Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28EC3D401ED911F188897AF82E3D8C67.roa
File: 28EC3D401ED911F188897AF82E3D8C67.roa (raw, json)
Hash identifier: A9fo3ejQEijJ3NpmTKmoCzfV31rZJDliDwv+UY48hBo=
Subject key identifier: 81:DF:5F:0F:EE:3B:C2:31:5D:20:2F:EA:92:E9:80:20:5D:7A:C0:AE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E448
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28EC3D401ED911F188897AF82E3D8C67.roa
Signing time: Sun 31 May 2026 16:52:34 +0000
ROA not before: Sun 31 May 2026 16:52:34 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 135834
IP address blocks: 103.80.116.0/22 maxlen: 24
103.91.86.0/24 maxlen: 24
103.91.120.0/22 maxlen: 24
103.102.119.0/24 maxlen: 24
103.102.144.0/23 maxlen: 24
103.171.209.0/24 maxlen: 24
103.181.7.0/24 maxlen: 24
103.185.244.0/24 maxlen: 24
103.185.245.0/24 maxlen: 24
103.228.9.0/24 maxlen: 24
163.227.152.0/24 maxlen: 24
2401:93c0::/48 maxlen: 48
2401:93c0:1::/48 maxlen: 48
2401:93c0:2::/48 maxlen: 48
2401:93c0:3::/48 maxlen: 48
2401:93c0:4::/48 maxlen: 48
2401:93c0:20::/48 maxlen: 48
2401:93c0:21::/48 maxlen: 48
2401:93c0:22::/48 maxlen: 48
2401:93c0:23::/48 maxlen: 48
2401:93c0:24::/48 maxlen: 48
2401:93c0:25::/48 maxlen: 48
2401:93c0:26::/48 maxlen: 48
2401:93c0:27::/48 maxlen: 48
2401:93c0:28::/48 maxlen: 48
2401:93c0:29::/48 maxlen: 48
2401:93c0:2a::/48 maxlen: 48
2401:93c0:2b::/48 maxlen: 48
2401:93c0:2c::/48 maxlen: 48
2401:93c0:2d::/48 maxlen: 48
2401:93c0:2e::/48 maxlen: 48
2401:93c0:2f::/48 maxlen: 48
2401:93c0:30::/48 maxlen: 48
2401:93c0:31::/48 maxlen: 48
2401:93c0:32::/48 maxlen: 48
2401:93c0:33::/48 maxlen: 48
2401:93c0:34::/48 maxlen: 48
2401:93c0:35::/48 maxlen: 48
2401:93c0:36::/48 maxlen: 48
2401:93c0:37::/48 maxlen: 48
2401:93c0:38::/48 maxlen: 48
2401:93c0:39::/48 maxlen: 48
2401:93c0:3a::/48 maxlen: 48
2401:93c0:3b::/48 maxlen: 48
2401:93c0:3c::/48 maxlen: 48
2401:93c0:3d::/48 maxlen: 48
2401:93c0:3e::/48 maxlen: 48
2401:93c0:3f::/48 maxlen: 48
2401:93c0:4e::/48 maxlen: 48
2401:93c0:4f::/48 maxlen: 48
2401:93c0:50::/48 maxlen: 48
2401:93c0:51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58440 (0xe448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:52:34 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6752-71c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:92:a6:44:b9:db:6d:20:7d:89:88:38:ed:
06:0a:e9:71:71:88:ce:1f:4b:b7:89:85:d9:0e:df:
4b:65:55:79:b2:35:0d:41:20:d9:63:3c:a8:24:b9:
6f:54:48:9e:6d:47:66:68:38:44:5c:9d:78:14:37:
44:4c:07:51:40:fa:20:25:57:e4:2f:cc:0e:a3:a3:
aa:76:ce:d4:6e:5f:76:48:6d:3e:82:78:05:53:bc:
c9:aa:d7:aa:57:51:f4:ee:36:17:28:21:af:47:36:
2d:c3:6c:ce:a7:a7:82:16:24:b5:c0:43:d5:b9:a6:
e3:f0:a3:d7:ad:53:80:fa:69:7a:1f:26:6c:2a:f6:
e3:51:88:bb:44:cb:2a:36:75:d2:6b:7c:69:c4:61:
7c:c0:37:d6:fa:7e:17:00:1f:0f:8b:50:91:65:83:
b9:1a:df:2b:eb:78:79:b1:b6:76:4b:96:03:5b:96:
44:86:0c:09:3c:c0:aa:51:9e:5b:7a:8b:23:10:01:
4a:64:e8:95:46:ca:0f:d1:93:b1:9c:f3:d9:50:ac:
69:13:ad:3d:a4:b8:93:33:d4:da:b3:32:a7:97:81:
7c:aa:ce:3d:81:53:37:11:90:15:20:c1:f4:b5:1c:
cb:bd:4c:af:a9:85:9e:e8:93:b2:b7:82:0f:cb:e7:
38:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DF:5F:0F:EE:3B:C2:31:5D:20:2F:EA:92:E9:80:20:5D:7A:C0:AE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28EC3D401ED911F188897AF82E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.116.0/22
103.91.86.0/24
103.91.120.0/22
103.102.119.0/24
103.102.144.0/23
103.171.209.0/24
103.181.7.0/24
103.185.244.0/23
103.228.9.0/24
163.227.152.0/24
IPv6:
2401:93c0::-2401:93c0:4:ffff:ffff:ffff:ffff:ffff
2401:93c0:20::/43
2401:93c0:4e::-2401:93c0:51:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:7f:2e:fa:f5:48:30:d8:3d:7a:c4:22:73:ea:36:63:40:b5:
e8:73:a5:3b:3f:34:4f:c9:00:b7:0b:07:ea:0d:d1:72:79:8e:
37:6f:14:78:38:66:22:05:fa:45:05:cf:36:06:62:c3:01:c2:
af:01:c1:05:2a:10:fe:81:c9:67:bc:91:53:a2:ff:d0:3e:8e:
f2:ea:ee:6a:c2:fa:db:de:78:44:aa:bc:4b:65:27:9c:ef:5e:
7a:be:b9:4c:e1:f4:f2:16:14:6c:08:c3:bc:7a:f4:f9:b3:06:
72:ab:23:cb:0e:65:5f:69:27:a1:ed:52:ec:87:d4:39:32:c3:
df:99:4e:18:73:45:5f:5c:8c:31:22:37:a5:ee:e8:fd:52:d3:
7a:98:5c:d3:56:4b:21:67:a0:40:56:fe:24:16:6c:29:64:69:
79:fb:c0:20:f9:c3:64:e9:5c:66:eb:37:9b:e1:12:9f:0d:1f:
37:bd:d2:79:8c:61:97:a7:79:68:fc:2a:de:44:57:c4:de:af:
63:73:9a:a3:2f:e9:ab:0d:b4:8c:bf:89:e9:a3:13:58:0c:b9:
74:eb:00:98:87:f2:35:69:ed:b2:1d:0f:b5:60:8e:0a:07:c3:
b9:10:89:5c:ee:bf:5b:58:fe:3f:1f:27:12:c9:d2:24:79:5c:
63:54:56:6a
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIDAORIMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NTIzNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY3NTItNzFjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKVZkqZEudttIH2JiDjtBgrpcXGIzh9Lt4mF2Q7fS2VVebI1DUEg2WM8qCS5
b1RInm1HZmg4RFydeBQ3REwHUUD6ICVX5C/MDqOjqnbO1G5fdkhtPoJ4BVO8yarX
qldR9O42Fyghr0c2LcNszqenghYktcBD1bmm4/Cj161TgPppeh8mbCr241GIu0TL
KjZ10mt8acRhfMA31vp+FwAfD4tQkWWDuRrfK+t4ebG2dkuWA1uWRIYMCTzAqlGe
W3qLIxABSmTolUbKD9GTsZzz2VCsaROtPaS4kzPU2rMyp5eBfKrOPYFTNxGQFSDB
9LUcy71Mr6mFnuiTsreCD8vnOA0CAwEAAaOCAs4wggLKMB0GA1UdDgQWBBSB318P
7jvCMV0gL+qS6YAgXXrArjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI4RUMzRDQw
MUVEOTExRjE4ODg5N0FGODJFM0Q4QzY3LnJvYTCBjAYIKwYBBQUHAQcBAf8EfTB7
MEIEAgABMDwDBAJnUHQDBABnW1YDBAJnW3gDBABnZncDBAFnZpADBABnq9EDBABn
tQcDBAFnufQDBABn5AkDBACj45gwNQQCAAIwLzAQAwUGJAGTwAMHACQBk8AABAMH
BSQBk8AAIDASAwcBJAGTwABOAwcBJAGTwABQMA0GCSqGSIb3DQEBCwUAA4IBAQBL
fy769Ugw2D16xCJz6jZjQLXoc6U7PzRPyQC3CwfqDdFyeY43bxR4OGYiBfpFBc82
BmLDAcKvAcEFKhD+gclnvJFTov/QPo7y6u5qwvrb3nhEqrxLZSec7156vrlM4fTy
FhRsCMO8evT5swZyqyPLDmVfaSeh7VLsh9Q5MsPfmU4Yc0VfXIwxIjel7uj9UtN6
mFzTVkshZ6BAVv4kFmwpZGl5+8Ag+cNk6Vxm6zeb4RKfDR83vdJ5jGGXp3lo/Cre
RFfE3q9jc5qjL+mrDbSMv4npoxNYDLl06wCYh/I1ae2yHQ+1YI4KB8O5EIlc7r9b
WP4/HycSydIkeVxjVFZq
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:52 2026 by rpki-client