Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
File: 7BDE399E5E7711F19D717D61177AAC22.roa (raw, json)
Hash identifier: ZvLFL2aPfRbjp5MLGTJvwkILkiY/vrqKg2l6AGk/v8U=
Subject key identifier: A1:C7:1F:25:19:00:F6:17:DE:21:3D:D9:44:21:A6:E7:8C:4C:4C:42
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F777
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
Signing time: Mon 06 Jul 2026 17:50:58 +0000
ROA not before: Mon 06 Jul 2026 17:50:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45804
IP address blocks: 43.251.168.0/22 maxlen: 24
43.251.172.0/22 maxlen: 24
43.251.176.0/22 maxlen: 24
45.114.176.0/22 maxlen: 24
45.116.188.0/22 maxlen: 24
45.248.56.0/22 maxlen: 24
103.27.140.0/22 maxlen: 24
103.43.80.0/24 maxlen: 24
103.43.81.0/24 maxlen: 24
103.43.82.0/24 maxlen: 24
103.43.83.0/24 maxlen: 24
103.56.236.0/22 maxlen: 24
103.70.44.0/22 maxlen: 24
103.76.80.0/22 maxlen: 24
103.93.100.0/22 maxlen: 24
103.100.20.0/24 maxlen: 24
103.100.21.0/24 maxlen: 24
103.100.22.0/24 maxlen: 24
103.100.23.0/24 maxlen: 24
103.176.138.0/23 maxlen: 23
103.193.88.0/22 maxlen: 24
103.199.97.0/24 maxlen: 24
103.216.204.0/22 maxlen: 24
103.244.240.0/22 maxlen: 24
103.244.244.0/24 maxlen: 24
103.245.2.0/24 maxlen: 24
103.245.20.0/24 maxlen: 24
103.251.80.0/22 maxlen: 24
114.29.224.0/22 maxlen: 24
150.129.108.0/22 maxlen: 24
150.129.132.0/22 maxlen: 24
2001:df0:9fc0::/48 maxlen: 48
2001:df4:4240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63351 (0xf777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:50:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beb02-80cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:7b:9d:12:88:d6:db:69:60:68:53:6a:bd:
02:8b:75:c9:e3:2e:af:37:a6:76:4e:9d:71:f0:6a:
b7:0c:a4:bd:c4:66:03:25:09:43:18:d4:42:2c:7a:
ce:e2:60:a2:e9:a2:fe:cf:d2:48:91:95:be:0f:b0:
65:ee:4c:4f:d7:4b:67:15:ab:a5:34:dd:8b:4f:fe:
f7:fb:d4:97:e8:b8:b7:6f:4b:ba:83:e3:fd:2b:d9:
80:bf:2c:c8:dd:62:e6:d1:97:91:c4:0c:51:6b:b5:
f2:8e:07:e9:46:94:e8:94:48:e4:0f:97:56:8c:fe:
40:b9:b5:16:d6:3e:79:7c:27:c8:70:43:35:cb:e7:
48:51:26:64:2c:a3:f8:4d:6a:da:94:43:51:5f:72:
e8:3b:26:9e:89:bf:e3:1a:48:5d:39:a9:15:c4:56:
42:15:67:4b:59:73:04:d5:bf:e3:63:56:4a:d0:44:
81:ef:25:cb:ab:6a:48:79:77:64:b0:b9:99:6c:d5:
c6:f3:5a:51:bf:b5:60:95:6b:67:5e:15:e9:49:e8:
47:59:aa:48:d7:d9:59:5b:91:eb:5c:ef:79:ab:f7:
e9:2e:b1:2a:5b:b6:16:97:9d:0c:be:89:e5:87:17:
36:94:fb:2b:22:09:03:fa:9e:a3:00:75:00:35:db:
db:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:1F:25:19:00:F6:17:DE:21:3D:D9:44:21:A6:E7:8C:4C:4C:42
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
sbgp-ipAddrBlock: critical
IPv4:
43.251.168.0-43.251.179.255
45.114.176.0/22
45.116.188.0/22
45.248.56.0/22
103.27.140.0/22
103.43.80.0/22
103.56.236.0/22
103.70.44.0/22
103.76.80.0/22
103.93.100.0/22
103.100.20.0/22
103.176.138.0/23
103.193.88.0/22
103.199.97.0/24
103.216.204.0/22
103.244.240.0-103.244.244.255
103.245.2.0/24
103.245.20.0/24
103.251.80.0/22
114.29.224.0/22
150.129.108.0/22
150.129.132.0/22
IPv6:
2001:df0:9fc0::/48
2001:df4:4240::/48
Signature Algorithm: sha256WithRSAEncryption
15:df:72:e9:ac:29:47:72:d2:2c:fc:fd:44:3f:cb:a5:be:c3:
a7:e7:23:88:26:6a:03:45:6c:27:be:ab:24:1e:36:c2:04:b2:
ce:4e:47:e9:e4:06:d8:d5:0c:23:44:3e:f7:14:40:7b:82:b8:
75:48:cf:77:66:86:f0:67:12:26:7d:dd:a1:74:12:d1:0d:04:
2e:b5:41:77:1e:8f:f9:18:4f:61:58:a4:83:fa:b4:7a:a3:f7:
20:68:62:8f:2d:9a:9d:9c:fc:95:f3:e7:11:92:50:87:07:21:
c5:b6:e9:21:c6:e4:ea:7b:0a:1d:bd:cd:bc:c9:e3:09:70:48:
1e:ec:16:9b:ca:e7:8f:41:c3:98:7e:11:86:0f:d5:cc:3a:0e:
f0:f3:9e:7a:00:0d:f8:d5:5f:d0:d2:bd:95:48:de:c6:db:8e:
ea:bb:6b:51:a8:7a:35:28:ec:42:04:ad:c0:1e:5b:ae:34:37:
c3:55:dd:34:6a:f2:75:7b:5d:6e:e0:90:fb:19:d4:5d:90:e5:
3a:04:69:63:e3:eb:18:06:dc:af:cb:65:b4:7a:33:ad:a4:6c:
2c:2c:83:d9:f8:da:7f:07:6b:6b:7d:e3:c4:39:29:3d:f8:fd:
a3:98:c3:41:81:4a:36:52:13:3f:a5:a6:f7:b8:79:9b:4d:da:
8b:38:c6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:37 2026 by rpki-client