Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/235369B2D47B11EE8EA4073CC4F9AE02.roa
File: 235369B2D47B11EE8EA4073CC4F9AE02.roa (raw, json)
Hash identifier: 19FvwGnsaEcB+KSrhRBKy1SAIE1/+oq1YVYA0JCkLEw=
Subject key identifier: 2E:9F:57:E6:92:A4:0F:E1:FB:6B:99:AE:C6:37:6B:6D:1F:43:A7:C3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F732
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/235369B2D47B11EE8EA4073CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:48:39 +0000
ROA not before: Mon 06 Jul 2026 17:48:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17813
IP address blocks: 59.176.0.0/16 maxlen: 24
59.177.0.0/16 maxlen: 24
59.178.176.0/20 maxlen: 20
59.179.0.0/16 maxlen: 24
59.180.0.0/16 maxlen: 24
59.185.0.0/20 maxlen: 24
59.185.20.0/24 maxlen: 24
59.185.96.0/20 maxlen: 24
59.185.192.0/18 maxlen: 24
120.57.0.0/16 maxlen: 24
120.58.0.0/16 maxlen: 24
120.59.0.0/16 maxlen: 24
120.60.0.0/16 maxlen: 17
120.63.128.0/17 maxlen: 17
182.56.0.0/16 maxlen: 24
182.57.0.0/16 maxlen: 24
182.58.0.0/16 maxlen: 24
182.59.0.0/18 maxlen: 18
182.59.128.0/17 maxlen: 24
202.159.192.0/19 maxlen: 19
202.159.192.0/20 maxlen: 20
202.159.214.0/24 maxlen: 24
202.159.224.0/19 maxlen: 20
203.94.192.0/20 maxlen: 24
203.94.240.0/20 maxlen: 24
2402:2600::/33 maxlen: 48
2402:2600:8000::/33 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63282 (0xf732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:48:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bea77-d985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:3e:4f:99:d1:b5:8e:6b:ce:67:3e:71:24:
17:41:7c:fe:4f:96:8a:f6:b3:25:4e:f8:18:15:51:
3f:ff:8e:f6:bc:b4:2e:c6:aa:34:b4:5a:24:ab:ec:
8f:5a:fc:8d:bf:f1:d4:63:c9:ba:3b:b2:93:ab:10:
15:29:10:f1:fb:6a:63:78:5d:48:c3:f2:dd:73:c2:
cd:cc:d9:ab:02:92:d2:84:67:ac:aa:e7:65:b0:2e:
e4:36:98:61:19:bc:df:7a:6e:8f:32:53:11:47:f3:
1a:2a:6c:08:f6:a4:b5:56:ff:cd:f5:ea:7b:3b:01:
38:d3:41:1e:e8:fd:39:92:f4:15:68:b6:b3:b8:62:
b6:00:b0:63:92:42:c2:43:6b:82:ab:52:f8:ce:4b:
39:5a:61:4a:34:a2:d4:7e:a0:7a:3e:68:ad:5e:73:
00:b0:e6:e1:53:08:cc:17:66:a6:a8:f3:63:9a:cb:
41:7b:38:9f:c0:9f:c0:aa:ca:a1:82:b5:43:9c:12:
22:6f:41:22:68:7b:83:e7:e5:a1:1e:79:7f:e5:32:
3b:e5:6b:3b:e4:d6:e6:35:5c:9d:b2:52:27:fe:47:
c0:97:d1:f6:23:d1:3a:a3:26:c5:fc:09:38:c5:a0:
b5:1c:ae:af:b2:95:ff:67:ee:0f:ae:5d:9d:30:e8:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9F:57:E6:92:A4:0F:E1:FB:6B:99:AE:C6:37:6B:6D:1F:43:A7:C3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/235369B2D47B11EE8EA4073CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.176.0.0/15
59.178.176.0/20
59.179.0.0-59.180.255.255
59.185.0.0/20
59.185.20.0/24
59.185.96.0/20
59.185.192.0/18
120.57.0.0-120.60.255.255
120.63.128.0/17
182.56.0.0-182.59.63.255
182.59.128.0/17
202.159.192.0/18
203.94.192.0/20
203.94.240.0/20
IPv6:
2402:2600::/32
Signature Algorithm: sha256WithRSAEncryption
43:2f:c1:ed:1f:14:f4:ee:94:36:9c:46:22:23:ca:82:8d:75:
a9:32:67:82:59:ad:38:df:1e:d8:a8:f4:85:f0:aa:8a:27:58:
89:1f:b7:e2:27:92:a3:13:65:db:7a:62:ba:4d:26:7e:75:b0:
49:99:f2:12:64:5e:c9:65:01:f1:a9:60:83:67:91:d0:ee:20:
c6:1f:fc:10:a4:63:43:f0:e2:6c:f2:59:c7:17:20:5b:66:9a:
ce:f8:f2:c6:d2:55:fb:fd:d5:ae:f9:cf:7b:3e:dc:ed:43:0a:
8a:4c:ed:5b:14:6b:2c:d4:58:e3:48:51:f9:39:21:3d:38:86:
29:1a:03:0f:ee:c2:bb:33:3a:13:bb:c6:68:2b:86:23:c2:02:
a5:e0:6f:bf:e8:cf:09:3d:89:63:0b:86:ab:fc:0a:3c:ab:b5:
eb:b0:40:e2:e9:63:11:bb:43:31:43:8f:c2:d5:18:3d:49:c5:
29:d6:1a:67:93:ff:c8:ea:b4:3c:07:13:f2:98:be:87:16:2b:
88:67:47:fb:1d:ee:95:31:b0:b0:ac:d7:49:f3:ae:cd:27:94:
c0:2e:9d:d1:82:38:b5:13:1e:fa:41:e3:c5:57:e7:46:d9:ab:
d7:a9:dc:c4:0b:e4:6d:44:ee:a8:72:42:64:b0:19:1a:03:6d:
62:61:e8:cd
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIDAPcyMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NDgzOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmVhNzctZDk4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALtQPk+Z0bWOa85nPnEkF0F8/k+WivazJU74GBVRP/+O9ry0LsaqNLRaJKvs
j1r8jb/x1GPJujuyk6sQFSkQ8ftqY3hdSMPy3XPCzczZqwKS0oRnrKrnZbAu5DaY
YRm833pujzJTEUfzGipsCPaktVb/zfXqezsBONNBHuj9OZL0FWi2s7hitgCwY5JC
wkNrgqtS+M5LOVphSjSi1H6gej5orV5zALDm4VMIzBdmpqjzY5rLQXs4n8CfwKrK
oYK1Q5wSIm9BImh7g+floR55f+UyO+VrO+TW5jVcnbJSJ/5HwJfR9iPROqMmxfwJ
OMWgtRyur7KV/2fuD65dnTDoYf0CAwEAAaOCAtAwggLMMB0GA1UdDgQWBBQun1fm
kqQP4ftrma7GN2ttH0OnwzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzIzNTM2OUIy
RDQ3QjExRUU4RUE0MDczQ0M0RjlBRTAyLnJvYTCBjgYIKwYBBQUHAQcBAf8EfzB9
MGwEAgABMGYDAwE7sAMEBDuysDAKAwMAO7MDAwA7tAMEBDu5AAMEADu5FAMEBDu5
YAMEBju5wDAKAwMAeDkDAwB4PAMEB3g/gDALAwMDtjgDBAa2OwADBAe2O4ADBAbK
n8ADBATLXsADBATLXvAwDQQCAAIwBwMFACQCJgAwDQYJKoZIhvcNAQELBQADggEB
AEMvwe0fFPTulDacRiIjyoKNdakyZ4JZrTjfHtio9IXwqoonWIkft+InkqMTZdt6
YrpNJn51sEmZ8hJkXsllAfGpYINnkdDuIMYf/BCkY0Pw4mzyWccXIFtmms748sbS
Vfv91a75z3s+3O1DCopM7VsUayzUWONIUfk5IT04hikaAw/uwrszOhO7xmgrhiPC
AqXgb7/ozwk9iWMLhqv8CjyrteuwQOLpYxG7QzFDj8LVGD1JxSnWGmeT/8jqtDwH
E/KYvocWK4hnR/sd7pUxsLCs10nzrs0nlMAundGCOLUTHvpB48VX50bZq9ep3MQL
5G1E7qhyQmSwGRoDbWJh6M0=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:47:18 2026 by rpki-client