Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/D67C31E8637511EA8A698E0BC4F9AE02.roa
File: D67C31E8637511EA8A698E0BC4F9AE02.roa (raw, json)
Hash identifier: EUrkmQpgnonuwUqZxL2w67uE+KwotS9CQRpVj7edrfI=
Subject key identifier: 12:16:F4:AE:17:D5:D2:CF:56:1C:7D:93:AA:80:5C:1D:99:FE:29:BD
Certificate issuer: /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
Certificate serial: 0B07
Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/D67C31E8637511EA8A698E0BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:57:08 +0000
ROA not before: Wed 04 Feb 2026 15:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137067
IP address blocks: 103.149.56.0/23 maxlen: 23
103.149.56.0/24 maxlen: 24
103.149.57.0/24 maxlen: 24
2405:e340::/32 maxlen: 32
2405:e340:40::/48 maxlen: 48
2405:e340:41::/48 maxlen: 48
2405:e340:42::/48 maxlen: 48
2405:e340:43::/48 maxlen: 48
2405:e340:44::/48 maxlen: 48
2405:e340:45::/48 maxlen: 48
2405:e340:46::/48 maxlen: 48
2405:e340:47::/48 maxlen: 48
2405:e340:48::/48 maxlen: 48
2405:e340:49::/48 maxlen: 48
2405:e340:4a::/48 maxlen: 48
2405:e340:4b::/48 maxlen: 48
2405:e340:4c::/48 maxlen: 48
2405:e340:4d::/48 maxlen: 48
2405:e340:4e::/48 maxlen: 48
2405:e340:4f::/48 maxlen: 48
2405:e340:50::/48 maxlen: 48
2405:e340:51::/48 maxlen: 48
2405:e340:52::/48 maxlen: 48
2405:e340:53::/48 maxlen: 48
2405:e340:54::/48 maxlen: 48
2405:e340:55::/48 maxlen: 48
2405:e340:56::/48 maxlen: 48
2405:e340:57::/48 maxlen: 48
2405:e340:58::/48 maxlen: 48
2405:e340:59::/48 maxlen: 48
2405:e340:5a::/48 maxlen: 48
2405:e340:5b::/48 maxlen: 48
2405:e340:5c::/48 maxlen: 48
2405:e340:5d::/48 maxlen: 48
2405:e340:5e::/48 maxlen: 48
2405:e340:5f::/48 maxlen: 48
2405:e340:60::/48 maxlen: 48
2405:e340:61::/48 maxlen: 48
2405:e340:62::/48 maxlen: 48
2405:e340:63::/48 maxlen: 48
2405:e340:64::/48 maxlen: 48
2405:e340:65::/48 maxlen: 48
2405:e340:66::/48 maxlen: 48
2405:e340:67::/48 maxlen: 48
2405:e340:68::/48 maxlen: 48
2405:e340:69::/48 maxlen: 48
2405:e340:6a::/48 maxlen: 48
2405:e340:6b::/48 maxlen: 48
2405:e340:6c::/48 maxlen: 48
2405:e340:6d::/48 maxlen: 48
2405:e340:6e::/48 maxlen: 48
2405:e340:6f::/48 maxlen: 48
2405:e340:70::/48 maxlen: 48
2405:e340:71::/48 maxlen: 48
2405:e340:72::/48 maxlen: 48
2405:e340:73::/48 maxlen: 48
2405:e340:74::/48 maxlen: 48
2405:e340:75::/48 maxlen: 48
2405:e340:76::/48 maxlen: 48
2405:e340:77::/48 maxlen: 48
2405:e340:78::/48 maxlen: 48
2405:e340:79::/48 maxlen: 48
2405:e340:80::/48 maxlen: 48
2405:e340:81::/48 maxlen: 48
2405:e340:82::/48 maxlen: 48
2405:e340:100::/48 maxlen: 48
2405:e340:101::/48 maxlen: 48
2405:e340:102::/48 maxlen: 48
2405:e340:103::/48 maxlen: 48
2405:e340:104::/48 maxlen: 48
2405:e340:105::/48 maxlen: 48
2405:e340:106::/48 maxlen: 48
2405:e340:107::/48 maxlen: 48
2405:e340:108::/48 maxlen: 48
2405:e340:109::/48 maxlen: 48
2405:e340:10a::/48 maxlen: 48
2405:e340:10b::/48 maxlen: 48
2405:e340:10c::/48 maxlen: 48
2405:e340:10d::/48 maxlen: 48
2405:e340:10e::/48 maxlen: 48
2405:e340:10f::/48 maxlen: 48
2405:e340:110::/48 maxlen: 48
2405:e340:111::/48 maxlen: 48
2405:e340:112::/48 maxlen: 48
2405:e340:113::/48 maxlen: 48
2405:e340:114::/48 maxlen: 48
2405:e340:115::/48 maxlen: 48
2405:e340:116::/48 maxlen: 48
2405:e340:117::/48 maxlen: 48
2405:e340:118::/48 maxlen: 48
2405:e340:119::/48 maxlen: 48
2405:e340:11a::/48 maxlen: 48
2405:e340:11b::/48 maxlen: 48
2405:e340:11c::/48 maxlen: 48
2405:e340:11d::/48 maxlen: 48
2405:e340:11e::/48 maxlen: 48
2405:e340:11f::/48 maxlen: 48
2405:e340:120::/48 maxlen: 48
2405:e340:121::/48 maxlen: 48
2405:e340:200::/48 maxlen: 48
2405:e340:201::/48 maxlen: 48
2405:e340:202::/48 maxlen: 48
2405:e340:203::/48 maxlen: 48
2405:e340:204::/48 maxlen: 48
2405:e340:205::/48 maxlen: 48
2405:e340:206::/48 maxlen: 48
2405:e340:207::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl
rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2823 (0xb07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183EB3, serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA
Validity
Not Before: Feb 4 15:39:49 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a47df4-2c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:1d:0b:f5:fb:9d:7f:c0:8a:3f:7f:27:15:
99:39:1a:99:1d:36:e4:65:ce:6d:7a:2f:61:78:7e:
ed:f2:6b:f3:65:2f:b7:a7:56:ac:b3:42:a7:7b:e6:
4e:78:e4:10:3b:44:ec:dc:0b:cf:81:8c:f4:e8:be:
f4:23:2a:80:d4:3c:36:20:5c:95:31:be:54:74:ba:
80:5f:42:ea:7a:19:a1:a4:d4:d4:84:54:09:52:96:
f4:f5:18:bc:3e:be:b1:ca:c4:e3:29:18:c1:75:84:
0c:02:db:bc:13:b7:4b:a7:19:54:8a:dc:f7:9b:19:
a9:36:08:5d:f8:80:5d:4a:6a:15:ab:93:fb:5e:a8:
42:bb:b3:0f:ac:82:a5:ff:09:7f:7c:70:5b:a0:33:
d9:9e:3c:7c:45:c1:7e:6f:2d:fc:af:a3:4d:d8:1b:
2c:08:bc:69:e4:78:d5:48:bd:93:ee:60:24:e8:bd:
d5:c6:08:89:aa:c8:07:67:a3:b0:cd:25:b5:11:70:
e6:31:0a:72:17:ba:ca:4e:26:df:96:f6:7e:9b:0f:
97:9a:d7:e8:36:ab:84:28:9e:19:0a:51:48:e4:2c:
f3:4f:5d:e9:af:aa:d9:65:39:86:a6:7f:cc:38:d1:
1a:5a:a2:fd:2c:8e:7a:5e:84:da:ab:6e:e2:fa:cc:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:16:F4:AE:17:D5:D2:CF:56:1C:7D:93:AA:80:5C:1D:99:FE:29:BD
X509v3 Authority Key Identifier:
keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/D67C31E8637511EA8A698E0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.56.0/23
IPv6:
2405:e340::/32
Signature Algorithm: sha256WithRSAEncryption
98:d2:58:c5:f0:22:2b:c6:a8:c5:63:fd:09:cc:5c:c5:87:81:
d1:34:72:bf:23:7a:5e:fb:72:7a:29:27:43:db:de:77:5b:bb:
60:a4:39:cc:26:dd:cc:af:4c:92:1b:e4:b9:5c:3a:08:fe:ab:
4f:8b:1a:78:7e:4d:0f:a6:b3:fd:ce:26:c4:8b:f9:95:ad:c7:
95:0f:d9:d8:36:55:11:be:99:a6:87:de:e4:81:a0:ca:93:15:
63:6f:6a:d8:40:c2:1c:a4:18:82:ba:ad:44:e1:b3:b0:37:c4:
17:b6:92:d2:b1:2f:ba:a5:8e:47:c1:a5:96:dc:d4:a0:9c:3a:
7c:c1:f4:a4:cc:a8:c3:ba:a3:d4:65:d4:27:a1:ad:1a:17:20:
55:84:d0:35:c8:62:22:21:5b:48:d4:28:78:f1:f6:18:77:d1:
34:12:0e:25:39:16:74:fb:c4:88:2e:b1:7a:7a:66:91:59:bc:
48:a6:c8:c8:b1:89:5b:8a:4b:2b:fb:ca:7c:b1:92:db:c1:2c:
5a:0e:80:bc:b2:32:34:72:5d:51:df:07:43:39:b4:61:73:6a:
6a:73:41:38:bf:83:e7:37:13:16:40:ac:11:51:a2:76:e0:08:
b8:c5:6e:de:c5:14:89:28:af:91:a7:15:06:d3:04:e9:9f:00:
bc:9f:b1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:58 2026 by rpki-client