Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/465F963C1D1311ECADE5AB79C4F9AE02.roa
File: 465F963C1D1311ECADE5AB79C4F9AE02.roa (raw, json)
Hash identifier: TVRNiQQh7pT3a6F72RcSH6QQUf+Vi4jUWn1LZqzdMvA=
Subject key identifier: CB:B7:FE:98:D6:57:4C:93:41:47:80:E5:B5:95:50:79:B1:17:08:74
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE98
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/465F963C1D1311ECADE5AB79C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:35:50 +0000
ROA not before: Mon 06 Jul 2026 16:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133593
IP address blocks: 45.115.76.0/22 maxlen: 24
103.40.48.0/22 maxlen: 22
103.40.48.0/24 maxlen: 24
103.40.49.0/24 maxlen: 24
103.40.50.0/24 maxlen: 24
103.40.51.0/24 maxlen: 24
123.108.200.0/21 maxlen: 21
123.108.200.0/24 maxlen: 24
123.108.201.0/24 maxlen: 24
123.108.202.0/24 maxlen: 24
123.108.203.0/24 maxlen: 24
123.108.204.0/24 maxlen: 24
123.108.205.0/24 maxlen: 24
123.108.206.0/24 maxlen: 24
123.108.207.0/24 maxlen: 24
125.62.192.0/20 maxlen: 20
125.62.192.0/24 maxlen: 24
125.62.193.0/24 maxlen: 24
125.62.194.0/24 maxlen: 24
125.62.195.0/24 maxlen: 24
125.62.196.0/24 maxlen: 24
125.62.197.0/24 maxlen: 24
125.62.198.0/24 maxlen: 24
125.62.199.0/24 maxlen: 24
125.62.200.0/24 maxlen: 24
125.62.201.0/24 maxlen: 24
125.62.202.0/24 maxlen: 24
125.62.203.0/24 maxlen: 24
125.62.204.0/24 maxlen: 24
125.62.205.0/24 maxlen: 24
125.62.206.0/24 maxlen: 24
125.62.207.0/24 maxlen: 24
125.62.208.0/21 maxlen: 21
125.62.208.0/24 maxlen: 24
125.62.209.0/24 maxlen: 24
125.62.210.0/24 maxlen: 24
125.62.211.0/24 maxlen: 24
125.62.212.0/24 maxlen: 24
125.62.213.0/24 maxlen: 24
125.62.214.0/24 maxlen: 24
125.62.215.0/24 maxlen: 24
2403:7bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61080 (0xee98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd966-65ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:92:7c:68:e6:ec:24:78:88:80:88:5b:bb:
c7:a7:0b:14:9b:90:05:05:0b:77:a2:e3:e4:f3:c6:
d1:ba:f5:e9:51:5b:8b:df:83:f5:42:84:15:e6:15:
36:d2:49:49:82:d5:7e:7e:9b:52:d6:f5:8a:58:6d:
52:ff:09:c6:30:67:4e:e3:ca:66:c1:ed:3e:30:a0:
93:7a:b3:e9:8b:34:14:96:3e:05:b9:a3:af:0c:a2:
18:1b:31:cc:cc:bf:cf:95:db:ab:56:f8:19:ef:7a:
66:13:28:9f:0b:f1:13:71:44:aa:d6:1b:be:85:88:
79:a3:69:ab:9f:9d:ae:f3:60:83:7b:c2:a4:c2:fa:
85:7f:ef:05:a2:0d:27:a8:25:38:90:76:90:a3:62:
89:ee:ac:52:4a:30:b6:ea:06:68:ee:f5:f5:a8:dc:
b0:c4:a0:85:67:70:bb:ee:27:3a:d4:1a:9c:c3:a1:
59:d1:e2:c3:55:4d:0a:3a:b4:fc:c1:6b:ed:01:e8:
3f:48:ca:c5:92:6b:c3:6f:25:7b:81:53:4f:37:c4:
27:9f:13:a4:25:3d:b3:5f:87:f5:d1:3e:3d:e1:90:
d1:cf:7b:fa:00:b4:0b:e2:ba:24:f8:13:a3:c1:b9:
2b:55:cd:1a:b6:cd:e2:f2:70:86:e5:ee:c2:ed:65:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B7:FE:98:D6:57:4C:93:41:47:80:E5:B5:95:50:79:B1:17:08:74
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/465F963C1D1311ECADE5AB79C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.115.76.0/22
103.40.48.0/22
123.108.200.0/21
125.62.192.0-125.62.215.255
IPv6:
2403:7bc0::/32
Signature Algorithm: sha256WithRSAEncryption
07:a4:6a:56:c5:8f:a0:48:06:dd:f3:fe:7e:ac:cc:e9:da:2b:
63:74:ca:d9:b9:3f:5c:80:99:e1:ec:da:4f:9c:6d:91:41:8d:
d4:f4:cb:b1:63:c8:34:88:34:1a:52:b9:bc:15:eb:1b:ad:19:
ed:e6:0c:b8:1b:98:83:c8:39:3f:45:02:eb:9d:9e:00:05:66:
8a:e8:93:fe:50:40:1e:eb:ac:03:44:48:08:4d:91:60:a9:6f:
85:8b:ce:6c:9c:44:30:f8:8f:f2:a0:77:be:9d:10:bf:60:5d:
fc:ca:fc:c9:ba:06:a4:77:11:7b:86:66:c0:a0:93:41:30:3f:
64:4f:7d:e1:96:ca:cc:97:05:18:e6:d8:74:b2:c0:65:dd:70:
d5:04:db:29:67:92:65:0e:fb:8b:70:62:ec:cf:18:1e:a0:b5:
f5:86:42:dc:dc:7d:ce:61:df:46:84:76:a4:b1:0b:65:95:dd:
f9:25:17:9b:2c:93:1e:ef:ca:91:5b:cc:a7:19:06:60:f6:f8:
5d:13:39:6f:06:f5:47:be:b6:eb:2c:4b:04:70:fd:bf:14:f0:
1d:b8:40:12:5e:75:92:a2:68:e9:3c:6a:a5:de:9d:53:6c:a9:
4d:bc:9c:d8:9b:fa:bf:d1:67:cf:b3:28:13:52:ba:3f:df:67:
ba:e4:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:54 2026 by rpki-client