Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35D1E5A87AE811F1882D769F97EE528E.roa
File: 35D1E5A87AE811F1882D769F97EE528E.roa (raw, json)
Hash identifier: g++VxcxI4maAO+5g+B1XpFk7ofrY/3b7meKL5KYEknc=
Subject key identifier: 5D:17:49:51:81:DD:98:7B:DE:27:4F:FB:3D:B3:5E:8D:72:BE:80:A8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F7F7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35D1E5A87AE811F1882D769F97EE528E.roa
Signing time: Wed 08 Jul 2026 16:15:18 +0000
ROA not before: Wed 08 Jul 2026 16:15:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9498
IP address blocks: 45.121.44.0/22 maxlen: 24
45.124.224.0/22 maxlen: 24
45.124.228.0/22 maxlen: 24
45.124.232.0/22 maxlen: 24
45.124.236.0/22 maxlen: 24
103.29.197.0/24 maxlen: 24
103.61.132.0/22 maxlen: 24
103.68.220.0/23 maxlen: 24
103.147.90.0/24 maxlen: 24
103.161.50.0/23 maxlen: 24
103.171.87.0/24 maxlen: 24
103.209.96.0/23 maxlen: 24
192.12.109.0/24 maxlen: 24
202.53.87.0/24 maxlen: 24
202.58.102.0/23 maxlen: 24
202.65.141.0/24 maxlen: 24
202.65.142.0/24 maxlen: 24
2405:a700::/32 maxlen: 32
2405:a700:14::/48 maxlen: 48
2405:a700:15::/48 maxlen: 48
2405:a700:1b::/48 maxlen: 48
2405:a700:1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63479 (0xf7f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 8 16:15:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4e7796-6942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:78:41:8a:e0:f0:ba:b8:82:9d:08:e0:64:
2e:fc:27:58:c7:8c:73:8f:0a:4d:68:2f:63:cc:e8:
28:12:83:d8:5e:74:19:94:b7:31:fe:93:e2:f0:db:
9c:da:7d:50:c1:f3:63:6d:f4:a7:7f:f0:ff:63:eb:
f2:d8:be:ad:1c:d1:a6:70:6b:1a:ce:51:94:1b:3d:
15:5e:ec:87:d5:04:45:86:71:b5:56:fe:44:bc:4b:
df:23:ba:21:61:3b:23:ad:67:35:d1:1b:99:67:17:
f8:65:2d:3f:9e:77:6e:63:96:b9:74:19:f8:7b:5c:
21:c7:b9:b2:8b:51:4c:72:fa:d6:ee:24:83:6c:f9:
ef:8b:18:fa:9e:e6:cc:09:22:fb:18:c4:01:a7:cf:
a8:eb:1c:16:27:02:a1:e7:a6:a8:4f:9a:ba:e9:37:
3c:a9:7d:70:44:57:47:aa:53:a7:57:f8:83:a6:3d:
03:0b:df:2f:0b:fa:e2:93:38:24:26:48:51:6c:73:
79:a0:d7:fc:69:66:1e:ce:ef:24:c7:c8:79:66:69:
82:20:d6:29:02:4b:c6:87:59:49:ed:f9:14:23:9e:
6d:19:9c:35:be:de:dd:a6:6a:63:10:4c:27:5e:8b:
40:40:69:26:dd:dc:82:58:d4:de:ff:d5:d0:d2:63:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:17:49:51:81:DD:98:7B:DE:27:4F:FB:3D:B3:5E:8D:72:BE:80:A8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/35D1E5A87AE811F1882D769F97EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
45.121.44.0/22
45.124.224.0/20
103.29.197.0/24
103.61.132.0/22
103.68.220.0/23
103.147.90.0/24
103.161.50.0/23
103.171.87.0/24
103.209.96.0/23
192.12.109.0/24
202.53.87.0/24
202.58.102.0/23
202.65.141.0-202.65.142.255
IPv6:
2405:a700::/32
Signature Algorithm: sha256WithRSAEncryption
7e:08:b2:d2:a0:4e:4d:c2:a7:10:57:c8:cb:1c:56:69:be:fc:
10:63:b0:a2:e8:dc:0a:6e:a2:c4:ca:49:dd:e1:b2:99:7d:c4:
9d:ae:91:5d:67:85:5d:7d:3a:15:dd:44:44:e4:72:11:06:f9:
fe:7a:cc:35:bc:b0:63:7c:83:11:b3:00:28:1e:d2:c2:5e:67:
6a:e1:d9:92:16:c2:c9:8c:8c:78:a3:0a:d3:73:5d:7e:5a:9f:
ad:4d:62:2c:04:93:65:23:d1:68:97:3d:f9:00:a6:0e:d2:6e:
57:0e:f5:18:4a:80:b1:fe:9a:3e:fc:22:29:9a:ec:6b:27:59:
e3:ca:b2:1b:91:c4:f0:93:99:40:97:43:b2:18:8c:f5:5a:65:
06:ea:81:68:59:81:6b:c6:56:6d:c7:be:a6:4a:f6:ef:4c:55:
05:01:8c:2c:f1:6d:00:ab:4c:27:c6:3c:43:3f:c0:e6:28:9f:
63:ed:6b:19:13:19:cf:14:fe:a0:d8:84:69:ed:83:f6:40:5e:
ee:95:c8:b2:c7:60:a6:ab:8a:e5:24:cd:2f:cd:1f:6c:84:de:
18:b1:d7:9c:cc:80:d6:1a:f0:f0:f1:dd:12:46:0a:59:07:d8:
de:42:d1:63:ac:2c:df:28:e2:15:7d:ad:91:26:40:70:68:9d:
9f:4a:73:3a
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgIDAPf3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwODE2MTUxOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0ZTc3OTYtNjk0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKdFeEGK4PC6uIKdCOBkLvwnWMeMc48KTWgvY8zoKBKD2F50GZS3Mf6T4vDb
nNp9UMHzY230p3/w/2Pr8ti+rRzRpnBrGs5RlBs9FV7sh9UERYZxtVb+RLxL3yO6
IWE7I61nNdEbmWcX+GUtP553bmOWuXQZ+HtcIce5sotRTHL61u4kg2z574sY+p7m
zAki+xjEAafPqOscFicCoeemqE+auuk3PKl9cERXR6pTp1f4g6Y9AwvfLwv64pM4
JCZIUWxzeaDX/GlmHs7vJMfIeWZpgiDWKQJLxodZSe35FCOebRmcNb7e3aZqYxBM
J16LQEBpJt3cgljU3v/V0NJjPEcCAwEAAaOCAr8wggK7MB0GA1UdDgQWBBRdF0lR
gd2Ye94nT/s9s16Ncr6AqDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM1RDFFNUE4
N0FFODExRjE4ODJENzY5Rjk3RUU1MjhFLnJvYTB+BggrBgEFBQcBBwEB/wRvMG0w
XAQCAAEwVgMEAi15LAMEBC184AMEAGcdxQMEAmc9hAMEAWdE3AMEAGeTWgMEAWeh
MgMEAGerVwMEAWfRYAMEAMAMbQMEAMo1VwMEAco6ZjAMAwQAykGNAwQAykGOMA0E
AgACMAcDBQAkBacAMA0GCSqGSIb3DQEBCwUAA4IBAQB+CLLSoE5NwqcQV8jLHFZp
vvwQY7Ci6NwKbqLEyknd4bKZfcSdrpFdZ4VdfToV3URE5HIRBvn+esw1vLBjfIMR
swAoHtLCXmdq4dmSFsLJjIx4owrTc11+Wp+tTWIsBJNlI9Folz35AKYO0m5XDvUY
SoCx/po+/CIpmuxrJ1njyrIbkcTwk5lAl0OyGIz1WmUG6oFoWYFrxlZtx76mSvbv
TFUFAYws8W0Aq0wnxjxDP8DmKJ9j7WsZExnPFP6g2IRp7YP2QF7ulciyx2Cmq4rl
JM0vzR9shN4YsdeczIDWGvDw8d0SRgpZB9jeQtFjrCzfKOIVfa2RJkBwaJ2fSnM6
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:23 2026 by rpki-client