Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/D3EAE1500B5911EA8CC1114BC4F9AE02.roa
File: D3EAE1500B5911EA8CC1114BC4F9AE02.roa (raw, json)
Hash identifier: kb+dyeOwVVg/Z6TRUEqLhtnoMRAUu0DJXJFO0yQHy+M=
Subject key identifier: 26:84:AD:AD:60:4B:29:D0:4B:BE:D7:91:23:81:67:29:0B:D9:DD:18
Certificate issuer: /CN=A9168B03/serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
Certificate serial: 1C6D
Authority key identifier: BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/D3EAE1500B5911EA8CC1114BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:41:43 +0000
ROA not before: Thu 16 Oct 2025 16:53:58 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9832
IP address blocks: 103.9.132.0/22 maxlen: 24
180.92.224.0/20 maxlen: 22
180.92.224.0/21 maxlen: 24
180.92.232.0/22 maxlen: 24
180.92.236.0/24 maxlen: 24
180.92.237.0/24 maxlen: 24
180.92.238.0/24 maxlen: 24
180.92.239.0/24 maxlen: 24
203.148.88.0/22 maxlen: 24
203.188.240.0/20 maxlen: 20
203.188.240.0/21 maxlen: 21
203.188.240.0/22 maxlen: 22
203.188.240.0/24 maxlen: 24
203.188.241.0/24 maxlen: 24
203.188.242.0/24 maxlen: 24
203.188.243.0/24 maxlen: 24
203.188.244.0/22 maxlen: 22
203.188.244.0/24 maxlen: 24
203.188.245.0/24 maxlen: 24
203.188.246.0/24 maxlen: 24
203.188.247.0/24 maxlen: 24
203.188.248.0/21 maxlen: 21
203.188.248.0/24 maxlen: 24
203.188.249.0/24 maxlen: 24
203.188.250.0/24 maxlen: 24
203.188.251.0/24 maxlen: 24
203.188.252.0/24 maxlen: 24
203.188.253.0/24 maxlen: 24
203.188.254.0/24 maxlen: 24
203.188.255.0/24 maxlen: 24
2403:bf80::/32 maxlen: 32
2403:bf80::/48 maxlen: 48
2403:bf80:1::/48 maxlen: 48
2403:bf80:2::/48 maxlen: 48
2403:bf80:3::/48 maxlen: 48
2403:bf80:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.crl
rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7277 (0x1c6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B03, serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
Validity
Not Before: Oct 16 16:53:58 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a44217-4fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:6a:89:de:68:d6:97:f2:53:b6:b5:db:d2:
a7:ea:ed:a1:47:ac:67:42:b0:13:d1:39:4a:cb:25:
a6:42:fa:77:e1:0c:f6:c5:38:3d:35:67:8f:2b:cf:
f5:6e:2f:5a:06:41:d2:5f:0d:57:09:74:5f:ea:9e:
c7:50:c2:b1:a3:54:80:4f:da:37:bc:d1:8d:c7:24:
74:85:02:f6:d7:3e:8b:15:89:3a:73:fc:22:d3:f9:
20:e3:02:e3:84:c0:57:0f:34:e5:2d:17:af:aa:7b:
7a:61:e5:09:b3:3c:ef:b0:94:08:a3:14:76:e4:60:
eb:06:9c:66:f4:2b:d9:20:96:d8:80:71:45:a7:85:
6d:64:24:cf:e0:6e:5c:ed:07:12:0c:a7:63:09:a2:
b4:31:17:f2:46:b9:4e:0d:1d:3c:d1:1a:51:96:90:
16:7d:3b:ae:b5:55:c6:f7:95:2a:87:40:98:66:cd:
11:6b:28:a7:0d:f8:ae:9a:a7:a0:34:03:e1:9f:05:
67:62:a4:e5:24:a2:76:d2:19:77:51:c5:c0:9e:a9:
d3:30:33:cf:4e:65:ae:ce:14:b8:1a:a9:c4:19:56:
f8:ec:56:88:47:db:25:eb:42:d6:ae:b7:c6:92:b7:
41:71:fe:15:ec:a6:dd:81:7d:58:71:e6:8b:04:dd:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:84:AD:AD:60:4B:29:D0:4B:BE:D7:91:23:81:67:29:0B:D9:DD:18
X509v3 Authority Key Identifier:
keyid:BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/D3EAE1500B5911EA8CC1114BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.9.132.0/22
180.92.224.0/20
203.148.88.0/22
203.188.240.0/20
IPv6:
2403:bf80::/32
Signature Algorithm: sha256WithRSAEncryption
02:2a:e8:c2:b6:72:35:3b:eb:44:b5:50:5b:c1:16:24:16:3a:
f1:19:bd:38:d0:1f:ec:6c:2a:fe:e7:42:d8:ab:a4:d2:d6:51:
f2:4e:4c:35:a4:00:bf:77:59:00:27:74:48:e5:ed:a2:b8:ab:
c7:b6:39:dc:62:2d:17:71:ca:ef:a2:da:43:e9:1a:6a:a8:ed:
75:1d:67:34:f1:67:fd:30:6b:d4:cb:cd:e6:bf:7d:49:6b:7d:
38:ff:10:33:10:57:68:ee:6e:07:3c:8a:23:40:4c:e0:3f:80:
16:59:bc:14:d1:1e:a2:c7:93:4f:e6:ee:85:77:83:d4:12:39:
fe:44:70:bc:3d:8b:41:47:6b:2c:da:aa:eb:2b:f8:b6:e1:ea:
81:cd:9d:58:0c:ba:eb:4f:2b:47:63:e6:56:3e:9e:c4:65:85:
c3:9a:71:0c:58:8d:cb:78:43:e6:38:ad:bf:38:f9:48:2f:e6:
b3:5d:49:76:04:92:5d:8a:ae:0c:b8:ea:81:a2:26:86:e8:95:
22:dc:03:8f:3f:c9:1b:b9:1b:c6:da:a7:69:04:9d:e3:3a:f2:
7a:eb:8f:93:bf:30:76:05:2a:54:ac:3c:85:dd:73:b9:91:0a:
55:bf:42:a5:19:d9:83:03:8f:5d:cb:dd:ac:87:ad:9c:0b:02:
9a:90:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:11 2026 by rpki-client