Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/C74924EE159F11EEBCFC135CC4F9AE02.roa
File: C74924EE159F11EEBCFC135CC4F9AE02.roa (raw, json)
Hash identifier: N33b13XY6g27GVjt3CNNQUi+knQ6X/92GcFFFlrfuoE=
Subject key identifier: 8B:95:4E:82:58:E8:98:CC:37:DD:80:4D:92:43:5C:37:3F:E5:47:91
Certificate issuer: /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
Certificate serial: 0F5B
Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/C74924EE159F11EEBCFC135CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:17:08 +0000
ROA not before: Sun 10 Aug 2025 17:57:10 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 136732
IP address blocks: 103.94.216.0/22 maxlen: 22
103.94.216.0/23 maxlen: 23
103.94.216.0/24 maxlen: 24
103.94.217.0/24 maxlen: 24
103.94.218.0/23 maxlen: 23
103.94.218.0/24 maxlen: 24
103.94.219.0/24 maxlen: 24
2401:50c0::/32 maxlen: 32
2401:50c0::/48 maxlen: 48
2401:50c0:1::/48 maxlen: 48
2401:50c0:2::/48 maxlen: 48
2401:50c0:3::/48 maxlen: 48
2401:50c0:4::/48 maxlen: 48
2401:50c0:5::/48 maxlen: 48
2401:50c0:6::/48 maxlen: 48
2401:50c0:7::/48 maxlen: 48
2401:50c0:9::/48 maxlen: 48
2401:50c0:1a::/48 maxlen: 48
2401:50c0:1000::/48 maxlen: 48
2401:50c0:1001::/48 maxlen: 48
2401:50c0:1002::/48 maxlen: 48
2401:50c0:1003::/48 maxlen: 48
2401:50c0:1004::/48 maxlen: 48
2401:50c0:1005::/48 maxlen: 48
2401:50c0:1006::/48 maxlen: 48
2401:50c0:1007::/48 maxlen: 48
2401:50c0:1008::/48 maxlen: 48
2401:50c0:1009::/48 maxlen: 48
2401:50c0:100a::/48 maxlen: 48
2401:50c0:100b::/48 maxlen: 48
2401:50c0:100c::/48 maxlen: 48
2401:50c0:100d::/48 maxlen: 48
2401:50c0:100e::/48 maxlen: 48
2401:50c0:100f::/48 maxlen: 48
2401:50c0:1010::/48 maxlen: 48
2401:50c0:1011::/48 maxlen: 48
2401:50c0:1012::/48 maxlen: 48
2401:50c0:1013::/48 maxlen: 48
2401:50c0:1014::/48 maxlen: 48
2401:50c0:1015::/48 maxlen: 48
2401:50c0:1016::/48 maxlen: 48
2401:50c0:1017::/48 maxlen: 48
2401:50c0:1018::/48 maxlen: 48
2401:50c0:1019::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl
rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3931 (0xf5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171D35, serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E
Validity
Not Before: Aug 10 17:57:10 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a42e44-b2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:41:c4:4c:ae:ce:ae:1e:a0:d7:08:c3:4d:
ec:55:36:b2:95:73:65:90:c9:a7:12:86:7c:80:64:
10:c5:a1:29:6a:45:21:1d:b4:fc:c8:d3:c3:bf:74:
b8:ba:f7:9c:a9:55:9f:84:16:a8:f5:e4:d5:64:30:
bb:c8:6d:40:ac:19:b3:bb:1d:ab:38:30:5b:f0:45:
e6:3c:27:cf:a8:e6:c2:ce:88:ad:43:ee:7a:c3:a9:
db:62:cd:0c:0c:5b:a6:c7:65:6f:6f:fd:5e:90:14:
58:17:b1:74:6f:29:7a:7d:0b:6c:d0:9c:03:12:b5:
cb:c7:47:46:4f:9c:52:9c:f5:02:16:91:f0:7e:57:
e8:80:3b:f6:64:00:4e:0b:1b:a1:31:4e:e3:f0:8b:
14:18:91:cd:e6:cc:1d:1f:8c:2a:83:9a:61:64:8b:
92:e6:be:e1:88:ba:c1:d7:bb:62:d9:eb:5d:ba:de:
f7:d7:01:a7:2b:29:0a:b6:36:46:19:44:f8:58:cb:
65:b3:68:69:c9:4d:37:b9:b1:72:e0:18:4d:f4:26:
31:28:cd:e3:77:52:a3:19:6f:7e:cd:71:43:d3:a9:
dd:66:ff:d6:5f:fa:2b:0d:de:8d:91:be:b7:75:03:
c3:37:78:21:ec:ba:69:50:c5:72:e7:d4:af:27:ba:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:95:4E:82:58:E8:98:CC:37:DD:80:4D:92:43:5C:37:3F:E5:47:91
X509v3 Authority Key Identifier:
keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/C74924EE159F11EEBCFC135CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.94.216.0/22
IPv6:
2401:50c0::/32
Signature Algorithm: sha256WithRSAEncryption
35:e2:e8:08:dd:15:a4:b8:0a:d3:99:6b:fb:b0:c8:27:a0:3e:
0f:33:5b:64:e1:79:65:19:78:97:a7:7e:cc:19:42:b9:c6:3a:
dc:f5:13:eb:af:3b:92:8c:5b:d0:7f:5a:a1:39:27:0e:f9:95:
5d:eb:22:17:7b:67:64:24:cf:6f:59:6c:3a:3c:bc:7e:18:ec:
a5:df:8f:f5:3b:18:55:48:66:bb:f1:02:ee:a4:22:78:ca:e2:
a6:35:6b:25:06:29:dc:a9:29:59:d1:f6:71:f5:a2:47:44:49:
23:8b:a7:9a:a0:3b:82:02:72:c2:5b:f3:e4:1e:c2:66:e4:9d:
e8:20:da:b4:b8:fc:4f:d4:b3:6c:40:fc:ee:aa:eb:e9:81:65:
14:6f:15:a1:27:e0:42:e0:57:e2:0e:51:3b:3a:04:31:68:cb:
b0:2d:1b:a4:a3:06:f5:d8:7e:6a:72:53:b2:39:78:b8:6d:1a:
6d:92:6e:7d:e8:94:90:81:05:d1:72:62:01:f6:0a:5e:35:83:
54:2a:f1:af:90:ca:f6:d7:f5:6d:ff:88:4f:7c:48:f7:04:a7:
88:e1:a1:57:ab:71:1b:7b:31:a3:75:39:4c:c6:16:02:77:d1:
c2:ba:d2:61:7a:3d:ea:7e:e1:c9:7b:96:11:d5:f7:2b:fd:88:
76:7e:f1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:20 2026 by rpki-client