Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A19F314DBD111F0B3A7088354641951.roa
File: 8A19F314DBD111F0B3A7088354641951.roa (raw, json)
Hash identifier: EdT6nl7u2BSy3UpSey1eEOw4xQiRZcRqJIZAQyLRcbg=
Subject key identifier: A5:91:BE:53:C3:A5:42:FD:5E:47:82:B8:23:9E:43:F3:11:30:15:14
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FEC5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A19F314DBD111F0B3A7088354641951.roa
Signing time: Tue 27 Oct 2026 09:13:53 +0000
ROA not before: Tue 27 Oct 2026 09:13:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151734
IP address blocks: 36.50.82.0/24 maxlen: 24
43.250.252.0/24 maxlen: 24
43.250.254.0/24 maxlen: 24
43.250.255.0/24 maxlen: 24
103.76.122.0/24 maxlen: 24
103.76.123.0/24 maxlen: 24
103.98.53.0/24 maxlen: 24
103.99.36.0/22 maxlen: 24
103.109.180.0/22 maxlen: 24
103.111.228.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.170.58.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.99.0/24 maxlen: 24
103.178.59.0/24 maxlen: 24
103.178.160.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.236.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.204.169.0/24 maxlen: 24
103.211.56.0/24 maxlen: 24
103.212.136.0/23 maxlen: 24
150.242.200.0/22 maxlen: 24
163.227.190.0/24 maxlen: 24
2001:df2:1c40::/48 maxlen: 48
2001:df5:7940::/48 maxlen: 48
2401:7ee0::/48 maxlen: 48
2401:7ee0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 11:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65221 (0xfec5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 27 09:13:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ae06b51-61ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:a7:ce:07:42:51:2f:ef:08:b9:9d:57:07:
ec:66:f8:1c:ef:51:56:51:0a:1f:3c:6c:1f:2f:e7:
05:a1:68:ab:73:9a:f2:f8:0e:6b:f1:50:1a:03:43:
ae:bc:ac:3e:bc:a6:04:17:07:ea:f2:9a:c4:e5:ca:
72:2a:87:84:3b:f2:7c:fc:7d:fb:1f:f6:26:f1:0a:
3e:30:b6:27:ba:52:8e:17:a6:e6:25:51:9f:1d:82:
50:ba:68:ec:82:d7:b6:9d:55:a7:a0:38:66:d9:2f:
f9:17:bd:ea:f6:21:36:45:e5:df:f1:9f:6c:e6:22:
23:15:29:03:3d:03:44:63:71:8f:6c:2e:ab:5a:6d:
4a:bc:37:9f:a7:5a:e1:7c:a1:95:24:05:a5:ba:6a:
dd:92:e7:a8:96:b6:b9:fd:bf:ac:28:dc:1d:0e:91:
7d:c9:19:7b:19:86:13:b0:e4:62:c0:08:d5:83:b3:
59:59:fe:1e:1e:9e:91:da:82:f8:c9:40:14:f4:e8:
10:76:bb:0a:59:8f:cf:2e:d1:b0:94:63:de:fa:b2:
44:a1:f4:ee:8c:d7:10:f5:14:9d:e8:67:64:22:ae:
6e:07:51:0b:2f:47:38:d9:68:1b:8a:27:4b:66:9c:
3a:d7:7a:c1:0b:d3:6c:c1:25:ce:8e:6a:7d:56:8a:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:91:BE:53:C3:A5:42:FD:5E:47:82:B8:23:9E:43:F3:11:30:15:14
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A19F314DBD111F0B3A7088354641951.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.250.252.0/24
43.250.254.0/23
103.76.122.0/23
103.98.53.0/24
103.99.36.0/22
103.109.180.0/22
103.111.228.0/23
103.118.180.0/22
103.170.58.0/23
103.171.174.0/23
103.173.99.0/24
103.178.59.0/24
103.178.160.0/23
103.178.166.0/23
103.179.94.0/23
103.180.110.0/23
103.180.172.0/23
103.180.176.0/23
103.180.212.0/23
103.180.236.0/23
103.181.114.0/23
103.181.198.0/23
103.204.169.0/24
103.211.56.0/24
103.212.136.0/23
150.242.200.0/22
163.227.190.0/24
IPv6:
2001:df2:1c40::/48
2001:df5:7940::/48
2401:7ee0::/47
Signature Algorithm: sha256WithRSAEncryption
9c:85:79:70:fe:17:d1:68:9f:ce:5a:39:6f:60:30:bf:a8:e5:
c3:bd:65:57:05:a4:d5:58:62:b0:cc:cd:3b:57:5b:00:0e:82:
e5:f7:eb:27:97:31:dd:f5:7f:a9:c6:fd:11:df:9d:a1:c0:39:
99:df:8f:12:86:69:b3:e0:f7:f6:2a:3f:e0:9c:ed:a3:19:9e:
cc:83:18:5f:0a:bf:18:81:6b:f0:d6:ec:95:64:42:2a:50:d4:
56:76:40:45:a0:0b:89:79:bd:42:b5:cd:33:b0:14:53:81:9f:
0f:c7:98:bf:ea:f0:bf:76:f6:f1:23:68:81:bd:d7:1e:2c:cb:
51:68:74:22:7c:c4:8b:3a:14:39:d8:53:fe:dd:88:2e:74:66:
df:eb:8f:3f:a2:be:7c:d9:08:26:e8:9b:4a:ec:f2:1f:24:ad:
26:63:61:24:f1:a0:28:69:4f:29:63:c3:19:6f:ec:0b:d3:c1:
19:c3:fc:d4:93:75:c5:74:a8:06:d8:b7:6f:ad:e8:7c:36:2a:
68:f5:c9:cf:1c:43:b4:ab:4b:39:4b:73:df:be:a3:52:be:c5:
90:01:f0:9b:8d:f2:a1:70:07:b9:76:38:61:8e:96:ff:69:c8:
28:ed:47:7c:ec:4f:93:09:8e:8c:9a:d9:ba:df:cf:dd:52:2c:
8d:4a:95:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:42:58 2026 by rpki-client