Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
File: 493C56AEDE3C11EF979E6834C4F9AE02.roa (raw, json)
Hash identifier: 4z9gYbLXMU6k3NLIFJ4zKzzxnYJAVyA3JGfKxmfHGb4=
Subject key identifier: CB:21:E9:74:40:E8:A6:28:C8:FD:E3:56:E8:B8:27:1A:A2:B2:E9:08
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE11
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:31:22 +0000
ROA not before: Mon 06 Jul 2026 16:31:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132768
IP address blocks: 103.16.144.0/22 maxlen: 24
103.16.196.0/24 maxlen: 24
103.18.68.0/22 maxlen: 24
103.18.120.0/22 maxlen: 24
103.18.164.0/22 maxlen: 24
103.18.242.0/24 maxlen: 24
103.25.132.0/22 maxlen: 24
103.30.80.0/22 maxlen: 24
103.103.212.0/22 maxlen: 24
103.107.96.0/22 maxlen: 24
103.198.10.0/23 maxlen: 24
103.241.242.0/24 maxlen: 24
103.241.243.0/24 maxlen: 24
103.246.170.0/23 maxlen: 24
103.253.148.0/22 maxlen: 24
139.5.36.0/22 maxlen: 24
150.107.92.0/22 maxlen: 24
183.87.12.0/22 maxlen: 24
2405:ec0::/32 maxlen: 32
2405:ec0::/36 maxlen: 36
2405:ec0:1000::/36 maxlen: 36
2405:ec0:2000::/36 maxlen: 36
2407:a780:1000::/36 maxlen: 36
2407:a780:1000::/48 maxlen: 48
2407:a780:1001::/48 maxlen: 48
2407:a780:1002::/48 maxlen: 48
2407:a780:1003::/48 maxlen: 48
2407:a780:1004::/48 maxlen: 48
2407:a780:1005::/48 maxlen: 48
2407:a780:1006::/48 maxlen: 48
2407:a780:1007::/48 maxlen: 48
2407:a780:1008::/48 maxlen: 48
2407:a780:1009::/48 maxlen: 48
2407:a780:100a::/48 maxlen: 48
2407:a780:100b::/48 maxlen: 48
2407:a780:100c::/48 maxlen: 48
2407:a780:100d::/48 maxlen: 48
2407:a780:100e::/48 maxlen: 48
2407:a780:100f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60945 (0xee11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:31:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd85a-2c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:12:3d:80:a6:87:f0:f1:be:64:39:50:42:
7f:eb:5f:d5:59:54:28:42:3d:b2:30:60:d4:98:a6:
b6:a0:cd:92:41:42:0f:42:1e:b0:48:51:a0:7c:7c:
d4:c9:3d:ce:04:2b:a5:03:c6:d7:cb:1d:13:6d:78:
91:bb:4e:81:a1:e6:03:67:d2:4f:05:6b:20:dd:3c:
53:2f:d9:ee:56:4e:ff:ea:02:2c:6b:fc:7a:2d:a1:
fd:1e:7e:e2:13:43:16:af:6a:b5:57:99:8e:47:9c:
54:45:b2:56:22:a3:14:77:56:2b:d8:e3:25:2e:c8:
79:50:14:82:60:df:f7:45:73:e4:6c:57:90:ba:4e:
fe:d7:40:f5:18:e3:30:33:05:2c:9f:d5:3b:53:5b:
1b:fd:26:42:70:af:db:cf:af:e1:1e:3d:50:19:0b:
a0:3a:8d:93:cb:fe:a2:21:d8:ef:ba:ba:f7:a3:60:
c1:45:bf:f4:02:38:b4:2f:46:d6:97:88:9c:f9:70:
35:12:f4:42:70:d2:e0:c9:4b:18:57:62:4c:01:45:
b5:0a:6b:13:98:14:00:9b:e4:63:c6:59:bc:a9:94:
44:9b:ac:70:ce:25:57:eb:e4:2b:72:e9:11:5b:62:
c6:10:dd:84:1e:96:d8:c5:85:be:78:48:f6:f8:0f:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:21:E9:74:40:E8:A6:28:C8:FD:E3:56:E8:B8:27:1A:A2:B2:E9:08
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.16.144.0/22
103.16.196.0/24
103.18.68.0/22
103.18.120.0/22
103.18.164.0/22
103.18.242.0/24
103.25.132.0/22
103.30.80.0/22
103.103.212.0/22
103.107.96.0/22
103.198.10.0/23
103.241.242.0/23
103.246.170.0/23
103.253.148.0/22
139.5.36.0/22
150.107.92.0/22
183.87.12.0/22
IPv6:
2405:ec0::/32
2407:a780:1000::/36
Signature Algorithm: sha256WithRSAEncryption
9b:81:11:2d:4c:d1:e1:2f:e4:53:5c:ea:69:e0:ff:94:4f:a2:
4d:50:9e:14:27:47:bb:e6:46:32:58:75:02:ea:95:41:27:ab:
30:85:2d:a6:31:1d:79:bd:70:4f:29:ee:5e:9e:df:fa:6a:a7:
b2:f6:f9:b6:0d:16:cd:57:a1:55:7b:f5:cc:89:50:5b:28:b9:
ad:bc:13:12:35:91:0c:08:2a:83:2c:f1:89:39:a7:2f:59:91:
31:09:5d:52:16:c5:eb:f4:7d:56:ea:99:07:ef:20:7e:a1:07:
c8:1f:51:9b:da:f6:7e:18:9a:62:17:24:68:84:ce:c3:32:54:
3f:8a:82:2b:27:2c:62:b2:b1:83:52:8b:03:1a:d2:ab:e6:96:
0c:14:5c:32:35:6a:db:57:ed:79:e4:c6:2e:f9:2c:99:be:42:
70:13:c4:55:88:d3:ed:4d:c5:14:61:0a:46:00:46:89:de:51:
b8:67:c5:f6:14:f9:20:f5:36:3e:1f:a5:e1:41:a6:10:2f:0a:
cf:14:da:a8:ef:28:e5:3b:6f:cc:d1:1f:d7:87:bf:41:5c:8d:
a2:1b:98:cf:f1:36:56:6c:08:8c:97:51:87:6d:bf:7e:ed:bb:
7f:ac:ed:87:d2:d9:6c:83:b6:ae:0d:02:a5:95:85:0d:1e:58:
b0:3c:18:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:48:20 2026 by rpki-client