Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09D19E4C0D4511EBA34AF263C4F9AE02.roa
File: 09D19E4C0D4511EBA34AF263C4F9AE02.roa (raw, json)
Hash identifier: 5zXmHlOK6wlxZJBdkN3snDCD1EAZPdzP5zNYwxzvbAk=
Subject key identifier: B5:44:A2:F7:F2:C3:2A:66:FC:CF:43:4F:85:AD:FB:C8:58:13:EF:5A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F776
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09D19E4C0D4511EBA34AF263C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:50:56 +0000
ROA not before: Mon 06 Jul 2026 17:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45775
IP address blocks: 27.131.208.0/21 maxlen: 24
43.226.28.0/22 maxlen: 24
43.231.240.0/22 maxlen: 24
43.251.88.0/22 maxlen: 24
45.113.100.0/22 maxlen: 24
45.123.108.0/22 maxlen: 24
45.124.4.0/22 maxlen: 24
45.250.48.0/22 maxlen: 24
103.17.84.0/22 maxlen: 24
103.42.124.0/22 maxlen: 24
103.42.156.0/22 maxlen: 24
103.42.172.0/22 maxlen: 24
103.44.172.0/22 maxlen: 24
103.51.56.0/22 maxlen: 24
103.52.252.0/22 maxlen: 24
103.94.106.0/23 maxlen: 24
103.170.8.0/23 maxlen: 24
103.192.116.0/22 maxlen: 24
103.214.136.0/22 maxlen: 24
103.219.44.0/22 maxlen: 24
110.172.52.0/22 maxlen: 24
113.21.64.0/20 maxlen: 24
139.5.228.0/22 maxlen: 24
180.94.18.0/23 maxlen: 24
223.223.128.0/19 maxlen: 24
2400:85c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63350 (0xf776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beb00-819c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:f0:13:34:6a:fe:2f:e9:8d:3e:c5:0a:54:
c6:00:9d:00:15:b9:32:cc:6f:a8:bb:b0:b6:da:8d:
03:a7:0f:46:83:19:9e:e5:15:4f:fd:5e:ad:5f:e4:
c9:00:ca:93:85:b7:4a:76:76:26:2d:d2:f1:08:32:
57:4a:77:f4:d0:f8:bf:fb:6a:1c:be:78:43:da:3c:
50:1d:f4:01:7e:6d:a8:03:e2:b2:4b:e1:2c:2d:19:
2c:30:54:bf:f0:06:fe:92:45:ab:de:2e:2f:65:cc:
fb:8f:6e:06:ac:2c:f9:2d:fc:71:d1:db:d9:9b:70:
16:93:37:33:e4:50:97:53:8a:11:15:f3:ef:a6:ee:
f8:9e:2d:db:8b:30:a5:a1:ba:53:ee:99:0b:25:d7:
49:99:68:a5:63:74:cd:02:59:d7:9a:6b:a3:0b:e9:
72:44:b4:a2:42:9a:58:f4:e8:2a:62:e3:67:52:71:
be:79:13:28:bc:17:bf:8a:fa:0d:79:5d:03:88:4b:
08:bd:ef:43:d3:d5:2a:a1:ea:0b:ab:8d:02:59:1b:
50:61:8e:41:d8:d5:84:db:e4:81:c9:44:29:14:1b:
7e:6b:da:3d:96:45:c8:d6:9a:6b:1f:f5:45:d3:a3:
d7:3c:76:81:ed:3c:88:9a:45:f1:20:57:df:a5:18:
bf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:44:A2:F7:F2:C3:2A:66:FC:CF:43:4F:85:AD:FB:C8:58:13:EF:5A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09D19E4C0D4511EBA34AF263C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.208.0/21
43.226.28.0/22
43.231.240.0/22
43.251.88.0/22
45.113.100.0/22
45.123.108.0/22
45.124.4.0/22
45.250.48.0/22
103.17.84.0/22
103.42.124.0/22
103.42.156.0/22
103.42.172.0/22
103.44.172.0/22
103.51.56.0/22
103.52.252.0/22
103.94.106.0/23
103.170.8.0/23
103.192.116.0/22
103.214.136.0/22
103.219.44.0/22
110.172.52.0/22
113.21.64.0/20
139.5.228.0/22
180.94.18.0/23
223.223.128.0/19
IPv6:
2400:85c0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:2a:58:34:ce:08:84:ea:a8:5e:fa:ff:58:75:2e:a7:61:52:
86:36:ec:eb:91:2a:ef:f8:a2:a7:5c:9f:29:9d:85:05:b4:19:
6e:91:17:53:31:37:27:67:70:f0:67:ad:4f:30:02:4f:d8:9a:
e7:24:99:b7:3b:30:37:76:6f:8f:72:d2:4b:4d:b9:c5:b9:58:
9d:f6:a6:d9:f8:23:03:7a:0d:1f:da:04:f6:b0:4b:03:99:f1:
74:48:ec:7e:ce:42:ed:0c:9b:82:59:32:5a:cd:a7:4c:2c:fe:
64:32:6f:ef:16:95:e2:72:69:1a:3a:52:90:ba:12:e6:da:6c:
e7:95:d6:10:a4:b2:36:17:8f:13:a0:11:ac:80:b6:91:fa:06:
3c:a2:44:23:7a:16:3b:2b:25:f2:ab:7d:9f:03:34:c2:68:a9:
f0:86:78:bd:14:38:f5:3a:8f:09:92:4f:e2:6d:ea:29:d4:9e:
6f:19:bd:6c:9e:02:38:a2:ed:23:57:4a:b3:7e:c4:13:71:2a:
bb:15:60:23:b2:ca:ee:66:ee:6a:4a:75:3b:3c:8b:f7:ec:82:
08:df:22:5e:b6:94:92:f5:19:bc:2e:70:33:42:cd:15:38:dd:
c9:a6:cf:85:a1:91:42:ec:df:37:25:bb:d4:45:d0:0e:01:29:
44:93:b4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:21 2026 by rpki-client