Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/B4DF66BA809F11E7B741FD2EC4F9AE02.roa
File: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (raw, json)
Hash identifier: k6JasZ6qDQky92WYRiIlqMqoQzsCwvXop3AMU2lxOjo=
Subject key identifier: 21:EA:89:94:FC:E1:E5:E4:5A:00:80:18:C5:C7:5B:38:74:B7:8D:5F
Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial: 1A5B
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/B4DF66BA809F11E7B741FD2EC4F9AE02.roa
Signing time: Thu 08 Oct 2026 04:41:17 +0000
ROA not before: Thu 08 Oct 2026 04:41:17 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 56286
IP address blocks: 103.29.56.0/22 maxlen: 22
103.29.56.0/24 maxlen: 24
103.29.57.0/24 maxlen: 24
103.29.58.0/24 maxlen: 24
103.29.59.0/24 maxlen: 24
103.106.166.0/23 maxlen: 23
103.106.166.0/24 maxlen: 24
103.106.167.0/24 maxlen: 24
203.25.78.0/24 maxlen: 24
2403:1300::/32 maxlen: 32
2403:1300::/36 maxlen: 36
2403:1300:100::/40 maxlen: 40
2403:1300:100::/48 maxlen: 48
2403:1300:101::/48 maxlen: 48
2403:1300:102::/48 maxlen: 48
2403:1300:111::/48 maxlen: 48
2403:1300:112::/48 maxlen: 48
2403:1300:113::/48 maxlen: 48
2403:1300:121::/48 maxlen: 48
2403:1300:122::/48 maxlen: 48
2403:1300:123::/48 maxlen: 48
2403:1300:131::/48 maxlen: 48
2403:1300:200::/40 maxlen: 40
2403:1300:201::/48 maxlen: 48
2403:1300:202::/48 maxlen: 48
2403:1300:211::/48 maxlen: 48
2403:1300:221::/48 maxlen: 48
2403:1300:222::/48 maxlen: 48
2403:1300:223::/48 maxlen: 48
2403:1300:231::/48 maxlen: 48
2403:1300:300::/40 maxlen: 40
2403:1300:301::/48 maxlen: 48
2403:1300:302::/48 maxlen: 48
2403:1300:311::/48 maxlen: 48
2403:1300:312::/48 maxlen: 48
2403:1300:321::/48 maxlen: 48
2403:1300:331::/48 maxlen: 48
2403:1300:1000::/36 maxlen: 36
2403:1300:2000::/36 maxlen: 36
2403:1300:3000::/36 maxlen: 36
2403:1300:8000::/36 maxlen: 36
2403:1300:8000::/40 maxlen: 40
2403:1300:8001::/48 maxlen: 48
2403:1300:8002::/48 maxlen: 48
2403:1300:8004::/48 maxlen: 48
2403:1300:beef::/48 maxlen: 48
2403:1300:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 16:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6747 (0x1a5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Validity
Not Before: Oct 8 04:41:17 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ac71eec-6b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:6f:db:4b:dc:37:98:c3:7f:bf:76:4d:bf:
7c:35:50:e9:52:4d:64:ba:44:4b:14:79:53:f3:d7:
bf:32:d8:00:7f:44:e2:b6:59:0c:56:d3:e5:fc:4c:
04:de:17:37:7e:c1:e0:c3:9c:d3:16:f9:88:9e:89:
97:0d:f3:7c:4a:0c:93:9d:21:32:86:4a:30:0b:18:
6a:e5:56:65:79:9a:68:3e:8a:17:c1:6a:c5:b4:90:
f4:ec:1d:ce:e8:09:03:69:3f:ae:38:00:e4:df:23:
8a:f6:9c:f0:af:13:f6:b4:10:75:c7:43:4b:be:6a:
b7:13:aa:ec:b7:94:9f:fc:79:dd:f4:db:5d:65:3b:
f3:59:39:49:78:f9:aa:b0:96:c7:d7:23:da:52:a6:
24:6a:1c:98:72:b7:f4:e1:54:0a:14:5b:8f:94:c2:
a1:2a:d7:3c:e0:1c:6c:3d:88:f8:1e:61:ca:ea:68:
37:d8:13:bc:d1:df:b2:31:70:1a:87:c4:78:da:c3:
43:1f:52:49:e8:80:6f:1c:2c:2b:ac:18:fc:e4:63:
c1:e5:52:36:7e:7a:76:72:0c:d2:67:f1:97:1d:b9:
ff:17:d9:28:19:03:44:e9:ee:ca:bd:ce:d6:0a:8a:
9e:a0:59:66:a9:0a:a8:64:f2:a3:f9:d7:ef:9b:c1:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:89:94:FC:E1:E5:E4:5A:00:80:18:C5:C7:5B:38:74:B7:8D:5F
X509v3 Authority Key Identifier:
keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/B4DF66BA809F11E7B741FD2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.29.56.0/22
103.106.166.0/23
203.25.78.0/24
IPv6:
2403:1300::/32
Signature Algorithm: sha256WithRSAEncryption
35:53:d6:81:5a:d9:31:56:e4:77:a3:86:92:ce:d1:93:6f:21:
4b:5b:5e:e5:c6:37:4a:f2:5b:36:21:59:65:2c:34:84:9e:52:
a4:06:d9:2c:f2:35:6c:93:36:bb:e6:1a:3c:bf:19:8e:d6:6f:
9d:24:43:d4:a8:5e:6f:26:5e:83:a4:8f:9b:7f:15:eb:58:64:
30:b8:34:8f:cb:bb:76:b9:21:1f:ec:d3:08:0c:17:96:3c:cb:
2f:28:79:4a:1a:42:06:f2:d1:0a:e1:41:d8:80:d4:5a:d5:0f:
83:00:bb:e0:6f:0a:f4:79:c3:b4:1f:5c:87:e9:c1:7e:c3:4b:
86:7c:25:48:ea:1e:69:82:2c:2c:36:c2:fa:41:a7:d9:c5:76:
27:b2:e4:62:6d:31:25:85:3e:41:e8:f1:a2:7f:66:aa:f1:b6:
b9:53:dc:6e:a8:fb:59:89:f5:13:ac:18:fc:63:53:8f:5f:b7:
90:9c:33:ae:d0:a6:bd:62:7f:f0:eb:97:8d:f4:e0:f2:81:d3:
e5:95:82:87:99:33:40:b2:1b:75:60:b5:4d:8e:07:68:08:62:
cf:45:ef:d8:6f:52:8f:d0:6f:c0:56:a9:14:ac:c4:23:23:d6:
16:9f:da:a6:f0:8b:04:8c:d3:4d:1d:70:48:8f:4d:3e:e9:10:
7a:32:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:45:24 2026 by rpki-client