Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
File: A29F7050711711F0AD01080BC4F9AE02.roa (raw, json)
Hash identifier: c9o7aHcVVIQdFvA0UTTDu3RSrGd+Uiwi2bzapxr8wuQ=
Subject key identifier: 67:B2:B1:BF:68:DA:D0:4A:89:FB:1D:C5:F0:86:E4:D5:F4:78:16:65
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E204
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
Signing time: Sun 31 May 2026 16:33:44 +0000
ROA not before: Sun 31 May 2026 16:33:44 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132925
IP address blocks: 36.50.4.0/23 maxlen: 24
43.249.188.0/24 maxlen: 24
43.249.189.0/24 maxlen: 24
103.114.63.0/24 maxlen: 24
103.135.120.0/24 maxlen: 24
103.135.121.0/24 maxlen: 24
103.161.12.0/23 maxlen: 24
103.169.80.0/23 maxlen: 24
103.171.56.0/23 maxlen: 24
103.172.6.0/23 maxlen: 24
103.172.12.0/23 maxlen: 24
103.172.198.0/23 maxlen: 24
103.172.224.0/23 maxlen: 24
103.172.228.0/24 maxlen: 24
103.172.229.0/24 maxlen: 24
103.173.18.0/23 maxlen: 24
103.173.48.0/23 maxlen: 24
103.173.68.0/23 maxlen: 24
103.211.170.0/23 maxlen: 24
103.233.26.0/24 maxlen: 24
103.233.27.0/24 maxlen: 24
103.236.108.0/24 maxlen: 24
103.236.109.0/24 maxlen: 24
103.236.110.0/24 maxlen: 24
103.236.111.0/24 maxlen: 24
150.129.1.0/24 maxlen: 24
210.16.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57860 (0xe204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:33:44 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c62e8-06f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:53:17:ca:b0:19:1f:f3:da:35:03:1d:5e:
8e:10:57:18:6c:35:00:d1:de:9b:7f:a3:a7:3c:fe:
02:e0:1d:d3:b8:c0:61:c1:57:f1:96:b5:fb:be:47:
a2:a1:d3:78:ff:09:d8:b9:5f:51:0f:2e:31:f0:43:
b3:63:cd:e1:cd:63:37:f2:ce:e6:2c:38:70:fa:d5:
c4:36:97:64:03:61:68:33:c6:ff:ea:bd:ad:8a:14:
87:87:c9:88:18:90:89:a4:1c:5b:36:c0:6d:89:df:
b7:c9:5c:c0:85:65:b5:2c:a4:14:35:3e:2d:05:8e:
d6:e0:ab:14:a5:82:65:85:87:ca:53:95:e0:c1:72:
61:56:a5:50:7f:39:5a:44:0e:0f:a9:d5:90:7f:2f:
c3:8e:d5:61:b6:99:ab:1b:38:39:c1:e9:e7:b2:28:
83:c4:64:f3:a9:d5:4a:28:19:ae:ec:37:a1:8a:12:
73:53:8e:ad:ec:7c:cf:03:62:31:59:9e:f1:d5:f5:
96:f8:6b:2e:fb:f2:c9:fb:b3:30:89:26:66:28:3e:
dc:54:2d:fa:5c:20:8b:53:1a:a0:f9:56:82:99:ae:
16:0f:3c:dc:1b:05:1d:9b:21:76:c7:75:18:0d:07:
e4:c5:32:7f:56:b2:30:d9:b3:e9:bd:4e:f3:54:48:
a4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:B1:BF:68:DA:D0:4A:89:FB:1D:C5:F0:86:E4:D5:F4:78:16:65
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.4.0/23
43.249.188.0/23
103.114.63.0/24
103.135.120.0/23
103.161.12.0/23
103.169.80.0/23
103.171.56.0/23
103.172.6.0/23
103.172.12.0/23
103.172.198.0/23
103.172.224.0/23
103.172.228.0/23
103.173.18.0/23
103.173.48.0/23
103.173.68.0/23
103.211.170.0/23
103.233.26.0/23
103.236.108.0/22
150.129.1.0/24
210.16.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0c:ab:06:66:ae:03:10:20:1c:6e:78:cf:41:e6:21:08:51:
30:31:2c:99:72:5b:39:ff:af:93:c5:11:0d:79:8a:1d:4c:e2:
b5:95:48:38:b4:ec:01:a0:03:f3:da:db:14:24:77:73:03:44:
b7:95:96:61:0d:30:51:73:70:cc:50:1a:b2:41:01:55:13:59:
f9:72:ca:60:e8:bf:3e:c6:e7:3a:5b:cc:c5:21:f1:2d:38:f4:
82:5d:12:7c:93:7c:2c:ed:57:62:37:56:ca:6d:05:cf:5d:30:
66:18:3c:5c:8c:98:5d:88:b4:3a:b3:97:d5:f8:2b:89:90:ad:
93:1c:da:0b:39:1c:d3:f2:3a:31:b2:61:c1:17:6d:58:79:22:
51:0a:2d:6e:2b:30:59:85:ff:4b:9b:cd:51:4c:6a:d8:8f:cc:
d4:34:2f:4c:0a:c1:e2:e3:03:55:2b:8f:bb:b7:3b:ff:0f:0e:
91:b6:05:65:96:f0:a3:2a:70:dc:85:e9:b8:2c:b9:20:2e:0d:
62:69:0f:74:41:ec:09:d4:44:32:9c:f3:f3:2e:0b:53:5c:b8:
71:d9:b6:96:24:a0:a8:1e:18:c7:d7:7a:fe:5e:ff:3b:92:1e:
bd:b6:47:46:7a:5b:77:ed:87:88:b3:50:3e:e5:ed:9f:23:3a:
ba:05:24:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:46 2026 by rpki-client