Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
File: A29F7050711711F0AD01080BC4F9AE02.roa (raw, json)
Hash identifier: l8/Z+DI7/NeKF+y+q309C1YMJhGZfjllskRJT0gbUY0=
Subject key identifier: 98:CB:88:35:B8:37:F3:2E:98:92:B4:96:93:CD:E5:86:02:08:7C:05
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE1F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:31:50 +0000
ROA not before: Mon 06 Jul 2026 16:31:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132925
IP address blocks: 36.50.4.0/23 maxlen: 24
43.249.188.0/24 maxlen: 24
43.249.189.0/24 maxlen: 24
103.114.63.0/24 maxlen: 24
103.135.120.0/24 maxlen: 24
103.135.121.0/24 maxlen: 24
103.161.12.0/23 maxlen: 24
103.169.80.0/23 maxlen: 24
103.171.56.0/23 maxlen: 24
103.172.6.0/23 maxlen: 24
103.172.12.0/23 maxlen: 24
103.172.198.0/23 maxlen: 24
103.172.224.0/23 maxlen: 24
103.172.228.0/24 maxlen: 24
103.172.229.0/24 maxlen: 24
103.173.18.0/23 maxlen: 24
103.173.48.0/23 maxlen: 24
103.173.68.0/23 maxlen: 24
103.211.170.0/23 maxlen: 24
103.233.26.0/24 maxlen: 24
103.233.27.0/24 maxlen: 24
103.236.108.0/24 maxlen: 24
103.236.109.0/24 maxlen: 24
103.236.110.0/24 maxlen: 24
103.236.111.0/24 maxlen: 24
150.129.1.0/24 maxlen: 24
210.16.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60959 (0xee1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:31:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd876-829c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:48:32:e7:70:0c:39:86:2c:06:77:69:05:
da:6b:51:47:7b:53:8e:df:eb:7b:43:76:40:af:4b:
3f:db:76:81:04:6c:b3:e3:a3:9e:70:a8:ee:88:19:
6d:64:25:df:ea:6e:01:67:4d:4b:0e:e0:e0:9d:7d:
02:20:04:20:ea:6d:b9:12:02:64:dc:9b:f5:f7:b7:
8e:25:95:82:d1:2f:7f:5e:51:40:4c:86:5e:74:91:
df:81:5b:fa:97:1f:9e:17:14:db:fe:ff:a9:1e:11:
d8:3c:ec:0f:fc:fb:75:1d:dd:95:cd:74:78:a7:4f:
78:46:16:29:ae:c5:d7:b7:da:ac:db:9c:73:3d:00:
74:a0:32:cb:d4:75:d6:a4:6e:28:d1:18:cd:d7:57:
ad:85:2c:03:d8:f5:b4:44:a9:fd:30:e0:ac:49:9d:
eb:a5:38:8a:1f:c7:6e:1f:59:ae:67:18:c8:09:7b:
28:fa:00:44:4a:97:55:a2:a4:71:91:12:2e:8d:6a:
92:6d:cf:07:bd:4d:dc:cf:c8:58:c2:de:7e:7d:4f:
e3:dd:69:48:93:41:e0:67:5d:30:39:a5:9c:7c:d7:
31:ea:de:59:b9:84:17:1f:5e:b4:a2:77:f0:a2:9e:
f3:8c:a2:65:e8:ba:96:77:5c:10:7e:65:39:b6:38:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CB:88:35:B8:37:F3:2E:98:92:B4:96:93:CD:E5:86:02:08:7C:05
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.4.0/23
43.249.188.0/23
103.114.63.0/24
103.135.120.0/23
103.161.12.0/23
103.169.80.0/23
103.171.56.0/23
103.172.6.0/23
103.172.12.0/23
103.172.198.0/23
103.172.224.0/23
103.172.228.0/23
103.173.18.0/23
103.173.48.0/23
103.173.68.0/23
103.211.170.0/23
103.233.26.0/23
103.236.108.0/22
150.129.1.0/24
210.16.101.0/24
Signature Algorithm: sha256WithRSAEncryption
76:be:62:46:c4:27:09:7c:27:ad:f7:b8:17:7a:10:9a:f0:4e:
71:de:ab:ad:83:de:60:07:7f:db:06:ff:9a:e2:8b:b7:8f:f7:
b0:f0:42:23:4c:99:12:3a:f5:f0:c2:e1:6a:a0:06:5c:05:f5:
64:32:02:f7:ec:87:43:e5:ea:06:e6:36:38:d6:36:88:38:85:
b0:d4:57:1b:93:bc:ee:ec:0e:15:e9:2d:e2:bf:02:36:5d:af:
aa:f6:92:12:c3:55:97:ed:d4:13:e7:64:67:28:3f:2b:6e:03:
b7:1f:67:48:43:28:0e:27:a1:4f:97:2a:9a:ba:db:0d:3b:f3:
3c:a6:01:95:64:f3:45:71:5f:2c:96:b1:c2:7b:60:1f:4d:32:
c5:0e:a5:c6:56:2f:3e:92:89:15:9f:d7:2c:95:29:05:1d:16:
2f:a9:00:07:2e:bd:74:18:f1:1b:fa:90:5e:53:c1:45:1e:53:
c4:1f:b7:ff:5f:d6:bc:66:32:28:a8:3d:4c:27:0d:5b:a8:cf:
62:88:3b:61:c3:54:dd:70:66:0f:58:ee:f8:4c:78:41:9b:3d:
a6:0c:91:39:09:6f:04:a2:8c:a8:9e:d4:4f:bc:66:b3:a0:a8:
1a:b1:9d:31:a4:4f:91:00:79:54:c6:08:a9:42:ae:a6:5e:ab:
1a:3d:1c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:28 2026 by rpki-client