Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBEE6D8C30811F18102ABC15A11F970.roa
File: 7CBEE6D8C30811F18102ABC15A11F970.roa (raw, json)
Hash identifier: xz4wFJrqSOfIkjBmposyU3LpnW85+12lG5K0g95+rpo=
Subject key identifier: D4:7D:98:24:75:46:E8:92:2D:65:E3:A0:3F:40:4D:88:0A:18:CF:5D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FDF5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBEE6D8C30811F18102ABC15A11F970.roa
Signing time: Thu 08 Oct 2026 11:07:45 +0000
ROA not before: Thu 08 Oct 2026 11:07:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138754
IP address blocks: 43.229.88.0/22 maxlen: 24
45.116.252.0/22 maxlen: 24
103.42.196.0/22 maxlen: 24
103.65.250.0/23 maxlen: 24
103.70.36.0/23 maxlen: 24
103.70.196.0/22 maxlen: 24
103.76.162.0/23 maxlen: 24
103.99.144.0/23 maxlen: 24
103.99.204.0/22 maxlen: 24
103.111.44.0/22 maxlen: 24
103.114.252.0/23 maxlen: 24
103.118.150.0/23 maxlen: 24
103.131.128.0/23 maxlen: 24
103.132.24.0/22 maxlen: 24
103.135.52.0/22 maxlen: 24
103.139.64.0/23 maxlen: 24
103.140.16.0/23 maxlen: 24
103.145.172.0/23 maxlen: 24
103.146.174.0/23 maxlen: 24
103.147.208.0/23 maxlen: 24
103.148.20.0/23 maxlen: 24
103.149.158.0/23 maxlen: 24
103.151.188.0/23 maxlen: 24
103.153.92.0/23 maxlen: 24
103.153.104.0/23 maxlen: 24
103.154.36.0/24 maxlen: 24
103.154.37.0/24 maxlen: 24
103.154.54.0/23 maxlen: 24
103.155.222.0/23 maxlen: 24
103.157.104.0/23 maxlen: 24
103.158.240.0/23 maxlen: 24
103.160.194.0/23 maxlen: 24
103.160.232.0/23 maxlen: 24
103.161.54.0/23 maxlen: 24
103.161.144.0/23 maxlen: 24
103.165.166.0/23 maxlen: 24
103.166.244.0/23 maxlen: 24
103.168.200.0/23 maxlen: 24
103.169.214.0/23 maxlen: 24
103.170.54.0/23 maxlen: 24
103.171.224.0/23 maxlen: 24
103.175.2.0/23 maxlen: 24
103.175.88.0/23 maxlen: 24
103.175.136.0/23 maxlen: 24
103.175.186.0/23 maxlen: 24
103.176.184.0/23 maxlen: 24
103.177.26.0/23 maxlen: 24
103.177.252.0/23 maxlen: 24
103.178.204.0/23 maxlen: 24
103.179.196.0/23 maxlen: 24
103.179.230.0/23 maxlen: 24
103.181.40.0/23 maxlen: 24
103.182.166.0/23 maxlen: 24
103.183.82.0/23 maxlen: 24
103.184.238.0/23 maxlen: 24
103.189.142.0/23 maxlen: 24
103.189.214.0/23 maxlen: 24
103.190.2.0/23 maxlen: 24
103.190.194.0/23 maxlen: 24
103.191.172.0/23 maxlen: 24
103.191.186.0/23 maxlen: 24
103.194.152.0/22 maxlen: 24
103.199.160.0/22 maxlen: 24
103.209.132.0/23 maxlen: 24
103.209.220.0/22 maxlen: 24
103.227.36.0/22 maxlen: 24
103.244.224.0/23 maxlen: 24
137.59.84.0/22 maxlen: 24
2001:df0:b240::/48 maxlen: 48
2001:df0:c640::/48 maxlen: 48
2001:df5:2380::/48 maxlen: 48
2001:df5:d380::/48 maxlen: 48
2001:df7:480::/48 maxlen: 48
2001:df7:d80::/48 maxlen: 48
2001:df7:1380::/48 maxlen: 48
2001:df7:4b80::/48 maxlen: 48
2001:df7:4d80::/48 maxlen: 48
2001:df7:4e80::/48 maxlen: 48
2001:df7:4f80::/48 maxlen: 48
2001:df7:5280::/48 maxlen: 48
2001:df7:6980::/48 maxlen: 48
2400:1ca0::/32 maxlen: 32
2403:a080::/32 maxlen: 38
2405:f140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 09:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65013 (0xfdf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 8 11:07:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ac77980-aaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:8c:f8:1e:c6:a0:93:93:88:e7:27:f8:40:
0e:b0:0d:1f:cc:93:67:70:46:79:1b:a0:d1:2e:89:
25:62:42:76:01:4c:0b:63:9f:23:a6:7d:9d:51:53:
b9:d1:f8:9e:a1:9c:2d:10:17:80:58:79:54:35:ab:
08:79:27:b6:75:0e:a4:b3:0e:81:9f:b6:20:74:d1:
56:61:86:bc:29:a9:ea:83:01:f7:fd:bc:9b:03:35:
13:9e:a0:88:86:36:50:2a:11:d9:d2:78:90:0b:1c:
de:16:db:7b:14:22:c5:ea:71:e0:ad:5e:07:7f:28:
f3:ad:21:5f:4e:8c:28:f6:5f:07:b1:0b:6c:ed:8c:
24:69:1d:c5:be:59:6d:c5:c8:13:b1:1c:b2:81:f5:
41:56:b6:67:fa:98:19:d6:da:7d:81:63:e5:c6:9f:
b7:98:eb:50:6e:a5:6a:2b:02:c0:03:78:f8:9e:a9:
69:e5:14:4a:94:6e:0f:39:13:43:72:76:b6:31:54:
59:58:47:07:74:f4:fb:3e:44:f5:5d:c8:31:45:09:
33:ab:53:16:65:85:29:21:f5:d3:ff:d6:c1:5a:bc:
3b:b1:34:60:23:9e:ae:52:dd:be:4e:5f:ea:01:82:
03:c5:d1:c6:04:5e:94:9a:3e:f0:a7:25:19:37:4a:
bf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7D:98:24:75:46:E8:92:2D:65:E3:A0:3F:40:4D:88:0A:18:CF:5D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7CBEE6D8C30811F18102ABC15A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.229.88.0/22
45.116.252.0/22
103.42.196.0/22
103.65.250.0/23
103.70.36.0/23
103.70.196.0/22
103.76.162.0/23
103.99.144.0/23
103.99.204.0/22
103.111.44.0/22
103.114.252.0/23
103.118.150.0/23
103.131.128.0/23
103.132.24.0/22
103.135.52.0/22
103.139.64.0/23
103.140.16.0/23
103.145.172.0/23
103.146.174.0/23
103.147.208.0/23
103.148.20.0/23
103.149.158.0/23
103.151.188.0/23
103.153.92.0/23
103.153.104.0/23
103.154.36.0/23
103.154.54.0/23
103.155.222.0/23
103.157.104.0/23
103.158.240.0/23
103.160.194.0/23
103.160.232.0/23
103.161.54.0/23
103.161.144.0/23
103.165.166.0/23
103.166.244.0/23
103.168.200.0/23
103.169.214.0/23
103.170.54.0/23
103.171.224.0/23
103.175.2.0/23
103.175.88.0/23
103.175.136.0/23
103.175.186.0/23
103.176.184.0/23
103.177.26.0/23
103.177.252.0/23
103.178.204.0/23
103.179.196.0/23
103.179.230.0/23
103.181.40.0/23
103.182.166.0/23
103.183.82.0/23
103.184.238.0/23
103.189.142.0/23
103.189.214.0/23
103.190.2.0/23
103.190.194.0/23
103.191.172.0/23
103.191.186.0/23
103.194.152.0/22
103.199.160.0/22
103.209.132.0/23
103.209.220.0/22
103.227.36.0/22
103.244.224.0/23
137.59.84.0/22
IPv6:
2001:df0:b240::/48
2001:df0:c640::/48
2001:df5:2380::/48
2001:df5:d380::/48
2001:df7:480::/48
2001:df7:d80::/48
2001:df7:1380::/48
2001:df7:4b80::/48
2001:df7:4d80::/48
2001:df7:4e80::/48
2001:df7:4f80::/48
2001:df7:5280::/48
2001:df7:6980::/48
2400:1ca0::/32
2403:a080::/32
2405:f140::/32
Signature Algorithm: sha256WithRSAEncryption
1d:13:d8:b6:ca:ac:23:53:8b:57:3a:3f:67:62:9a:d4:dc:17:
ce:dc:a1:ee:6b:ca:f5:50:86:f2:8d:f2:9e:1d:77:89:1b:33:
de:d3:8c:7c:f8:25:0b:bd:cf:dd:62:d2:50:4c:e3:ca:26:d4:
55:8a:25:a4:b1:76:48:9e:9d:a0:09:1d:9d:f8:20:7c:f3:2a:
d5:a7:36:f8:c0:74:42:e3:e2:13:0d:88:48:2f:77:8a:8b:2c:
f9:74:d2:a5:9c:14:5e:a0:8f:71:14:bb:e6:fa:2d:a0:6c:13:
a4:a8:1b:55:6d:46:7c:fd:04:14:8c:e9:89:68:66:d5:f5:48:
be:d1:ff:45:5c:4a:64:3b:59:14:80:c1:34:79:c2:97:5c:65:
73:c3:15:88:04:cc:4f:da:3f:52:1b:5e:74:74:24:e0:e6:e0:
b1:8e:71:64:3e:92:d1:27:6f:03:74:31:51:67:13:ff:88:7f:
86:36:35:04:99:6d:42:a1:d0:15:f2:d0:4d:7d:36:30:97:c4:
d1:bd:3b:30:44:1a:f9:a2:bb:ab:6b:e1:06:bd:a5:f9:5f:a7:
61:a9:b4:ed:38:0f:6a:4c:26:56:01:30:c6:07:61:4e:8e:ec:
3b:0d:54:7e:72:b9:47:cc:02:05:56:e9:b1:46:c5:20:c3:70:
8f:3e:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:27:37 2026 by rpki-client