Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6CCDCB2874911F1BC007BF63B11F970.roa
File: C6CCDCB2874911F1BC007BF63B11F970.roa (raw, json)
Hash identifier: xaxjVyefpjp/XIF6IkDE6cFfkziLJ63ITqXVXRiEHvU=
Subject key identifier: 6D:91:7D:29:B7:A2:F8:C7:75:CC:C0:DB:6D:8D:C1:9D:67:76:05:F1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FDA7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6CCDCB2874911F1BC007BF63B11F970.roa
Signing time: Tue 29 Sep 2026 11:52:55 +0000
ROA not before: Tue 29 Sep 2026 11:52:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133661
IP address blocks: 27.0.146.0/24 maxlen: 24
27.0.147.0/24 maxlen: 24
45.120.37.0/24 maxlen: 24
45.248.156.0/22 maxlen: 24
45.248.160.0/22 maxlen: 24
101.0.32.0/22 maxlen: 24
101.0.37.0/24 maxlen: 24
101.0.38.0/24 maxlen: 24
101.0.41.0/24 maxlen: 24
101.0.42.0/24 maxlen: 24
101.0.45.0/24 maxlen: 24
101.0.49.0/24 maxlen: 24
101.0.50.0/24 maxlen: 24
101.0.53.0/24 maxlen: 24
101.0.54.0/23 maxlen: 24
101.0.57.0/24 maxlen: 24
103.30.80.0/22 maxlen: 24
103.40.196.0/22 maxlen: 24
103.41.20.0/22 maxlen: 24
103.41.24.0/22 maxlen: 24
103.41.36.0/22 maxlen: 24
103.61.150.0/24 maxlen: 24
103.66.204.0/22 maxlen: 24
103.66.208.0/22 maxlen: 24
103.72.168.0/22 maxlen: 24
103.72.220.0/22 maxlen: 24
103.73.148.0/24 maxlen: 24
103.73.149.0/24 maxlen: 24
103.73.150.0/24 maxlen: 24
103.77.238.0/24 maxlen: 24
103.77.239.0/24 maxlen: 24
103.110.248.0/24 maxlen: 24
103.110.249.0/24 maxlen: 24
103.110.250.0/24 maxlen: 24
103.110.251.0/24 maxlen: 24
103.114.64.0/24 maxlen: 24
103.114.65.0/24 maxlen: 24
103.114.66.0/24 maxlen: 24
103.114.67.0/24 maxlen: 24
103.165.72.0/23 maxlen: 24
103.165.76.0/24 maxlen: 24
103.165.77.0/24 maxlen: 24
103.166.215.0/24 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.33.0/24 maxlen: 24
103.171.236.0/23 maxlen: 24
103.172.168.0/23 maxlen: 24
103.177.184.0/23 maxlen: 24
103.178.64.0/23 maxlen: 24
103.178.203.0/24 maxlen: 24
103.179.10.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.102.0/23 maxlen: 24
103.179.120.0/24 maxlen: 24
103.179.224.0/24 maxlen: 24
103.179.225.0/24 maxlen: 24
103.179.226.0/24 maxlen: 24
103.179.227.0/24 maxlen: 24
103.180.168.0/24 maxlen: 24
103.180.169.0/24 maxlen: 24
103.180.174.0/24 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.56.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.151.0/24 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.183.30.0/23 maxlen: 24
103.183.32.0/23 maxlen: 24
103.183.34.0/23 maxlen: 24
103.186.72.0/23 maxlen: 24
103.187.84.0/23 maxlen: 24
103.187.96.0/23 maxlen: 24
103.187.130.0/23 maxlen: 24
103.187.158.0/23 maxlen: 24
103.187.170.0/23 maxlen: 24
103.207.52.0/22 maxlen: 24
103.207.120.0/22 maxlen: 24
103.207.176.0/22 maxlen: 24
103.207.244.0/22 maxlen: 24
103.217.116.0/22 maxlen: 24
103.217.120.0/22 maxlen: 24
103.218.181.0/24 maxlen: 24
103.223.8.0/22 maxlen: 24
103.223.12.0/22 maxlen: 24
103.242.232.0/24 maxlen: 24
114.134.24.0/22 maxlen: 24
121.46.88.0/22 maxlen: 24
163.47.212.0/22 maxlen: 24
175.111.137.0/24 maxlen: 24
175.111.138.0/24 maxlen: 24
175.111.139.0/24 maxlen: 24
175.111.140.0/22 maxlen: 24
175.176.184.0/22 maxlen: 24
180.188.224.0/24 maxlen: 24
180.188.232.0/24 maxlen: 24
180.188.236.0/23 maxlen: 24
180.188.241.0/24 maxlen: 24
180.188.242.0/23 maxlen: 24
180.188.246.0/23 maxlen: 24
180.188.248.0/24 maxlen: 24
180.188.249.0/24 maxlen: 24
180.188.250.0/24 maxlen: 24
180.188.251.0/24 maxlen: 24
180.188.252.0/22 maxlen: 24
202.14.120.0/22 maxlen: 24
203.76.178.0/24 maxlen: 24
203.76.180.0/24 maxlen: 24
203.76.181.0/24 maxlen: 24
203.76.188.0/24 maxlen: 24
203.76.190.0/24 maxlen: 24
203.76.191.0/24 maxlen: 24
203.115.68.0/24 maxlen: 24
203.115.73.0/24 maxlen: 24
203.115.84.0/23 maxlen: 24
203.115.91.0/24 maxlen: 24
210.16.109.0/24 maxlen: 24
210.16.110.0/24 maxlen: 24
210.16.111.0/24 maxlen: 24
210.89.39.0/24 maxlen: 24
210.89.58.0/23 maxlen: 24
210.89.61.0/24 maxlen: 24
210.89.62.0/23 maxlen: 24
223.130.28.0/22 maxlen: 24
2001:df0:e400::/48 maxlen: 48
2001:df2:e200::/48 maxlen: 48
2001:df2:e600::/48 maxlen: 48
2400:7b20::/32 maxlen: 32
2401:a880::/32 maxlen: 48
2404:7c80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 11:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64935 (0xfda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 29 11:52:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6abba696-6500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:7b:69:ae:df:90:2e:80:c1:da:36:e6:a6:
47:a2:0f:be:07:e9:5b:1b:fa:52:d0:c1:c0:5e:76:
70:a5:bd:82:41:b3:f4:20:8c:9e:a8:59:82:78:df:
bf:7f:77:d7:8f:e9:09:20:1a:c7:a6:37:b9:0f:84:
ce:1d:23:65:99:b3:34:68:bd:20:0b:8c:53:b4:0c:
5d:9c:c9:54:e0:13:ec:82:da:3a:2c:6b:ee:e9:cc:
4c:1e:e6:42:8c:1c:fa:f7:d1:be:8d:1d:18:ed:60:
1f:50:f1:0a:37:e6:6e:75:fd:ac:13:bd:2c:46:c5:
63:e9:1c:f6:df:fd:e8:f0:60:ff:4c:4f:38:cd:01:
91:ab:c2:19:1d:01:e0:97:74:7f:f2:48:c5:67:6c:
1e:d1:c3:cc:00:38:de:60:cb:64:17:8e:2d:eb:1f:
9b:c6:da:31:07:81:45:5e:fc:51:4c:55:32:e1:e6:
27:00:ce:fb:f7:93:ad:b4:b7:f4:df:b0:3b:2a:6a:
7c:de:57:64:a6:10:2d:68:e4:ed:52:85:22:bd:ce:
74:21:45:64:e2:7c:3e:df:6d:a6:1b:31:cc:eb:ac:
41:e5:7d:a3:04:23:0f:0a:6e:23:91:21:06:62:d3:
18:4a:cb:13:c0:a6:75:d6:a7:f3:9a:d5:bb:b1:7f:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:7D:29:B7:A2:F8:C7:75:CC:C0:DB:6D:8D:C1:9D:67:76:05:F1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6CCDCB2874911F1BC007BF63B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.146.0/23
45.120.37.0/24
45.248.156.0-45.248.163.255
101.0.32.0/22
101.0.37.0-101.0.38.255
101.0.41.0-101.0.42.255
101.0.45.0/24
101.0.49.0-101.0.50.255
101.0.53.0-101.0.55.255
101.0.57.0/24
103.30.80.0/22
103.40.196.0/22
103.41.20.0-103.41.27.255
103.41.36.0/22
103.61.150.0/24
103.66.204.0-103.66.211.255
103.72.168.0/22
103.72.220.0/22
103.73.148.0-103.73.150.255
103.77.238.0/23
103.110.248.0/22
103.114.64.0/22
103.165.72.0/23
103.165.76.0/23
103.166.215.0/24
103.167.154.0/23
103.167.182.0/23
103.167.212.0/23
103.168.0.0/23
103.168.33.0/24
103.171.236.0/23
103.172.168.0/23
103.177.184.0/23
103.178.64.0/23
103.178.203.0/24
103.179.10.0/23
103.179.100.0/22
103.179.120.0/24
103.179.224.0/22
103.180.168.0/23
103.180.174.0/24
103.180.212.0/22
103.180.238.0/23
103.181.56.0/23
103.181.110.0/23
103.181.151.0-103.181.155.255
103.181.174.0/23
103.183.30.0-103.183.35.255
103.186.72.0/23
103.187.84.0/23
103.187.96.0/23
103.187.130.0/23
103.187.158.0/23
103.187.170.0/23
103.207.52.0/22
103.207.120.0/22
103.207.176.0/22
103.207.244.0/22
103.217.116.0-103.217.123.255
103.218.181.0/24
103.223.8.0/21
103.242.232.0/24
114.134.24.0/22
121.46.88.0/22
163.47.212.0/22
175.111.137.0-175.111.143.255
175.176.184.0/22
180.188.224.0/24
180.188.232.0/24
180.188.236.0/23
180.188.241.0-180.188.243.255
180.188.246.0-180.188.255.255
202.14.120.0/22
203.76.178.0/24
203.76.180.0/23
203.76.188.0/24
203.76.190.0/23
203.115.68.0/24
203.115.73.0/24
203.115.84.0/23
203.115.91.0/24
210.16.109.0-210.16.111.255
210.89.39.0/24
210.89.58.0/23
210.89.61.0-210.89.63.255
223.130.28.0/22
IPv6:
2001:df0:e400::/48
2001:df2:e200::/48
2001:df2:e600::/48
2400:7b20::/32
2401:a880::/32
2404:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
83:94:4a:84:d6:03:bb:a8:e8:39:87:0d:be:76:d1:e2:0e:08:
2a:f1:d3:85:4d:5d:c0:06:5f:fa:94:ad:a9:3e:47:9b:2f:58:
4e:ba:75:f3:8b:26:c4:0a:29:bc:6e:fa:c6:31:29:d1:62:fd:
5c:1f:fa:99:cb:32:a3:8f:9a:de:6a:5b:c2:5e:95:a9:99:c8:
aa:48:db:cc:b7:83:db:05:c3:43:5e:2a:d9:6b:c9:7a:7e:ab:
40:bd:9a:80:c0:4b:73:81:b8:54:e3:88:51:49:ec:8b:b8:db:
fb:96:71:7b:bc:e9:45:eb:d4:11:73:63:99:0a:c0:eb:1a:7e:
18:99:b7:aa:55:ea:c0:cc:ca:56:ea:98:dc:17:3d:b7:2d:1d:
86:60:75:70:f8:30:f4:e5:26:52:3d:79:f4:d9:52:5c:66:a0:
0e:b5:ab:c6:f7:b7:5d:66:83:38:09:6e:f7:6b:5b:01:77:f1:
03:94:a5:74:c1:62:91:2c:d9:97:99:bf:b2:cd:d3:a3:7b:63:
ef:7f:aa:97:8f:8c:cb:e0:44:d3:9e:be:a1:ed:9f:e0:81:93:
34:88:c1:9f:97:e8:59:dd:2f:3c:c0:23:cf:1f:4e:fd:a1:88:
80:0d:28:ad:9b:84:93:67:71:31:8d:33:ba:11:2b:1e:83:e0:
b3:fc:61:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:17:14 2026 by rpki-client