Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D3480822CDD11F1ABF684D89D833773.roa
File: 0D3480822CDD11F1ABF684D89D833773.roa (raw, json)
Hash identifier: JtqISsrb+9aOzYoT4+snBy85gE/9OvPfSLi58HeZayI=
Subject key identifier: EA:81:FA:8D:1D:03:D8:C7:3D:C4:A3:65:19:48:87:2D:AD:79:34:D8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB50
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D3480822CDD11F1ABF684D89D833773.roa
Signing time: Sun 31 May 2026 17:51:12 +0000
ROA not before: Sun 31 May 2026 17:51:12 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 45769
IP address blocks: 45.112.144.0/22 maxlen: 24
45.112.148.0/22 maxlen: 24
45.112.184.0/22 maxlen: 24
103.26.232.0/22 maxlen: 24
103.51.232.0/22 maxlen: 24
103.51.236.0/22 maxlen: 24
103.52.36.0/22 maxlen: 24
150.242.205.0/24 maxlen: 24
150.242.206.0/24 maxlen: 24
150.242.207.0/24 maxlen: 24
182.48.192.0/18 maxlen: 24
202.122.16.0/24 maxlen: 24
202.122.17.0/24 maxlen: 24
202.122.18.0/24 maxlen: 24
202.122.19.0/24 maxlen: 24
202.122.20.0/24 maxlen: 24
202.122.21.0/24 maxlen: 24
202.122.22.0/24 maxlen: 24
202.122.23.0/24 maxlen: 24
202.131.128.0/24 maxlen: 24
202.131.129.0/24 maxlen: 24
202.131.130.0/24 maxlen: 24
202.131.131.0/24 maxlen: 24
202.131.132.0/24 maxlen: 24
202.131.133.0/24 maxlen: 24
202.131.134.0/24 maxlen: 24
202.131.135.0/24 maxlen: 24
202.131.136.0/23 maxlen: 24
202.131.138.0/24 maxlen: 24
202.131.139.0/24 maxlen: 24
202.131.140.0/24 maxlen: 24
202.131.141.0/24 maxlen: 24
202.131.142.0/23 maxlen: 24
202.131.144.0/24 maxlen: 24
202.131.145.0/24 maxlen: 24
202.131.146.0/24 maxlen: 24
202.131.147.0/24 maxlen: 24
202.131.148.0/24 maxlen: 24
202.131.149.0/24 maxlen: 24
202.131.150.0/24 maxlen: 24
202.131.151.0/24 maxlen: 24
202.131.152.0/24 maxlen: 24
202.131.153.0/24 maxlen: 24
202.131.155.0/24 maxlen: 24
202.131.156.0/24 maxlen: 24
202.131.157.0/24 maxlen: 24
202.131.158.0/23 maxlen: 24
202.140.33.0/24 maxlen: 24
202.140.34.0/24 maxlen: 24
202.140.35.0/24 maxlen: 24
202.140.36.0/24 maxlen: 24
202.140.37.0/24 maxlen: 24
202.140.38.0/24 maxlen: 24
202.140.39.0/24 maxlen: 24
202.140.41.0/24 maxlen: 24
202.140.42.0/23 maxlen: 24
202.140.44.0/24 maxlen: 24
202.140.45.0/24 maxlen: 24
202.140.47.0/24 maxlen: 24
202.140.48.0/24 maxlen: 24
202.140.49.0/24 maxlen: 24
202.140.50.0/24 maxlen: 24
202.140.51.0/24 maxlen: 24
202.140.52.0/24 maxlen: 24
202.140.53.0/24 maxlen: 24
202.140.54.0/24 maxlen: 24
202.140.55.0/24 maxlen: 24
202.140.56.0/24 maxlen: 24
202.140.57.0/24 maxlen: 24
202.140.58.0/24 maxlen: 24
202.140.59.0/24 maxlen: 24
202.140.60.0/24 maxlen: 24
202.140.61.0/24 maxlen: 24
202.140.62.0/24 maxlen: 24
202.140.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60240 (0xeb50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:51:12 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c750f-dfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:98:4c:a6:5f:4b:0d:c3:44:ed:cb:fa:ae:
32:ca:4f:9d:90:b5:9d:3a:9c:da:12:d6:9f:ee:5c:
f2:3c:8f:ea:8f:0f:ce:17:f7:7e:52:b2:e6:73:ad:
a1:90:56:38:5c:7e:b0:b1:3b:50:b7:45:56:e3:75:
fc:df:f5:92:38:00:03:a1:85:ab:d2:35:82:6c:06:
48:cb:31:58:8a:62:cd:6e:9d:25:63:31:d3:f6:46:
9e:d1:b8:39:89:c7:9c:92:7f:e3:f9:5a:da:95:87:
88:5b:62:31:ff:56:59:88:06:e9:f2:c7:39:b5:5e:
16:18:6d:bb:d1:c4:52:92:02:57:81:21:20:15:12:
a6:08:b5:11:a0:62:34:6d:a2:0b:22:2f:dc:fd:ea:
cd:a9:08:96:5a:bb:b6:16:f9:70:d7:ad:c7:5b:95:
2b:31:0b:bf:b2:b7:84:b3:ca:43:75:34:5a:00:79:
a7:33:91:1c:44:5c:c2:f2:f0:26:a9:69:93:cc:94:
cd:59:8d:67:7c:49:c0:25:d4:34:2e:25:d6:dd:9c:
14:d9:f2:43:72:00:33:61:69:f9:7e:74:0e:02:f7:
0f:63:57:be:84:92:92:31:b1:a3:12:66:ce:b4:f5:
60:66:0a:3b:de:2f:b4:c7:66:4f:07:51:85:c9:cd:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:81:FA:8D:1D:03:D8:C7:3D:C4:A3:65:19:48:87:2D:AD:79:34:D8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D3480822CDD11F1ABF684D89D833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.144.0/21
45.112.184.0/22
103.26.232.0/22
103.51.232.0/21
103.52.36.0/22
150.242.205.0-150.242.207.255
182.48.192.0/18
202.122.16.0/21
202.131.128.0-202.131.153.255
202.131.155.0-202.131.159.255
202.140.33.0-202.140.39.255
202.140.41.0-202.140.45.255
202.140.47.0-202.140.63.255
Signature Algorithm: sha256WithRSAEncryption
a2:cd:6d:04:32:2f:c3:fe:c3:d3:f4:91:ec:62:12:34:13:84:
bf:46:f6:11:1e:cc:0d:ff:24:25:45:d3:a8:ee:aa:e4:8c:8d:
1f:a8:0d:31:aa:7f:be:b6:4c:24:53:d6:ba:9b:fe:c4:31:70:
1a:60:0a:e4:94:e0:2e:20:1c:4f:83:6d:a6:37:37:cc:22:d0:
92:bd:46:52:2b:8c:25:72:d7:24:5b:e2:0c:07:49:77:50:e0:
7e:13:61:50:40:c6:41:7e:e6:0f:2a:93:6f:7a:9d:f8:15:72:
4e:1b:d7:9b:79:ac:ac:b8:50:c2:33:27:c2:b3:d3:4d:32:d6:
68:b2:66:9b:a3:16:d5:95:fd:c9:a4:3d:f0:5e:de:1b:b2:8f:
b7:77:bb:7e:c4:09:02:8a:d4:6e:28:23:54:b8:b6:a7:85:86:
75:44:78:da:33:ad:4c:66:aa:4c:1b:aa:c9:d3:a5:ed:2a:34:
16:d3:8b:a5:72:8e:31:ce:46:b6:ea:84:5a:bb:0d:cc:6e:84:
a5:0d:b9:01:c5:9c:13:fc:c1:3f:29:53:95:3b:8e:77:88:51:
2a:20:12:a5:3f:ad:ac:54:0c:32:59:92:82:50:04:89:23:c7:
d7:2a:7d:21:38:1d:af:74:c5:0a:93:09:6c:47:b2:b8:1b:e3:
d1:6e:a7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:14 2026 by rpki-client