Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28EC3D401ED911F188897AF82E3D8C67.roa
File: 28EC3D401ED911F188897AF82E3D8C67.roa (raw, json)
Hash identifier: 85mjuwZ9vsm6JJXR693o3DqX7C59WKQ/jbFZwgNw+wk=
Subject key identifier: AC:FB:59:FE:E3:64:BA:43:7C:99:A3:EC:3C:94:AC:D3:0C:99:8E:55
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F065
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28EC3D401ED911F188897AF82E3D8C67.roa
Signing time: Mon 06 Jul 2026 16:50:44 +0000
ROA not before: Mon 06 Jul 2026 16:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135834
IP address blocks: 103.80.116.0/22 maxlen: 24
103.91.86.0/24 maxlen: 24
103.91.120.0/22 maxlen: 24
103.102.119.0/24 maxlen: 24
103.102.144.0/23 maxlen: 24
103.171.209.0/24 maxlen: 24
103.181.7.0/24 maxlen: 24
103.185.244.0/24 maxlen: 24
103.185.245.0/24 maxlen: 24
103.228.9.0/24 maxlen: 24
163.227.152.0/24 maxlen: 24
2401:93c0::/48 maxlen: 48
2401:93c0:1::/48 maxlen: 48
2401:93c0:2::/48 maxlen: 48
2401:93c0:3::/48 maxlen: 48
2401:93c0:4::/48 maxlen: 48
2401:93c0:20::/48 maxlen: 48
2401:93c0:21::/48 maxlen: 48
2401:93c0:22::/48 maxlen: 48
2401:93c0:23::/48 maxlen: 48
2401:93c0:24::/48 maxlen: 48
2401:93c0:25::/48 maxlen: 48
2401:93c0:26::/48 maxlen: 48
2401:93c0:27::/48 maxlen: 48
2401:93c0:28::/48 maxlen: 48
2401:93c0:29::/48 maxlen: 48
2401:93c0:2a::/48 maxlen: 48
2401:93c0:2b::/48 maxlen: 48
2401:93c0:2c::/48 maxlen: 48
2401:93c0:2d::/48 maxlen: 48
2401:93c0:2e::/48 maxlen: 48
2401:93c0:2f::/48 maxlen: 48
2401:93c0:30::/48 maxlen: 48
2401:93c0:31::/48 maxlen: 48
2401:93c0:32::/48 maxlen: 48
2401:93c0:33::/48 maxlen: 48
2401:93c0:34::/48 maxlen: 48
2401:93c0:35::/48 maxlen: 48
2401:93c0:36::/48 maxlen: 48
2401:93c0:37::/48 maxlen: 48
2401:93c0:38::/48 maxlen: 48
2401:93c0:39::/48 maxlen: 48
2401:93c0:3a::/48 maxlen: 48
2401:93c0:3b::/48 maxlen: 48
2401:93c0:3c::/48 maxlen: 48
2401:93c0:3d::/48 maxlen: 48
2401:93c0:3e::/48 maxlen: 48
2401:93c0:3f::/48 maxlen: 48
2401:93c0:4e::/48 maxlen: 48
2401:93c0:4f::/48 maxlen: 48
2401:93c0:50::/48 maxlen: 48
2401:93c0:51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61541 (0xf065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdce3-43e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:eb:27:ad:86:6e:21:a9:6e:73:8d:cd:41:
f4:cb:a5:65:bd:07:b2:f4:f3:6e:6e:38:ee:42:c6:
fd:6b:0b:d7:36:72:b6:a6:93:ff:62:47:46:fd:e3:
89:d5:6c:84:09:68:8b:d2:e5:dc:69:87:19:63:bd:
4c:5d:ec:4c:11:95:13:c2:c5:e3:73:49:24:00:b1:
57:4e:2b:e3:22:11:fe:38:45:dc:49:e9:f5:57:a1:
fc:24:48:92:6e:fa:eb:17:23:8e:61:67:c9:d3:41:
6f:bc:19:84:3c:2d:3e:51:a8:ca:2c:9f:8a:42:77:
da:8d:22:41:02:fa:c9:5e:8d:2c:c7:c2:9a:5d:6d:
e4:f3:3d:76:66:f7:5b:0b:9d:9a:86:09:db:97:a3:
25:a1:d4:8c:08:0d:ba:cb:53:d7:78:be:d6:de:11:
02:1b:eb:43:00:eb:8f:0b:fe:19:79:db:17:0c:70:
9f:d0:7e:9d:e6:25:8f:fd:65:b5:10:b7:d2:d9:a0:
5b:a6:67:22:ea:fe:ae:8e:94:ce:0a:e8:46:e1:83:
ac:e7:3a:45:f3:b0:5f:9a:14:8b:67:cb:bb:1a:2d:
21:5a:80:35:dc:79:1b:c6:8a:c5:55:0f:4e:37:d2:
95:fa:45:cf:6b:b4:03:ef:0d:af:0d:6e:e0:57:ee:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FB:59:FE:E3:64:BA:43:7C:99:A3:EC:3C:94:AC:D3:0C:99:8E:55
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28EC3D401ED911F188897AF82E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.116.0/22
103.91.86.0/24
103.91.120.0/22
103.102.119.0/24
103.102.144.0/23
103.171.209.0/24
103.181.7.0/24
103.185.244.0/23
103.228.9.0/24
163.227.152.0/24
IPv6:
2401:93c0::-2401:93c0:4:ffff:ffff:ffff:ffff:ffff
2401:93c0:20::/43
2401:93c0:4e::-2401:93c0:51:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0a:39:80:d6:1c:64:e8:d9:13:57:85:43:13:80:61:d8:58:b3:
41:d9:0d:f5:4b:ec:12:e3:43:9d:c9:0a:c3:83:39:a2:6b:f3:
52:e0:df:de:1c:4e:b0:2b:85:4f:fe:63:78:f6:48:09:38:88:
73:ec:86:a3:ff:98:71:11:48:4c:94:25:f4:cd:a0:36:26:8a:
45:b5:81:16:52:22:98:2d:9b:91:7a:d3:99:5b:57:dd:92:ce:
b6:b8:7e:6f:20:18:c4:d5:f7:dd:56:9f:a9:c6:4a:b1:0f:76:
e6:dd:3b:f8:32:ca:d9:5f:92:90:e2:e1:55:a3:7a:ba:58:45:
f7:c1:61:81:99:a8:79:cc:42:b9:a8:80:6b:81:02:1a:fd:c5:
fa:bb:f0:d4:bf:02:f2:24:53:06:8e:cd:48:18:8e:80:38:5e:
9f:aa:84:fe:9b:e4:e5:31:45:73:78:a1:e1:2a:99:38:30:a8:
84:66:03:f2:20:e2:df:35:98:da:20:f2:0a:67:e0:19:d8:df:
a9:31:f6:dc:ab:a3:c7:2d:a2:41:00:8c:cf:14:d6:5d:84:84:
e8:a1:56:62:a7:d3:e8:1b:54:69:d1:71:72:a8:16:da:00:01:
1d:64:f8:de:34:20:27:cb:28:c7:d7:15:1c:8b:1f:cd:8b:18:
6c:08:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:19 2026 by rpki-client