Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/067C2E9AE6E011F0B463E4DB5E6F56BC.roa
File: 067C2E9AE6E011F0B463E4DB5E6F56BC.roa (raw, json)
Hash identifier: fp9wxhFAGrjM7KTaxz5di4qCTXap9pjC1mrjzRl1CYA=
Subject key identifier: ED:8C:F8:70:A8:BC:62:E9:7F:BE:16:94:06:BC:E0:3D:9F:F3:43:04
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA06
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/067C2E9AE6E011F0B463E4DB5E6F56BC.roa
Signing time: Sun 31 May 2026 17:40:48 +0000
ROA not before: Sun 31 May 2026 17:40:48 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 151732
IP address blocks: 103.115.129.0/24 maxlen: 24
103.129.194.0/24 maxlen: 24
103.164.26.0/23 maxlen: 24
103.191.88.0/23 maxlen: 24
103.197.78.0/23 maxlen: 23
103.197.78.0/24 maxlen: 24
103.197.79.0/24 maxlen: 24
2001:df4:5c40::/48 maxlen: 48
2401:d5e0::/48 maxlen: 48
2401:d5e0:1::/48 maxlen: 48
2401:d5e0:2::/48 maxlen: 48
2401:d5e0:3::/48 maxlen: 48
2401:d5e0:4::/48 maxlen: 48
2401:d5e0:5::/48 maxlen: 48
2401:d5e0:6::/48 maxlen: 48
2401:d5e0:7::/48 maxlen: 48
2401:d5e0:8::/48 maxlen: 48
2401:d5e0:9::/48 maxlen: 48
2401:d5e0:a::/48 maxlen: 48
2401:d5e0:b::/48 maxlen: 48
2401:d5e0:c::/48 maxlen: 48
2401:d5e0:d::/48 maxlen: 48
2401:d5e0:e::/48 maxlen: 48
2401:d5e0:f::/48 maxlen: 48
2401:d5e0:10::/48 maxlen: 48
2401:d5e0:11::/48 maxlen: 48
2401:d5e0:12::/48 maxlen: 48
2401:d5e0:13::/48 maxlen: 48
2401:d5e0:14::/48 maxlen: 48
2401:d5e0:15::/48 maxlen: 48
2401:d5e0:16::/48 maxlen: 48
2401:d5e0:17::/48 maxlen: 48
2401:d5e0:18::/48 maxlen: 48
2401:d5e0:19::/48 maxlen: 48
2401:d5e0:1a::/48 maxlen: 48
2401:d5e0:1b::/48 maxlen: 48
2401:d5e0:1c::/48 maxlen: 48
2401:d5e0:1d::/48 maxlen: 48
2401:d5e0:1e::/48 maxlen: 48
2401:d5e0:1f::/48 maxlen: 48
2401:d5e0:20::/48 maxlen: 48
2401:d5e0:21::/48 maxlen: 48
2401:d5e0:22::/48 maxlen: 48
2401:d5e0:23::/48 maxlen: 48
2401:d5e0:24::/48 maxlen: 48
2401:d5e0:25::/48 maxlen: 48
2401:d5e0:26::/48 maxlen: 48
2401:d5e0:27::/48 maxlen: 48
2401:d5e0:28::/48 maxlen: 48
2401:d5e0:29::/48 maxlen: 48
2401:d5e0:2a::/48 maxlen: 48
2401:d5e0:2b::/48 maxlen: 48
2401:d5e0:2c::/48 maxlen: 48
2401:d5e0:2d::/48 maxlen: 48
2401:d5e0:2e::/48 maxlen: 48
2401:d5e0:2f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59910 (0xea06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:40:48 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c72a0-955d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:f0:70:8a:47:9e:ab:0a:5c:81:26:3d:49:
7f:c9:0a:77:ff:d6:f9:b4:4f:0b:62:ba:95:a3:ab:
e6:56:2a:72:97:44:85:aa:94:a0:de:fb:fe:72:3a:
c7:5b:f5:80:23:bb:58:02:29:6c:b6:74:a4:99:a3:
2a:fb:89:44:bd:2f:9e:d1:7a:f8:ee:ca:42:9c:ef:
eb:67:bd:6f:d7:dd:0c:35:1d:91:c0:0d:cd:08:ef:
8b:fe:6d:86:a3:45:96:45:e2:70:94:fe:15:b8:ea:
aa:41:3f:9a:d6:18:e4:7e:10:dd:e0:2b:86:d0:57:
47:44:01:ee:84:8a:ca:3c:9c:8a:52:6c:25:74:cb:
18:8b:9c:cb:22:34:9a:d9:f7:c7:7b:2b:52:3b:6f:
e0:b4:c3:d9:ba:b5:68:51:7e:b4:f5:c2:e3:ef:ee:
92:fe:fc:d0:70:c2:87:e2:1d:85:54:03:c1:e7:d1:
47:5b:d1:0e:46:26:10:ce:35:9c:80:d2:fa:83:23:
7c:61:3b:f3:1f:77:a9:b4:87:aa:6f:78:38:c5:57:
91:b7:81:be:73:95:bb:e2:d8:38:5f:c4:32:b0:28:
2a:f7:29:18:74:11:0e:0c:ca:28:48:7e:ba:32:38:
6f:a3:b3:47:c0:13:50:34:0c:12:fe:be:d8:7b:d2:
30:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:F8:70:A8:BC:62:E9:7F:BE:16:94:06:BC:E0:3D:9F:F3:43:04
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/067C2E9AE6E011F0B463E4DB5E6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.129.0/24
103.129.194.0/24
103.164.26.0/23
103.191.88.0/23
103.197.78.0/23
IPv6:
2001:df4:5c40::/48
2401:d5e0::-2401:d5e0:2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:72:7f:86:e8:fa:2d:2c:60:13:a7:32:d6:27:dd:97:c6:f2:
00:84:e8:4a:51:3b:b4:ca:f0:7f:54:d2:1e:e3:d5:92:70:21:
b3:b3:4e:0f:c1:06:9b:74:51:08:8f:fc:66:65:b2:f4:41:44:
3b:07:9a:c8:99:d0:0f:d6:6d:11:c9:f2:02:0e:76:1b:3a:70:
48:97:a1:26:1d:f2:94:80:cd:80:d3:5c:98:c5:3e:1f:56:f4:
9a:6e:49:67:ba:f2:31:7c:fa:26:8e:c1:b9:23:07:56:b9:bd:
ac:b2:ea:23:c9:d0:90:b3:d1:4b:32:33:cf:95:24:00:4c:01:
57:06:aa:38:e7:30:e8:c3:9f:fe:a2:5b:c4:79:2d:eb:7c:75:
24:1d:e5:79:39:4f:31:2a:d4:b1:01:b8:97:e6:b3:0e:4e:f1:
7d:92:18:b2:a2:cc:0e:9b:d9:52:f3:aa:31:a0:aa:24:fb:4d:
3e:b6:15:1f:c0:d2:47:7b:4e:bc:64:d9:e9:93:fa:9c:ec:63:
b8:df:87:d2:86:b1:eb:fe:4d:83:57:68:9b:74:15:0d:9c:f4:
90:8a:0b:50:7d:bc:18:fd:24:65:84:13:a1:87:10:30:33:dc:
7c:6c:87:db:1e:5c:e3:26:de:cc:73:f7:ca:b7:4e:3f:bf:6d:
56:b1:ec:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:45 2026 by rpki-client