Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D58C9BA31D511F186A56486C8833773.roa
File: 3D58C9BA31D511F186A56486C8833773.roa (raw, json)
Hash identifier: aVN0lT2KTPxPPJaw8RpJfyFbKi9t+jyiEPUZJLvc8kw=
Subject key identifier: BD:3D:41:18:08:BE:6A:E4:85:66:CD:42:C8:95:3C:77:EA:9F:48:0B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E68F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D58C9BA31D511F186A56486C8833773.roa
Signing time: Sun 31 May 2026 17:11:39 +0000
ROA not before: Sun 31 May 2026 17:11:39 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 140171
IP address blocks: 103.16.176.0/24 maxlen: 24
103.38.182.0/23 maxlen: 24
103.53.30.0/24 maxlen: 24
103.53.31.0/24 maxlen: 24
103.72.218.0/24 maxlen: 24
103.72.219.0/24 maxlen: 24
103.77.14.0/24 maxlen: 24
103.80.152.0/23 maxlen: 23
103.80.152.0/24 maxlen: 24
103.80.153.0/24 maxlen: 24
103.80.154.0/23 maxlen: 24
103.134.132.0/24 maxlen: 24
103.144.192.0/24 maxlen: 24
103.156.200.0/23 maxlen: 24
103.160.186.0/24 maxlen: 24
103.160.187.0/24 maxlen: 24
103.161.32.0/24 maxlen: 24
103.161.33.0/24 maxlen: 24
103.161.59.0/24 maxlen: 24
103.163.42.0/23 maxlen: 24
103.187.166.0/23 maxlen: 24
103.191.202.0/23 maxlen: 24
103.209.62.0/24 maxlen: 24
103.209.63.0/24 maxlen: 24
103.209.174.0/23 maxlen: 24
103.211.162.0/24 maxlen: 24
163.227.102.0/24 maxlen: 24
163.227.103.0/24 maxlen: 24
202.61.108.0/24 maxlen: 24
2001:df0:cf80::/48 maxlen: 48
2001:df1:1fc0::/48 maxlen: 48
2001:df1:2040::/48 maxlen: 48
2001:df1:20c0::/48 maxlen: 48
2001:df1:2240::/48 maxlen: 48
2001:df1:22c0::/48 maxlen: 48
2001:df1:2740::/48 maxlen: 48
2001:df1:8740::/48 maxlen: 48
2001:df2:240::/47 maxlen: 47
2001:df2:240::/49 maxlen: 49
2001:df2:240:8000::/49 maxlen: 49
2001:df2:241::/48 maxlen: 49
2001:df3:440::/48 maxlen: 48
2001:df3:3840::/48 maxlen: 48
2001:df4:1a40::/48 maxlen: 48
2001:df6:91c0::/48 maxlen: 48
2401:c5a0::/32 maxlen: 32
2402:4f60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59023 (0xe68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:11:39 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6bcb-0778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:55:39:39:47:21:6c:89:c8:aa:28:15:0b:
b9:e9:ca:64:15:05:b4:e2:8b:cb:ae:82:fc:be:7e:
e7:e9:4b:ba:54:66:7e:77:d8:5c:a1:4c:41:b2:83:
45:38:94:da:95:90:3c:e8:08:93:8e:ab:b4:fb:0b:
a8:98:31:c6:b4:0b:f2:12:e8:72:c9:8a:73:83:92:
53:87:15:2d:a9:6c:7d:ec:d6:d0:06:0d:1d:31:3e:
46:83:2d:f2:7f:26:6e:c4:57:d3:5e:3b:a8:1f:d4:
a9:f4:55:b6:6a:74:fd:fe:20:1c:1f:c5:a1:b9:e5:
3e:bc:b8:d5:3c:dc:57:5a:9d:0d:8a:00:47:9c:c8:
34:02:dc:3d:59:77:48:38:82:34:79:84:aa:d8:19:
e0:e9:a1:71:3d:76:8f:fe:78:06:40:d4:cf:00:24:
4b:d0:25:95:75:57:bd:d7:f6:0c:14:ae:61:53:58:
b9:9b:3d:20:08:a1:55:d8:3c:c7:d6:2a:8d:9b:86:
90:72:ba:1e:2f:98:b3:84:d7:2f:13:24:56:7c:bd:
0d:e3:e7:67:ab:cd:2b:30:4f:86:77:1b:de:36:4f:
a6:ba:8b:94:9c:c8:71:f3:61:25:bb:64:ed:87:4f:
8d:19:11:8b:cc:51:82:90:11:b3:74:c3:85:49:2e:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3D:41:18:08:BE:6A:E4:85:66:CD:42:C8:95:3C:77:EA:9F:48:0B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D58C9BA31D511F186A56486C8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.16.176.0/24
103.38.182.0/23
103.53.30.0/23
103.72.218.0/23
103.77.14.0/24
103.80.152.0/22
103.134.132.0/24
103.144.192.0/24
103.156.200.0/23
103.160.186.0/23
103.161.32.0/23
103.161.59.0/24
103.163.42.0/23
103.187.166.0/23
103.191.202.0/23
103.209.62.0/23
103.209.174.0/23
103.211.162.0/24
163.227.102.0/23
202.61.108.0/24
IPv6:
2001:df0:cf80::/48
2001:df1:1fc0::/48
2001:df1:2040::/48
2001:df1:20c0::/48
2001:df1:2240::/48
2001:df1:22c0::/48
2001:df1:2740::/48
2001:df1:8740::/48
2001:df2:240::/47
2001:df3:440::/48
2001:df3:3840::/48
2001:df4:1a40::/48
2001:df6:91c0::/48
2401:c5a0::/32
2402:4f60::/32
Signature Algorithm: sha256WithRSAEncryption
8b:9b:1f:79:e3:d7:65:8f:af:14:98:b7:c4:67:00:dd:7e:54:
c6:49:27:d5:86:1a:2d:33:e5:69:d0:40:38:b2:62:29:ce:1b:
93:00:a5:e8:f4:4f:7f:93:39:bc:5e:63:7f:87:3d:8b:32:89:
33:a0:80:c7:61:8a:55:9c:c6:f8:d4:68:fa:8d:8f:66:da:b4:
ce:00:b5:c9:1d:53:02:81:f2:f2:78:13:b1:18:7b:56:4c:f8:
2c:76:c5:cf:6f:fc:62:9d:4b:4e:83:8a:9b:d5:d3:b0:6b:f8:
5d:da:ae:c2:43:01:ee:f5:21:5a:94:9a:96:76:44:f9:27:fc:
c8:30:14:d8:c0:9b:d0:72:7b:e1:0f:fa:29:0a:d9:2d:71:42:
04:91:ee:93:29:ab:df:ea:8e:72:74:bd:6f:2f:bb:f3:ae:a5:
a3:80:a9:4a:dd:43:98:de:be:78:98:04:02:91:91:4b:ca:92:
88:a0:54:d6:9d:18:40:73:94:70:4d:07:ca:21:85:ef:18:d2:
90:2a:6b:d2:33:11:7f:02:d5:ac:44:0e:c7:1c:0b:f6:28:73:
a1:3c:34:e2:86:78:d5:2c:5f:01:60:fa:a3:4d:cd:d4:08:fc:
43:1d:78:cf:e8:e7:23:00:bb:a2:4d:96:7c:16:49:11:fb:43:
97:b1:97:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:51 2026 by rpki-client