Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F48FD747E7511F1BEFCC67E8FA30FBC.roa
File: 4F48FD747E7511F1BEFCC67E8FA30FBC.roa (raw, json)
Hash identifier: 4kuF8xyshdnI9A8rM7DPF7MgSzKmy3Ir04P6ZoR9D4E=
Subject key identifier: 84:CC:64:ED:9E:38:DB:ED:52:ED:44:94:31:00:B1:9A:91:AC:EB:EC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F824
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F48FD747E7511F1BEFCC67E8FA30FBC.roa
Signing time: Mon 13 Jul 2026 04:42:53 +0000
ROA not before: Mon 13 Jul 2026 04:42:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140641
IP address blocks: 103.69.43.0/24 maxlen: 24
103.93.94.0/24 maxlen: 24
103.95.50.0/23 maxlen: 24
103.97.104.0/24 maxlen: 24
103.97.105.0/24 maxlen: 24
103.97.106.0/24 maxlen: 24
103.97.107.0/24 maxlen: 24
103.110.12.0/24 maxlen: 24
103.110.13.0/24 maxlen: 24
103.110.14.0/24 maxlen: 24
103.110.15.0/24 maxlen: 24
103.117.212.0/24 maxlen: 24
103.119.170.0/23 maxlen: 24
103.129.97.0/24 maxlen: 24
103.131.26.0/24 maxlen: 24
103.139.7.0/24 maxlen: 24
103.140.72.0/24 maxlen: 24
103.152.79.0/24 maxlen: 24
103.171.44.0/24 maxlen: 24
103.171.45.0/24 maxlen: 24
103.190.243.0/24 maxlen: 24
103.218.124.0/24 maxlen: 24
103.218.125.0/24 maxlen: 24
103.218.126.0/24 maxlen: 24
103.218.127.0/24 maxlen: 24
103.228.140.0/24 maxlen: 24
103.228.141.0/24 maxlen: 24
103.228.142.0/24 maxlen: 24
103.228.143.0/24 maxlen: 24
103.240.89.0/24 maxlen: 24
103.251.150.0/24 maxlen: 24
103.253.70.0/24 maxlen: 24
163.227.186.0/24 maxlen: 24
163.227.187.0/24 maxlen: 24
175.158.75.0/24 maxlen: 24
182.255.56.0/24 maxlen: 24
182.255.57.0/24 maxlen: 24
182.255.58.0/24 maxlen: 24
182.255.59.0/24 maxlen: 24
202.162.240.0/24 maxlen: 24
202.162.241.0/24 maxlen: 24
202.162.243.0/24 maxlen: 24
2402:61a0:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63524 (0xf824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 13 04:42:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a546ccd-0431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:44:df:c9:17:a3:8a:63:ee:df:21:a3:16:
34:9b:69:72:1f:f4:a1:cb:4e:06:12:fb:a9:0d:5b:
ca:1f:50:af:09:a9:c4:a3:d5:eb:c0:48:23:88:c2:
6f:5e:60:91:fa:9e:15:20:cb:72:8d:c3:1d:f8:8e:
98:46:80:74:d3:9f:ad:05:92:16:ff:73:90:04:7b:
aa:dc:70:07:94:21:33:70:c1:fb:5d:db:bb:33:cc:
89:78:0c:b9:b4:e8:ef:3c:41:d2:9d:39:a4:38:07:
60:19:2c:70:48:ea:d9:50:97:ce:21:50:c0:92:ef:
df:dd:4f:39:6b:92:c3:53:e0:f3:aa:48:70:30:a2:
88:01:73:d6:fe:50:6c:2e:e3:30:5d:d8:75:7a:1e:
76:24:10:4a:3c:fe:17:c2:ee:96:fb:3c:1f:62:be:
36:99:f6:42:0e:1a:30:e6:bc:cf:d8:85:a3:e6:6a:
de:67:fd:19:45:ff:bf:ab:ed:35:35:28:9f:c9:de:
df:13:2a:f4:1c:6d:1d:aa:fd:fb:99:67:7b:f8:77:
27:7b:eb:be:2d:7a:0b:9f:c7:ff:7b:2a:b2:34:bb:
7e:83:b6:af:72:f7:8d:89:6e:cd:83:0e:da:67:78:
9f:a8:eb:cf:ef:ff:ba:03:76:77:b9:51:35:1c:b4:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CC:64:ED:9E:38:DB:ED:52:ED:44:94:31:00:B1:9A:91:AC:EB:EC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F48FD747E7511F1BEFCC67E8FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.43.0/24
103.93.94.0/24
103.95.50.0/23
103.97.104.0/22
103.110.12.0/22
103.117.212.0/24
103.119.170.0/23
103.129.97.0/24
103.131.26.0/24
103.139.7.0/24
103.140.72.0/24
103.152.79.0/24
103.171.44.0/23
103.190.243.0/24
103.218.124.0/22
103.228.140.0/22
103.240.89.0/24
103.251.150.0/24
103.253.70.0/24
163.227.186.0/23
175.158.75.0/24
182.255.56.0/22
202.162.240.0/23
202.162.243.0/24
IPv6:
2402:61a0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
04:73:00:c0:45:44:d0:5b:ad:73:8c:68:29:22:3d:01:7c:46:
6e:a9:c4:89:7d:a4:96:77:e0:ed:4b:53:78:f4:94:10:8b:ef:
a3:e9:08:92:1f:2e:71:89:f1:bb:43:31:9c:de:60:62:8d:72:
6d:ca:64:6a:5c:64:1e:d3:5e:0c:7b:a6:fa:54:42:d3:de:58:
fe:17:ba:d5:66:19:85:00:8e:fa:61:14:90:f2:fb:0a:e1:db:
ac:06:c3:bd:21:e5:ce:5b:7e:e6:a8:52:cf:41:96:51:ef:1c:
d8:6b:c8:16:5c:5d:0e:89:8a:c3:34:b8:c0:ff:18:62:5a:0b:
41:61:c5:ae:07:5c:36:29:55:84:17:69:51:ab:c6:6a:71:08:
bd:e4:09:c6:57:0e:8e:6a:60:5e:89:f9:3c:0d:76:6d:34:e0:
bf:20:5d:ab:11:78:ee:8e:e7:0d:1d:94:2f:fb:0e:28:85:6c:
c2:7a:ec:bf:4e:70:27:85:a0:83:12:fe:01:e0:e5:9b:b4:e8:
17:c6:78:31:3d:25:d5:45:f6:a3:03:25:e6:0d:e3:a3:76:4b:
04:3c:a1:f3:1f:26:4d:30:fa:ab:d9:f6:d8:65:a1:e9:93:3b:
f5:23:04:8f:e1:c1:4f:a8:28:1f:76:34:bf:bd:85:e0:db:48:
a6:f0:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:54 2026 by rpki-client