Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74AFC830C17411F190E932DC5E11F970.roa
File: 74AFC830C17411F190E932DC5E11F970.roa (raw, json)
Hash identifier: sOTx5K6GSUgsfR/ndmcScjrKtsiPnCE6lW9Z4KmP6fI=
Subject key identifier: 15:1C:63:1D:C7:E2:00:1D:CE:53:1B:87:03:5C:0D:9A:7E:1B:D3:F4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FE9A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74AFC830C17411F190E932DC5E11F970.roa
Signing time: Wed 21 Oct 2026 11:00:19 +0000
ROA not before: Wed 21 Oct 2026 11:00:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151690
IP address blocks: 43.228.166.0/23 maxlen: 24
43.230.132.0/23 maxlen: 24
103.52.33.0/24 maxlen: 24
103.96.15.0/24 maxlen: 24
103.109.220.0/22 maxlen: 24
103.110.244.0/23 maxlen: 24
103.115.128.0/24 maxlen: 24
103.147.93.0/24 maxlen: 24
103.154.26.0/24 maxlen: 24
103.154.27.0/24 maxlen: 24
103.155.206.0/23 maxlen: 24
103.157.162.0/23 maxlen: 24
103.162.74.0/24 maxlen: 24
103.162.75.0/24 maxlen: 24
103.172.56.0/24 maxlen: 24
103.180.67.0/24 maxlen: 24
103.216.99.0/24 maxlen: 24
103.225.70.0/24 maxlen: 24
103.239.12.0/23 maxlen: 24
163.128.66.0/24 maxlen: 24
2001:df1:8040::/48 maxlen: 48
2001:df2:23c0::/48 maxlen: 48
2001:df2:9640::/48 maxlen: 48
2001:df3:29c0::/48 maxlen: 48
2001:df4:88c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65178 (0xfe9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 21 11:00:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ad89b42-be62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5b:23:69:2b:a3:61:06:fd:96:3c:29:1f:fd:
ce:e5:7e:25:e7:5d:05:14:6f:df:1e:73:2e:c4:da:
42:af:47:f2:6b:af:98:41:74:52:c8:4c:71:56:00:
ba:64:94:cd:3a:62:a1:50:97:15:b1:39:76:3f:18:
96:10:9b:d2:d3:e1:ef:37:c2:50:a2:5c:0d:e7:da:
75:70:59:05:5e:3b:d6:9f:ca:00:a4:88:db:8b:8d:
ae:8d:ca:bb:c7:dc:cf:49:64:28:a0:3b:f2:83:7a:
e1:93:50:dd:1b:f0:68:8c:17:3b:bb:c9:9e:58:a6:
c2:59:9a:b7:6d:72:aa:a5:dc:0b:4a:b9:79:ed:99:
cf:d3:9c:bb:d0:fd:66:37:7d:52:1b:f0:15:e0:ee:
7b:9f:b1:f1:10:07:66:c0:37:d8:92:65:83:27:f6:
52:58:7d:ef:49:23:f0:39:a1:b2:0c:46:22:c5:93:
ce:02:90:21:f0:cd:02:61:ef:92:af:eb:9b:07:fa:
c6:9c:bb:73:ed:22:f9:da:af:a4:a5:b5:75:44:10:
c5:14:7a:7f:16:c3:85:d8:59:cc:d4:15:d4:05:e2:
0d:4c:60:ef:76:d9:5a:b2:18:f5:b7:0b:fa:79:8f:
cd:9f:31:cb:1e:bc:63:da:83:b7:1b:bc:73:e0:9c:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:63:1D:C7:E2:00:1D:CE:53:1B:87:03:5C:0D:9A:7E:1B:D3:F4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74AFC830C17411F190E932DC5E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.228.166.0/23
43.230.132.0/23
103.52.33.0/24
103.96.15.0/24
103.109.220.0/22
103.110.244.0/23
103.115.128.0/24
103.147.93.0/24
103.154.26.0/23
103.155.206.0/23
103.157.162.0/23
103.162.74.0/23
103.172.56.0/24
103.180.67.0/24
103.216.99.0/24
103.225.70.0/24
103.239.12.0/23
163.128.66.0/24
IPv6:
2001:df1:8040::/48
2001:df2:23c0::/48
2001:df2:9640::/48
2001:df3:29c0::/48
2001:df4:88c0::/48
Signature Algorithm: sha256WithRSAEncryption
24:1b:80:1f:81:db:51:bf:48:23:a4:a8:ae:14:b9:6b:18:dc:
d0:11:4d:10:e7:38:9d:11:17:cc:fc:90:e2:62:9d:2b:6f:da:
98:24:53:7b:e9:ed:c0:fb:53:20:74:d0:5a:29:2a:86:31:a4:
59:e6:32:79:9f:f6:02:0a:c0:66:5f:2d:fa:1e:8a:87:d7:af:
a8:7b:37:d8:a2:d3:e7:44:99:9a:eb:1f:8a:8b:2b:56:62:88:
5e:86:ee:b5:cd:3e:1e:e2:1a:2a:bc:61:cf:2f:e2:61:ee:f3:
17:98:6d:d9:cb:62:13:96:c6:0c:95:d2:27:b3:92:20:56:f8:
ac:7d:81:2c:72:fc:d2:c2:5c:ef:4f:ba:4c:d7:3f:59:88:17:
6b:a1:a6:dd:76:7c:cc:d3:79:61:05:a4:0f:a3:42:ba:08:6c:
66:7f:f0:82:66:fc:57:7f:4b:21:af:7f:c5:cf:a6:9f:ab:da:
3a:d5:c0:4b:24:76:7f:37:92:c6:b3:78:74:4c:28:4d:2b:a8:
87:f4:ae:b1:28:0d:09:b4:a5:46:79:3a:20:cf:55:74:58:7a:
71:78:ba:d1:c9:7e:ab:ca:14:11:8a:c2:90:b1:3b:83:f2:da:
98:59:f3:c9:7c:24:f3:3c:e5:bf:da:07:fb:a5:da:43:a9:9f:
c7:0d:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:26 2026 by rpki-client