Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2661C316449411F18033B929AA833773.roa
File: 2661C316449411F18033B929AA833773.roa (raw, json)
Hash identifier: avZCq97O+GtzDy6fEVO8+WucknRme8xzgjTUp937Epk=
Subject key identifier: 7C:6E:58:CB:9B:85:BE:25:3F:1D:CA:9A:7D:B3:E7:AE:DE:2F:40:13
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F807
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2661C316449411F18033B929AA833773.roa
Signing time: Thu 09 Jul 2026 12:36:19 +0000
ROA not before: Thu 09 Jul 2026 12:36:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 1.6.229.0/24 maxlen: 24
1.6.230.0/24 maxlen: 24
1.7.229.0/24 maxlen: 24
1.22.36.0/24 maxlen: 24
1.23.62.0/24 maxlen: 24
103.15.74.0/24 maxlen: 24
103.29.197.0/24 maxlen: 24
103.48.2.0/23 maxlen: 24
103.53.21.0/24 maxlen: 24
103.57.216.0/24 maxlen: 24
103.57.217.0/24 maxlen: 24
103.57.218.0/24 maxlen: 24
103.57.219.0/24 maxlen: 24
103.81.88.0/22 maxlen: 24
103.98.54.0/24 maxlen: 24
103.109.211.0/24 maxlen: 24
103.109.224.0/24 maxlen: 24
103.109.225.0/24 maxlen: 24
103.109.227.0/24 maxlen: 24
103.112.230.0/23 maxlen: 24
103.115.236.0/23 maxlen: 24
103.137.112.0/23 maxlen: 24
103.160.172.0/23 maxlen: 24
103.167.152.0/24 maxlen: 24
103.173.132.0/24 maxlen: 24
103.237.84.0/24 maxlen: 24
113.193.25.0/24 maxlen: 24
113.193.48.0/24 maxlen: 24
113.193.128.0/24 maxlen: 24
163.128.107.0/24 maxlen: 24
202.52.134.0/24 maxlen: 24
202.162.229.0/24 maxlen: 24
202.162.230.0/24 maxlen: 24
202.162.232.0/24 maxlen: 24
202.162.233.0/24 maxlen: 24
202.177.153.0/24 maxlen: 24
202.177.157.0/24 maxlen: 24
2001:df0:7400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63495 (0xf807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 9 12:36:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4f95c3-11e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:74:34:01:58:29:a0:10:fe:38:55:18:87:
0f:96:bd:ce:8c:5a:49:98:fc:2e:67:21:60:f3:f3:
05:5b:5d:b9:9a:80:76:39:fe:83:75:22:93:97:b8:
6d:15:60:90:2f:6e:c6:d2:86:fa:5a:a4:bc:2e:44:
d9:5f:8f:80:47:49:3c:45:85:b2:78:99:83:79:84:
8b:1b:59:28:a2:9c:29:4a:3b:e0:5f:9d:64:33:ef:
e0:7b:1b:04:37:bc:76:4d:0f:45:3a:7a:49:5f:21:
14:76:d2:13:49:3f:0d:cc:c5:35:19:46:c1:08:ee:
f9:ef:65:93:55:d5:31:6c:01:fb:37:05:a9:3b:99:
bd:00:00:9d:c9:16:9f:0f:7d:4e:49:22:54:32:4c:
6a:35:5f:93:83:dc:5b:65:f0:69:34:a0:55:cb:c8:
02:f6:db:b3:d5:ae:91:ed:d5:48:4f:15:26:ad:85:
1f:45:33:54:eb:40:1d:2f:e9:4a:5c:fc:02:0c:30:
6e:fb:91:f1:4b:47:6e:5c:a1:13:f0:2f:26:30:7f:
cb:b3:ae:72:80:10:35:65:d9:22:f1:56:46:ad:41:
5f:57:19:76:90:e9:ef:82:28:1e:54:da:88:77:17:
12:3e:25:59:ed:64:c2:a1:ad:55:29:dc:af:a1:af:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6E:58:CB:9B:85:BE:25:3F:1D:CA:9A:7D:B3:E7:AE:DE:2F:40:13
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2661C316449411F18033B929AA833773.roa
sbgp-ipAddrBlock: critical
IPv4:
1.6.229.0-1.6.230.255
1.7.229.0/24
1.22.36.0/24
1.23.62.0/24
103.15.74.0/24
103.29.197.0/24
103.48.2.0/23
103.53.21.0/24
103.57.216.0/22
103.81.88.0/22
103.98.54.0/24
103.109.211.0/24
103.109.224.0/23
103.109.227.0/24
103.112.230.0/23
103.115.236.0/23
103.137.112.0/23
103.160.172.0/23
103.167.152.0/24
103.173.132.0/24
103.237.84.0/24
113.193.25.0/24
113.193.48.0/24
113.193.128.0/24
163.128.107.0/24
202.52.134.0/24
202.162.229.0-202.162.230.255
202.162.232.0/23
202.177.153.0/24
202.177.157.0/24
IPv6:
2001:df0:7400::/48
Signature Algorithm: sha256WithRSAEncryption
8b:66:59:a4:1f:13:a9:94:52:eb:63:7a:3f:26:a3:4c:ca:f3:
55:60:47:12:3c:b8:d6:f4:30:29:19:80:63:f7:97:80:68:0c:
f3:6c:8b:ca:cf:ae:24:e6:13:5b:f3:bc:e2:7a:0a:67:93:f6:
6d:22:4a:be:b6:a5:88:7d:b9:43:ff:3b:8f:2b:0c:20:01:3e:
30:34:95:bf:de:cb:3b:b1:73:a0:d6:66:2b:4f:f1:bb:4e:5f:
36:99:95:b8:3f:91:9f:4b:09:bc:10:fe:f4:e1:3a:bc:5f:a2:
d0:60:c2:68:3c:b5:9c:06:0d:44:fb:b0:eb:6e:79:20:13:c7:
a1:e2:26:83:35:a3:df:9d:27:bf:f6:06:41:5a:1e:ad:6c:29:
fe:eb:52:2d:ba:26:d5:12:88:d2:a5:b3:fb:ad:82:d5:60:ee:
1e:83:a2:14:ca:fd:32:f3:2a:26:95:ba:52:f4:fc:9e:c9:6d:
4b:63:f5:87:24:5d:5e:c9:96:d4:38:3e:fd:10:ba:d3:fe:d6:
ac:c6:73:63:5d:21:22:37:33:6f:2b:cb:f3:97:eb:3d:fd:d6:
ff:33:94:07:2b:29:36:fb:18:7f:dc:2b:1f:cf:72:3e:49:ac:
ee:4d:8c:e5:a2:be:f7:96:83:6d:0f:92:5b:97:49:5e:7d:2a:
32:56:0b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:38 2026 by rpki-client