Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/346F90C45F7A11EFB8032057C4F9AE02.roa
File: 346F90C45F7A11EFB8032057C4F9AE02.roa (raw, json)
Hash identifier: uLMiEc9n2mHEV0XX7cEzCpusxdxUaP3C4pAPATUrilk=
Subject key identifier: BC:17:BA:19:33:63:60:80:BD:D0:99:86:1F:4D:0D:36:04:38:DC:37
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F72D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/346F90C45F7A11EFB8032057C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:48:28 +0000
ROA not before: Mon 06 Jul 2026 17:48:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17625
IP address blocks: 36.255.8.0/22 maxlen: 24
43.251.80.0/22 maxlen: 24
43.252.192.0/22 maxlen: 24
45.64.196.0/22 maxlen: 24
45.64.204.0/22 maxlen: 24
45.114.56.0/22 maxlen: 24
45.114.64.0/22 maxlen: 24
45.114.212.0/22 maxlen: 24
45.114.216.0/22 maxlen: 24
45.115.8.0/22 maxlen: 24
45.116.56.0/24 maxlen: 24
45.116.57.0/24 maxlen: 24
45.116.58.0/24 maxlen: 24
45.116.59.0/24 maxlen: 24
103.19.196.0/22 maxlen: 24
103.54.12.0/22 maxlen: 24
103.54.20.0/22 maxlen: 24
103.54.188.0/22 maxlen: 24
103.54.196.0/22 maxlen: 24
103.54.244.0/22 maxlen: 24
103.56.88.0/22 maxlen: 24
103.66.164.0/22 maxlen: 24
103.91.132.0/22 maxlen: 24
103.173.122.0/23 maxlen: 24
103.206.56.0/22 maxlen: 24
103.208.224.0/22 maxlen: 24
103.254.32.0/22 maxlen: 24
103.254.128.0/22 maxlen: 24
103.254.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63277 (0xf72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:48:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bea6c-7dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8f:8c:97:16:b9:3c:a7:43:92:93:ac:f8:49:
ec:4c:eb:44:b2:73:d2:42:7e:d2:d8:d3:8a:f3:32:
8a:60:ee:c5:07:49:80:58:51:93:89:e5:48:c5:1d:
84:c5:11:bd:ea:fa:93:94:66:db:26:34:fc:4b:35:
fe:3c:44:c6:55:49:77:f7:11:8e:47:1b:a8:c2:91:
e8:ca:98:7e:b8:16:f4:a6:0b:75:fb:13:ed:f5:50:
b9:3b:99:c3:11:37:de:c8:c7:9f:b7:e0:d9:dc:4d:
0e:6d:51:a9:6f:d6:c8:63:55:9a:b6:f3:47:b9:c9:
b3:d1:54:02:7b:64:74:9d:e5:9d:5d:55:30:61:9f:
ab:ff:c9:3b:d0:67:e0:be:57:88:27:7e:01:d6:bf:
ad:18:1d:66:61:ab:cc:2b:ef:92:90:42:1a:f7:d1:
93:a6:77:fd:fc:c0:b8:74:5b:7f:56:8a:46:cd:8c:
ae:c9:56:70:69:6d:32:f3:12:79:1e:ba:66:a9:77:
ec:ba:87:a0:46:bc:da:8a:f3:a2:2e:e7:ee:e0:00:
90:33:47:64:48:00:c0:5b:ec:95:40:d1:52:bc:38:
65:10:5a:60:ff:41:0f:56:96:c0:09:df:db:70:a8:
0a:ea:ed:61:da:81:a2:13:df:66:4f:83:d9:2d:1b:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:17:BA:19:33:63:60:80:BD:D0:99:86:1F:4D:0D:36:04:38:DC:37
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/346F90C45F7A11EFB8032057C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.8.0/22
43.251.80.0/22
43.252.192.0/22
45.64.196.0/22
45.64.204.0/22
45.114.56.0/22
45.114.64.0/22
45.114.212.0-45.114.219.255
45.115.8.0/22
45.116.56.0/22
103.19.196.0/22
103.54.12.0/22
103.54.20.0/22
103.54.188.0/22
103.54.196.0/22
103.54.244.0/22
103.56.88.0/22
103.66.164.0/22
103.91.132.0/22
103.173.122.0/23
103.206.56.0/22
103.208.224.0/22
103.254.32.0/22
103.254.128.0/22
103.254.244.0/22
Signature Algorithm: sha256WithRSAEncryption
27:5e:32:71:a5:63:24:d7:ce:7a:e5:b9:31:02:a7:68:08:90:
ef:7c:7f:28:f4:46:fa:29:97:71:5f:d0:6d:44:5e:9f:e8:ab:
0b:a0:bd:d7:3a:55:db:64:52:fc:4d:9c:d3:5c:f8:06:b0:df:
fd:38:51:cb:09:16:0c:88:88:34:e9:b1:08:dd:e2:2e:2e:09:
a0:35:2a:ef:99:fd:21:a2:ec:ee:e6:c7:ce:62:19:13:3c:69:
ec:15:0d:f5:fa:c9:96:4e:b7:59:99:4a:5c:d2:6c:65:84:48:
c9:57:dc:56:62:a5:16:6c:80:af:07:6d:2c:40:24:20:45:6b:
04:52:08:2c:73:4f:f9:b8:89:11:6f:3e:de:0e:70:8a:cc:f6:
44:39:64:9e:61:4a:c9:09:f6:80:45:c0:7f:56:3b:ed:1d:02:
76:6d:1e:3d:b0:bf:42:82:4c:9e:c1:86:5c:09:00:ab:2b:c2:
38:ed:03:34:30:af:de:cb:d6:e8:50:07:3d:6f:d0:58:96:b4:
54:e4:95:6e:c9:9e:03:12:9a:92:08:18:cc:ce:4d:7f:ab:ed:
d9:cc:6b:ed:a9:9d:43:6b:91:1a:fe:62:bf:4f:5a:e8:bd:22:
87:13:b0:bc:c0:23:af:11:e1:0c:3c:cb:6e:22:3f:8f:51:98:
b5:ba:8b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:58 2026 by rpki-client