Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC773E348B1211F1A36C52BA3311F970.roa
File: BC773E348B1211F1A36C52BA3311F970.roa (raw, json)
Hash identifier: koh2AU/GHM5Q1N35jfhDQ02l7GJtgPzs/XURqScXzKw=
Subject key identifier: 24:A3:DF:85:0B:D7:EC:81:6D:B6:39:8B:A9:3A:B7:7B:0D:F5:38:55
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F9D8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC773E348B1211F1A36C52BA3311F970.roa
Signing time: Wed 29 Jul 2026 06:00:01 +0000
ROA not before: Wed 29 Jul 2026 06:00:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140641
IP address blocks: 103.69.43.0/24 maxlen: 24
103.93.94.0/24 maxlen: 24
103.95.50.0/23 maxlen: 24
103.97.104.0/24 maxlen: 24
103.97.105.0/24 maxlen: 24
103.97.106.0/24 maxlen: 24
103.97.107.0/24 maxlen: 24
103.110.12.0/24 maxlen: 24
103.110.13.0/24 maxlen: 24
103.110.14.0/24 maxlen: 24
103.110.15.0/24 maxlen: 24
103.117.212.0/24 maxlen: 24
103.119.170.0/23 maxlen: 24
103.129.97.0/24 maxlen: 24
103.131.26.0/24 maxlen: 24
103.139.7.0/24 maxlen: 24
103.140.72.0/24 maxlen: 24
103.152.79.0/24 maxlen: 24
103.171.44.0/24 maxlen: 24
103.171.45.0/24 maxlen: 24
103.190.243.0/24 maxlen: 24
103.218.124.0/24 maxlen: 24
103.218.125.0/24 maxlen: 24
103.218.126.0/24 maxlen: 24
103.218.127.0/24 maxlen: 24
103.228.140.0/24 maxlen: 24
103.228.141.0/24 maxlen: 24
103.228.142.0/24 maxlen: 24
103.228.143.0/24 maxlen: 24
103.240.89.0/24 maxlen: 24
103.251.150.0/24 maxlen: 24
103.253.70.0/24 maxlen: 24
163.227.186.0/24 maxlen: 24
163.227.187.0/24 maxlen: 24
175.158.75.0/24 maxlen: 24
182.255.56.0/24 maxlen: 24
182.255.57.0/24 maxlen: 24
182.255.58.0/24 maxlen: 24
182.255.59.0/24 maxlen: 24
202.162.240.0/24 maxlen: 24
202.162.241.0/24 maxlen: 24
202.162.243.0/24 maxlen: 24
2402:61a0:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63960 (0xf9d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 29 06:00:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a6996e1-8e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:df:d2:e7:f2:08:c2:c4:d1:4d:6d:7b:18:
70:11:04:39:17:da:97:cd:46:f3:8f:1b:79:ab:9d:
61:9f:ca:f4:bf:a2:dd:91:1a:17:07:f1:c7:18:d8:
30:da:d3:b2:20:73:ec:9a:00:59:20:2f:16:60:d3:
8c:90:6a:ec:12:b6:5d:03:5c:eb:c3:1a:d2:75:6d:
2c:58:77:b1:ec:e1:39:1f:0a:9a:7e:5b:c2:c7:be:
4e:11:dd:66:89:c5:c3:44:12:49:00:ca:01:8f:4f:
1b:6a:65:d2:97:8d:d4:b2:e3:82:42:12:b3:50:35:
d6:0b:dc:f1:a2:ec:cb:20:ae:fb:ad:8d:22:52:fd:
75:d8:a7:36:17:05:b7:36:8b:8f:5b:42:83:2e:3c:
ca:66:fb:c0:60:31:7d:ee:8e:55:5e:5e:c7:f9:98:
6b:fd:34:15:a5:ad:b4:15:06:43:91:1a:ee:59:29:
16:f0:0b:a4:20:23:d9:8b:15:96:ba:fb:c5:ec:6a:
b6:75:b1:09:6f:94:e9:91:a8:53:e7:ce:1c:44:9c:
22:ad:93:fe:74:af:db:a1:20:d1:32:c9:79:70:62:
15:d8:d8:40:bb:a1:6a:52:1c:b2:b6:2c:33:8e:5e:
eb:3c:9f:9f:13:fe:f1:0e:78:5c:79:79:6e:9c:20:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A3:DF:85:0B:D7:EC:81:6D:B6:39:8B:A9:3A:B7:7B:0D:F5:38:55
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC773E348B1211F1A36C52BA3311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.43.0/24
103.93.94.0/24
103.95.50.0/23
103.97.104.0/22
103.110.12.0/22
103.117.212.0/24
103.119.170.0/23
103.129.97.0/24
103.131.26.0/24
103.139.7.0/24
103.140.72.0/24
103.152.79.0/24
103.171.44.0/23
103.190.243.0/24
103.218.124.0/22
103.228.140.0/22
103.240.89.0/24
103.251.150.0/24
103.253.70.0/24
163.227.186.0/23
175.158.75.0/24
182.255.56.0/22
202.162.240.0/23
202.162.243.0/24
IPv6:
2402:61a0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
34:01:fa:6e:3a:c4:c4:47:ca:86:27:ee:5f:78:c4:6c:20:57:
9b:d9:fa:2d:9e:a4:48:98:1b:f6:67:c2:b8:5c:df:30:5f:a9:
de:07:14:55:dd:30:8a:66:be:15:6a:e2:cd:1e:0b:51:66:5a:
d3:e4:fc:f9:17:42:c7:cd:ac:45:1a:de:36:39:0c:a2:ef:fc:
6a:c9:1d:e0:d4:fb:71:12:bf:70:c2:e4:3a:e7:01:df:a6:cd:
53:6b:1e:df:2a:de:8a:ad:c3:56:0c:00:22:af:24:83:65:58:
90:f4:43:29:5f:b7:0a:1b:f7:4d:ef:a8:ad:a3:d3:c4:bd:49:
94:f1:7d:79:da:7f:b6:5b:e0:09:e5:f7:79:8d:f7:f0:a9:f5:
bc:0a:c7:47:7e:ca:a3:6e:37:1c:54:bd:d3:df:57:61:48:26:
64:48:0a:8c:11:01:9a:68:91:09:75:c1:53:aa:63:6f:ce:83:
43:31:dd:6d:8a:59:69:89:eb:80:a1:b7:8f:70:21:48:9a:23:
79:b3:52:be:e9:f3:f9:d2:ef:62:76:52:55:2a:a6:db:91:03:
4a:37:94:78:d8:9f:18:cf:03:dc:4f:42:01:de:38:a5:a3:6b:
df:f4:77:c0:8c:01:53:ed:3d:0c:39:be:85:13:de:2e:56:ef:
e2:10:68:22
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIDAPnYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcyOTA2MDAwMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE2OTk2ZTEtOGU5ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMnV39Ln8gjCxNFNbXsYcBEEORfal81G848beaudYZ/K9L+i3ZEaFwfxxxjY
MNrTsiBz7JoAWSAvFmDTjJBq7BK2XQNc68Ma0nVtLFh3sezhOR8Kmn5bwse+ThHd
ZonFw0QSSQDKAY9PG2pl0peN1LLjgkISs1A11gvc8aLsyyCu+62NIlL9ddinNhcF
tzaLj1tCgy48ymb7wGAxfe6OVV5ex/mYa/00FaWttBUGQ5Ea7lkpFvALpCAj2YsV
lrr7xexqtnWxCW+U6ZGoU+fOHEScIq2T/nSv26Eg0TLJeXBiFdjYQLuhalIcsrYs
M45e6zyfnxP+8Q54XHl5bpwgHQMCAwEAAaOCAv8wggL7MB0GA1UdDgQWBBQko9+F
C9fsgW22OYupOrd7DfU4VTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0JDNzczRTM0
OEIxMjExRjFBMzZDNTJCQTMzMTFGOTcwLnJvYTCBvQYIKwYBBQUHAQcBAf8Ega0w
gaowgZcEAgABMIGQAwQAZ0UrAwQAZ11eAwQBZ18yAwQCZ2FoAwQCZ24MAwQAZ3XU
AwQBZ3eqAwQAZ4FhAwQAZ4MaAwQAZ4sHAwQAZ4xIAwQAZ5hPAwQBZ6ssAwQAZ77z
AwQCZ9p8AwQCZ+SMAwQAZ/BZAwQAZ/uWAwQAZ/1GAwQBo+O6AwQAr55LAwQCtv84
AwQByqLwAwQAyqLzMA4EAgACMAgDBgQkAmGgEDANBgkqhkiG9w0BAQsFAAOCAQEA
NAH6bjrExEfKhifuX3jEbCBXm9n6LZ6kSJgb9mfCuFzfMF+p3gcUVd0wima+FWri
zR4LUWZa0+T8+RdCx82sRRreNjkMou/8askd4NT7cRK/cMLkOucB36bNU2se3yre
iq3DVgwAIq8kg2VYkPRDKV+3Chv3Te+oraPTxL1JlPF9edp/tlvgCeX3eY338Kn1
vArHR37Ko243HFS9099XYUgmZEgKjBEBmmiRCXXBU6pjb86DQzHdbYpZaYnrgKG3
j3AhSJojebNSvunz+dLvYnZSVSqm25EDSjeUeNifGM8D3E9CAd44paNr3/R3wIwB
U+09DDm+hRPeLlbv4hBoIg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:36 2026 by rpki-client