Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FE58C10EC7A11F098ACD3F1536F56BC.roa
File: 1FE58C10EC7A11F098ACD3F1536F56BC.roa (raw, json)
Hash identifier: qcKXd8QPsR8QXlch7pNRjQC4hTEoti3gdWUidGrIxJ0=
Subject key identifier: 7E:C6:2E:82:BA:DC:0F:77:FC:D9:10:F4:36:B0:E1:9F:45:B0:67:9E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE85
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FE58C10EC7A11F098ACD3F1536F56BC.roa
Signing time: Mon 06 Jul 2026 16:35:13 +0000
ROA not before: Mon 06 Jul 2026 16:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133296
IP address blocks: 43.239.110.0/24 maxlen: 24
43.243.76.0/24 maxlen: 24
43.243.77.0/24 maxlen: 24
43.243.78.0/24 maxlen: 24
103.78.245.0/24 maxlen: 24
103.78.247.0/24 maxlen: 24
103.131.24.0/23 maxlen: 24
103.182.176.0/23 maxlen: 24
103.228.149.0/24 maxlen: 24
103.233.24.0/23 maxlen: 24
103.251.22.0/24 maxlen: 24
150.129.235.0/24 maxlen: 24
202.162.231.0/24 maxlen: 24
202.162.240.0/24 maxlen: 24
202.162.241.0/24 maxlen: 24
202.162.248.0/24 maxlen: 24
202.162.249.0/24 maxlen: 24
202.162.251.0/24 maxlen: 24
203.115.82.0/23 maxlen: 24
210.89.32.0/24 maxlen: 24
210.89.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61061 (0xee85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd941-af8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:79:cc:47:e7:8f:89:67:38:d9:f4:d1:e9:
ac:f6:3a:e9:07:c9:3b:83:f1:b3:ce:69:bd:88:fc:
5a:3a:10:6e:32:07:d8:35:c6:83:a8:9d:6a:0a:27:
01:98:9d:79:bc:38:a0:f3:91:e1:73:79:e9:96:06:
00:3b:39:87:4c:96:95:57:9f:d6:4e:8c:d9:27:04:
35:49:81:70:d3:40:a6:d2:e3:80:d6:4b:27:fa:f7:
0f:22:10:4f:91:77:f9:a7:58:68:e9:53:ce:51:fe:
8a:8c:c2:42:df:8c:a2:b3:4f:0c:5d:b9:c1:1b:60:
b5:de:94:65:56:ca:e6:41:6c:4d:61:65:ad:6a:17:
c7:79:aa:3b:53:56:17:e8:27:1a:0a:3f:63:15:15:
06:8c:47:2d:9a:3a:bd:25:d2:e9:6b:cb:9e:40:ed:
72:7e:b2:0f:78:cd:5b:64:f0:45:45:c1:bb:25:05:
78:e4:6e:43:96:bd:45:63:04:91:7c:e8:54:4d:9f:
ef:b3:0a:fe:61:54:b1:72:01:d8:9d:a3:40:7c:e7:
a6:15:e2:6c:6d:b7:80:b5:78:d8:fe:7b:1e:7d:95:
43:d6:73:1a:38:29:36:2a:55:6a:dd:9e:3e:8b:fb:
8c:db:73:d3:fd:fb:b3:d8:8d:37:a2:34:64:68:3b:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C6:2E:82:BA:DC:0F:77:FC:D9:10:F4:36:B0:E1:9F:45:B0:67:9E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FE58C10EC7A11F098ACD3F1536F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.110.0/24
43.243.76.0-43.243.78.255
103.78.245.0/24
103.78.247.0/24
103.131.24.0/23
103.182.176.0/23
103.228.149.0/24
103.233.24.0/23
103.251.22.0/24
150.129.235.0/24
202.162.231.0/24
202.162.240.0/23
202.162.248.0/23
202.162.251.0/24
203.115.82.0/23
210.89.32.0/24
210.89.49.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a4:86:29:99:35:01:6b:5b:0b:7e:a1:e3:f3:72:99:bd:e7:
e2:82:d0:1e:fb:00:eb:63:e8:16:4e:3a:a5:ff:bd:d3:34:bf:
7e:92:52:48:04:b9:9a:4b:ca:df:5f:78:5a:fc:85:4e:b9:4c:
e7:73:3e:8f:2c:32:5f:16:78:e4:5e:a2:ba:e6:7b:37:c2:20:
74:2b:17:d6:c7:2f:6f:21:21:4d:90:a6:09:36:fd:ec:2c:ca:
2c:11:5d:a0:30:c2:ba:71:0e:5b:b2:1a:cf:f1:d5:dc:98:d1:
5c:42:f8:dc:8c:1a:bd:07:c1:d6:ae:85:43:b9:07:b3:67:e7:
78:a6:38:63:d0:6f:28:cd:7d:8c:86:51:78:8c:57:0a:52:98:
cd:61:13:11:28:0b:9f:4a:fe:a1:e0:9e:ff:fd:a8:e9:0c:8c:
d3:eb:6a:18:fe:94:6d:91:f7:e7:35:df:14:aa:04:d6:41:0f:
bd:98:57:15:fb:56:43:0c:af:78:09:da:64:56:ea:f7:8d:e2:
1e:41:32:7d:97:39:78:51:4b:1a:e3:b2:a6:ab:fc:c2:05:f7:
34:15:70:96:09:4c:43:f9:6b:81:a5:d1:4c:34:93:7f:5e:80:
be:00:ac:90:e9:bc:3c:f2:25:dd:51:d4:54:a0:a2:af:6f:c1:
45:c2:34:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:51 2026 by rpki-client