Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD0A354361D11F0B8BEB085C4F9AE02.roa
File: 5BD0A354361D11F0B8BEB085C4F9AE02.roa (raw, json)
Hash identifier: UNCHCRtBurQ0XlYQ2K5DGh2372g3gvBVi/kWRvoCZJI=
Subject key identifier: D9:9C:71:46:C8:8F:26:4B:5A:91:BF:85:84:9A:A1:32:48:2D:0D:4A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E710
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD0A354361D11F0B8BEB085C4F9AE02.roa
Signing time: Sun 31 May 2026 17:15:45 +0000
ROA not before: Sun 31 May 2026 17:15:45 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 141514
IP address blocks: 103.160.126.0/23 maxlen: 24
103.170.214.0/23 maxlen: 24
103.173.240.0/23 maxlen: 24
103.175.134.0/23 maxlen: 24
103.175.190.0/23 maxlen: 24
103.177.82.0/23 maxlen: 24
103.177.112.0/23 maxlen: 24
103.177.204.0/23 maxlen: 24
103.178.122.0/23 maxlen: 24
103.178.126.0/23 maxlen: 24
103.181.112.0/23 maxlen: 24
103.183.204.0/23 maxlen: 24
103.183.228.0/23 maxlen: 24
103.184.104.0/23 maxlen: 24
103.184.154.0/23 maxlen: 24
103.185.234.0/23 maxlen: 24
103.186.54.0/23 maxlen: 24
103.187.228.0/23 maxlen: 24
2400:7f60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59152 (0xe710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:15:45 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6cc1-16ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:ff:4c:79:9c:06:49:ec:31:ae:55:5d:18:
ba:1d:57:57:ae:c8:0d:1e:aa:31:82:ed:df:89:e2:
3c:e3:22:8e:07:98:31:6e:fc:44:cf:81:94:93:0a:
1a:21:5a:8f:1d:4b:fd:7f:bb:ab:6f:00:bc:99:bc:
48:08:bf:5a:9f:0c:a6:74:85:0a:7e:90:f6:0a:6a:
f8:de:b9:14:a2:bb:e2:57:9b:7b:ee:bf:3c:35:da:
f3:97:3c:99:ba:15:8b:d1:1f:69:88:da:8e:8f:62:
c6:3d:5a:37:87:c9:52:8d:de:a5:75:03:8d:13:23:
67:05:fe:42:ea:d7:74:6c:a3:e6:7e:97:46:74:aa:
5b:3c:ce:7f:a1:4b:38:32:2b:a0:07:3d:54:09:ba:
1a:ce:37:96:6a:54:1c:a3:32:4f:39:7d:32:16:75:
5d:a5:29:60:20:92:91:3f:b5:a2:92:4d:7d:b9:8f:
3d:cb:26:c5:62:26:d2:45:d1:4f:df:49:0f:66:e2:
5f:cd:25:bd:a4:23:e3:39:2f:dc:5b:bf:d9:9a:3c:
d6:4a:f4:cb:93:4a:86:20:30:a9:bf:6f:66:70:bc:
c9:0d:c4:f7:d9:0f:55:b9:3e:c0:0c:0f:2d:6b:59:
cb:b8:0f:db:dd:a9:72:0b:8c:68:c6:73:5e:18:d4:
94:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9C:71:46:C8:8F:26:4B:5A:91:BF:85:84:9A:A1:32:48:2D:0D:4A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD0A354361D11F0B8BEB085C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.126.0/23
103.170.214.0/23
103.173.240.0/23
103.175.134.0/23
103.175.190.0/23
103.177.82.0/23
103.177.112.0/23
103.177.204.0/23
103.178.122.0/23
103.178.126.0/23
103.181.112.0/23
103.183.204.0/23
103.183.228.0/23
103.184.104.0/23
103.184.154.0/23
103.185.234.0/23
103.186.54.0/23
103.187.228.0/23
IPv6:
2400:7f60::/32
Signature Algorithm: sha256WithRSAEncryption
48:af:61:96:ab:8d:03:04:a0:c2:2f:e7:5b:11:17:53:be:9d:
d2:e2:be:5c:ab:7b:50:db:25:68:1e:68:aa:9c:72:99:c2:6b:
63:ff:c1:38:30:21:2d:a3:2d:51:0a:fd:c3:7e:a7:e3:bf:05:
3d:59:4b:f1:8e:99:bc:f4:b3:26:be:2d:88:c4:fa:c4:97:53:
f4:ef:a7:7a:94:ba:ea:17:58:db:62:00:ed:17:89:94:2c:e1:
42:af:96:39:63:33:bb:7f:c0:11:f5:03:87:ee:18:30:91:50:
73:a5:3f:e9:a8:78:1f:cc:ce:4f:90:b1:e3:11:ec:bc:3c:2e:
1e:19:41:f0:12:28:6a:98:ff:cb:28:ba:bf:fb:21:39:8d:40:
b1:1c:cf:ab:80:08:45:c0:aa:d2:01:84:e7:65:91:ee:96:2b:
54:8c:b1:1e:2f:ef:32:03:e2:db:ec:07:ea:7a:0e:35:cc:43:
88:5f:8b:a6:5e:7f:36:39:f4:f9:37:29:26:c3:d9:bc:f9:ad:
7a:fc:62:77:9e:0c:f0:61:83:ad:33:e5:d9:a1:53:92:e3:12:
5f:84:35:12:e5:04:0b:11:c7:20:f2:7b:71:56:20:8a:63:1a:
63:82:1f:e3:e5:a8:bf:b1:df:b2:64:06:94:e0:bb:11:5e:f0:
3d:f4:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:25 2026 by rpki-client