Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/845FCF2AA3E511F195C658215911F970.roa
File: 845FCF2AA3E511F195C658215911F970.roa (raw, json)
Hash identifier: Ai23UEpKCt3UznwQy3e+sz1Tz/rn7q628TJIq8k77dg=
Subject key identifier: FB:7F:1F:9A:FD:EE:3F:9F:90:12:83:A9:8E:04:DF:45:5A:78:BD:89
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FB53
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/845FCF2AA3E511F195C658215911F970.roa
Signing time: Sat 29 Aug 2026 20:09:19 +0000
ROA not before: Sat 29 Aug 2026 20:09:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17439
IP address blocks: 43.225.0.0/22 maxlen: 24
45.64.12.0/24 maxlen: 24
45.251.76.0/22 maxlen: 24
49.213.48.0/23 maxlen: 24
103.19.52.0/22 maxlen: 24
103.55.244.0/22 maxlen: 24
103.70.160.0/22 maxlen: 24
103.83.220.0/22 maxlen: 24
103.96.95.0/24 maxlen: 24
103.100.80.0/22 maxlen: 24
103.115.194.0/24 maxlen: 24
103.116.60.0/22 maxlen: 24
103.138.136.0/22 maxlen: 24
103.143.38.0/24 maxlen: 24
103.170.114.0/24 maxlen: 24
103.171.44.0/23 maxlen: 24
103.175.22.0/24 maxlen: 24
103.175.23.0/24 maxlen: 24
103.175.163.0/24 maxlen: 24
103.181.20.0/23 maxlen: 24
103.214.114.0/24 maxlen: 24
103.214.115.0/24 maxlen: 24
103.214.122.0/23 maxlen: 24
103.225.99.0/24 maxlen: 24
103.226.224.0/24 maxlen: 24
103.228.103.0/24 maxlen: 24
103.235.104.0/22 maxlen: 22
103.239.136.0/22 maxlen: 24
103.247.97.0/24 maxlen: 24
103.247.98.0/24 maxlen: 24
137.59.204.0/22 maxlen: 24
203.112.136.0/21 maxlen: 24
203.112.144.0/21 maxlen: 24
2001:df0:3a00::/48 maxlen: 48
2001:df2:f980::/48 maxlen: 48
2400:11e0:1::/48 maxlen: 48
2407:e9c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64339 (0xfb53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 29 20:09:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a933c6f-5518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:80:a7:9c:9d:de:a2:a0:ca:bf:56:1e:21:
22:25:26:5b:a4:6a:65:47:a3:ed:bb:f2:05:1a:ae:
79:82:7a:26:18:e2:63:4a:06:ca:cb:9c:a7:6a:08:
66:c0:c3:92:12:df:a5:42:eb:a5:9c:1c:a8:14:60:
6a:c0:06:8e:3f:17:14:0d:cf:df:18:9a:ee:91:8a:
70:35:8f:9f:55:3c:ee:5d:dc:0a:83:64:a9:b8:73:
fd:a7:3c:cc:60:5c:16:e2:2b:7b:8a:0d:64:24:eb:
25:57:61:60:2f:ce:7d:02:c5:82:29:29:89:bf:07:
3c:4a:1d:bb:bc:85:a8:ac:53:6d:b7:fc:02:1a:f4:
e1:37:f5:4b:b9:8a:9b:c1:a5:a6:59:a6:7d:66:8c:
ca:c6:03:e9:36:fc:3e:e6:57:3b:5a:7a:a8:65:90:
ec:2d:7b:c2:21:e2:11:3e:21:11:c3:df:93:cb:22:
e7:6c:70:0d:24:8f:dd:99:6a:00:7a:12:c1:74:07:
d6:80:f4:44:6d:e4:38:ed:1c:61:fa:dc:a3:3b:6a:
36:9a:1c:ee:74:78:70:30:00:73:68:2e:ee:62:13:
30:22:fa:7a:cf:16:1f:a9:3a:82:32:14:53:15:d8:
37:60:fd:89:c5:56:c1:bb:66:3a:ac:45:49:7c:d9:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:1F:9A:FD:EE:3F:9F:90:12:83:A9:8E:04:DF:45:5A:78:BD:89
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/845FCF2AA3E511F195C658215911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
45.64.12.0/24
45.251.76.0/22
49.213.48.0/23
103.19.52.0/22
103.55.244.0/22
103.70.160.0/22
103.83.220.0/22
103.96.95.0/24
103.100.80.0/22
103.115.194.0/24
103.116.60.0/22
103.138.136.0/22
103.143.38.0/24
103.170.114.0/24
103.171.44.0/23
103.175.22.0/23
103.175.163.0/24
103.181.20.0/23
103.214.114.0/23
103.214.122.0/23
103.225.99.0/24
103.226.224.0/24
103.228.103.0/24
103.235.104.0/22
103.239.136.0/22
103.247.97.0-103.247.98.255
137.59.204.0/22
203.112.136.0-203.112.151.255
IPv6:
2001:df0:3a00::/48
2001:df2:f980::/48
2400:11e0:1::/48
2407:e9c0::/48
Signature Algorithm: sha256WithRSAEncryption
a9:f0:79:74:b6:73:57:66:f9:80:d6:b2:e5:ae:b9:fe:dc:82:
54:04:7d:d7:29:b6:c2:38:9e:a5:dc:18:ed:22:90:4e:58:e5:
63:3b:76:6e:cb:a9:8e:87:56:b5:61:f5:51:f4:c2:6b:e2:3c:
de:b4:85:3b:61:ea:e9:ba:ab:0f:5b:78:74:d4:31:6f:24:53:
1e:17:72:64:42:29:d0:25:2c:cf:84:41:1d:35:75:be:a6:50:
c4:66:de:74:45:5d:49:b4:02:f2:40:76:db:a4:1d:bd:c3:ab:
dc:32:88:6f:c5:b6:8d:a3:61:3a:14:0a:1c:02:95:8c:f6:60:
70:26:7c:47:fa:f5:84:70:53:4c:59:81:42:31:c7:c4:26:0a:
9a:79:2f:d7:1b:5d:2f:7e:c8:12:ba:a6:5e:80:40:6c:ca:bf:
f6:d1:8b:2a:5d:10:09:bd:03:9a:8a:3b:8a:1d:bc:e8:5b:bf:
72:30:a9:0f:18:d8:b6:54:3d:ff:70:12:7d:42:44:22:07:69:
9e:a4:fc:28:9c:f8:f9:c6:c8:b4:79:8c:5b:f3:df:e6:d8:9f:
a4:09:ce:1f:a0:d3:1a:4a:da:7f:a1:aa:ca:b2:49:d7:12:f4:
55:98:00:51:0e:e8:01:10:d1:1b:73:c0:3b:0d:70:a9:31:e7:
0a:e7:98:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:10 2026 by rpki-client