Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
File: 7BDE399E5E7711F19D717D61177AAC22.roa (raw, json)
Hash identifier: 9NPy/DnOBnDm31QKaWluarZS0yBhSLP1rfPmVetZvCw=
Subject key identifier: 1C:D2:BE:DC:0D:52:C1:41:68:4C:FC:1B:7D:77:A6:7C:C0:3B:30:6B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FAC7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
Signing time: Tue 18 Aug 2026 12:23:01 +0000
ROA not before: Tue 18 Aug 2026 12:23:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45804
IP address blocks: 43.251.168.0/22 maxlen: 24
43.251.172.0/22 maxlen: 24
43.251.176.0/22 maxlen: 24
45.114.176.0/22 maxlen: 24
45.116.188.0/22 maxlen: 24
45.248.56.0/22 maxlen: 24
103.27.140.0/22 maxlen: 24
103.43.80.0/24 maxlen: 24
103.43.81.0/24 maxlen: 24
103.43.82.0/24 maxlen: 24
103.43.83.0/24 maxlen: 24
103.56.236.0/22 maxlen: 24
103.70.44.0/22 maxlen: 24
103.76.80.0/22 maxlen: 24
103.80.172.0/24 maxlen: 24
103.80.173.0/24 maxlen: 24
103.80.174.0/24 maxlen: 24
103.80.175.0/24 maxlen: 24
103.93.100.0/22 maxlen: 24
103.100.20.0/24 maxlen: 24
103.100.21.0/24 maxlen: 24
103.100.22.0/24 maxlen: 24
103.100.23.0/24 maxlen: 24
103.176.138.0/23 maxlen: 23
103.193.88.0/22 maxlen: 24
103.199.97.0/24 maxlen: 24
103.216.204.0/22 maxlen: 24
103.244.240.0/22 maxlen: 24
103.244.244.0/24 maxlen: 24
103.245.2.0/24 maxlen: 24
103.245.20.0/24 maxlen: 24
103.251.80.0/22 maxlen: 24
114.29.224.0/22 maxlen: 24
150.129.108.0/22 maxlen: 24
150.129.132.0/22 maxlen: 24
2001:df0:9fc0::/48 maxlen: 48
2001:df4:4240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64199 (0xfac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 18 12:23:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a844ea4-aacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:a6:6f:f6:ac:4b:b2:86:bd:77:45:c8:05:
33:c8:42:52:91:cf:a4:6f:e0:e9:ba:e9:88:06:e5:
38:1f:45:36:ea:87:8f:27:bb:7d:7f:3b:8b:d5:69:
10:c2:42:69:31:a7:61:72:0d:7c:63:ce:62:21:20:
54:12:a7:8d:c3:aa:7d:18:9b:95:f6:25:a0:23:02:
07:dd:0c:3c:35:d8:1e:54:fa:3a:2c:0d:28:d5:6f:
92:74:a1:4f:b1:35:35:bf:d7:da:38:73:26:dd:e1:
dd:ff:b9:d3:e5:ee:20:e7:85:9d:9f:be:d5:62:8e:
fe:63:be:a4:f2:69:22:c4:03:41:70:f3:83:55:f7:
cd:aa:02:82:77:21:4f:b1:58:74:19:4a:a9:0f:45:
9c:ea:90:56:b3:f6:f5:63:e0:29:03:5f:97:1d:41:
e0:ee:66:91:13:3a:f9:df:29:40:e0:bd:a1:54:6f:
a5:b0:52:66:68:32:b7:14:06:eb:70:48:0a:bd:59:
77:84:5e:53:79:c6:01:3d:00:98:6f:05:e3:7c:11:
20:9d:4d:af:4d:c0:ac:f0:9b:34:65:5b:31:8a:4e:
70:77:cf:15:f6:51:48:00:0a:02:2a:af:37:3e:bf:
32:57:d0:31:77:2a:80:08:40:b3:a7:a8:a7:00:71:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D2:BE:DC:0D:52:C1:41:68:4C:FC:1B:7D:77:A6:7C:C0:3B:30:6B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
sbgp-ipAddrBlock: critical
IPv4:
43.251.168.0-43.251.179.255
45.114.176.0/22
45.116.188.0/22
45.248.56.0/22
103.27.140.0/22
103.43.80.0/22
103.56.236.0/22
103.70.44.0/22
103.76.80.0/22
103.80.172.0/22
103.93.100.0/22
103.100.20.0/22
103.176.138.0/23
103.193.88.0/22
103.199.97.0/24
103.216.204.0/22
103.244.240.0-103.244.244.255
103.245.2.0/24
103.245.20.0/24
103.251.80.0/22
114.29.224.0/22
150.129.108.0/22
150.129.132.0/22
IPv6:
2001:df0:9fc0::/48
2001:df4:4240::/48
Signature Algorithm: sha256WithRSAEncryption
1e:89:b2:71:73:d8:f4:e1:66:d5:60:86:d1:ef:96:6d:79:11:
95:5b:19:5e:0d:31:14:a1:2d:4a:10:eb:e3:56:bf:33:92:be:
5c:32:20:f0:77:0a:11:75:5e:c4:ce:c5:c9:46:5e:d7:52:11:
50:96:9e:bb:85:70:31:e8:a1:46:1d:ea:19:bf:73:ca:0d:49:
78:4e:aa:3e:c9:d3:63:dd:4e:b6:a4:86:1e:7e:9d:a6:16:f8:
58:e4:e9:b9:0f:85:6c:04:9b:5e:bf:6e:70:53:cd:6b:ee:22:
1c:07:ae:16:59:f1:69:a0:53:84:62:b6:91:ee:9d:3a:5e:c5:
a8:62:a1:c3:37:82:d7:10:50:f7:d6:57:b9:59:9e:67:af:6d:
bb:a8:5c:a0:1d:b7:ac:a5:26:9f:67:ee:51:2e:35:21:78:d5:
83:28:34:16:7b:c1:44:c7:06:e6:e5:a6:23:8e:4f:3b:95:c6:
66:9d:8c:d3:20:48:8e:9e:a4:33:a5:c4:f2:e5:35:15:31:f9:
7c:75:58:2a:ba:e4:d5:4c:83:0f:47:c5:65:e0:17:56:2e:14:
19:21:87:9a:a1:3a:2e:ea:f9:67:7c:ff:4b:ff:2f:3b:3a:4e:
8f:95:2d:bc:9e:6a:3d:ce:e5:8b:ea:d2:61:36:65:92:78:7f:
c3:56:41:8d
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgIDAPrHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDgxODEyMjMwMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE4NDRlYTQtYWFjZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANP6pm/2rEuyhr13RcgFM8hCUpHPpG/g6brpiAblOB9FNuqHjye7fX87i9Vp
EMJCaTGnYXINfGPOYiEgVBKnjcOqfRiblfYloCMCB90MPDXYHlT6OiwNKNVvknSh
T7E1Nb/X2jhzJt3h3f+50+XuIOeFnZ++1WKO/mO+pPJpIsQDQXDzg1X3zaoCgnch
T7FYdBlKqQ9FnOqQVrP29WPgKQNflx1B4O5mkRM6+d8pQOC9oVRvpbBSZmgytxQG
63BICr1Zd4ReU3nGAT0AmG8F43wRIJ1Nr03ArPCbNGVbMYpOcHfPFfZRSAAKAiqv
Nz6/MlfQMXcqgAhAs6eopwBx5Z8CAwEAAaOCAxMwggMPMB0GA1UdDgQWBBQc0r7c
DVLBQWhM/Bt9d6Z8wDswazAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdCREUzOTlF
NUU3NzExRjE5RDcxN0Q2MTE3N0FBQzIyLnJvYTCB0QYIKwYBBQUHAQcBAf8EgcEw
gb4wgaEEAgABMIGaMAwDBAMr+6gDBAIr+7ADBAItcrADBAItdLwDBAIt+DgDBAJn
G4wDBAJnK1ADBAJnOOwDBAJnRiwDBAJnTFADBAJnUKwDBAJnXWQDBAJnZBQDBAFn
sIoDBAJnwVgDBABnx2EDBAJn2MwwDAMEBGf08AMEAGf09AMEAGf1AgMEAGf1FAME
Amf7UAMEAnId4AMEApaBbAMEApaBhDAYBAIAAjASAwcAIAEN8J/AAwcAIAEN9EJA
MA0GCSqGSIb3DQEBCwUAA4IBAQAeibJxc9j04WbVYIbR75ZteRGVWxleDTEUoS1K
EOvjVr8zkr5cMiDwdwoRdV7EzsXJRl7XUhFQlp67hXAx6KFGHeoZv3PKDUl4Tqo+
ydNj3U62pIYefp2mFvhY5Om5D4VsBJtev25wU81r7iIcB64WWfFpoFOEYraR7p06
XsWoYqHDN4LXEFD31le5WZ5nr227qFygHbespSafZ+5RLjUheNWDKDQWe8FExwbm
5aYjjk87lcZmnYzTIEiOnqQzpcTy5TUVMfl8dVgquuTVTIMPR8Vl4BdWLhQZIYea
oTou6vlnfP9L/y87Ok6PlS28nmo9zuWL6tJhNmWSeH/DVkGN
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:37:32 2026 by rpki-client