Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E86A6F88B4111F1A13D6C434511F970.roa
File: 7E86A6F88B4111F1A13D6C434511F970.roa (raw, json)
Hash identifier: KggSJU/QFRXRyDi3npv4CY/wTNcVH9lQznNg/HiNfRY=
Subject key identifier: 22:A3:94:6D:E3:5D:67:10:4E:9B:C1:FA:76:09:82:16:8F:A3:59:17
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FB06
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E86A6F88B4111F1A13D6C434511F970.roa
Signing time: Sat 22 Aug 2026 07:06:05 +0000
ROA not before: Sat 22 Aug 2026 07:06:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151732
IP address blocks: 103.129.194.0/24 maxlen: 24
103.164.26.0/23 maxlen: 24
103.191.88.0/23 maxlen: 24
103.197.78.0/23 maxlen: 23
103.197.78.0/24 maxlen: 24
103.197.79.0/24 maxlen: 24
2001:df4:5c40::/48 maxlen: 48
2401:d5e0::/32 maxlen: 32
2401:d5e0::/48 maxlen: 48
2401:d5e0:1::/48 maxlen: 48
2401:d5e0:2::/48 maxlen: 48
2401:d5e0:3::/48 maxlen: 48
2401:d5e0:4::/48 maxlen: 48
2401:d5e0:5::/48 maxlen: 48
2401:d5e0:6::/48 maxlen: 48
2401:d5e0:7::/48 maxlen: 48
2401:d5e0:8::/48 maxlen: 48
2401:d5e0:9::/48 maxlen: 48
2401:d5e0:a::/48 maxlen: 48
2401:d5e0:b::/48 maxlen: 48
2401:d5e0:c::/48 maxlen: 48
2401:d5e0:d::/48 maxlen: 48
2401:d5e0:e::/48 maxlen: 48
2401:d5e0:f::/48 maxlen: 48
2401:d5e0:10::/48 maxlen: 48
2401:d5e0:11::/48 maxlen: 48
2401:d5e0:12::/48 maxlen: 48
2401:d5e0:13::/48 maxlen: 48
2401:d5e0:14::/48 maxlen: 48
2401:d5e0:15::/48 maxlen: 48
2401:d5e0:16::/48 maxlen: 48
2401:d5e0:17::/48 maxlen: 48
2401:d5e0:18::/48 maxlen: 48
2401:d5e0:19::/48 maxlen: 48
2401:d5e0:1a::/48 maxlen: 48
2401:d5e0:1b::/48 maxlen: 48
2401:d5e0:1c::/48 maxlen: 48
2401:d5e0:1d::/48 maxlen: 48
2401:d5e0:1e::/48 maxlen: 48
2401:d5e0:1f::/48 maxlen: 48
2401:d5e0:20::/48 maxlen: 48
2401:d5e0:21::/48 maxlen: 48
2401:d5e0:22::/48 maxlen: 48
2401:d5e0:23::/48 maxlen: 48
2401:d5e0:24::/48 maxlen: 48
2401:d5e0:25::/48 maxlen: 48
2401:d5e0:26::/48 maxlen: 48
2401:d5e0:27::/48 maxlen: 48
2401:d5e0:28::/48 maxlen: 48
2401:d5e0:29::/48 maxlen: 48
2401:d5e0:2a::/48 maxlen: 48
2401:d5e0:2b::/48 maxlen: 48
2401:d5e0:2c::/48 maxlen: 48
2401:d5e0:2d::/48 maxlen: 48
2401:d5e0:2e::/48 maxlen: 48
2401:d5e0:2f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64262 (0xfb06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 22 07:06:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a894a5d-6a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:cb:f7:c5:2d:9d:37:6b:d5:75:60:97:b2:
7d:b2:15:84:b8:b9:41:c3:3f:d7:c5:02:4a:74:26:
cf:92:ca:96:80:e6:3e:ab:01:13:c3:96:e0:0b:e0:
e4:6d:5b:de:c8:00:84:88:b6:a2:76:ba:6b:bf:6f:
2e:92:ea:c4:f4:47:3f:58:6a:89:d6:9c:e4:f9:4f:
7b:86:6a:e3:21:a0:3d:9c:3d:fc:b0:e7:ff:fe:f9:
6f:88:c0:9b:1e:7b:2f:b5:c4:e0:ae:4c:8e:60:10:
5a:5f:a4:93:65:65:c2:3b:62:5b:90:57:d8:78:27:
40:67:ee:a2:8f:d5:ee:96:fa:d4:9c:b8:9a:6f:90:
52:c9:87:1d:84:02:51:8a:bf:1c:a1:bf:5d:eb:43:
ca:c7:b0:61:9f:b9:0e:2e:4b:aa:c2:1f:68:6e:04:
85:13:11:0b:b6:37:94:e8:b5:3b:22:8b:26:b0:8d:
90:a1:a2:d2:67:d7:22:fc:96:79:ab:b9:78:1e:92:
65:f1:71:e6:73:1f:de:02:de:18:4d:3f:89:4d:e0:
7f:35:b7:2b:85:19:68:a7:9a:2b:3b:b7:64:d6:bd:
b3:21:e6:ee:ad:69:73:a2:5c:35:5e:3c:f0:95:a6:
81:5e:c8:d7:5b:98:4d:06:9d:6f:2f:0a:d4:30:ca:
bc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A3:94:6D:E3:5D:67:10:4E:9B:C1:FA:76:09:82:16:8F:A3:59:17
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E86A6F88B4111F1A13D6C434511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.129.194.0/24
103.164.26.0/23
103.191.88.0/23
103.197.78.0/23
IPv6:
2001:df4:5c40::/48
2401:d5e0::/32
Signature Algorithm: sha256WithRSAEncryption
16:20:4c:63:8a:00:3c:29:e5:0f:41:1b:9c:0b:78:e1:37:e7:
ac:2f:fa:32:b4:5c:be:3e:8b:74:5b:11:51:ed:ac:7c:38:6b:
4b:ba:78:2b:86:ec:e0:3d:61:ad:4d:7c:39:59:20:e9:32:72:
d8:a5:76:f6:55:a7:34:10:8d:e7:75:b4:ac:b3:97:14:af:0e:
d9:47:91:5e:24:27:e1:55:1d:f2:09:2a:1c:36:8b:d9:50:b2:
64:4b:d8:cc:87:45:78:43:fb:05:90:43:14:ea:9b:a9:ee:67:
34:6f:cd:ce:40:63:5e:5b:26:c2:dd:ad:cf:06:e1:3a:bc:64:
9a:47:fb:2a:86:79:0d:84:66:73:42:4a:f1:6e:43:a0:44:3e:
48:3d:e1:61:c8:31:d5:fc:e4:40:94:bd:39:a8:01:70:54:53:
39:e8:f8:cb:b0:f6:04:d4:e7:90:28:fd:a0:b4:74:70:8a:71:
03:ab:09:c0:c0:42:f0:be:3e:93:a8:8f:da:90:fe:7e:93:86:
b9:49:1f:f4:35:5f:4d:12:69:8c:c6:9c:47:cb:7c:43:c6:0b:
f6:51:3d:95:85:38:9b:d4:2c:17:ab:f4:da:10:68:28:56:a6:
28:8e:bb:85:d6:7d:f8:3f:cf:e0:d5:06:f0:58:bf:29:24:73:
d8:b0:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:45:53 2026 by rpki-client