Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
File: 7BDE399E5E7711F19D717D61177AAC22.roa (raw, json)
Hash identifier: WECPjb7TSvq7hRsL4DRFPiYFQhT/7KxRzBrjeOsokac=
Subject key identifier: C6:77:A8:28:C6:E4:CF:5B:91:5E:8C:27:B2:5A:5E:6A:26:71:F7:CE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EBF6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
Signing time: Tue 02 Jun 2026 11:37:50 +0000
ROA not before: Tue 02 Jun 2026 11:37:50 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 45804
IP address blocks: 43.251.168.0/22 maxlen: 24
43.251.172.0/22 maxlen: 24
43.251.176.0/22 maxlen: 24
45.114.176.0/22 maxlen: 24
45.116.188.0/22 maxlen: 24
45.248.56.0/22 maxlen: 24
103.27.140.0/22 maxlen: 24
103.43.80.0/24 maxlen: 24
103.43.81.0/24 maxlen: 24
103.43.82.0/24 maxlen: 24
103.43.83.0/24 maxlen: 24
103.56.236.0/22 maxlen: 24
103.70.44.0/22 maxlen: 24
103.76.80.0/22 maxlen: 24
103.93.100.0/22 maxlen: 24
103.100.20.0/24 maxlen: 24
103.100.21.0/24 maxlen: 24
103.100.22.0/24 maxlen: 24
103.100.23.0/24 maxlen: 24
103.176.138.0/23 maxlen: 23
103.193.88.0/22 maxlen: 24
103.199.97.0/24 maxlen: 24
103.216.204.0/22 maxlen: 24
103.244.240.0/22 maxlen: 24
103.244.244.0/24 maxlen: 24
103.245.2.0/24 maxlen: 24
103.245.20.0/24 maxlen: 24
103.251.80.0/22 maxlen: 24
114.29.224.0/22 maxlen: 24
150.129.108.0/22 maxlen: 24
150.129.132.0/22 maxlen: 24
2001:df0:9fc0::/48 maxlen: 48
2001:df4:4240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60406 (0xebf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 2 11:37:50 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1ec08e-9787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:a6:2d:e9:2f:55:0f:8e:ff:61:48:eb:90:
97:35:08:98:44:19:ab:c5:10:51:36:ca:0b:b9:58:
dc:b4:18:0e:65:8d:6a:59:8e:94:2b:05:f6:fb:55:
54:8d:d6:2d:b3:ff:be:e8:4e:a6:64:eb:c9:db:21:
82:95:e1:53:90:51:0f:8e:0c:2b:03:09:1e:58:6c:
9e:db:18:bb:38:d5:7c:19:be:b4:f8:36:cd:65:fa:
7d:01:79:fe:5f:af:02:f9:76:9c:3e:a9:b9:67:1e:
12:76:3c:96:03:bf:01:8e:06:fd:45:0a:38:51:2e:
f3:e6:2e:02:9f:d7:0f:ef:58:6e:fd:3e:bf:06:4e:
f9:83:bf:64:18:7b:32:fe:d4:f9:88:bb:04:66:fc:
b9:8a:8c:72:8b:c7:27:c7:fa:e6:c7:7e:01:29:eb:
c2:bb:d4:c4:74:f7:27:46:37:d3:a1:53:d6:0c:06:
30:50:b9:74:ce:cd:66:cd:e5:9b:dc:60:dc:29:eb:
0f:55:ca:24:e2:e2:10:79:12:4e:9f:53:54:67:24:
dd:a8:3b:34:4b:64:8e:87:25:16:b4:f9:67:2e:51:
a0:9a:55:9f:b9:d7:23:4e:fc:fe:6a:d2:3b:27:5e:
5a:d7:94:d3:e4:7a:47:d3:ff:2a:ef:b5:a9:76:e8:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:77:A8:28:C6:E4:CF:5B:91:5E:8C:27:B2:5A:5E:6A:26:71:F7:CE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
sbgp-ipAddrBlock: critical
IPv4:
43.251.168.0-43.251.179.255
45.114.176.0/22
45.116.188.0/22
45.248.56.0/22
103.27.140.0/22
103.43.80.0/22
103.56.236.0/22
103.70.44.0/22
103.76.80.0/22
103.93.100.0/22
103.100.20.0/22
103.176.138.0/23
103.193.88.0/22
103.199.97.0/24
103.216.204.0/22
103.244.240.0-103.244.244.255
103.245.2.0/24
103.245.20.0/24
103.251.80.0/22
114.29.224.0/22
150.129.108.0/22
150.129.132.0/22
IPv6:
2001:df0:9fc0::/48
2001:df4:4240::/48
Signature Algorithm: sha256WithRSAEncryption
5e:18:4d:ee:95:8e:0a:2a:91:db:f6:80:aa:43:30:ec:a5:10:
ad:46:91:d9:4e:f1:37:70:18:db:b8:1a:79:b6:b6:47:30:4f:
49:7e:5c:94:80:af:2a:fc:7b:76:6c:80:00:9f:60:d0:e7:78:
31:98:ac:c3:bc:34:4e:ad:a2:92:4e:9a:bc:c9:1c:d3:be:a4:
6b:76:8f:93:54:39:77:d8:c2:23:dd:a6:6d:c5:41:c1:a9:cf:
dd:39:87:d8:59:50:41:51:60:63:c2:43:45:ac:d3:14:95:71:
56:ce:63:98:34:9b:54:14:66:19:b0:ed:c9:b1:50:c4:92:32:
66:00:21:6e:32:99:d8:cc:f0:3e:45:b9:26:12:20:3a:12:b6:
1e:a1:43:23:f3:ea:08:96:cb:94:a2:50:ba:9e:09:dd:5e:06:
d8:60:c0:07:14:95:42:f4:4d:99:6d:0f:9c:fc:82:7f:ca:11:
97:31:2a:06:4a:97:70:6d:39:5c:b2:fe:42:79:7a:bf:88:11:
1e:62:8e:75:bf:ac:ff:60:0a:e5:94:31:39:02:91:f9:69:b0:
13:d6:a7:6d:d4:13:76:e2:30:04:3b:6c:5f:e5:61:9c:1d:90:
5a:2c:87:bd:76:56:f5:eb:bf:2f:76:a3:ce:b2:ed:73:1c:f7:
34:9f:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:26 2026 by rpki-client