Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EE6DC4C282D11F1BA507DBBC6833773.roa
File: 8EE6DC4C282D11F1BA507DBBC6833773.roa (raw, json)
Hash identifier: vRbflDAWOIJCBSki7e2BCM04m+LmlhafStWER8X3x/A=
Subject key identifier: 9E:DF:41:DF:F3:3A:D3:04:65:60:C9:85:AC:7E:18:C9:DE:32:D0:5F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FA22
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EE6DC4C282D11F1BA507DBBC6833773.roa
Signing time: Sat 01 Aug 2026 10:36:09 +0000
ROA not before: Sat 01 Aug 2026 10:36:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138754
IP address blocks: 43.229.88.0/22 maxlen: 24
45.116.252.0/22 maxlen: 24
103.42.196.0/22 maxlen: 24
103.65.250.0/23 maxlen: 24
103.70.36.0/23 maxlen: 24
103.70.196.0/22 maxlen: 24
103.76.162.0/23 maxlen: 24
103.99.144.0/23 maxlen: 24
103.99.204.0/22 maxlen: 24
103.114.252.0/23 maxlen: 24
103.118.150.0/23 maxlen: 24
103.131.128.0/23 maxlen: 24
103.132.24.0/22 maxlen: 24
103.135.52.0/22 maxlen: 24
103.139.64.0/23 maxlen: 24
103.140.16.0/23 maxlen: 24
103.145.172.0/23 maxlen: 24
103.146.174.0/23 maxlen: 24
103.147.208.0/23 maxlen: 24
103.148.20.0/23 maxlen: 24
103.149.158.0/23 maxlen: 24
103.151.188.0/23 maxlen: 24
103.153.92.0/23 maxlen: 24
103.153.104.0/23 maxlen: 24
103.154.36.0/24 maxlen: 24
103.154.37.0/24 maxlen: 24
103.154.54.0/23 maxlen: 24
103.155.222.0/23 maxlen: 24
103.157.104.0/23 maxlen: 24
103.158.240.0/23 maxlen: 24
103.160.194.0/23 maxlen: 24
103.160.232.0/23 maxlen: 24
103.161.54.0/23 maxlen: 24
103.161.144.0/23 maxlen: 24
103.165.166.0/23 maxlen: 24
103.166.244.0/23 maxlen: 24
103.168.200.0/23 maxlen: 24
103.169.214.0/23 maxlen: 24
103.170.54.0/23 maxlen: 24
103.171.224.0/23 maxlen: 24
103.175.2.0/23 maxlen: 24
103.175.88.0/23 maxlen: 24
103.175.136.0/23 maxlen: 24
103.175.186.0/23 maxlen: 24
103.176.184.0/23 maxlen: 24
103.177.26.0/23 maxlen: 24
103.177.252.0/23 maxlen: 24
103.178.204.0/23 maxlen: 24
103.179.196.0/23 maxlen: 24
103.179.230.0/23 maxlen: 24
103.181.40.0/23 maxlen: 24
103.182.166.0/23 maxlen: 24
103.183.82.0/23 maxlen: 24
103.184.238.0/23 maxlen: 24
103.189.142.0/23 maxlen: 24
103.189.214.0/23 maxlen: 24
103.190.2.0/23 maxlen: 24
103.190.194.0/23 maxlen: 24
103.191.172.0/23 maxlen: 24
103.191.186.0/23 maxlen: 24
103.194.152.0/22 maxlen: 24
103.199.160.0/22 maxlen: 24
103.209.132.0/23 maxlen: 24
103.209.220.0/22 maxlen: 24
103.227.36.0/22 maxlen: 24
103.244.224.0/23 maxlen: 24
137.59.84.0/22 maxlen: 24
2001:df0:b240::/48 maxlen: 48
2001:df0:c640::/48 maxlen: 48
2001:df5:2380::/48 maxlen: 48
2001:df5:d380::/48 maxlen: 48
2001:df7:480::/48 maxlen: 48
2001:df7:d80::/48 maxlen: 48
2001:df7:1380::/48 maxlen: 48
2001:df7:4b80::/48 maxlen: 48
2001:df7:4d80::/48 maxlen: 48
2001:df7:4e80::/48 maxlen: 48
2001:df7:4f80::/48 maxlen: 48
2001:df7:5280::/48 maxlen: 48
2001:df7:6980::/48 maxlen: 48
2400:1ca0::/32 maxlen: 32
2403:a080::/32 maxlen: 38
2405:f140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64034 (0xfa22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 1 10:36:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a6dcc19-fb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:3e:0e:96:c2:00:c0:3a:41:ae:64:74:e2:
23:16:8c:7f:b0:71:51:b0:a8:1d:3f:f1:29:9a:83:
a6:60:b8:0b:98:8a:e7:c0:13:b6:a4:35:08:82:95:
b6:0a:69:79:93:8a:8b:26:18:81:80:c5:4c:87:94:
80:77:20:12:03:5c:7a:46:b7:ef:0f:25:80:a8:72:
96:02:a2:ac:3b:88:e8:6b:ac:49:c7:81:51:01:72:
58:84:de:d7:4d:aa:33:32:85:d3:27:f3:5e:dd:a9:
a3:57:c6:d4:92:d2:9b:a3:22:44:65:b7:e8:df:ec:
cd:66:b8:80:d6:ba:80:a5:fd:5f:3b:6d:7a:31:8f:
22:e3:2d:5d:66:70:28:0f:36:d5:f7:68:eb:81:cf:
00:4d:8b:d6:8c:e8:03:ae:22:79:36:93:71:ca:b7:
85:f1:b7:91:89:77:5b:bf:3f:58:a6:1f:f2:e3:47:
8e:9e:d0:0c:78:bd:8e:a2:35:b8:40:c5:bc:44:a3:
f2:8a:69:94:56:3f:77:e5:1b:dc:92:77:03:6a:6b:
3b:b8:f6:cd:65:1f:dc:62:c9:78:58:c8:4e:01:61:
f0:4e:36:5d:29:d6:7f:86:a4:fa:bd:fc:2a:62:47:
40:31:0d:2d:7a:83:0d:8a:1d:25:02:0d:a6:9e:5f:
46:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DF:41:DF:F3:3A:D3:04:65:60:C9:85:AC:7E:18:C9:DE:32:D0:5F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EE6DC4C282D11F1BA507DBBC6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.229.88.0/22
45.116.252.0/22
103.42.196.0/22
103.65.250.0/23
103.70.36.0/23
103.70.196.0/22
103.76.162.0/23
103.99.144.0/23
103.99.204.0/22
103.114.252.0/23
103.118.150.0/23
103.131.128.0/23
103.132.24.0/22
103.135.52.0/22
103.139.64.0/23
103.140.16.0/23
103.145.172.0/23
103.146.174.0/23
103.147.208.0/23
103.148.20.0/23
103.149.158.0/23
103.151.188.0/23
103.153.92.0/23
103.153.104.0/23
103.154.36.0/23
103.154.54.0/23
103.155.222.0/23
103.157.104.0/23
103.158.240.0/23
103.160.194.0/23
103.160.232.0/23
103.161.54.0/23
103.161.144.0/23
103.165.166.0/23
103.166.244.0/23
103.168.200.0/23
103.169.214.0/23
103.170.54.0/23
103.171.224.0/23
103.175.2.0/23
103.175.88.0/23
103.175.136.0/23
103.175.186.0/23
103.176.184.0/23
103.177.26.0/23
103.177.252.0/23
103.178.204.0/23
103.179.196.0/23
103.179.230.0/23
103.181.40.0/23
103.182.166.0/23
103.183.82.0/23
103.184.238.0/23
103.189.142.0/23
103.189.214.0/23
103.190.2.0/23
103.190.194.0/23
103.191.172.0/23
103.191.186.0/23
103.194.152.0/22
103.199.160.0/22
103.209.132.0/23
103.209.220.0/22
103.227.36.0/22
103.244.224.0/23
137.59.84.0/22
IPv6:
2001:df0:b240::/48
2001:df0:c640::/48
2001:df5:2380::/48
2001:df5:d380::/48
2001:df7:480::/48
2001:df7:d80::/48
2001:df7:1380::/48
2001:df7:4b80::/48
2001:df7:4d80::/48
2001:df7:4e80::/48
2001:df7:4f80::/48
2001:df7:5280::/48
2001:df7:6980::/48
2400:1ca0::/32
2403:a080::/32
2405:f140::/32
Signature Algorithm: sha256WithRSAEncryption
3c:17:7f:14:f6:61:13:40:3a:a4:9d:48:35:c0:94:52:90:1b:
25:2f:9b:0e:3a:59:95:8a:04:f1:11:f7:ef:1b:23:d8:e8:70:
c0:65:48:bf:48:5e:9c:1a:2a:c9:29:01:57:b3:ad:b1:41:05:
ac:8a:45:b9:ad:9d:7c:b2:e4:b3:f5:b9:c9:25:d5:0c:3a:87:
3a:92:5f:4f:90:4f:0b:1d:fc:3d:93:56:ac:f1:c8:c9:14:8e:
20:15:67:49:57:b2:87:f6:0f:75:76:41:87:8d:48:82:b2:db:
a3:95:30:4d:e8:57:05:87:52:10:d3:c3:2b:1b:35:33:40:a1:
cb:b1:74:56:69:89:08:a9:44:b3:12:a8:9e:26:ea:8b:3d:ef:
1e:e3:0f:f5:a4:95:38:77:07:6d:95:6d:ac:59:45:fa:7a:05:
ff:b7:65:31:f9:a1:84:68:c6:d1:8a:00:a9:d4:25:e5:d7:4d:
b4:87:71:9e:cb:fd:23:f3:65:7a:0d:be:da:be:10:04:cb:7c:
73:b7:3e:60:d8:32:66:32:b3:28:d0:5c:6a:86:7d:4f:01:3d:
67:7f:94:f0:5e:3f:90:5a:4d:18:2d:c4:3f:20:60:ed:11:85:
4a:b3:eb:63:fb:1b:3b:98:ae:cf:be:8d:30:1a:02:1b:a5:77:
ac:cc:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:38:29 2026 by rpki-client