Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
File: 493C56AEDE3C11EF979E6834C4F9AE02.roa (raw, json)
Hash identifier: ErE5lQWlMs1+864N7jQBza/T16wRdAA/XDgxllJMKqU=
Subject key identifier: 5C:EF:1E:02:1E:15:9B:F1:88:23:44:CD:45:00:F0:B0:47:C0:52:B2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E1F6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
Signing time: Sun 31 May 2026 16:33:17 +0000
ROA not before: Sun 31 May 2026 16:33:17 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132768
IP address blocks: 103.16.144.0/22 maxlen: 24
103.16.196.0/24 maxlen: 24
103.18.68.0/22 maxlen: 24
103.18.120.0/22 maxlen: 24
103.18.164.0/22 maxlen: 24
103.18.242.0/24 maxlen: 24
103.25.132.0/22 maxlen: 24
103.30.80.0/22 maxlen: 24
103.103.212.0/22 maxlen: 24
103.107.96.0/22 maxlen: 24
103.198.10.0/23 maxlen: 24
103.241.242.0/24 maxlen: 24
103.241.243.0/24 maxlen: 24
103.246.170.0/23 maxlen: 24
103.253.148.0/22 maxlen: 24
139.5.36.0/22 maxlen: 24
150.107.92.0/22 maxlen: 24
183.87.12.0/22 maxlen: 24
2405:ec0::/32 maxlen: 32
2405:ec0::/36 maxlen: 36
2405:ec0:1000::/36 maxlen: 36
2405:ec0:2000::/36 maxlen: 36
2407:a780:1000::/36 maxlen: 36
2407:a780:1000::/48 maxlen: 48
2407:a780:1001::/48 maxlen: 48
2407:a780:1002::/48 maxlen: 48
2407:a780:1003::/48 maxlen: 48
2407:a780:1004::/48 maxlen: 48
2407:a780:1005::/48 maxlen: 48
2407:a780:1006::/48 maxlen: 48
2407:a780:1007::/48 maxlen: 48
2407:a780:1008::/48 maxlen: 48
2407:a780:1009::/48 maxlen: 48
2407:a780:100a::/48 maxlen: 48
2407:a780:100b::/48 maxlen: 48
2407:a780:100c::/48 maxlen: 48
2407:a780:100d::/48 maxlen: 48
2407:a780:100e::/48 maxlen: 48
2407:a780:100f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57846 (0xe1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:33:17 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c62cd-a2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:90:e9:f9:2d:5f:75:7b:eb:c1:68:87:21:
ed:54:15:4b:f9:51:ce:b2:89:82:4e:65:49:01:f3:
ef:4c:66:94:76:8c:23:23:41:89:9b:79:f6:3a:65:
74:5a:bb:87:8b:8d:40:98:3f:29:bd:10:8a:86:95:
38:e2:04:9a:c3:1e:38:f4:3e:a1:94:8b:04:91:01:
04:ea:e2:75:0b:b3:fd:17:b7:59:9a:86:92:94:25:
3e:9d:58:80:4a:e1:8a:d2:74:45:7e:a5:43:c4:90:
71:dc:e7:42:5d:8b:47:7c:c3:46:e3:da:0c:b2:c9:
5c:1e:01:ab:f2:5a:02:56:4a:7a:fe:54:63:60:f3:
d6:47:b5:49:92:4d:c7:07:59:23:bb:35:be:a4:70:
72:98:9a:57:a8:33:a1:9a:23:7e:32:d0:d1:77:54:
90:b1:3b:86:97:7e:3a:95:6f:7c:bf:3c:cf:a1:d2:
d4:05:ed:e0:f8:97:06:aa:7c:be:f2:e9:be:55:6c:
97:70:95:d9:3e:52:a3:98:55:bc:07:ec:4d:f5:78:
81:bc:e5:b5:4d:d8:22:1b:84:ec:ad:0e:ca:6f:30:
23:0b:02:55:4e:c5:e9:e8:76:5a:e5:df:01:bd:48:
3d:dc:a6:73:7e:59:5b:b3:f3:2c:76:42:fb:5c:c5:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EF:1E:02:1E:15:9B:F1:88:23:44:CD:45:00:F0:B0:47:C0:52:B2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.16.144.0/22
103.16.196.0/24
103.18.68.0/22
103.18.120.0/22
103.18.164.0/22
103.18.242.0/24
103.25.132.0/22
103.30.80.0/22
103.103.212.0/22
103.107.96.0/22
103.198.10.0/23
103.241.242.0/23
103.246.170.0/23
103.253.148.0/22
139.5.36.0/22
150.107.92.0/22
183.87.12.0/22
IPv6:
2405:ec0::/32
2407:a780:1000::/36
Signature Algorithm: sha256WithRSAEncryption
56:20:ea:e9:14:61:26:f4:2d:e2:39:49:54:b3:dc:ec:e2:3e:
ac:a4:e8:a2:13:35:36:3b:89:dd:93:57:7f:a7:f5:75:05:a3:
0c:f7:62:ad:eb:bd:c1:4f:54:05:b1:fe:2f:95:0e:ef:a9:51:
10:4b:de:4b:18:a4:18:77:9e:15:64:06:bc:b0:84:24:6b:81:
0a:58:9c:4a:f5:bf:8d:af:69:3d:c7:ab:18:24:33:d8:bc:50:
3a:c6:02:ae:13:7b:69:23:eb:37:13:81:f3:61:8c:0c:40:5d:
83:38:15:7a:ec:9e:9b:6a:c5:ae:30:81:b9:a9:92:93:58:68:
9b:1f:60:4b:08:6a:f0:0c:ec:31:80:e6:76:f0:f5:59:09:4e:
78:32:1c:d6:88:6e:da:3b:a6:70:e3:0c:3f:e3:cc:07:85:5a:
0c:5b:f9:66:cf:a6:a9:9e:93:1a:33:6f:8b:5f:e9:ad:53:dd:
68:8f:fe:5e:bd:bc:6d:f9:bf:c2:0b:d1:06:ec:34:02:6b:38:
6c:33:5f:72:2a:86:78:3a:9e:d7:18:29:86:26:bb:58:fe:e4:
c2:da:47:b5:95:82:08:b5:a4:83:76:15:bd:44:72:09:06:2b:
b7:aa:47:87:1d:07:c4:d9:14:70:15:8a:b3:a6:d8:8d:4c:f1:
a2:aa:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:11 2026 by rpki-client