Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
File: 0760737E587C11EE8B2A0A2EC4F9AE02.roa (raw, json)
Hash identifier: qFwTNCLM6jwMRczO0i18sXMV7SJKXaJE9H/IwMyk41o=
Subject key identifier: D0:B3:E2:B0:7D:B6:1E:EF:81:15:E8:CF:E3:E8:B1:49:0D:A6:50:F1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D400
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:29:08 +0000
ROA not before: Thu 08 May 2025 16:09:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137125
IP address blocks: 27.48.0.0/22 maxlen: 22
27.48.4.0/22 maxlen: 22
27.48.8.0/22 maxlen: 22
27.48.12.0/22 maxlen: 22
27.48.16.0/22 maxlen: 22
27.48.20.0/22 maxlen: 22
27.48.24.0/22 maxlen: 22
27.48.28.0/22 maxlen: 22
27.48.32.0/22 maxlen: 22
27.48.36.0/22 maxlen: 22
27.48.40.0/22 maxlen: 22
27.48.44.0/22 maxlen: 22
27.48.48.0/22 maxlen: 22
27.48.52.0/22 maxlen: 22
27.48.56.0/22 maxlen: 22
27.48.60.0/22 maxlen: 22
27.48.64.0/22 maxlen: 22
27.48.68.0/22 maxlen: 22
27.48.72.0/22 maxlen: 22
27.48.76.0/22 maxlen: 22
27.48.80.0/22 maxlen: 22
27.48.84.0/22 maxlen: 22
27.48.88.0/22 maxlen: 22
27.48.92.0/22 maxlen: 22
27.48.96.0/22 maxlen: 22
27.48.100.0/22 maxlen: 22
27.48.104.0/22 maxlen: 22
27.48.108.0/22 maxlen: 22
27.48.112.0/22 maxlen: 22
27.48.116.0/22 maxlen: 22
27.48.120.0/22 maxlen: 22
27.48.124.0/22 maxlen: 22
27.48.128.0/22 maxlen: 22
27.48.132.0/22 maxlen: 22
27.48.136.0/22 maxlen: 22
27.48.140.0/22 maxlen: 22
27.48.144.0/21 maxlen: 22
27.48.152.0/22 maxlen: 22
27.48.156.0/22 maxlen: 22
27.48.160.0/20 maxlen: 20
27.48.160.0/22 maxlen: 22
27.48.164.0/22 maxlen: 22
27.48.168.0/22 maxlen: 22
27.48.172.0/22 maxlen: 22
27.48.176.0/22 maxlen: 22
27.48.180.0/22 maxlen: 22
27.48.184.0/22 maxlen: 22
27.48.188.0/22 maxlen: 22
27.48.192.0/22 maxlen: 22
27.48.196.0/22 maxlen: 22
27.48.200.0/22 maxlen: 22
27.48.204.0/22 maxlen: 22
27.48.208.0/22 maxlen: 22
27.48.212.0/22 maxlen: 22
27.48.216.0/22 maxlen: 22
27.48.220.0/22 maxlen: 22
27.48.224.0/22 maxlen: 22
27.48.228.0/22 maxlen: 22
27.48.232.0/22 maxlen: 22
27.48.236.0/22 maxlen: 22
27.48.240.0/22 maxlen: 22
27.48.244.0/22 maxlen: 22
27.48.248.0/22 maxlen: 22
27.48.252.0/22 maxlen: 22
103.112.24.0/22 maxlen: 24
122.50.128.0/18 maxlen: 24
122.50.192.0/18 maxlen: 24
202.62.224.0/20 maxlen: 24
202.137.208.0/20 maxlen: 24
203.98.96.0/19 maxlen: 24
2404:c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54272 (0xd400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:09:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4bdb4-e25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:fc:a3:09:33:12:93:35:18:66:44:68:b7:
fe:7e:4a:06:28:10:f1:6e:95:db:f1:1d:d3:79:7e:
71:a6:4b:eb:99:65:5c:5a:c4:ca:75:a5:6a:f6:9a:
f2:a9:8d:18:26:05:dc:29:b8:ec:50:87:a4:5f:38:
4a:34:69:25:d2:a5:1e:d0:a7:d9:06:e1:35:bc:0b:
8c:52:86:45:d6:5e:77:ca:84:eb:bb:49:d3:8d:a5:
39:1b:e0:c4:97:bb:32:a0:4a:2e:58:37:fb:e4:10:
f4:21:80:1a:ee:5c:13:1a:7f:18:4c:21:41:cd:95:
68:db:a1:f5:cc:3e:35:e4:62:35:f6:63:1d:a8:41:
21:13:83:cd:26:3a:3d:9f:f1:8e:ac:75:8b:a6:67:
2f:2e:a9:6e:d3:c7:52:94:cb:bc:6b:6b:5e:7a:08:
43:c7:89:77:bb:8f:28:6c:24:61:98:56:bd:ce:9d:
80:33:f2:99:79:64:2d:8d:b8:e4:65:4d:68:a8:60:
aa:11:6c:1e:e3:04:d4:ce:aa:c3:91:4f:af:7f:9a:
58:21:5c:a1:74:53:e4:f3:4d:5e:f9:45:74:5f:6b:
c9:3d:3c:8e:11:d8:f5:cf:4c:60:ac:fb:07:82:e3:
90:a2:1a:e4:18:4a:5b:50:07:a4:ef:43:b7:55:a9:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B3:E2:B0:7D:B6:1E:EF:81:15:E8:CF:E3:E8:B1:49:0D:A6:50:F1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.48.0.0/16
103.112.24.0/22
122.50.128.0/17
202.62.224.0/20
202.137.208.0/20
203.98.96.0/19
IPv6:
2404:c00::/32
Signature Algorithm: sha256WithRSAEncryption
76:9f:5c:d7:18:61:fb:a9:c0:db:9c:5b:91:b8:df:bd:06:4c:
f2:0a:05:90:df:3e:fd:92:64:2a:3d:54:fd:d8:32:74:5f:c1:
7c:4f:f5:b2:81:b2:6b:27:a1:42:17:09:f7:88:89:d3:8e:a0:
66:62:1d:05:0b:51:20:a9:66:9e:0b:de:6b:e7:f6:1a:54:29:
7a:d8:e9:2f:86:97:9c:f1:b8:43:c9:8b:1e:62:35:7c:f8:b5:
af:d9:31:04:f1:ab:c0:44:6c:61:32:57:04:11:5c:ea:cf:df:
de:2d:54:54:42:e0:b7:02:f9:eb:d9:f7:39:af:3d:35:1e:89:
2a:99:91:e9:23:0e:ef:f3:aa:13:ee:c8:02:3c:3c:d3:e3:a7:
3a:e5:40:83:d6:22:7e:48:c1:23:30:70:8a:e0:2d:a1:4e:97:
67:f6:1e:a6:9a:bd:28:f5:2c:52:3f:27:18:96:26:dc:84:dd:
b5:95:a5:8d:e4:83:d6:00:6b:a3:99:69:6a:78:01:9a:ea:83:
85:bd:6a:5e:42:dc:1f:70:f5:06:df:b6:91:2c:74:9e:42:ac:
1d:5f:ba:9e:48:63:05:cc:62:c9:1b:1a:5e:a0:e6:0f:27:70:
8e:4b:f2:51:28:e2:fe:35:f8:6d:68:14:d1:0e:06:df:aa:4c:
54:f4:03:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:20 2026 by rpki-client