Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2544F22694A11F19FB833546E47A888.roa
File: A2544F22694A11F19FB833546E47A888.roa (raw, json)
Hash identifier: JVPgOS4WWXFVXi0ZMmqQrCVjFz0aXLw4ftVIkjQ1YUA=
Subject key identifier: A3:CC:64:BA:D4:A8:15:0F:AD:86:3D:44:85:80:32:9C:00:E7:E6:F1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F1DC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2544F22694A11F19FB833546E47A888.roa
Signing time: Mon 06 Jul 2026 17:03:07 +0000
ROA not before: Mon 06 Jul 2026 17:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138277
IP address blocks: 103.94.81.0/24 maxlen: 24
103.94.82.0/24 maxlen: 24
103.133.120.0/22 maxlen: 24
103.157.220.0/23 maxlen: 24
103.158.140.0/23 maxlen: 24
103.167.194.0/23 maxlen: 24
103.170.68.0/23 maxlen: 24
103.170.168.0/23 maxlen: 24
103.175.100.0/24 maxlen: 24
103.175.101.0/24 maxlen: 24
103.175.172.0/23 maxlen: 24
103.176.136.0/23 maxlen: 24
103.177.16.0/23 maxlen: 24
103.238.112.0/23 maxlen: 24
103.255.220.0/23 maxlen: 24
2001:df0:1040::/48 maxlen: 48
2001:df0:18c0::/48 maxlen: 48
2001:df2:af40::/48 maxlen: 48
2001:df2:d5c0::/48 maxlen: 48
2001:df6:be80::/48 maxlen: 48
2001:df7:1180::/48 maxlen: 48
2001:df7:1e80::/48 maxlen: 48
2001:df7:f280::/48 maxlen: 48
2001:df7:fa80::/48 maxlen: 48
2405:5740::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61916 (0xf1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bdfcb-b2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:3b:7c:04:bc:f8:1e:96:3a:10:79:46:02:
0b:ad:76:f0:9b:55:cd:7b:77:ca:4c:00:0e:d7:7e:
26:41:ee:7f:a3:d4:22:17:d9:7d:8e:df:71:ae:46:
18:78:3a:c4:ef:f3:55:51:b8:59:49:f9:3c:d8:00:
ff:f6:6a:ed:98:ee:ad:24:2c:1a:95:3d:8a:0c:01:
ab:b6:a8:05:2a:47:f2:2c:5d:b2:dc:41:fe:7e:9c:
28:d9:d4:d9:97:88:51:bd:6c:13:6f:2e:34:5c:0c:
cb:9a:ad:da:5a:c7:a5:2a:82:dc:7b:88:f8:81:dc:
c4:39:4d:04:db:e7:5f:f4:88:7c:ee:ed:c9:92:18:
2d:67:3b:ac:6b:3b:a1:dd:ec:27:92:64:ab:45:ca:
8b:09:b0:92:21:bb:34:3b:94:fe:6c:f0:0c:78:1c:
b6:bb:7f:cb:74:83:a2:e5:ef:9c:5f:19:ed:61:52:
32:f0:aa:c8:87:52:4c:61:39:10:9e:61:07:9e:43:
fe:b3:20:b2:b3:ba:81:a2:4b:d2:ac:00:91:22:4d:
38:e5:7a:da:0e:93:0b:9e:85:2a:81:56:98:79:cf:
b5:0e:5c:24:b9:f6:1f:59:89:35:c7:d5:a2:a1:de:
d9:3a:91:34:63:99:a8:75:59:de:d0:ac:19:0a:64:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CC:64:BA:D4:A8:15:0F:AD:86:3D:44:85:80:32:9C:00:E7:E6:F1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2544F22694A11F19FB833546E47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.94.81.0-103.94.82.255
103.133.120.0/22
103.157.220.0/23
103.158.140.0/23
103.167.194.0/23
103.170.68.0/23
103.170.168.0/23
103.175.100.0/23
103.175.172.0/23
103.176.136.0/23
103.177.16.0/23
103.238.112.0/23
103.255.220.0/23
IPv6:
2001:df0:1040::/48
2001:df0:18c0::/48
2001:df2:af40::/48
2001:df2:d5c0::/48
2001:df6:be80::/48
2001:df7:1180::/48
2001:df7:1e80::/48
2001:df7:f280::/48
2001:df7:fa80::/48
2405:5740::/32
Signature Algorithm: sha256WithRSAEncryption
92:35:dc:d7:7e:f1:5a:ae:81:5b:6c:da:1d:5c:68:c7:25:14:
ad:f3:dd:c3:ac:e5:40:56:22:87:51:14:32:a5:f9:32:2a:a0:
c2:6e:be:08:f2:de:d1:93:33:ea:5d:01:e8:df:5c:a3:9f:f2:
34:89:31:02:57:55:ea:90:04:85:e9:41:4a:7d:e3:c8:50:70:
0d:ae:3a:55:dd:62:e3:5b:d3:55:ea:26:f0:f4:e7:28:57:91:
2c:bd:f4:fa:fa:c6:cd:5f:2e:ea:87:7b:3f:6a:ff:d6:f3:82:
65:27:be:59:da:0e:e9:0b:5a:65:2c:bf:b7:5e:ca:ff:f9:f7:
0b:06:00:49:84:5a:d1:96:18:4d:e2:d0:fa:0f:58:e2:ac:7f:
83:79:af:e8:00:1b:b1:a4:c5:1d:21:e0:a7:f8:a9:89:3e:ea:
63:44:fb:bd:ed:c1:1c:cd:c3:f1:9a:ac:26:9e:8c:11:68:6e:
5f:79:48:25:b2:6e:87:af:c3:10:b3:a2:05:2a:69:c3:24:72:
5b:4f:0f:7a:c9:2a:3f:db:f7:ca:60:0e:97:15:1d:75:c8:cb:
2e:31:0d:d9:22:77:3d:ce:7c:64:00:6b:91:6a:92:fd:9e:2c:
f0:8f:4d:59:15:3c:e9:e6:26:df:1e:b1:71:13:00:fd:f5:e3:
b8:e5:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:17 2026 by rpki-client