15:5e:dc:ac:19:95:
3c:6f:0c:90:15:cd:75:8d:46:2a:42:22:c1:91:94:
a7:2e:68:45:b1:e8:6c:8d:15:1c:3e:e4:14:dd:0a:
3c:2a:02:d1:15:22:89:4d:46:13:82:11:be:37:22:
25:fc:c9:cf:99:e6:3e:88:b0:75:2b:bd:aa:43:ba:
22:7e:56:c6:34:ac:fb:e1:ac:58:4a:e7:eb:5f:7c:
03:c4:45:92:7f:37:21:4d:7f:a1:43:dc:4e:dd:08:
37:33:45:65:9d:c9:ea:fd:b6:97:b2:0c:0c:8f:3e:
4c:d7:b9:09:b0:c8:c2:79:c1:0c:d6:fe:71:8d:09:
12:26:57:93:73:17:f8:f7:c1:80:d9:59:39:17:45:
f9:2a:69:f6:c3:d1:9d:5b:c7:f0:c2:00:e0:5b:ff:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8B:0F:AD:1E:DE:83:1C:17:23:40:75:A8:62:0D:FB:44:89:4E:C2
X509v3 Authority Key Identifier:
keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/F79267D61E4011E6945BEB0DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.236.0/22
192.140.252.0/22
IPv6:
2404:b180::/32
Signature Algorithm: sha256WithRSAEncryption
ab:85:9e:c0:2c:78:33:cd:2e:f5:04:03:53:31:54:09:23:04:
80:17:69:e6:ec:fe:09:8b:10:68:ee:8e:61:c2:dc:24:9b:26:
ea:28:e5:5a:e9:eb:be:e4:a9:a4:43:cf:7e:f2:f3:e8:be:bc:
66:d6:48:9e:0f:82:38:84:7e:df:3c:bd:02:7d:e3:6a:07:d8:
0e:68:fa:85:cf:7f:9e:92:dd:31:7d:ca:82:26:71:60:84:3b:
0a:cf:a5:8c:b2:15:15:40:58:02:65:1c:44:2b:e5:ca:9b:8d:
d6:0c:54:6e:29:f1:b0:0c:fb:93:dc:fa:8c:80:f9:f1:83:5c:
f4:8d:c3:c8:17:1a:12:7d:31:fc:75:92:09:73:b8:0f:27:cc:
1d:ee:74:33:d2:c8:14:f6:25:86:e2:03:bc:0f:38:ec:26:b5:
b2:f0:fb:f9:7e:63:9b:a0:a4:1c:4b:4e:b3:ee:b5:4c:f0:28:
b3:bd:0a:3e:b5:49:39:b6:97:37:05:3e:11:a1:9f:e1:d7:95:
d1:81:41:d8:bf:43:eb:12:75:de:66:bc:7f:f1:06:b7:01:d5:
99:b7:c8:79:90:f1:f1:b3:c8:cd:7e:60:18:19:56:5e:75:6e:
26:28:1e:98:93:39:3c:09:d7:85:e4:35:c3:96:b1:7c:cc:e3:
b1:df:db:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:58 2026 by rpki-client