Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE966E42C0B311F1AC29CBEC6011F970.roa
File: CE966E42C0B311F1AC29CBEC6011F970.roa (raw, json)
Hash identifier: FiTa1UeyhDEi03lFPn/Sf35SgRomuu/POt4KEQDSgv0=
Subject key identifier: CC:66:A7:44:EC:92:5E:AD:0C:1F:0C:4C:10:3E:C4:F4:27:A8:0C:AF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FE69
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE966E42C0B311F1AC29CBEC6011F970.roa
Signing time: Mon 19 Oct 2026 06:31:44 +0000
ROA not before: Mon 19 Oct 2026 06:31:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149240
IP address blocks: 36.50.118.0/23 maxlen: 24
103.82.96.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.139.191.0/24 maxlen: 24
103.152.158.0/24 maxlen: 24
103.157.112.0/23 maxlen: 24
103.159.99.0/24 maxlen: 24
103.162.196.0/23 maxlen: 24
103.163.149.0/24 maxlen: 24
103.163.166.0/23 maxlen: 24
103.167.172.0/24 maxlen: 24
103.168.234.0/23 maxlen: 24
103.170.0.0/23 maxlen: 24
103.170.190.0/24 maxlen: 24
103.170.191.0/24 maxlen: 24
103.171.172.0/24 maxlen: 24
103.174.108.0/23 maxlen: 24
103.176.209.0/24 maxlen: 24
103.178.176.0/23 maxlen: 24
103.181.150.0/24 maxlen: 24
103.184.40.0/24 maxlen: 24
103.191.203.0/24 maxlen: 24
2001:df0:3bc0::/48 maxlen: 48
2001:df0:8640::/48 maxlen: 48
2001:df1:9c40::/48 maxlen: 48
2001:df2:c3c0::/48 maxlen: 48
2001:df3:4940::/48 maxlen: 48
2001:df3:b6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 09:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65129 (0xfe69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 19 06:31:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ad5b950-e3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:ff:0b:69:e9:ca:a3:74:de:5c:b9:c7:5c:
bb:13:6a:73:3e:fd:96:6d:fd:53:00:84:8b:b8:cd:
14:cf:45:ac:80:79:af:f3:73:02:4c:7e:ad:9d:01:
61:0d:bb:fb:f3:dd:fc:07:e0:98:f0:ef:a0:bb:59:
ea:5f:9c:a7:a1:0f:31:d7:7d:d8:c6:c4:e1:a9:e7:
28:12:bf:94:aa:5c:27:eb:dc:2e:52:7a:5f:44:71:
9f:4b:cf:b9:c9:84:b0:ce:32:a6:0d:a3:9a:e9:b2:
80:82:e7:c5:1f:e9:03:7d:65:9a:32:76:d8:28:56:
88:42:42:52:e7:4e:72:b9:a5:b7:32:09:ca:1e:0c:
c4:e3:d3:4c:ac:af:18:be:e5:d3:b2:e1:96:58:27:
77:e5:fd:82:28:8c:87:ef:e0:71:48:94:e2:d7:a4:
1a:9a:ce:8b:8b:2a:e1:7d:90:90:95:21:56:f4:25:
72:70:a5:53:bc:8d:24:65:a6:db:54:85:8e:6e:f6:
ee:90:a5:a8:0a:ed:ef:92:ce:6f:59:42:7e:b2:6c:
58:62:3f:dd:ad:87:1f:c9:7f:ef:fa:83:ff:12:52:
09:05:7b:ce:63:83:2d:64:7f:8f:5a:08:b1:cf:94:
73:7d:bc:43:4b:90:b8:1a:ea:41:e8:a7:a6:e2:20:
94:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:66:A7:44:EC:92:5E:AD:0C:1F:0C:4C:10:3E:C4:F4:27:A8:0C:AF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CE966E42C0B311F1AC29CBEC6011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.118.0/23
103.82.96.0/24
103.91.73.0/24
103.139.191.0/24
103.152.158.0/24
103.157.112.0/23
103.159.99.0/24
103.162.196.0/23
103.163.149.0/24
103.163.166.0/23
103.167.172.0/24
103.168.234.0/23
103.170.0.0/23
103.170.190.0/23
103.171.172.0/24
103.174.108.0/23
103.176.209.0/24
103.178.176.0/23
103.181.150.0/24
103.184.40.0/24
103.191.203.0/24
IPv6:
2001:df0:3bc0::/48
2001:df0:8640::/48
2001:df1:9c40::/48
2001:df2:c3c0::/48
2001:df3:4940::/48
2001:df3:b6c0::/48
Signature Algorithm: sha256WithRSAEncryption
37:67:6e:c3:74:1f:4d:36:de:ee:f9:bd:f7:1b:19:3e:f7:51:
18:ef:85:24:91:49:9b:2a:9a:7d:e2:09:b9:b0:d8:89:a8:a0:
69:6b:98:77:28:60:2a:6b:9d:85:0d:57:e2:0d:1e:75:1f:66:
1e:39:3a:0b:32:e0:88:47:8f:35:0f:9c:dc:52:e9:de:a3:98:
45:14:ff:5a:b0:0a:84:75:94:d7:55:d5:c2:71:42:e0:19:dd:
c4:28:78:2b:20:17:77:0f:af:14:4d:8f:14:7a:73:8e:36:7a:
cf:84:01:00:33:2f:1f:68:b1:f9:e5:42:f4:10:fe:f7:05:21:
55:be:64:4a:ff:2b:de:62:24:f3:17:b5:9e:ee:dc:d0:c4:53:
61:0c:42:b7:ad:d9:31:f1:1d:ef:cb:40:b0:52:f3:2a:2e:06:
69:79:e2:3c:eb:53:be:77:a8:47:01:c7:f2:7a:f7:61:f5:cc:
41:f9:09:21:ad:2b:2e:3d:86:b2:4c:06:98:42:4c:f0:ad:1c:
b4:c2:c3:9f:c1:44:37:42:eb:f9:5e:1d:f9:09:6c:17:17:77:
61:66:77:1a:01:b2:96:21:97:4b:d9:a5:64:1c:46:d4:0f:96:
c5:29:bc:de:93:ee:1f:d8:d6:43:b1:6e:f2:b1:e2:32:7e:f4:
cf:c9:b0:b5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIDAP5pMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MTAxOTA2MzE0NFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmFkNWI5NTAtZTNjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANCS/wtp6cqjdN5cucdcuxNqcz79lm39UwCEi7jNFM9FrIB5r/NzAkx+rZ0B
YQ27+/Pd/AfgmPDvoLtZ6l+cp6EPMdd92MbE4annKBK/lKpcJ+vcLlJ6X0Rxn0vP
ucmEsM4ypg2jmumygILnxR/pA31lmjJ22ChWiEJCUudOcrmltzIJyh4MxOPTTKyv
GL7l07Lhllgnd+X9giiMh+/gcUiU4tekGprOi4sq4X2QkJUhVvQlcnClU7yNJGWm
21SFjm727pClqArt75LOb1lCfrJsWGI/3a2HH8l/7/qD/xJSCQV7zmODLWR/j1oI
sc+Uc328Q0uQuBrqQeinpuIglP0CAwEAAaOCAxowggMWMB0GA1UdDgQWBBTMZqdE
7JJerQwfDEwQPsT0J6gMrzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NFOTY2RTQy
QzBCMzExRjFBQzI5Q0JFQzYwMTFGOTcwLnJvYTCB2AYIKwYBBQUHAQcBAf8Egcgw
gcUwgYQEAgABMH4DBAEkMnYDBABnUmADBABnW0kDBABni78DBABnmJ4DBAFnnXAD
BABnn2MDBAFnosQDBABno5UDBAFno6YDBABnp6wDBAFnqOoDBAFnqgADBAFnqr4D
BABnq6wDBAFnrmwDBABnsNEDBAFnsrADBABntZYDBABnuCgDBABnv8swPAQCAAIw
NgMHACABDfA7wAMHACABDfCGQAMHACABDfGcQAMHACABDfLDwAMHACABDfNJQAMH
ACABDfO2wDANBgkqhkiG9w0BAQsFAAOCAQEAN2duw3QfTTbe7vm99xsZPvdRGO+F
JJFJmyqafeIJubDYiaigaWuYdyhgKmudhQ1X4g0edR9mHjk6CzLgiEePNQ+c3FLp
3qOYRRT/WrAKhHWU11XVwnFC4BndxCh4KyAXdw+vFE2PFHpzjjZ6z4QBADMvH2ix
+eVC9BD+9wUhVb5kSv8r3mIk8xe1nu7c0MRTYQxCt63ZMfEd78tAsFLzKi4GaXni
POtTvneoRwHH8nr3YfXMQfkJIa0rLj2GskwGmEJM8K0ctMLDn8FEN0Lr+V4d+Qls
Fxd3YWZ3GgGyliGXS9mlZBxG1A+WxSm83pPuH9jWQ7Fu8rHiMn70z8mwtQ==
-----END CERTIFICATE-----
Generated at Fri Oct 23 14:11:30 2026 by rpki-client