Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89CC3F16872611F0BA88085BC4F9AE02.roa
File: 89CC3F16872611F0BA88085BC4F9AE02.roa (raw, json)
Hash identifier: OkUFY2TcGWqiGzO2EXLhUHt1oK+aeRcrkjyZIGC6yL4=
Subject key identifier: F5:00:E1:45:9B:B4:59:BA:26:43:98:1E:7A:EE:EE:CD:26:57:15:C4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EECB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89CC3F16872611F0BA88085BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:37:28 +0000
ROA not before: Mon 06 Jul 2026 16:37:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133720
IP address blocks: 43.241.124.0/24 maxlen: 24
43.241.125.0/24 maxlen: 24
43.241.126.0/24 maxlen: 24
43.241.127.0/24 maxlen: 24
43.255.220.0/22 maxlen: 24
45.249.40.0/22 maxlen: 24
103.6.184.0/22 maxlen: 24
103.25.168.0/22 maxlen: 24
103.39.244.0/22 maxlen: 24
103.49.240.0/22 maxlen: 24
103.61.108.0/24 maxlen: 24
103.74.16.0/22 maxlen: 24
103.87.52.0/22 maxlen: 24
103.174.198.0/24 maxlen: 24
103.212.92.0/22 maxlen: 24
103.230.148.0/22 maxlen: 24
103.240.8.0/22 maxlen: 24
103.248.28.0/22 maxlen: 24
103.249.248.0/22 maxlen: 24
139.5.24.0/22 maxlen: 24
139.5.28.0/22 maxlen: 24
139.5.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61131 (0xeecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:37:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd9c8-e32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8a:ca:dc:91:0c:52:01:97:f3:4c:60:64:b4:
6d:7a:79:39:2a:9f:60:53:ad:8b:23:c4:ad:9a:f7:
f8:21:4a:6d:e9:e8:d7:25:c6:02:be:d2:67:4d:e8:
22:71:ee:90:fd:ab:93:6c:7e:a2:1a:d5:c0:75:ee:
79:13:58:24:f2:68:f3:57:a7:c6:c7:f3:67:73:4a:
a0:47:fd:45:7a:04:6b:df:33:ab:f9:fc:25:8b:3e:
29:4b:8b:25:19:36:16:4b:e5:19:34:9a:0b:38:4d:
17:94:37:d5:13:87:0a:6f:3f:2b:4b:e7:5d:4e:35:
4c:e3:a1:60:95:43:5f:57:d0:ca:f9:fe:86:fb:eb:
3c:24:02:a3:92:fc:43:c9:aa:b0:99:bd:97:ec:d6:
a7:98:51:04:00:38:cb:be:85:41:d3:43:5a:c0:a9:
c8:04:de:8b:36:ce:bf:a2:cc:ac:73:17:02:21:f3:
ac:cc:90:27:f8:31:68:fa:7b:9f:30:3f:b1:29:7f:
09:18:7e:a2:04:f6:c1:6c:97:cc:cc:f5:64:da:90:
fb:50:a9:ff:a3:4c:b6:bd:20:ce:98:e9:56:27:74:
59:44:7b:08:57:f5:b7:4a:8e:00:64:56:f9:96:d2:
d3:80:ac:83:f5:13:e0:83:64:0a:a3:65:97:32:c4:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:00:E1:45:9B:B4:59:BA:26:43:98:1E:7A:EE:EE:CD:26:57:15:C4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89CC3F16872611F0BA88085BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.241.124.0/22
43.255.220.0/22
45.249.40.0/22
103.6.184.0/22
103.25.168.0/22
103.39.244.0/22
103.49.240.0/22
103.61.108.0/24
103.74.16.0/22
103.87.52.0/22
103.174.198.0/24
103.212.92.0/22
103.230.148.0/22
103.240.8.0/22
103.248.28.0/22
103.249.248.0/22
139.5.24.0/21
139.5.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:1d:20:c2:10:ca:0d:41:e0:01:7d:13:ee:e9:ba:42:4f:a0:
70:d3:2e:0f:bf:79:1d:bd:83:f5:d2:33:63:a3:8f:78:0d:51:
0f:8b:0e:27:f5:39:48:e0:a2:a1:ad:27:1a:8c:63:fd:d3:51:
25:83:2a:c3:19:eb:06:0f:bc:27:26:88:88:9c:f4:3d:d2:cf:
42:a6:2a:35:52:6e:4e:ce:aa:52:56:77:08:d8:86:36:74:61:
b0:6f:9c:ba:e7:2c:74:36:6c:cd:49:53:d8:0f:50:2e:7b:88:
1e:78:06:7d:10:70:75:70:b7:32:82:db:08:2f:e0:63:45:cc:
46:67:f5:2c:52:b3:5f:70:0b:28:69:8e:c7:43:57:d3:02:ce:
20:a5:e1:1d:39:87:ac:4c:2e:2f:f4:0a:7e:2e:65:a5:e5:99:
e2:19:97:9a:29:c5:66:8d:01:b2:28:50:97:37:4c:cc:08:b9:
29:03:c5:7e:ac:da:f3:6a:45:e3:36:e4:d1:69:86:3a:80:63:
7b:15:b4:25:18:25:e8:e7:96:9c:95:6e:5b:95:f1:0e:b2:b3:
0e:10:99:a9:b8:1d:c6:20:87:3f:ce:7b:c7:55:2b:e8:ff:c7:
21:ce:65:e7:dd:63:c8:e9:78:9d:99:73:4f:f1:f8:7a:18:55:
80:2c:43:0a
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDAO7LMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2MzcyOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmQ5YzgtZTMyZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI+KytyRDFIBl/NMYGS0bXp5OSqfYFOtiyPErZr3+CFKbeno1yXGAr7SZ03o
InHukP2rk2x+ohrVwHXueRNYJPJo81enxsfzZ3NKoEf9RXoEa98zq/n8JYs+KUuL
JRk2FkvlGTSaCzhNF5Q31ROHCm8/K0vnXU41TOOhYJVDX1fQyvn+hvvrPCQCo5L8
Q8mqsJm9l+zWp5hRBAA4y76FQdNDWsCpyATeizbOv6LMrHMXAiHzrMyQJ/gxaPp7
nzA/sSl/CRh+ogT2wWyXzMz1ZNqQ+1Cp/6NMtr0gzpjpVid0WUR7CFf1t0qOAGRW
+ZbS04Csg/UT4INkCqNllzLEbaUCAwEAAaOCAscwggLDMB0GA1UdDgQWBBT1AOFF
m7RZuiZDmB567u7NJlcVxDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg5Q0MzRjE2
ODcyNjExRjBCQTg4MDg1QkM0RjlBRTAyLnJvYTCBhQYIKwYBBQUHAQcBAf8EdjB0
MHIEAgABMGwDBAIr8XwDBAIr/9wDBAIt+SgDBAJnBrgDBAJnGagDBAJnJ/QDBAJn
MfADBABnPWwDBAJnShADBAJnVzQDBABnrsYDBAJn1FwDBAJn5pQDBAJn8AgDBAJn
+BwDBAJn+fgDBAOLBRgDBAKLBSwwDQYJKoZIhvcNAQELBQADggEBALcdIMIQyg1B
4AF9E+7pukJPoHDTLg+/eR29g/XSM2Ojj3gNUQ+LDif1OUjgoqGtJxqMY/3TUSWD
KsMZ6wYPvCcmiIic9D3Sz0KmKjVSbk7OqlJWdwjYhjZ0YbBvnLrnLHQ2bM1JU9gP
UC57iB54Bn0QcHVwtzKC2wgv4GNFzEZn9SxSs19wCyhpjsdDV9MCziCl4R05h6xM
Li/0Cn4uZaXlmeIZl5opxWaNAbIoUJc3TMwIuSkDxX6s2vNqReM25NFphjqAY3sV
tCUYJejnlpyVbluV8Q6ysw4Qmam4HcYghz/Oe8dVK+j/xyHOZefdY8jpeJ2Zc0/x
+HoYVYAsQwo=
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:43 2026 by rpki-client