Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69D09606088411F0A20C3745C4F9AE02.roa
File: 69D09606088411F0A20C3745C4F9AE02.roa (raw, json)
Hash identifier: wxKv6r230gqHCwfCSOyCoxsyjmzNcbZ8Rh+jF5TK0wU=
Subject key identifier: CB:2A:CA:8C:92:D6:7E:49:3D:66:29:E4:1F:6C:19:74:A7:E3:36:A9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E5BF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69D09606088411F0A20C3745C4F9AE02.roa
Signing time: Sun 31 May 2026 17:04:41 +0000
ROA not before: Sun 31 May 2026 17:04:41 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138277
IP address blocks: 103.94.80.0/24 maxlen: 24
103.94.81.0/24 maxlen: 24
103.94.82.0/24 maxlen: 24
103.133.120.0/22 maxlen: 24
103.157.220.0/23 maxlen: 24
103.158.140.0/23 maxlen: 24
103.167.194.0/23 maxlen: 24
103.170.68.0/23 maxlen: 24
103.170.168.0/23 maxlen: 24
103.175.100.0/24 maxlen: 24
103.175.101.0/24 maxlen: 24
103.175.172.0/23 maxlen: 24
103.176.136.0/23 maxlen: 24
103.177.16.0/23 maxlen: 24
103.238.112.0/23 maxlen: 24
103.255.220.0/23 maxlen: 24
2001:df0:1040::/48 maxlen: 48
2001:df0:18c0::/48 maxlen: 48
2001:df2:af40::/48 maxlen: 48
2001:df2:d5c0::/48 maxlen: 48
2001:df6:be80::/48 maxlen: 48
2001:df7:1180::/48 maxlen: 48
2001:df7:1e80::/48 maxlen: 48
2001:df7:f280::/48 maxlen: 48
2001:df7:fa80::/48 maxlen: 48
2405:5740::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58815 (0xe5bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:04:41 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6a29-be5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:71:61:05:e3:b9:10:c2:79:25:a2:e6:77:
23:5c:73:27:8b:9e:db:e9:e7:a8:23:a2:6d:d4:1e:
fd:73:fb:d3:40:31:6b:b5:a0:ad:76:66:e0:1a:f9:
dc:a6:46:e2:87:76:fa:b1:88:e9:95:d3:81:27:18:
fa:59:2d:60:b6:07:f3:69:9d:08:98:b8:e0:92:fc:
1d:24:b8:42:de:92:f8:73:4b:df:b2:79:dd:5c:74:
b0:37:8e:0b:8d:1f:0e:23:79:e9:6f:e0:b6:2a:ed:
21:69:bf:1b:d0:86:7d:cb:b3:ea:f4:e6:16:59:c0:
5a:f7:74:2d:cb:db:7a:36:6c:f9:3c:c4:d0:95:3b:
eb:41:27:1e:30:07:c1:a4:07:d5:75:c1:29:f2:bd:
08:b3:c7:35:cb:fb:1c:e9:d6:d9:b7:cc:1c:f2:2c:
82:a8:84:6e:6c:76:58:c8:c2:5c:17:d6:1f:58:28:
28:49:23:0b:bb:08:69:e1:55:cb:c9:cd:46:4c:2e:
f2:60:66:8d:93:a9:c2:f2:81:57:b7:25:10:9f:cb:
6a:ef:d5:ed:4c:55:c0:3f:0a:59:4c:8a:cf:29:08:
15:58:77:ce:9a:fe:67:4e:f3:cf:59:b6:24:cf:81:
da:0c:d3:a7:95:04:ef:99:51:8c:5f:66:cc:b6:ec:
6b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2A:CA:8C:92:D6:7E:49:3D:66:29:E4:1F:6C:19:74:A7:E3:36:A9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/69D09606088411F0A20C3745C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.94.80.0-103.94.82.255
103.133.120.0/22
103.157.220.0/23
103.158.140.0/23
103.167.194.0/23
103.170.68.0/23
103.170.168.0/23
103.175.100.0/23
103.175.172.0/23
103.176.136.0/23
103.177.16.0/23
103.238.112.0/23
103.255.220.0/23
IPv6:
2001:df0:1040::/48
2001:df0:18c0::/48
2001:df2:af40::/48
2001:df2:d5c0::/48
2001:df6:be80::/48
2001:df7:1180::/48
2001:df7:1e80::/48
2001:df7:f280::/48
2001:df7:fa80::/48
2405:5740::/32
Signature Algorithm: sha256WithRSAEncryption
1f:8b:b4:e2:ef:46:b1:b7:09:71:8d:77:50:f0:0a:23:8a:a4:
8d:85:83:63:41:da:20:11:b5:a4:20:1b:7b:0a:bd:6c:25:57:
dc:a3:91:f8:6d:e6:17:c9:1d:4a:06:18:97:19:d8:e4:48:09:
20:f0:22:ea:e2:e1:48:32:98:7b:1c:33:43:8e:4c:56:75:37:
e4:01:13:8f:31:de:8f:c1:35:c1:0e:a8:1a:9d:3a:41:eb:af:
61:e0:da:08:28:a9:ee:0f:bc:c2:70:73:f0:b7:92:74:b6:ea:
8a:52:93:4f:55:6f:15:ee:14:b9:bd:47:49:87:27:ba:9a:6d:
a6:22:6a:6f:51:74:0b:cc:fb:7d:85:b5:40:db:14:a5:9e:7e:
70:db:1d:58:59:c2:6a:1a:79:d1:d5:59:db:41:8d:87:bc:b9:
01:bb:41:b8:de:fe:8f:b8:eb:37:5c:6f:3b:f7:59:00:55:dc:
c8:3e:b8:49:75:cd:7c:80:47:16:dd:a4:2f:d4:5f:63:50:ad:
73:bc:2e:06:44:28:8a:92:9c:4b:df:ae:6e:01:5e:f6:c2:02:
f9:27:e6:24:5d:f6:1a:f6:b5:97:f9:bd:b1:bc:a8:ad:17:df:
43:bf:69:8a:37:a0:79:74:c7:b4:dd:fa:89:a1:5e:04:52:0f:
bb:53:99:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:37 2026 by rpki-client