Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B56CEB6661D211F1A31E96439747A888.roa
File: B56CEB6661D211F1A31E96439747A888.roa (raw, json)
Hash identifier: lazcb36BWu1//vQrevKfl9XOn896sYKVzTVueqPQiCg=
Subject key identifier: A2:B0:B3:DB:C3:47:38:CF:D4:E8:91:05:A4:54:3D:83:7C:39:87:80
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F8C3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B56CEB6661D211F1A31E96439747A888.roa
Signing time: Fri 17 Jul 2026 11:42:28 +0000
ROA not before: Fri 17 Jul 2026 11:42:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149240
IP address blocks: 36.50.118.0/23 maxlen: 24
103.82.96.0/24 maxlen: 24
103.139.191.0/24 maxlen: 24
103.152.158.0/24 maxlen: 24
103.157.112.0/23 maxlen: 24
103.159.99.0/24 maxlen: 24
103.160.72.0/23 maxlen: 24
103.162.196.0/23 maxlen: 24
103.163.149.0/24 maxlen: 24
103.163.166.0/23 maxlen: 24
103.167.172.0/24 maxlen: 24
103.170.0.0/23 maxlen: 24
103.170.190.0/24 maxlen: 24
103.170.191.0/24 maxlen: 24
103.171.172.0/24 maxlen: 24
103.174.108.0/23 maxlen: 24
103.176.209.0/24 maxlen: 24
103.178.176.0/23 maxlen: 24
103.181.150.0/24 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.236.0/24 maxlen: 24
103.191.203.0/24 maxlen: 24
2001:df0:3bc0::/48 maxlen: 48
2001:df0:8640::/48 maxlen: 48
2001:df1:9c40::/48 maxlen: 48
2001:df2:c3c0::/48 maxlen: 48
2001:df3:4940::/48 maxlen: 48
2001:df3:b6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63683 (0xf8c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 17 11:42:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a5a1524-710d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:19:75:b9:ee:c2:da:f8:9b:5d:a8:14:38:
c9:04:24:83:8d:07:eb:47:12:0c:41:3b:15:0d:2a:
31:fd:c1:e8:f6:97:8d:11:df:6a:d8:a5:57:65:fc:
32:57:ee:78:68:b1:4e:a4:71:8a:7c:6c:91:a3:3f:
f1:21:7f:3a:7e:9c:85:17:34:47:53:30:34:a4:66:
0e:a7:4c:4b:62:99:2c:63:6c:51:b1:67:6a:cd:e0:
21:13:7d:93:b8:e0:3d:23:15:83:25:07:82:be:c8:
58:85:9d:a7:16:bf:f0:85:c6:56:ba:73:85:f4:62:
44:53:62:c4:9f:2d:b3:e0:2a:4e:ec:d2:f6:15:d4:
e4:79:35:89:b6:dc:df:40:3f:3b:1f:3b:a6:17:f6:
2f:83:73:9e:84:9f:61:a2:af:17:bf:b6:f6:b8:ac:
a0:72:5a:8d:6e:c9:60:2f:05:9a:f4:70:53:19:07:
3a:77:55:5c:ed:ae:2e:31:38:66:33:70:e9:c4:08:
08:8b:f6:6c:5a:00:99:e1:0f:01:b3:df:10:0d:81:
09:c3:f9:8a:43:71:89:ad:a6:f2:46:16:45:77:d4:
d3:34:6c:fa:1c:4d:5f:35:5c:e0:cf:ca:d0:88:d4:
d9:e2:09:04:cb:55:6e:a9:d9:44:02:03:49:d7:94:
3e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B0:B3:DB:C3:47:38:CF:D4:E8:91:05:A4:54:3D:83:7C:39:87:80
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B56CEB6661D211F1A31E96439747A888.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.118.0/23
103.82.96.0/24
103.139.191.0/24
103.152.158.0/24
103.157.112.0/23
103.159.99.0/24
103.160.72.0/23
103.162.196.0/23
103.163.149.0/24
103.163.166.0/23
103.167.172.0/24
103.170.0.0/23
103.170.190.0/23
103.171.172.0/24
103.174.108.0/23
103.176.209.0/24
103.178.176.0/23
103.181.150.0/24
103.184.40.0/24
103.184.236.0/24
103.191.203.0/24
IPv6:
2001:df0:3bc0::/48
2001:df0:8640::/48
2001:df1:9c40::/48
2001:df2:c3c0::/48
2001:df3:4940::/48
2001:df3:b6c0::/48
Signature Algorithm: sha256WithRSAEncryption
30:19:40:b1:9e:a6:26:6b:cf:b6:67:04:7c:c1:ab:48:00:2d:
ce:f8:c7:41:d0:0a:79:1a:60:1f:fe:02:7d:3a:57:40:e2:50:
cc:41:fe:9a:bb:0b:8f:75:4c:65:bb:1a:23:3b:25:7d:cf:1e:
1e:05:c4:36:1a:e3:5d:f7:d7:e4:90:cd:0a:c2:cc:9f:60:7a:
64:51:56:8b:cb:6f:a7:ce:07:59:82:ff:66:f9:47:71:9b:ed:
5c:38:99:fb:72:20:0b:0f:a2:94:c3:a8:aa:54:8d:ce:2a:47:
40:60:0a:bd:b2:2f:27:1d:ef:cc:c3:e1:c4:2e:a6:d7:ad:40:
9f:09:65:5c:f9:b9:88:c4:f4:da:f6:8a:8f:18:52:76:5b:b1:
81:0c:6d:aa:03:1f:90:aa:a8:e5:e1:50:89:e1:96:7a:42:a0:
38:53:56:f5:77:17:ea:a2:34:3b:77:94:cc:bf:28:d3:5c:25:
92:34:1f:72:2e:cd:03:61:5b:07:93:71:2a:e0:b5:ae:6b:b7:
75:8d:84:c7:38:b1:05:61:f7:a2:33:5d:83:16:79:5e:a0:3f:
da:72:43:a7:88:ce:c7:6e:e5:1d:e4:9b:7c:1d:8a:e2:66:75:
cf:dc:1f:e9:87:82:75:ef:ff:92:0e:aa:04:05:6a:38:e7:73:
93:3a:67:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:19 2026 by rpki-client