Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EE6DC4C282D11F1BA507DBBC6833773.roa
File: 8EE6DC4C282D11F1BA507DBBC6833773.roa (raw, json)
Hash identifier: TmltZ88eapojzH06H3M2UcBPcATqRsh47vh766Zqqq8=
Subject key identifier: 96:B7:46:93:F3:DD:52:32:CF:06:7B:15:DD:3C:6D:76:B3:8B:EF:58
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E5FA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EE6DC4C282D11F1BA507DBBC6833773.roa
Signing time: Sun 31 May 2026 17:06:33 +0000
ROA not before: Sun 31 May 2026 17:06:33 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138754
IP address blocks: 43.229.88.0/22 maxlen: 24
45.116.252.0/22 maxlen: 24
103.42.196.0/22 maxlen: 24
103.65.250.0/23 maxlen: 24
103.70.36.0/23 maxlen: 24
103.70.196.0/22 maxlen: 24
103.76.162.0/23 maxlen: 24
103.99.144.0/23 maxlen: 24
103.99.204.0/22 maxlen: 24
103.114.252.0/23 maxlen: 24
103.118.150.0/23 maxlen: 24
103.131.128.0/23 maxlen: 24
103.132.24.0/22 maxlen: 24
103.135.52.0/22 maxlen: 24
103.139.64.0/23 maxlen: 24
103.140.16.0/23 maxlen: 24
103.145.172.0/23 maxlen: 24
103.146.174.0/23 maxlen: 24
103.147.208.0/23 maxlen: 24
103.148.20.0/23 maxlen: 24
103.149.158.0/23 maxlen: 24
103.151.188.0/23 maxlen: 24
103.153.92.0/23 maxlen: 24
103.153.104.0/23 maxlen: 24
103.154.36.0/24 maxlen: 24
103.154.37.0/24 maxlen: 24
103.154.54.0/23 maxlen: 24
103.155.222.0/23 maxlen: 24
103.157.104.0/23 maxlen: 24
103.158.240.0/23 maxlen: 24
103.160.194.0/23 maxlen: 24
103.160.232.0/23 maxlen: 24
103.161.54.0/23 maxlen: 24
103.161.144.0/23 maxlen: 24
103.165.166.0/23 maxlen: 24
103.166.244.0/23 maxlen: 24
103.168.200.0/23 maxlen: 24
103.169.214.0/23 maxlen: 24
103.170.54.0/23 maxlen: 24
103.171.224.0/23 maxlen: 24
103.175.2.0/23 maxlen: 24
103.175.88.0/23 maxlen: 24
103.175.136.0/23 maxlen: 24
103.176.184.0/23 maxlen: 24
103.177.26.0/23 maxlen: 24
103.177.252.0/23 maxlen: 24
103.178.204.0/23 maxlen: 24
103.179.196.0/23 maxlen: 24
103.179.230.0/23 maxlen: 24
103.181.40.0/23 maxlen: 24
103.182.166.0/23 maxlen: 24
103.183.82.0/23 maxlen: 24
103.184.238.0/23 maxlen: 24
103.189.142.0/23 maxlen: 24
103.189.214.0/23 maxlen: 24
103.190.2.0/23 maxlen: 24
103.190.194.0/23 maxlen: 24
103.191.172.0/23 maxlen: 24
103.191.186.0/23 maxlen: 24
103.194.152.0/22 maxlen: 24
103.199.160.0/22 maxlen: 24
103.209.132.0/23 maxlen: 24
103.209.220.0/22 maxlen: 24
103.227.36.0/22 maxlen: 24
137.59.84.0/22 maxlen: 24
2001:df0:b240::/48 maxlen: 48
2001:df0:c640::/48 maxlen: 48
2001:df5:2380::/48 maxlen: 48
2001:df5:d380::/48 maxlen: 48
2001:df7:480::/48 maxlen: 48
2001:df7:d80::/48 maxlen: 48
2001:df7:1380::/48 maxlen: 48
2001:df7:4b80::/48 maxlen: 48
2001:df7:4d80::/48 maxlen: 48
2001:df7:4e80::/48 maxlen: 48
2001:df7:4f80::/48 maxlen: 48
2001:df7:5280::/48 maxlen: 48
2001:df7:6980::/48 maxlen: 48
2403:a080::/32 maxlen: 38
2405:f140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58874 (0xe5fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:06:33 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6a99-404b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d3:26:cd:aa:ad:4f:5f:90:c3:df:0d:50:f0:
49:54:f9:04:3e:fb:9a:18:15:f0:f9:c2:59:65:2b:
97:7c:e8:e1:28:51:9e:ad:a7:31:fc:e8:fb:a8:41:
cc:fe:9b:00:cc:7b:26:ac:ba:7e:71:00:47:3f:f5:
0e:84:96:16:98:bc:1d:0a:b9:06:c7:7c:da:47:aa:
98:ee:b1:b9:8a:2d:d6:78:60:07:9f:50:6f:d0:57:
8b:00:ab:5b:05:ce:21:cc:3d:f7:81:32:b2:60:9c:
ab:01:39:a5:e2:3f:5c:ba:1b:91:7e:9d:51:df:03:
d3:7b:28:13:e7:7f:a3:e3:74:45:2c:f3:a4:9d:2b:
b6:dd:36:f6:56:98:43:32:be:25:22:a1:43:2f:e6:
b9:53:d2:a2:8e:72:40:f0:c5:1a:eb:56:89:18:4b:
cc:ec:e6:1d:11:f1:cc:ea:ec:fc:0d:6d:27:2e:36:
a3:a5:83:df:b1:56:b8:e2:4f:07:ed:cd:37:d3:5b:
c3:51:7c:e7:c6:b2:4a:20:34:21:fe:e6:1b:90:c7:
0a:c5:2a:6f:e0:8a:a1:84:ae:8f:d1:ca:21:fb:6b:
d1:28:28:ab:0b:4a:85:10:bb:69:9b:20:ab:47:ab:
b4:62:eb:3d:25:1d:7f:ce:6c:3a:05:99:2b:85:9d:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B7:46:93:F3:DD:52:32:CF:06:7B:15:DD:3C:6D:76:B3:8B:EF:58
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8EE6DC4C282D11F1BA507DBBC6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.229.88.0/22
45.116.252.0/22
103.42.196.0/22
103.65.250.0/23
103.70.36.0/23
103.70.196.0/22
103.76.162.0/23
103.99.144.0/23
103.99.204.0/22
103.114.252.0/23
103.118.150.0/23
103.131.128.0/23
103.132.24.0/22
103.135.52.0/22
103.139.64.0/23
103.140.16.0/23
103.145.172.0/23
103.146.174.0/23
103.147.208.0/23
103.148.20.0/23
103.149.158.0/23
103.151.188.0/23
103.153.92.0/23
103.153.104.0/23
103.154.36.0/23
103.154.54.0/23
103.155.222.0/23
103.157.104.0/23
103.158.240.0/23
103.160.194.0/23
103.160.232.0/23
103.161.54.0/23
103.161.144.0/23
103.165.166.0/23
103.166.244.0/23
103.168.200.0/23
103.169.214.0/23
103.170.54.0/23
103.171.224.0/23
103.175.2.0/23
103.175.88.0/23
103.175.136.0/23
103.176.184.0/23
103.177.26.0/23
103.177.252.0/23
103.178.204.0/23
103.179.196.0/23
103.179.230.0/23
103.181.40.0/23
103.182.166.0/23
103.183.82.0/23
103.184.238.0/23
103.189.142.0/23
103.189.214.0/23
103.190.2.0/23
103.190.194.0/23
103.191.172.0/23
103.191.186.0/23
103.194.152.0/22
103.199.160.0/22
103.209.132.0/23
103.209.220.0/22
103.227.36.0/22
137.59.84.0/22
IPv6:
2001:df0:b240::/48
2001:df0:c640::/48
2001:df5:2380::/48
2001:df5:d380::/48
2001:df7:480::/48
2001:df7:d80::/48
2001:df7:1380::/48
2001:df7:4b80::/48
2001:df7:4d80::/48
2001:df7:4e80::/48
2001:df7:4f80::/48
2001:df7:5280::/48
2001:df7:6980::/48
2403:a080::/32
2405:f140::/32
Signature Algorithm: sha256WithRSAEncryption
1a:43:81:b7:93:a7:0d:6f:cc:e7:34:e6:d9:32:6c:a2:3b:0f:
ec:10:90:84:ee:21:8c:7a:e9:3e:f2:88:80:87:e4:b8:d9:c1:
90:11:27:75:ac:c0:76:b1:d9:ba:2a:fd:c9:93:ad:01:5c:b8:
7c:03:ae:09:d0:ab:ea:27:20:4b:78:ba:2f:41:19:55:02:43:
2a:f7:25:9f:44:e9:ba:62:d9:3c:10:64:9f:60:ce:82:a4:29:
13:41:ee:3b:75:db:1e:fb:f0:62:0d:82:bf:8b:c0:d9:27:f3:
41:0d:3e:1c:1c:76:7e:1f:b7:25:2f:51:01:87:32:a9:a7:19:
ab:49:c7:1b:07:3f:a0:73:db:3f:94:09:28:41:2a:0e:58:12:
5d:95:98:fe:72:08:65:17:8d:c0:c4:6e:11:94:5f:bc:d4:0b:
cf:23:11:d3:7a:4b:78:86:53:9b:3f:ff:85:b2:bd:8f:41:e7:
18:19:6c:d0:e2:24:8b:9c:d2:48:bf:ff:a3:75:0c:a9:8d:1c:
89:ba:ce:a4:0c:a9:8c:b9:34:e2:25:aa:61:a3:ac:4d:f9:6e:
b3:07:ad:9b:d2:43:a6:29:23:22:2c:54:5a:1f:4b:e1:7d:d9:
cc:ed:c4:1c:f5:c1:80:44:67:54:b4:00:ec:c6:08:cd:cd:4e:
db:34:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:31 2026 by rpki-client