Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E04076471EA11ECB3503078C4F9AE02.roa
File: 1E04076471EA11ECB3503078C4F9AE02.roa (raw, json)
Hash identifier: gWaKQIwegMFFpKHv8eVgXsVO6Q04Qu6HvHmigteP0Ks=
Subject key identifier: 8D:E3:67:97:C4:33:30:CF:81:61:A5:67:47:B3:23:0A:FB:5E:EB:65
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE1C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E04076471EA11ECB3503078C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:31:44 +0000
ROA not before: Mon 06 Jul 2026 16:31:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132785
IP address blocks: 45.114.148.0/22 maxlen: 24
103.27.164.0/22 maxlen: 24
2001:df2:1140::/48 maxlen: 48
2401:2860::/32 maxlen: 32
2401:2860::/36 maxlen: 36
2401:2860::/40 maxlen: 40
2401:2860::/41 maxlen: 48
2401:2860:80::/44 maxlen: 44
2401:2860:90::/44 maxlen: 44
2401:2860:a0::/44 maxlen: 44
2401:2860:b0::/44 maxlen: 44
2401:2860:c0::/44 maxlen: 44
2401:2860:d0::/44 maxlen: 44
2401:2860:e0::/44 maxlen: 44
2401:2860:f0::/44 maxlen: 44
2401:2860:100::/40 maxlen: 40
2401:2860:200::/40 maxlen: 40
2401:2860:300::/40 maxlen: 40
2401:2860:400::/40 maxlen: 40
2401:2860:500::/40 maxlen: 40
2401:2860:600::/40 maxlen: 40
2401:2860:700::/40 maxlen: 40
2401:2860:800::/40 maxlen: 40
2401:2860:900::/40 maxlen: 40
2401:2860:a00::/40 maxlen: 40
2401:2860:b00::/40 maxlen: 40
2401:2860:c00::/40 maxlen: 40
2401:2860:d00::/40 maxlen: 40
2401:2860:e00::/40 maxlen: 40
2401:2860:f00::/40 maxlen: 40
2401:2860:1000::/36 maxlen: 36
2401:2860:2000::/36 maxlen: 36
2401:2860:3000::/36 maxlen: 36
2401:2860:4000::/36 maxlen: 36
2401:2860:5000::/36 maxlen: 36
2401:2860:6000::/36 maxlen: 36
2401:2860:7000::/36 maxlen: 36
2401:2860:8000::/36 maxlen: 36
2401:2860:9000::/36 maxlen: 36
2401:2860:a000::/36 maxlen: 36
2401:2860:b000::/36 maxlen: 36
2401:2860:c000::/36 maxlen: 36
2401:2860:d000::/36 maxlen: 36
2401:2860:e000::/36 maxlen: 36
2401:2860:f000::/36 maxlen: 36
2401:2860:f000::/48 maxlen: 48
2401:2860:f001::/48 maxlen: 48
2401:2860:f002::/48 maxlen: 48
2401:2860:f003::/48 maxlen: 48
2401:2860:f004::/48 maxlen: 48
2401:2860:f005::/48 maxlen: 48
2401:2860:f006::/48 maxlen: 48
2401:2860:f007::/48 maxlen: 48
2401:2860:f008::/48 maxlen: 48
2401:2860:f009::/48 maxlen: 48
2401:2860:f00a::/48 maxlen: 48
2401:2860:f00b::/48 maxlen: 48
2401:2860:f00c::/48 maxlen: 48
2401:2860:f00d::/48 maxlen: 48
2401:2860:f00e::/48 maxlen: 48
2401:2860:f00f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60956 (0xee1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:31:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd870-0659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:f3:67:53:7b:da:47:72:78:51:af:17:d9:
6a:d1:7e:e9:46:7b:cc:f1:53:4e:c7:89:85:c7:27:
a6:30:33:8e:10:2c:88:67:7d:46:75:df:86:f6:db:
cb:71:68:41:5f:7e:1c:5b:56:46:83:86:9a:50:93:
c7:3e:a7:26:ab:3c:4e:a5:f1:63:89:ec:17:7b:24:
d1:ae:97:ab:29:ce:3d:1a:f0:6d:45:91:b2:ab:b8:
3c:5b:07:f7:d0:93:2a:d2:83:2d:cc:7e:fb:2b:1e:
f7:19:75:70:64:d3:b2:ad:32:e7:05:df:d3:1d:0b:
41:cc:f5:de:02:9e:88:be:83:64:29:b6:0e:ce:9e:
12:cb:c2:17:96:1b:bf:e9:10:64:c0:7a:d9:c4:8f:
f2:40:0b:d6:0b:e9:81:1f:ee:99:08:aa:69:c8:4d:
61:25:6a:97:f6:64:65:4d:a9:8c:55:d3:dd:9f:9a:
31:bd:0b:aa:33:38:89:e8:5a:90:af:30:2a:73:c8:
1b:ae:ae:77:d8:44:9b:ac:c5:a3:6d:ed:74:d7:bd:
8f:50:e1:9c:d1:52:57:50:a1:39:ef:76:ac:0a:7d:
9c:c2:5f:37:d3:7f:4b:a0:b5:8c:cd:b5:f4:9f:a3:
85:30:52:e4:04:8a:3d:fe:84:0c:ea:45:08:de:69:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E3:67:97:C4:33:30:CF:81:61:A5:67:47:B3:23:0A:FB:5E:EB:65
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1E04076471EA11ECB3503078C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.114.148.0/22
103.27.164.0/22
IPv6:
2001:df2:1140::/48
2401:2860::/32
Signature Algorithm: sha256WithRSAEncryption
b8:97:fc:ca:12:4d:d5:28:84:6b:b0:fb:44:52:60:f2:26:b4:
e1:22:a5:63:e0:21:05:f1:9a:d5:a0:97:a9:20:3d:b2:f4:a5:
d3:d0:d6:03:e2:05:38:8f:ab:e9:db:2f:9f:22:e3:e1:ac:86:
ca:76:12:76:31:00:62:67:12:43:5c:96:5f:eb:e6:33:07:e8:
38:b9:9b:63:f7:05:a5:1b:12:9f:6e:fe:d1:be:0e:a2:85:ea:
ee:2e:a4:22:8d:a4:07:f8:7d:4d:f0:08:93:ae:4f:21:be:98:
91:34:b6:82:62:bb:04:13:9a:45:b4:ea:00:d7:57:5f:5f:63:
98:cb:2a:f1:2f:24:c6:4d:6d:47:44:87:c8:d2:d8:b1:63:9a:
1c:06:5f:41:2f:b2:6a:0a:dc:e5:a8:ae:18:72:62:84:02:fd:
8f:44:2a:86:18:df:aa:84:5e:a5:41:f4:c0:7d:dc:ee:b7:db:
12:1f:22:51:0d:71:a2:62:25:80:e8:20:65:31:b3:73:03:81:
34:65:2f:8b:6e:c0:38:87:d8:13:71:e8:b4:a9:c2:1c:3e:6b:
68:79:71:96:4e:e8:4b:27:0c:30:a2:52:e7:48:59:fb:da:2e:
f4:76:3e:ba:89:cd:92:53:d9:01:90:84:c5:07:12:d5:53:e5:
b8:5f:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:23 2026 by rpki-client