Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/7D2A30D22CD111ECBE97C117C4F9AE02.roa
File: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (raw, json)
Hash identifier: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=
Subject key identifier: CB:98:0D:60:13:E2:24:61:7B:0E:63:EB:4F:E5:60:01:50:7F:B8:DE
Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Certificate serial: 3546
Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/7D2A30D22CD111ECBE97C117C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:22:10 +0000
ROA not before: Mon 06 Oct 2025 15:11:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 131284
IP address blocks: 103.13.64.0/24 maxlen: 24
103.13.65.0/24 maxlen: 24
103.13.66.0/24 maxlen: 24
103.13.67.0/24 maxlen: 24
137.59.120.0/24 maxlen: 24
137.59.121.0/24 maxlen: 24
137.59.122.0/24 maxlen: 24
137.59.123.0/24 maxlen: 24
180.222.136.0/21 maxlen: 21
180.222.136.0/24 maxlen: 24
180.222.137.0/24 maxlen: 24
180.222.138.0/24 maxlen: 24
180.222.139.0/24 maxlen: 24
180.222.140.0/24 maxlen: 24
180.222.141.0/24 maxlen: 24
180.222.142.0/24 maxlen: 24
180.222.143.0/24 maxlen: 24
203.171.96.0/22 maxlen: 23
203.171.96.0/24 maxlen: 24
203.171.97.0/24 maxlen: 24
203.171.98.0/24 maxlen: 24
203.171.99.0/24 maxlen: 24
203.171.100.0/24 maxlen: 24
203.171.101.0/24 maxlen: 24
203.171.102.0/23 maxlen: 24
203.171.104.0/22 maxlen: 24
203.171.108.0/22 maxlen: 24
203.171.112.0/22 maxlen: 24
203.171.116.0/22 maxlen: 24
203.171.120.0/22 maxlen: 24
203.171.124.0/24 maxlen: 24
203.171.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13638 (0x3546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B
Validity
Not Before: Oct 6 15:11:07 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a467b1-7de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:ee:08:5c:d0:8a:fd:32:34:d7:00:b8:09:
12:22:99:f2:65:52:02:bd:c1:3d:0c:8c:c0:7c:97:
b2:98:7c:a7:c4:c4:30:89:78:91:c3:cd:b3:36:32:
c0:8a:dd:72:4e:36:3e:02:80:17:7e:68:09:7d:5c:
1f:a4:e5:8c:f3:83:2e:2b:71:58:8c:37:2e:15:83:
58:11:65:bd:8c:ef:0f:db:b1:6f:58:f5:d6:4d:bd:
d1:9d:d6:8a:6f:e3:8e:2f:cf:32:33:5d:a3:f2:cb:
cb:e8:f6:6d:9b:da:c3:83:b5:a8:8b:14:15:5a:51:
f4:77:3b:8a:a2:10:0c:83:fa:a7:40:3a:25:cd:08:
49:5f:92:11:fa:41:08:d6:b2:69:e2:c5:d5:4f:3b:
37:e7:4c:67:99:85:fe:92:f6:a3:14:54:0d:09:d2:
28:5b:35:bf:cd:0a:b8:4d:e1:cd:a2:04:d1:b0:50:
52:e6:d5:21:90:07:b1:45:e9:58:66:d3:d9:92:25:
d3:37:0c:71:ef:97:3a:bf:fb:4c:38:78:57:89:44:
13:47:e0:6a:71:0c:68:33:24:65:0a:99:f0:6e:e7:
50:26:32:c8:5a:5d:d9:0c:1e:2d:64:46:6e:a6:2d:
9c:c8:52:b8:05:a9:b1:3d:a5:6f:ac:4b:32:7a:2e:
b3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:0D:60:13:E2:24:61:7B:0E:63:EB:4F:E5:60:01:50:7F:B8:DE
X509v3 Authority Key Identifier:
keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/7D2A30D22CD111ECBE97C117C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.13.64.0/22
137.59.120.0/22
180.222.136.0/21
203.171.96.0-203.171.125.255
Signature Algorithm: sha256WithRSAEncryption
8c:f0:f7:3b:99:3f:4b:5b:18:a9:56:15:ba:1c:e8:08:e1:de:
46:1e:f6:6d:d4:b1:91:9c:ec:37:29:50:51:9a:d2:3e:62:e6:
26:1e:0e:98:d4:06:30:10:20:50:7b:78:8d:47:54:bc:f2:0e:
6c:42:f9:4b:8b:00:9a:f8:3a:d3:1d:05:52:5e:0f:d1:28:15:
40:fd:f8:47:78:38:ba:5b:19:10:7a:fe:08:19:d9:6c:27:19:
8f:51:f7:3c:c7:ff:6d:c2:f4:3a:77:bc:8e:a2:5f:0e:1d:25:
3d:3f:57:1a:ea:fc:67:11:00:35:0b:cd:ff:a0:17:d2:59:13:
c0:52:15:12:89:60:ae:e5:db:56:9c:4a:9c:bc:b8:3c:e2:93:
61:cb:ef:92:65:37:ce:02:26:76:f0:c9:27:66:83:89:b2:03:
bf:23:9a:d3:2f:5a:8f:41:ae:fd:51:d1:2b:d3:cc:c5:69:3a:
2c:cd:49:d2:dc:bd:a3:0a:64:61:3b:2f:4d:8d:73:bf:3d:39:
46:52:0d:c3:3b:97:e5:64:b3:a9:73:72:16:e1:50:53:c5:3d:
da:fb:04:94:b2:05:72:b4:56:94:21:1d:47:f2:7c:ff:49:b9:
51:5a:04:f6:71:dc:d9:01:c4:55:0a:da:d9:d6:a8:54:79:ea:
db:94:7d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:49:42 2026 by rpki-client