Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1551AC80BE6811EEA3F1816EC4F9AE02.roa
File: 1551AC80BE6811EEA3F1816EC4F9AE02.roa (raw, json)
Hash identifier: OekLClSC8ZOmEmv8kZ6QGO6DQ9WmhklB5+/2iiTCB8w=
Subject key identifier: A4:62:A3:76:11:7C:8E:17:26:7B:1A:A6:FD:E2:B1:A0:D0:7F:C0:58
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F788
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1551AC80BE6811EEA3F1816EC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:51:32 +0000
ROA not before: Mon 06 Jul 2026 17:51:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55353
IP address blocks: 103.15.64.0/22 maxlen: 22
103.15.64.0/24 maxlen: 24
103.15.65.0/24 maxlen: 24
103.15.66.0/24 maxlen: 24
103.15.67.0/24 maxlen: 24
111.118.240.0/20 maxlen: 20
111.118.240.0/24 maxlen: 24
111.118.241.0/24 maxlen: 24
111.118.242.0/24 maxlen: 24
111.118.243.0/24 maxlen: 24
111.118.244.0/24 maxlen: 24
111.118.245.0/24 maxlen: 24
111.118.246.0/24 maxlen: 24
111.118.247.0/24 maxlen: 24
111.118.248.0/24 maxlen: 24
111.118.249.0/24 maxlen: 24
111.118.250.0/24 maxlen: 24
111.118.251.0/24 maxlen: 24
111.118.252.0/24 maxlen: 24
111.118.253.0/24 maxlen: 24
111.118.254.0/24 maxlen: 24
111.118.255.0/24 maxlen: 24
150.129.144.0/22 maxlen: 22
150.129.144.0/24 maxlen: 24
150.129.145.0/24 maxlen: 24
150.129.146.0/24 maxlen: 24
150.129.147.0/24 maxlen: 24
183.182.84.0/22 maxlen: 22
183.182.84.0/24 maxlen: 24
183.182.85.0/24 maxlen: 24
183.182.86.0/24 maxlen: 24
183.182.87.0/24 maxlen: 24
2401:c300::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63368 (0xf788)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:51:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beb24-1ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0d:c1:ba:81:0b:9c:45:2d:93:e2:b3:e1:cd:
86:1e:23:04:2a:86:ab:21:a3:40:a9:d7:7c:cf:2c:
99:52:b5:c9:19:31:29:ff:9f:34:b2:b3:5e:e7:64:
06:24:2f:16:55:c5:c9:f4:3b:4c:a0:5c:4b:6a:a7:
4a:49:ba:eb:bb:d1:05:ef:b8:8d:91:f8:31:99:af:
59:e7:28:28:ae:75:79:36:c7:f1:4f:09:56:68:e8:
8b:1b:22:1d:3f:bb:c7:be:a7:f3:f1:0f:2d:5f:4c:
87:96:23:37:9c:5a:0f:86:02:f3:60:14:27:71:13:
83:fe:1a:73:1d:d3:b8:7b:ab:f4:4d:3a:49:69:96:
e2:75:d8:07:cb:b2:33:06:81:4a:9b:d9:5d:3a:62:
59:c5:8e:00:11:ca:ae:35:1d:5f:61:cd:00:20:69:
9d:97:1b:98:59:e7:79:67:06:de:48:6f:4a:a6:7a:
10:49:14:73:0f:7b:04:9d:43:e1:4d:0c:34:f6:28:
b4:83:31:ac:fe:97:c0:20:76:f1:a3:f5:ef:b4:d0:
1a:b0:e4:a7:f2:b1:70:25:a9:6b:8e:ba:9e:2d:17:
9c:c5:b0:83:d4:b2:44:8c:f5:e5:0b:b1:ca:33:e6:
5b:a0:03:55:b6:ad:fc:83:78:f2:33:9e:72:dc:f7:
77:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:62:A3:76:11:7C:8E:17:26:7B:1A:A6:FD:E2:B1:A0:D0:7F:C0:58
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1551AC80BE6811EEA3F1816EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.64.0/22
111.118.240.0/20
150.129.144.0/22
183.182.84.0/22
IPv6:
2401:c300::/32
Signature Algorithm: sha256WithRSAEncryption
3e:44:32:59:f6:62:77:2e:a2:74:63:04:2e:22:27:5d:6b:17:
b5:f0:39:cf:f3:6a:10:46:cd:ed:a5:34:28:46:0d:17:49:ef:
01:e9:e3:8a:10:a9:05:e9:26:3c:b4:d2:ef:0f:ca:88:1f:bf:
78:68:e8:0f:c9:68:81:6e:eb:44:b8:5d:27:02:d1:7e:51:20:
ad:17:af:01:0c:d9:36:e1:e7:13:ec:7c:77:e0:f8:71:a8:f0:
67:29:1e:be:e5:ae:fd:fe:a0:65:2b:95:e4:36:65:7d:19:3a:
ba:c0:60:e5:ed:0d:82:03:08:89:d5:59:45:67:b9:00:f8:42:
5f:87:68:a0:5d:1f:20:12:5d:e0:6a:86:48:91:2c:db:3e:2c:
61:0f:61:7d:14:8e:f8:94:35:6e:86:a1:2c:61:de:71:e8:da:
92:af:b7:57:01:d6:bc:f9:48:28:3b:10:87:76:36:b7:6b:80:
43:19:a6:02:61:70:8b:21:7f:32:f4:74:b3:84:0d:54:24:ae:
a8:46:0b:08:7b:58:f1:fd:08:88:aa:76:f4:b3:b3:ac:03:7c:
a0:c4:88:6a:77:e0:5f:17:07:86:c7:37:ba:1f:ba:92:f0:b1:
20:25:d8:ab:ba:c1:4f:fb:bc:78:eb:36:47:e9:98:66:e2:37:
45:41:26:fc
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIDAPeIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NTEzMloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmViMjQtMWFkMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOYNwbqBC5xFLZPis+HNhh4jBCqGqyGjQKnXfM8smVK1yRkxKf+fNLKzXudk
BiQvFlXFyfQ7TKBcS2qnSkm667vRBe+4jZH4MZmvWecoKK51eTbH8U8JVmjoixsi
HT+7x76n8/EPLV9Mh5YjN5xaD4YC82AUJ3ETg/4acx3TuHur9E06SWmW4nXYB8uy
MwaBSpvZXTpiWcWOABHKrjUdX2HNACBpnZcbmFnneWcG3khvSqZ6EEkUcw97BJ1D
4U0MNPYotIMxrP6XwCB28aP177TQGrDkp/KxcCWpa466ni0XnMWwg9SyRIz15Qux
yjPmW6ADVbat/IN48jOectz3d2ECAwEAAaOCAoEwggJ9MB0GA1UdDgQWBBSkYqN2
EXyOFyZ7Gqb94rGg0H/AWDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE1NTFBQzgw
QkU2ODExRUVBM0YxODE2RUM0RjlBRTAyLnJvYTBABggrBgEFBQcBBwEB/wQxMC8w
HgQCAAEwGAMEAmcPQAMEBG928AMEApaBkAMEAre2VDANBAIAAjAHAwUAJAHDADAN
BgkqhkiG9w0BAQsFAAOCAQEAPkQyWfZidy6idGMELiInXWsXtfA5z/NqEEbN7aU0
KEYNF0nvAenjihCpBekmPLTS7w/KiB+/eGjoD8logW7rRLhdJwLRflEgrRevAQzZ
NuHnE+x8d+D4cajwZykevuWu/f6gZSuV5DZlfRk6usBg5e0NggMIidVZRWe5APhC
X4dooF0fIBJd4GqGSJEs2z4sYQ9hfRSO+JQ1boahLGHecejakq+3VwHWvPlIKDsQ
h3Y2t2uAQxmmAmFwiyF/MvR0s4QNVCSuqEYLCHtY8f0IiKp29LOzrAN8oMSIanfg
XxcHhsc3uh+6kvCxICXYq7rBT/u8eOs2R+mYZuI3RUEm/A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:30 2026 by rpki-client