Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADF4E2B4E23611EC930AF21FC4F9AE02.roa
File: ADF4E2B4E23611EC930AF21FC4F9AE02.roa (raw, json)
Hash identifier: V94uqC0PQS+wtdGam+MtIur4AtCIR19jA/kPswf6nhE=
Subject key identifier: 4C:22:9F:45:29:9C:A0:B5:C2:D7:50:7C:26:8B:48:BC:1B:DB:47:F8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F277
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADF4E2B4E23611EC930AF21FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:08:14 +0000
ROA not before: Mon 06 Jul 2026 17:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139560
IP address blocks: 101.0.43.0/24 maxlen: 24
101.0.44.0/24 maxlen: 24
101.0.51.0/24 maxlen: 24
101.0.59.0/24 maxlen: 24
101.0.61.0/24 maxlen: 24
103.183.44.0/23 maxlen: 24
180.188.234.0/23 maxlen: 24
180.188.240.0/24 maxlen: 24
203.76.177.0/24 maxlen: 24
203.76.179.0/24 maxlen: 24
203.76.184.0/24 maxlen: 24
203.76.186.0/24 maxlen: 24
203.76.189.0/24 maxlen: 24
203.115.64.0/22 maxlen: 24
203.115.69.0/24 maxlen: 24
203.115.70.0/23 maxlen: 24
203.115.72.0/24 maxlen: 24
203.115.74.0/23 maxlen: 24
203.115.78.0/23 maxlen: 24
203.115.80.0/23 maxlen: 24
203.115.87.0/24 maxlen: 24
203.115.88.0/23 maxlen: 24
203.115.90.0/24 maxlen: 24
203.115.92.0/24 maxlen: 24
203.115.95.0/24 maxlen: 24
210.89.33.0/24 maxlen: 24
210.89.38.0/24 maxlen: 24
210.89.41.0/24 maxlen: 24
210.89.46.0/24 maxlen: 24
210.89.48.0/24 maxlen: 24
210.89.51.0/24 maxlen: 24
210.89.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62071 (0xf277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be0fe-dad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:b6:13:e8:d6:ce:63:07:9c:15:8e:a0:c5:
c9:68:4f:36:2d:be:fd:b0:2c:ed:66:4d:62:ee:c4:
e4:f3:3e:78:e7:9c:04:80:44:72:4e:91:3d:c2:02:
ee:fc:32:7e:98:6f:71:2c:28:0a:9c:8d:9a:6e:87:
2c:a9:23:54:8c:8b:2b:7d:ea:16:96:89:f9:17:38:
cc:51:73:59:7d:8a:1e:f4:af:cb:03:b2:90:b1:46:
2e:d6:c1:7e:02:74:c6:75:78:4b:a9:b9:1a:63:04:
17:55:30:e9:d2:a1:64:f9:e3:c2:e6:47:da:39:b0:
ac:27:33:77:37:89:6a:1c:a1:87:a6:7d:49:85:06:
3c:a1:97:b2:6b:c1:02:ce:f8:eb:63:14:01:69:ba:
b0:ba:72:15:7a:1f:df:ec:98:54:b4:2e:5f:be:9f:
b4:83:e2:09:42:a9:15:79:3e:d4:e2:93:6b:c8:21:
f0:a2:ca:0c:5f:f7:0f:74:f7:62:9f:18:84:8f:32:
63:2e:9e:df:6a:16:3c:21:36:91:26:f8:3d:32:62:
de:7a:ae:cd:fb:43:01:89:0e:77:31:d5:c4:86:cb:
37:76:a5:d8:87:51:9b:8e:19:fa:c7:b4:c3:49:4a:
c3:ca:f9:15:be:36:53:33:6b:66:89:f9:28:99:11:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:22:9F:45:29:9C:A0:B5:C2:D7:50:7C:26:8B:48:BC:1B:DB:47:F8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADF4E2B4E23611EC930AF21FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.0.43.0-101.0.44.255
101.0.51.0/24
101.0.59.0/24
101.0.61.0/24
103.183.44.0/23
180.188.234.0/23
180.188.240.0/24
203.76.177.0/24
203.76.179.0/24
203.76.184.0/24
203.76.186.0/24
203.76.189.0/24
203.115.64.0/22
203.115.69.0-203.115.72.255
203.115.74.0/23
203.115.78.0-203.115.81.255
203.115.87.0-203.115.90.255
203.115.92.0/24
203.115.95.0/24
210.89.33.0/24
210.89.38.0/24
210.89.41.0/24
210.89.46.0/24
210.89.48.0/24
210.89.51.0/24
210.89.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ce:0e:52:d5:87:94:79:67:e7:77:39:f5:db:18:f5:49:13:
31:62:e9:e2:48:48:e5:58:18:33:02:b5:ad:d0:66:ef:58:7c:
7f:6f:7b:b6:a4:08:9a:ca:c6:d1:4d:11:7e:24:82:db:66:d9:
48:3a:60:58:60:84:d6:79:0b:1a:b6:c7:34:f6:37:b8:1d:c2:
5c:5f:05:ad:4e:2b:9d:07:51:f6:0c:9f:1a:c4:81:07:b4:c0:
00:c2:66:ad:2a:94:9c:a7:97:a0:84:4c:aa:b5:a7:87:de:5c:
fa:14:46:a2:67:2d:8a:70:5f:d1:06:25:4b:ed:8f:f5:f0:c8:
2e:74:65:c8:3a:79:ae:ae:94:e9:d2:b9:54:0e:a6:c7:bb:7b:
f6:f6:3b:69:6a:c1:52:4a:77:8a:2a:b2:c2:8e:63:c5:9d:a4:
2f:e6:d4:a8:25:fa:ba:4a:fa:0c:fe:21:8a:bd:02:44:96:3f:
f1:40:8b:ea:73:4b:0a:bb:97:88:d1:cc:45:ed:14:67:ac:a6:
c9:03:10:4e:f7:3f:67:c1:f5:01:2e:4a:72:67:2b:8c:e5:51:
28:4e:9b:06:ba:40:42:65:34:07:f8:80:3c:1e:21:47:dc:05:
15:aa:69:fc:45:72:dd:b8:c4:de:c2:b3:f2:92:2b:70:f1:9f:
25:57:f1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:45 2026 by rpki-client