Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C543C55C34BC11F1BDDF21CFBD833773.roa
File: C543C55C34BC11F1BDDF21CFBD833773.roa (raw, json)
Hash identifier: ixmDRCZdnzOSDHPntfheOs6zSU4oNdaErpU2P1drZYg=
Subject key identifier: 30:6C:F2:52:7A:AB:22:36:70:24:1D:89:BB:B5:53:68:2F:22:61:B3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F883
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C543C55C34BC11F1BDDF21CFBD833773.roa
Signing time: Wed 15 Jul 2026 06:54:41 +0000
ROA not before: Wed 15 Jul 2026 06:54:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4758
IP address blocks: 43.239.62.0/24 maxlen: 24
45.118.16.0/22 maxlen: 22
45.118.16.0/24 maxlen: 24
45.118.17.0/24 maxlen: 24
45.118.18.0/24 maxlen: 24
45.118.19.0/24 maxlen: 24
45.118.20.0/22 maxlen: 22
45.118.20.0/24 maxlen: 24
45.118.21.0/24 maxlen: 24
45.118.22.0/24 maxlen: 24
45.118.23.0/24 maxlen: 24
45.118.24.0/22 maxlen: 22
45.118.24.0/24 maxlen: 24
45.118.25.0/24 maxlen: 24
45.118.26.0/24 maxlen: 24
45.118.27.0/24 maxlen: 24
45.118.28.0/22 maxlen: 22
45.118.28.0/24 maxlen: 24
45.118.29.0/24 maxlen: 24
45.118.30.0/24 maxlen: 24
45.118.31.0/24 maxlen: 24
45.127.75.0/24 maxlen: 24
103.70.97.0/24 maxlen: 24
103.195.208.0/24 maxlen: 24
103.195.209.0/24 maxlen: 24
103.195.210.0/24 maxlen: 24
103.195.211.0/24 maxlen: 24
103.195.212.0/24 maxlen: 24
103.195.213.0/24 maxlen: 24
103.195.214.0/24 maxlen: 24
103.195.215.0/24 maxlen: 24
103.195.216.0/24 maxlen: 24
103.195.217.0/24 maxlen: 24
103.195.218.0/24 maxlen: 24
103.195.219.0/24 maxlen: 24
103.195.221.0/24 maxlen: 24
103.195.222.0/24 maxlen: 24
103.195.223.0/24 maxlen: 24
137.59.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63619 (0xf883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 15 06:54:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a572eb1-5d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:6b:5e:b6:31:52:7e:52:46:59:bf:60:52:
41:10:59:d2:32:fb:b7:d8:28:19:a4:fb:a6:e7:5a:
16:35:62:ef:34:b4:78:52:aa:94:7b:37:74:e5:b0:
d6:20:79:24:0d:99:a0:db:63:6f:5a:ef:96:00:8d:
e9:af:46:ee:a7:f9:4e:ff:f5:d5:8c:af:16:30:87:
1c:21:9d:b9:ba:26:6a:52:54:44:ae:8d:d6:7f:4f:
bf:52:3e:c0:5e:d7:7a:69:13:3c:ce:d0:f9:2d:49:
10:d7:cb:27:cd:0f:b6:e3:7a:8b:7d:d1:34:c7:57:
52:99:2b:e9:03:d2:4b:f4:9e:32:89:8f:be:ed:00:
11:18:9b:fe:fd:fa:f7:8e:cc:01:a1:79:bd:d3:e1:
d9:17:43:ae:54:6d:e9:18:c9:f1:5d:3f:da:49:85:
eb:1f:aa:71:e4:8e:d9:ec:4f:c3:f8:e8:3e:f4:51:
d5:e4:84:45:09:cd:1d:d2:2d:46:9f:ab:66:ad:cc:
bc:6e:df:c8:60:25:bb:77:45:fa:0f:ec:14:9d:61:
b7:9c:4c:95:0a:24:de:2a:22:68:8c:9f:f1:0a:28:
f7:36:0e:97:6f:11:1b:c9:42:f7:14:c8:f3:a3:09:
10:8e:eb:bf:30:7e:66:d0:be:ae:cf:f1:5c:97:cd:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6C:F2:52:7A:AB:22:36:70:24:1D:89:BB:B5:53:68:2F:22:61:B3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C543C55C34BC11F1BDDF21CFBD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.62.0/24
45.118.16.0/20
45.127.75.0/24
103.70.97.0/24
103.195.208.0-103.195.219.255
103.195.221.0-103.195.223.255
137.59.128.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:1c:10:c2:48:6b:9a:fa:03:8e:ef:7c:fe:7a:af:64:21:b7:
bb:89:90:52:9e:6b:66:d2:d4:ce:4d:65:c5:cd:a7:59:96:fd:
c0:59:a9:1f:13:0d:c3:66:4e:83:ce:9c:03:30:d9:e6:9a:85:
87:d1:92:e8:5d:81:31:06:f2:ca:45:ba:88:3a:6d:05:2f:5a:
6b:21:4a:41:b5:6f:0f:1f:89:db:fe:c5:7c:e5:27:11:23:ef:
ec:18:d0:36:41:9d:42:06:7f:a5:a0:9d:1e:9c:ce:c6:19:0b:
5f:88:54:d8:1f:91:94:a0:53:60:bd:e1:ea:d5:7a:8d:bd:aa:
8d:1c:7f:13:db:d9:2f:c4:6b:59:e7:71:63:38:32:ff:6f:ce:
0f:4e:5d:ea:23:a0:40:79:18:4d:e4:d3:0a:b0:46:7c:cd:65:
d8:25:f0:52:bc:05:87:44:1c:98:c9:97:ff:9e:fa:dd:e4:33:
ae:63:df:80:06:76:a8:b8:cf:d4:96:bf:f0:63:3f:1d:5d:9d:
32:18:a0:65:68:b5:eb:67:ee:b3:66:cd:78:0a:f9:a6:3e:e0:
ed:85:c3:48:fa:6f:bc:92:1d:f4:70:61:6e:ab:d4:b2:0e:1c:
d8:6c:c1:88:6d:6b:99:61:85:c4:f9:ad:58:90:10:cf:df:0a:
7b:67:e9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:22 2026 by rpki-client