Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7A0BAADC040111F1B9060863163D8C67.roa
File: 7A0BAADC040111F1B9060863163D8C67.roa (raw, json)
Hash identifier: d0nFI/f/S/tqaejcjs3vrz/QJLOz0kfb6ONxAG87hjo=
Subject key identifier: 05:ED:DF:6A:E4:1D:18:AF:7B:62:6E:A4:95:08:69:17:8E:57:A2:95
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3AB9
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7A0BAADC040111F1B9060863163D8C67.roa
Signing time: Sun 01 Mar 2026 19:25:39 +0000
ROA not before: Sat 07 Feb 2026 08:47:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132165
IP address blocks: 103.246.108.0/22 maxlen: 22
103.246.108.0/24 maxlen: 24
103.246.109.0/24 maxlen: 24
103.246.110.0/24 maxlen: 24
103.246.111.0/24 maxlen: 24
111.88.0.0/22 maxlen: 24
111.88.4.0/24 maxlen: 30
111.88.5.0/24 maxlen: 24
111.88.6.0/23 maxlen: 24
111.88.8.0/21 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/20 maxlen: 24
111.88.78.0/24 maxlen: 24
111.88.80.0/21 maxlen: 24
111.88.88.0/22 maxlen: 24
111.88.136.0/23 maxlen: 24
115.186.2.0/23 maxlen: 24
117.102.48.0/20 maxlen: 20
117.102.48.0/24 maxlen: 24
117.102.49.0/24 maxlen: 24
117.102.50.0/24 maxlen: 24
117.102.51.0/24 maxlen: 24
117.102.52.0/24 maxlen: 24
117.102.53.0/24 maxlen: 24
117.102.54.0/24 maxlen: 24
117.102.55.0/24 maxlen: 24
117.102.56.0/24 maxlen: 24
117.102.57.0/24 maxlen: 24
117.102.58.0/24 maxlen: 24
117.102.59.0/24 maxlen: 24
117.102.60.0/24 maxlen: 24
117.102.61.0/24 maxlen: 24
117.102.62.0/24 maxlen: 24
117.102.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15033 (0x3ab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Feb 7 08:47:28 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a492b3-0985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:bf:85:1a:ef:46:f7:0e:d1:06:31:d5:4a:
70:88:a9:ca:9e:0b:ec:4a:6d:3f:1c:52:e8:1d:07:
09:86:3c:48:cb:24:08:a9:52:14:44:63:c7:fe:97:
5c:9b:93:2f:23:38:80:02:d7:e0:ea:a8:ce:1c:3d:
e0:2e:71:0b:ca:a8:77:18:cc:a3:d0:6d:e2:7c:6f:
43:1f:f2:73:cd:14:e0:39:5a:28:87:39:d3:31:f5:
cb:ff:0d:ee:6b:6b:d0:12:4b:36:8e:18:0c:af:18:
a0:46:5d:e0:2d:e6:89:ae:1e:b9:0e:95:05:8e:0f:
af:db:a0:7e:5e:2d:9a:c4:e9:02:b6:cb:34:31:db:
be:f4:a8:72:73:75:5b:77:d2:f8:63:c7:a2:d8:46:
26:e8:89:78:09:13:f4:2d:a9:ad:4e:f7:60:6b:8c:
41:3b:c9:37:be:5e:0e:af:ca:c0:51:20:e8:fd:dd:
3c:51:8c:8d:8c:bf:66:79:db:c6:33:99:2a:6e:3c:
f5:f4:d4:d1:f0:ff:36:85:a6:58:73:2a:0b:c0:b6:
85:95:06:89:11:af:f0:db:18:f9:94:fc:06:b6:54:
5d:33:6f:57:99:01:82:e5:d6:39:9d:ae:20:86:e6:
19:5b:72:06:b0:9f:16:d2:44:6d:7b:b4:1c:6b:16:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:ED:DF:6A:E4:1D:18:AF:7B:62:6E:A4:95:08:69:17:8E:57:A2:95
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7A0BAADC040111F1B9060863163D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.246.108.0/22
111.88.0.0-111.88.47.255
111.88.78.0/24
111.88.80.0-111.88.91.255
111.88.136.0/23
115.186.2.0/23
117.102.48.0/20
Signature Algorithm: sha256WithRSAEncryption
46:3f:41:eb:4a:f3:88:47:ef:22:0a:d4:49:8d:89:87:eb:fa:
63:9a:b6:27:7e:8c:24:3f:83:92:26:5f:8d:6d:5b:88:d0:c4:
9c:3b:91:f4:54:d0:2e:05:b1:93:3b:b5:9b:c2:cd:3b:09:74:
95:d0:47:58:6e:90:ae:dd:e4:1c:f3:5e:a3:31:22:b0:26:35:
66:78:18:f1:94:f1:d7:a1:d7:41:f9:3d:c8:a3:23:17:20:8a:
da:fe:d4:43:84:b7:89:b2:4f:28:71:f2:24:06:e1:8a:b4:b9:
af:1f:4e:16:30:ec:76:7d:2d:ea:02:18:19:11:86:68:98:b3:
06:35:f9:ba:5f:57:26:2a:8e:29:ad:26:9e:a6:09:90:3c:13:
45:9f:1c:6e:ae:02:e6:11:c2:30:96:f5:6e:09:ba:ec:f1:63:
5e:be:55:07:11:9b:0c:48:04:26:a3:8e:b0:3e:80:67:e7:cc:
be:13:3f:ba:e4:66:15:cf:57:4c:f0:04:f9:12:34:f9:03:1b:
4e:dc:3b:b1:7f:b7:fc:42:f5:c0:1e:16:ce:d3:5e:18:71:82:
2d:b1:af:02:9b:33:b4:d7:fa:7f:01:2c:45:82:43:4e:d8:2f:
98:62:68:b8:ba:88:19:ae:5e:c8:8e:5d:75:a5:77:8e:1f:51:
de:fe:2a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:52:48 2026 by rpki-client