Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/830520904A7111F08446103FC4F9AE02.roa
File: 830520904A7111F08446103FC4F9AE02.roa (raw, json)
Hash identifier: KTjQ+Xzs96YgzTjpbHcp111vXhGDyGzldpA3hUok6ok=
Subject key identifier: A4:F3:73:99:D3:66:48:D1:E6:20:FD:5A:EF:32:85:9E:E4:1D:A8:19
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F76B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/830520904A7111F08446103FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:50:35 +0000
ROA not before: Mon 06 Jul 2026 17:50:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45433
IP address blocks: 43.229.73.0/24 maxlen: 24
43.229.74.0/24 maxlen: 24
45.64.176.0/24 maxlen: 24
45.64.177.0/24 maxlen: 24
45.64.179.0/24 maxlen: 24
45.118.204.0/24 maxlen: 24
45.118.205.0/24 maxlen: 24
45.118.206.0/24 maxlen: 24
45.118.207.0/24 maxlen: 24
45.127.220.0/24 maxlen: 24
45.127.221.0/24 maxlen: 24
45.127.222.0/24 maxlen: 24
45.127.223.0/24 maxlen: 24
45.250.169.0/24 maxlen: 24
45.250.170.0/24 maxlen: 24
45.250.171.0/24 maxlen: 24
103.23.236.0/24 maxlen: 24
103.23.237.0/24 maxlen: 24
103.23.238.0/24 maxlen: 24
103.23.239.0/24 maxlen: 24
103.36.49.0/24 maxlen: 24
103.36.50.0/24 maxlen: 24
103.36.51.0/24 maxlen: 24
103.39.8.0/24 maxlen: 24
103.39.9.0/24 maxlen: 24
103.39.10.0/24 maxlen: 24
103.39.11.0/24 maxlen: 24
103.58.248.0/24 maxlen: 24
103.58.250.0/24 maxlen: 24
103.58.251.0/24 maxlen: 24
103.70.58.0/24 maxlen: 24
103.157.124.0/24 maxlen: 24
103.157.125.0/24 maxlen: 24
103.157.168.0/24 maxlen: 24
103.157.169.0/24 maxlen: 24
103.175.9.0/24 maxlen: 24
103.179.1.0/24 maxlen: 24
103.194.120.0/24 maxlen: 24
103.196.208.0/24 maxlen: 24
103.196.209.0/24 maxlen: 24
103.196.210.0/24 maxlen: 24
103.196.211.0/24 maxlen: 24
103.207.168.0/24 maxlen: 24
103.207.169.0/24 maxlen: 24
103.207.170.0/24 maxlen: 24
103.207.171.0/24 maxlen: 24
103.209.176.0/24 maxlen: 24
103.209.177.0/24 maxlen: 24
103.209.178.0/24 maxlen: 24
103.209.179.0/24 maxlen: 24
103.255.8.0/24 maxlen: 24
103.255.10.0/24 maxlen: 24
103.255.11.0/24 maxlen: 24
115.178.96.0/24 maxlen: 24
115.178.97.0/24 maxlen: 24
115.178.98.0/24 maxlen: 24
115.178.99.0/24 maxlen: 24
115.178.100.0/24 maxlen: 24
115.178.101.0/24 maxlen: 24
115.178.102.0/24 maxlen: 24
115.178.103.0/24 maxlen: 24
122.102.24.0/24 maxlen: 24
122.102.25.0/24 maxlen: 24
122.102.27.0/24 maxlen: 24
122.102.28.0/24 maxlen: 24
122.102.29.0/24 maxlen: 24
122.102.30.0/24 maxlen: 24
122.102.31.0/24 maxlen: 24
163.53.80.0/22 maxlen: 22
163.53.80.0/24 maxlen: 24
163.53.81.0/24 maxlen: 24
163.53.82.0/24 maxlen: 24
163.53.83.0/24 maxlen: 24
175.111.128.0/24 maxlen: 24
175.111.129.0/24 maxlen: 24
175.111.130.0/24 maxlen: 24
175.111.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63339 (0xf76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:50:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beaeb-6bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:80:b6:68:77:38:9d:07:5d:b6:48:5f:d6:
db:ab:03:f0:52:b7:8c:40:b0:3c:2a:56:15:5f:93:
ad:f8:08:4e:5a:45:a4:d8:5a:2a:a5:9a:ce:a8:e8:
1d:e9:9e:00:ef:27:44:8c:bf:e3:37:ff:a0:dc:4f:
7d:73:d7:6c:3f:15:75:2e:05:a6:0d:b1:f2:a3:89:
ff:5f:a0:c9:5c:75:aa:81:3f:94:3a:81:5e:26:98:
da:f1:93:5c:ec:44:b0:92:2b:f1:b6:bf:b0:4a:31:
cc:87:bf:a7:ca:4c:cd:63:10:37:d4:bd:7e:f2:2d:
8d:e9:8f:79:c4:1d:bf:61:b4:3c:52:20:eb:52:e9:
63:00:61:27:8f:7d:83:55:7f:ab:04:6a:21:89:01:
30:a2:03:6a:bc:0a:44:43:41:6f:97:a2:ef:03:fd:
d0:68:ca:1d:4c:01:f8:30:bd:73:3e:29:3b:fa:1b:
3a:f3:5c:5a:ad:5a:c0:7b:3d:1b:e3:4b:c1:4b:1e:
5b:b2:fc:ba:79:5e:d2:92:d9:6f:7b:fe:f2:e9:7e:
b9:f7:a8:77:d0:7e:55:92:1f:f9:4c:2a:33:08:ef:
f3:4e:7a:aa:41:50:29:45:20:1c:02:e3:20:5f:45:
5c:54:65:42:df:dc:52:c2:b1:0e:86:87:f7:04:d8:
e8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F3:73:99:D3:66:48:D1:E6:20:FD:5A:EF:32:85:9E:E4:1D:A8:19
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/830520904A7111F08446103FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.229.73.0-43.229.74.255
45.64.176.0/23
45.64.179.0/24
45.118.204.0/22
45.127.220.0/22
45.250.169.0-45.250.171.255
103.23.236.0/22
103.36.49.0-103.36.51.255
103.39.8.0/22
103.58.248.0/24
103.58.250.0/23
103.70.58.0/24
103.157.124.0/23
103.157.168.0/23
103.175.9.0/24
103.179.1.0/24
103.194.120.0/24
103.196.208.0/22
103.207.168.0/22
103.209.176.0/22
103.255.8.0/24
103.255.10.0/23
115.178.96.0/21
122.102.24.0/23
122.102.27.0-122.102.31.255
163.53.80.0/22
175.111.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:dd:a9:b1:43:d1:ef:29:8d:5a:98:27:10:a2:98:c3:8c:73:
db:18:55:d5:35:e4:21:32:ec:c4:41:62:82:66:a6:60:44:63:
bb:38:36:bb:57:eb:b6:a0:a3:e5:e7:3b:f3:9d:58:4b:fa:44:
eb:85:f9:fc:10:58:07:f9:ea:0b:db:82:74:c1:65:b7:25:38:
b7:ff:35:01:5f:ec:f5:f1:11:51:2b:7d:36:a8:6d:12:14:8a:
a5:c7:b4:3e:0d:14:e9:77:ed:7a:d7:46:2a:c8:e2:fa:4e:ba:
a8:4a:0a:df:a5:f3:c1:f3:2f:5b:46:01:fc:6b:86:44:31:c7:
77:da:19:80:4d:51:ba:5d:fd:a4:fa:ba:54:91:2c:90:8e:3e:
54:04:eb:07:81:1d:07:73:4b:b0:ae:34:3a:70:61:5f:90:49:
28:36:c6:a0:bc:ed:40:3e:93:a7:33:0e:78:2f:cf:c1:3d:57:
5e:91:89:a6:b3:4f:51:8f:11:9f:bc:7b:cf:99:cc:16:7e:86:
8a:b7:d1:f3:1c:4b:f7:ba:05:22:41:e3:92:26:7d:6e:96:60:
43:52:33:f0:e5:4c:87:ac:19:10:34:f8:94:d9:e8:87:10:2e:
8b:df:44:10:63:e8:9f:8e:e3:d1:f5:ae:43:4a:d2:9b:ba:8a:
cb:ae:38:5a
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAPdrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NTAzNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmVhZWItNmJjZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANJcgLZodzidB122SF/W26sD8FK3jECwPCpWFV+TrfgITlpFpNhaKqWazqjo
HemeAO8nRIy/4zf/oNxPfXPXbD8VdS4Fpg2x8qOJ/1+gyVx1qoE/lDqBXiaY2vGT
XOxEsJIr8ba/sEoxzIe/p8pMzWMQN9S9fvItjemPecQdv2G0PFIg61LpYwBhJ499
g1V/qwRqIYkBMKIDarwKRENBb5ei7wP90GjKHUwB+DC9cz4pO/obOvNcWq1awHs9
G+NLwUseW7L8unle0pLZb3v+8ul+ufeod9B+VZIf+UwqMwjv8056qkFQKUUgHALj
IF9FXFRlQt/cUsKxDoaH9wTY6MUCAwEAAaOCAyEwggMdMB0GA1UdDgQWBBSk83OZ
02ZI0eYg/VrvMoWe5B2oGTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgzMDUyMDkw
NEE3MTExRjA4NDQ2MTAzRkM0RjlBRTAyLnJvYTCB3wYIKwYBBQUHAQcBAf8Egc8w
gcwwgckEAgABMIHCMAwDBAAr5UkDBAAr5UoDBAEtQLADBAAtQLMDBAItdswDBAIt
f9wwDAMEAC36qQMEAi36qAMEAmcX7DAMAwQAZyQxAwQCZyQwAwQCZycIAwQAZzr4
AwQBZzr6AwQAZ0Y6AwQBZ518AwQBZ52oAwQAZ68JAwQAZ7MBAwQAZ8J4AwQCZ8TQ
AwQCZ8+oAwQCZ9GwAwQAZ/8IAwQBZ/8KAwQDc7JgAwQBemYYMAwDBAB6ZhsDBAV6
ZgADBAKjNVADBAKvb4AwDQYJKoZIhvcNAQELBQADggEBAJrdqbFD0e8pjVqYJxCi
mMOMc9sYVdU15CEy7MRBYoJmpmBEY7s4NrtX67ago+XnO/OdWEv6ROuF+fwQWAf5
6gvbgnTBZbclOLf/NQFf7PXxEVErfTaobRIUiqXHtD4NFOl37XrXRirI4vpOuqhK
Ct+l88HzL1tGAfxrhkQxx3faGYBNUbpd/aT6ulSRLJCOPlQE6weBHQdzS7CuNDpw
YV+QSSg2xqC87UA+k6czDngvz8E9V16RiaazT1GPEZ+8e8+ZzBZ+hoq30fMcS/e6
BSJB45ImfW6WYENSM/DlTIesGRA0+JTZ6IcQLovfRBBj6J+O49H1rkNK0pu6isuu
OFo=
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:16 2026 by rpki-client