Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A19F314DBD111F0B3A7088354641951.roa
File: 8A19F314DBD111F0B3A7088354641951.roa (raw, json)
Hash identifier: R/wxNvpy3oL8wVfgo7hQsTQy5f9qkrv5maBs7OCRnhI=
Subject key identifier: 08:C1:21:3C:AB:91:52:07:D0:A3:14:0F:69:62:7E:6F:78:5A:FA:D5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F626
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A19F314DBD111F0B3A7088354641951.roa
Signing time: Mon 06 Jul 2026 17:39:30 +0000
ROA not before: Mon 06 Jul 2026 17:39:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151734
IP address blocks: 36.50.82.0/24 maxlen: 24
43.250.252.0/24 maxlen: 24
43.250.254.0/24 maxlen: 24
43.250.255.0/24 maxlen: 24
103.76.122.0/24 maxlen: 24
103.76.123.0/24 maxlen: 24
103.98.53.0/24 maxlen: 24
103.99.36.0/22 maxlen: 24
103.109.180.0/22 maxlen: 24
103.111.228.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.170.58.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.99.0/24 maxlen: 24
103.178.59.0/24 maxlen: 24
103.178.160.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.236.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.204.169.0/24 maxlen: 24
103.211.56.0/24 maxlen: 24
103.212.136.0/23 maxlen: 24
150.242.200.0/22 maxlen: 24
163.227.190.0/24 maxlen: 24
2001:df2:1c40::/48 maxlen: 48
2401:7ee0::/48 maxlen: 48
2401:7ee0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63014 (0xf626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:39:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be852-fa0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:5e:07:16:35:1c:0a:c9:02:e8:4a:9c:3e:
42:10:fb:92:93:3e:c4:5b:b7:d9:58:a2:cd:23:00:
49:46:ca:78:e8:22:6c:33:e6:95:56:fe:7c:d3:a4:
e3:b8:d6:21:a1:b5:62:9a:45:69:07:db:44:c7:fc:
50:20:20:57:de:f9:6e:ca:d2:40:09:64:36:42:ff:
63:0b:88:9c:8a:05:cf:82:c2:27:54:65:87:80:7c:
34:04:d3:6b:b4:c9:6a:c3:40:a9:d6:ef:b8:65:98:
51:c6:a3:f2:89:7e:31:0b:e4:f2:2b:a0:6a:36:b3:
d7:3d:95:3f:17:6b:5a:5e:9d:7b:15:6d:04:f8:8b:
78:6b:62:5f:b9:7d:15:8a:c2:29:f2:80:55:c7:96:
96:23:67:8b:6d:3f:56:1b:10:7a:22:db:4e:3f:46:
8f:8d:32:0a:89:82:3c:f5:c0:b4:ff:e2:62:ed:e0:
1b:79:f6:77:a4:da:27:4f:f7:53:26:02:28:71:0e:
54:24:c2:a0:75:71:f1:9c:7d:ac:76:f7:de:23:58:
29:c0:4e:19:d2:7d:75:63:36:fe:68:dd:01:70:9b:
43:c1:c8:4b:70:75:da:5a:99:ea:a1:3a:ce:f1:52:
26:64:a7:ff:34:53:ff:7d:3a:ed:d8:35:21:23:41:
61:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C1:21:3C:AB:91:52:07:D0:A3:14:0F:69:62:7E:6F:78:5A:FA:D5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A19F314DBD111F0B3A7088354641951.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.250.252.0/24
43.250.254.0/23
103.76.122.0/23
103.98.53.0/24
103.99.36.0/22
103.109.180.0/22
103.111.228.0/23
103.118.180.0/22
103.170.58.0/23
103.171.174.0/23
103.173.99.0/24
103.178.59.0/24
103.178.160.0/23
103.178.166.0/23
103.179.94.0/23
103.180.110.0/23
103.180.172.0/23
103.180.176.0/23
103.180.212.0/23
103.180.236.0/23
103.181.114.0/23
103.181.198.0/23
103.204.169.0/24
103.211.56.0/24
103.212.136.0/23
150.242.200.0/22
163.227.190.0/24
IPv6:
2001:df2:1c40::/48
2401:7ee0::/47
Signature Algorithm: sha256WithRSAEncryption
83:a9:d1:48:cd:0d:fc:fd:10:11:a8:e1:b0:24:3b:16:f5:f6:
28:14:d8:48:7a:9e:48:72:16:42:fe:0a:13:f1:4c:88:56:1c:
bf:5d:c2:1f:85:68:17:6a:a7:6a:7c:96:5a:6e:d3:c7:bb:73:
2d:a9:d7:1e:de:b2:0c:fa:67:e0:3d:b8:cf:7c:42:4e:be:a2:
36:63:73:93:45:8d:90:dd:63:4c:28:8e:8f:41:02:5e:6b:1b:
c2:20:fd:45:d0:b8:0e:27:cd:bc:2b:8d:41:d2:52:47:64:7f:
0f:64:50:c7:57:f0:dd:63:06:37:68:93:48:c5:02:f8:ce:5d:
04:98:2d:44:39:c6:76:86:0b:7e:a2:06:fa:60:6d:f5:25:14:
ac:54:99:cc:f4:cd:2b:e1:c5:4e:b1:09:da:e1:80:25:56:bb:
c1:0e:c7:9c:ec:e9:3f:d4:50:d5:8b:a2:bf:13:f7:ca:03:4b:
e3:6a:68:a4:1c:c0:0f:1f:32:c2:85:96:72:06:59:af:e1:ef:
57:29:06:f0:76:eb:ad:01:5a:40:98:6d:cc:cb:54:85:02:ee:
15:57:65:6a:4b:10:e0:a7:74:a4:a7:a7:5d:02:53:53:2a:1d:
a5:ce:88:15:9e:9c:88:72:d7:91:7e:43:fd:9c:64:ca:12:7d:
9c:e1:e4:92
-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIDAPYmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MzkzMFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU4NTItZmEwYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJcVXgcWNRwKyQLoSpw+QhD7kpM+xFu32ViizSMASUbKeOgibDPmlVb+fNOk
47jWIaG1YppFaQfbRMf8UCAgV975bsrSQAlkNkL/YwuInIoFz4LCJ1Rlh4B8NATT
a7TJasNAqdbvuGWYUcaj8ol+MQvk8iugajaz1z2VPxdrWl6dexVtBPiLeGtiX7l9
FYrCKfKAVceWliNni20/VhsQeiLbTj9Gj40yComCPPXAtP/iYu3gG3n2d6TaJ0/3
UyYCKHEOVCTCoHVx8Zx9rHb33iNYKcBOGdJ9dWM2/mjdAXCbQ8HIS3B12lqZ6qE6
zvFSJmSn/zRT/3067dg1ISNBYc0CAwEAAaOCAyEwggMdMB0GA1UdDgQWBBQIwSE8
q5FSB9CjFA9pYn5veFr61TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzhBMTlGMzE0
REJEMTExRjBCM0E3MDg4MzU0NjQxOTUxLnJvYTCB3wYIKwYBBQUHAQcBAf8Egc8w
gcwwga8EAgABMIGoAwQAJDJSAwQAK/r8AwQBK/r+AwQBZ0x6AwQAZ2I1AwQCZ2Mk
AwQCZ220AwQBZ2/kAwQCZ3a0AwQBZ6o6AwQBZ6uuAwQAZ61jAwQAZ7I7AwQBZ7Kg
AwQBZ7KmAwQBZ7NeAwQBZ7RuAwQBZ7SsAwQBZ7SwAwQBZ7TUAwQBZ7TsAwQBZ7Vy
AwQBZ7XGAwQAZ8ypAwQAZ9M4AwQBZ9SIAwQClvLIAwQAo+O+MBgEAgACMBIDBwAg
AQ3yHEADBwEkAX7gAAAwDQYJKoZIhvcNAQELBQADggEBAIOp0UjNDfz9EBGo4bAk
Oxb19igU2Eh6nkhyFkL+ChPxTIhWHL9dwh+FaBdqp2p8llpu08e7cy2p1x7esgz6
Z+A9uM98Qk6+ojZjc5NFjZDdY0wojo9BAl5rG8Ig/UXQuA4nzbwrjUHSUkdkfw9k
UMdX8N1jBjdok0jFAvjOXQSYLUQ5xnaGC36iBvpgbfUlFKxUmcz0zSvhxU6xCdrh
gCVWu8EOx5zs6T/UUNWLor8T98oDS+NqaKQcwA8fMsKFlnIGWa/h71cpBvB2660B
WkCYbczLVIUC7hVXZWpLEOCndKSnp10CU1MqHaXOiBWenIhy15F+Q/2cZMoSfZzh
5JI=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:47:17 2026 by rpki-client