Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DB557D08A9111EDA4336377C4F9AE02.roa
File: 0DB557D08A9111EDA4336377C4F9AE02.roa (raw, json)
Hash identifier: 8AI/Con0pRmcXbsjLU/F9qm6kDQAEY3RJ1FA5aw0P7o=
Subject key identifier: 33:06:61:77:2E:69:40:44:DD:C6:CE:5E:E4:47:84:67:B2:54:EC:12
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F7A4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DB557D08A9111EDA4336377C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:52:25 +0000
ROA not before: Mon 06 Jul 2026 17:52:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58659
IP address blocks: 43.254.204.0/22 maxlen: 24
43.254.212.0/22 maxlen: 24
43.255.132.0/22 maxlen: 24
43.255.140.0/22 maxlen: 24
45.126.8.0/22 maxlen: 24
103.12.192.0/22 maxlen: 24
103.19.248.0/22 maxlen: 24
103.67.12.0/22 maxlen: 24
103.83.152.0/22 maxlen: 24
103.91.168.0/23 maxlen: 24
103.183.102.0/23 maxlen: 24
103.183.138.0/23 maxlen: 24
103.187.232.0/23 maxlen: 24
103.201.144.0/22 maxlen: 24
103.211.176.0/22 maxlen: 24
103.228.44.0/22 maxlen: 24
103.236.152.0/22 maxlen: 24
103.243.184.0/22 maxlen: 24
103.249.120.0/22 maxlen: 24
139.5.100.0/22 maxlen: 24
202.9.124.0/22 maxlen: 24
2001:df2:c0::/48 maxlen: 48
2400:e1c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63396 (0xf7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:52:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beb59-136b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:fa:8e:ad:94:6a:1d:8c:19:b2:e0:06:8c:
ef:b6:01:05:3e:c4:fc:aa:b5:48:c2:cf:75:18:06:
9c:da:e9:2b:e6:4d:d1:79:d9:f0:47:d1:f2:87:da:
49:40:dd:f2:f3:24:2c:e1:93:c8:96:45:99:f4:34:
be:bb:9d:a0:38:6a:ad:a5:ba:c4:34:03:8e:b2:b6:
9e:c0:7e:32:cc:93:e6:cb:09:c7:7a:e9:f3:27:bc:
4e:4b:53:92:79:a9:6b:8e:61:bb:87:dc:db:dc:ec:
73:78:a5:2b:72:47:c4:fc:30:03:57:cd:a0:0e:e8:
d6:67:d5:02:27:fa:d3:f8:dd:50:8d:84:56:b2:69:
98:c9:e5:06:2d:32:8a:d5:c2:32:c6:ad:6f:57:f6:
36:62:d4:89:af:d6:78:83:1b:93:26:b8:ca:93:fb:
ef:85:1b:59:9c:2d:b3:31:b3:1e:a2:7d:80:24:20:
50:53:05:e4:3b:02:91:1d:ac:ec:50:fd:87:49:d4:
bb:1b:4d:bb:53:a0:1b:70:3b:a6:c1:a9:ee:5b:fa:
2b:f9:4d:de:4d:ec:e6:c5:ee:e0:99:44:b2:87:f7:
c7:74:d8:b6:00:69:e9:c5:f7:54:f6:93:b0:17:57:
04:c8:06:48:8e:61:fb:47:40:af:e1:b1:f1:f3:e9:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:06:61:77:2E:69:40:44:DD:C6:CE:5E:E4:47:84:67:B2:54:EC:12
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0DB557D08A9111EDA4336377C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.254.204.0/22
43.254.212.0/22
43.255.132.0/22
43.255.140.0/22
45.126.8.0/22
103.12.192.0/22
103.19.248.0/22
103.67.12.0/22
103.83.152.0/22
103.91.168.0/23
103.183.102.0/23
103.183.138.0/23
103.187.232.0/23
103.201.144.0/22
103.211.176.0/22
103.228.44.0/22
103.236.152.0/22
103.243.184.0/22
103.249.120.0/22
139.5.100.0/22
202.9.124.0/22
IPv6:
2001:df2:c0::/48
2400:e1c0::/32
Signature Algorithm: sha256WithRSAEncryption
20:1c:f5:6d:a3:4e:97:f6:a3:25:68:04:35:f0:1f:85:82:2a:
26:5c:6d:dc:f0:76:32:fc:cb:d9:03:f0:55:2b:ed:5f:29:4a:
a0:10:3e:06:a9:fa:a8:87:2f:3c:a2:2d:68:22:67:aa:5b:7b:
30:d0:0a:5a:d3:9f:fc:28:94:e0:b3:49:c8:3d:1f:a3:87:79:
9e:26:1b:d8:a5:58:96:40:26:73:59:2b:03:a7:20:b4:dd:90:
c1:fb:55:7b:b1:45:54:0f:02:27:53:33:e6:49:af:92:1e:b2:
9d:b8:ea:a3:9a:a6:f9:bd:44:2f:65:85:15:b2:8f:e9:33:d1:
83:fb:5d:b9:59:8d:ce:c0:03:22:2c:6a:91:23:59:c2:dd:ae:
5e:94:d7:e2:cb:d4:73:9b:b3:c7:09:87:05:99:5e:79:5e:a5:
55:cc:5f:69:fa:b9:04:7b:16:c9:d2:b9:a9:55:27:50:18:13:
c5:54:57:82:93:4d:52:a6:7d:0a:81:3f:59:6a:c2:fe:ef:25:
57:ba:49:87:c2:f9:08:67:96:c6:0d:ce:c6:73:c1:fb:41:cd:
59:59:88:24:bb:d2:eb:7a:aa:a0:5c:f6:bc:8e:be:78:67:5b:
76:f0:79:55:27:4e:dd:e5:83:b5:4d:d1:39:cd:7c:1d:38:83:
9a:21:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:36 2026 by rpki-client