Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD0A354361D11F0B8BEB085C4F9AE02.roa
File: 5BD0A354361D11F0B8BEB085C4F9AE02.roa (raw, json)
Hash identifier: 7znia0XdGeZpWzR9kPIMWr0m1cKYiNMDWOLD8x8GpAo=
Subject key identifier: 3E:2C:C0:A7:1D:F6:89:18:3C:11:B4:5B:3D:B5:A7:8D:8F:CD:B7:63
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F32F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD0A354361D11F0B8BEB085C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:14:22 +0000
ROA not before: Mon 06 Jul 2026 17:14:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141514
IP address blocks: 103.160.126.0/23 maxlen: 24
103.170.214.0/23 maxlen: 24
103.173.240.0/23 maxlen: 24
103.175.134.0/23 maxlen: 24
103.175.190.0/23 maxlen: 24
103.177.82.0/23 maxlen: 24
103.177.112.0/23 maxlen: 24
103.177.204.0/23 maxlen: 24
103.178.122.0/23 maxlen: 24
103.178.126.0/23 maxlen: 24
103.181.112.0/23 maxlen: 24
103.183.204.0/23 maxlen: 24
103.183.228.0/23 maxlen: 24
103.184.104.0/23 maxlen: 24
103.184.154.0/23 maxlen: 24
103.185.234.0/23 maxlen: 24
103.186.54.0/23 maxlen: 24
103.187.228.0/23 maxlen: 24
2400:7f60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62255 (0xf32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:14:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be26e-5766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:e8:16:55:43:3e:e2:df:db:a5:37:8c:97:
e4:31:7d:43:b3:11:96:66:1c:71:b8:e4:12:0f:59:
b0:b7:bd:ba:09:3a:a2:df:fa:2d:03:43:60:fe:83:
01:d0:2b:9a:b6:33:f2:f6:21:ff:a1:1d:25:c7:f5:
c4:8d:06:ba:e3:6a:f7:08:b3:4f:cd:c9:81:f8:ca:
91:a6:83:b7:19:56:4d:bc:b2:4a:ff:8a:68:b0:50:
7b:5d:d2:cf:29:61:93:1c:81:10:83:cf:c4:e9:19:
69:7b:cc:05:f6:af:0c:06:28:df:39:9b:65:19:96:
6d:99:1b:fc:86:fa:9d:56:a2:e1:a9:51:fe:e1:bd:
d3:cb:af:89:d1:fc:6a:90:d0:d1:97:60:37:9b:27:
01:e2:7d:4b:6e:1a:09:f2:b6:95:83:3f:61:7a:17:
b6:8f:00:75:9c:fa:0f:ef:44:e3:cf:7c:98:c6:d7:
9d:83:6f:76:e7:4e:47:38:00:61:49:68:4b:26:a8:
ab:d4:fd:0c:a9:8e:37:62:f9:b3:a1:60:2e:0f:ea:
91:f0:88:a9:05:b1:3e:95:fa:ce:e9:0f:82:c2:de:
e8:be:90:a3:1a:a4:15:ea:54:bf:27:79:16:4e:92:
75:27:4c:84:e3:87:f6:44:df:f6:80:ad:a6:77:27:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:C0:A7:1D:F6:89:18:3C:11:B4:5B:3D:B5:A7:8D:8F:CD:B7:63
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5BD0A354361D11F0B8BEB085C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.126.0/23
103.170.214.0/23
103.173.240.0/23
103.175.134.0/23
103.175.190.0/23
103.177.82.0/23
103.177.112.0/23
103.177.204.0/23
103.178.122.0/23
103.178.126.0/23
103.181.112.0/23
103.183.204.0/23
103.183.228.0/23
103.184.104.0/23
103.184.154.0/23
103.185.234.0/23
103.186.54.0/23
103.187.228.0/23
IPv6:
2400:7f60::/32
Signature Algorithm: sha256WithRSAEncryption
71:8c:1c:22:91:f4:eb:94:84:56:a4:d1:5c:b1:ff:0c:27:5a:
6d:5c:5f:8a:ea:c3:90:7b:ec:ba:4d:a7:c9:71:1a:14:c9:41:
b9:35:35:ab:48:0f:51:dc:00:31:f5:9e:06:c3:93:ef:37:f4:
52:32:f5:5b:15:a9:00:ae:86:16:2d:2c:f4:7d:53:f3:51:02:
b9:b3:e9:f7:62:3a:88:eb:72:2a:b2:e1:1c:a0:f8:05:82:ef:
1a:53:85:e7:64:07:c4:d0:98:63:b5:5a:a2:71:4c:e3:16:8f:
53:a4:ee:91:94:41:25:eb:dd:f3:50:71:ea:43:87:76:95:0f:
e5:b8:5e:1a:29:10:93:5f:d3:8a:de:76:6e:73:a0:0d:4a:1b:
a9:5b:1a:20:81:7a:3a:08:5d:d9:2e:4d:6e:f9:80:79:6a:68:
39:fc:80:e2:0b:e6:60:8a:6e:f1:7d:49:be:bb:04:48:d0:f8:
1b:4d:47:49:78:e6:a1:51:77:bf:de:54:d3:12:56:0e:15:0a:
bb:13:a0:d8:a8:cf:be:b8:59:5a:6d:ad:77:07:41:32:b7:21:
08:1c:5c:df:7c:d0:af:7e:7e:a7:57:e5:cc:25:80:bd:7f:b8:
8e:7a:b0:46:48:d5:d5:79:5b:2b:8e:33:d5:6e:d8:66:42:a8:
d3:bb:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:56:31 2026 by rpki-client