Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B8D006028F911F1A1871496CD833773.roa
File: 6B8D006028F911F1A1871496CD833773.roa (raw, json)
Hash identifier: yry8NN5UZordn87K82FqAND/LOmd4DTarup46JJvrls=
Subject key identifier: 2B:70:49:4F:4B:ED:64:0C:9A:AD:11:2A:00:CA:AA:25:27:28:5C:0A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB80
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B8D006028F911F1A1871496CD833773.roa
Signing time: Sun 31 May 2026 17:52:37 +0000
ROA not before: Sun 31 May 2026 17:52:37 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/24 maxlen: 24
45.117.2.0/24 maxlen: 24
45.117.3.0/24 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
45.251.236.0/24 maxlen: 24
45.251.237.0/24 maxlen: 24
45.251.238.0/24 maxlen: 24
45.251.239.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.39.251.0/24 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.212.0/22 maxlen: 24
103.69.238.0/24 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.117.184.0/24 maxlen: 24
103.117.187.0/24 maxlen: 24
103.137.152.0/22 maxlen: 24
103.153.151.0/24 maxlen: 24
103.166.112.0/23 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.30.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.178.212.0/24 maxlen: 24
103.178.213.0/24 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.11.0/24 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.215.114.0/23 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
163.223.244.0/23 maxlen: 24
203.134.248.0/23 maxlen: 24
2001:df6:f180::/48 maxlen: 48
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60288 (0xeb80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:52:37 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7565-bd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:72:c8:19:b2:cd:d8:6a:5c:68:50:66:11:
b6:74:fc:b7:dd:8a:a6:2f:d1:01:bf:6a:d7:9d:3c:
ba:8e:07:6c:51:79:ec:74:27:ea:1d:38:72:a2:16:
30:da:25:85:86:76:91:51:db:f5:97:9e:ed:ad:6d:
00:86:a5:b6:f0:1a:be:37:48:36:2d:72:3e:c2:86:
2c:ba:09:25:2a:d9:79:51:96:34:63:46:9d:8a:7f:
8b:1b:06:f4:fc:cb:65:c9:1a:3e:5c:4b:af:79:a5:
b3:29:49:e0:fd:48:99:e8:4b:36:e2:df:58:db:dd:
e0:ea:42:56:c2:68:0f:8e:a8:b1:ad:f8:f4:82:c6:
e9:74:fd:78:b4:d7:f8:26:5e:30:12:2f:d8:5f:6e:
ae:11:a6:47:06:f6:8b:d4:af:5a:e1:77:16:eb:c3:
f0:3e:26:53:4d:8c:6d:43:45:5a:43:ae:25:98:d4:
e2:92:6c:68:bc:bc:1c:39:19:3a:78:09:e9:9f:a7:
45:32:51:cd:d1:35:b0:a2:73:ce:13:54:bc:10:aa:
64:24:61:9f:57:00:9a:5e:3d:7b:b6:f3:12:c0:05:
a0:de:29:45:73:6c:99:ad:83:94:e6:d9:5c:54:52:
6f:d6:d0:95:24:04:ca:81:5c:f9:86:83:18:ba:0e:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:70:49:4F:4B:ED:64:0C:9A:AD:11:2A:00:CA:AA:25:27:28:5C:0A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B8D006028F911F1A1871496CD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.228.0/22
45.64.84.0/22
45.114.192.0/22
45.117.0.0/24
45.117.2.0/23
45.127.120.0/22
45.250.248.0-45.250.250.255
45.251.236.0/22
103.14.232.0/22
103.26.52.0-103.26.59.255
103.39.251.0/24
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.212.0/22
103.69.238.0/24
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.117.184.0/24
103.117.187.0/24
103.137.152.0/22
103.153.151.0/24
103.166.112.0/23
103.173.208.0/23
103.174.30.0/24
103.174.38.0/24
103.178.212.0/23
103.181.209.0/24
103.185.11.0/24
103.204.119.0/24
103.209.18.0/23
103.215.114.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
124.108.16.0/22
163.223.244.0/23
203.134.248.0/23
IPv6:
2001:df6:f180::/48
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
93:35:09:be:9b:86:37:e0:f5:15:23:e4:6a:2b:df:fc:fa:fb:
f9:13:f2:c6:ba:cf:3a:71:9b:fc:67:55:93:31:68:4e:0f:df:
0e:69:14:dd:b9:5c:32:d6:d1:9b:65:cb:34:c1:51:06:1e:93:
6f:20:25:fe:ce:8a:87:1d:95:c4:5f:9e:f0:52:bf:b8:92:87:
d1:ea:63:f3:54:23:65:8d:b6:13:df:9a:22:6a:93:22:dd:11:
76:97:82:67:c1:df:df:17:f8:05:87:ef:10:94:73:d6:86:68:
08:c4:c8:34:01:d2:16:6d:e5:3e:f1:b0:c0:2b:06:dc:9b:7e:
e6:00:4e:af:d7:8c:2d:ac:84:17:b9:dc:76:43:35:e6:b7:9a:
28:f0:f7:0f:d6:67:06:84:9a:3a:df:33:a7:63:bb:cf:35:cb:
54:06:c4:fb:54:ef:e1:bd:0a:b0:60:47:30:15:f0:f2:d7:ff:
98:2d:89:d7:d9:e8:ff:9e:f0:ed:93:75:cd:05:0c:01:38:6f:
21:a5:81:50:44:74:ab:d1:24:7e:15:2f:31:9a:9e:1a:b9:e6:
68:2c:21:b1:a1:27:35:4a:59:d9:58:0f:b5:96:1d:05:cf:ab:
65:50:d2:54:7e:85:a8:20:7f:57:a8:ea:b4:11:1f:5a:69:4a:
3f:4f:e1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:51 2026 by rpki-client