Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0F9445C5E6611F1944861A6107AAC22.roa
File: D0F9445C5E6611F1944861A6107AAC22.roa (raw, json)
Hash identifier: hzLtqE+fiBH05A+0MpUugfiseLcySNerT961Q87tqyo=
Subject key identifier: 5E:27:35:8B:FC:FD:95:83:A8:8B:A6:17:27:20:E9:C1:1D:CA:9B:9C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F899
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0F9445C5E6611F1944861A6107AAC22.roa
Signing time: Wed 15 Jul 2026 11:48:25 +0000
ROA not before: Wed 15 Jul 2026 11:48:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151347
IP address blocks: 43.239.112.0/24 maxlen: 24
43.239.113.0/24 maxlen: 24
43.239.114.0/24 maxlen: 24
43.239.115.0/24 maxlen: 24
43.249.180.0/24 maxlen: 24
43.249.181.0/24 maxlen: 24
43.249.182.0/24 maxlen: 24
43.249.183.0/24 maxlen: 24
45.117.213.0/24 maxlen: 24
45.117.214.0/24 maxlen: 24
45.117.215.0/24 maxlen: 24
45.124.49.0/24 maxlen: 24
45.124.50.0/24 maxlen: 24
103.51.152.0/24 maxlen: 24
103.51.155.0/24 maxlen: 24
103.58.4.0/24 maxlen: 24
103.58.5.0/24 maxlen: 24
103.58.6.0/24 maxlen: 24
103.110.232.0/24 maxlen: 24
103.110.233.0/24 maxlen: 24
103.110.234.0/24 maxlen: 24
103.110.235.0/24 maxlen: 24
103.142.107.0/24 maxlen: 24
103.199.136.0/24 maxlen: 24
103.199.137.0/24 maxlen: 24
103.199.138.0/24 maxlen: 24
103.209.36.0/24 maxlen: 24
103.209.37.0/24 maxlen: 24
103.231.0.0/24 maxlen: 24
103.231.1.0/24 maxlen: 24
103.236.113.0/24 maxlen: 24
103.236.114.0/24 maxlen: 24
103.236.115.0/24 maxlen: 24
110.5.72.0/24 maxlen: 24
110.5.73.0/24 maxlen: 24
110.5.74.0/24 maxlen: 24
110.5.75.0/24 maxlen: 24
110.5.76.0/24 maxlen: 24
110.5.77.0/24 maxlen: 24
110.5.78.0/24 maxlen: 24
110.5.79.0/24 maxlen: 24
137.59.70.0/24 maxlen: 24
137.59.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63641 (0xf899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 15 11:48:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a577389-9602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:81:d2:c9:ab:df:96:e8:a6:09:af:0f:2b:
86:26:a9:28:52:2e:83:b6:c1:f9:ca:f5:a0:57:6d:
1a:92:34:91:5c:e2:0e:08:7d:36:00:b2:bd:53:f3:
9f:82:31:00:06:0c:52:f6:ef:75:a2:9a:72:eb:1f:
ea:88:e6:f1:44:fd:18:26:98:73:6e:b6:db:5a:25:
44:ed:67:24:23:18:e1:bb:9a:0f:41:5d:f9:aa:dd:
a3:4c:99:c3:19:2b:c1:4d:df:94:bb:62:23:de:f9:
ae:40:30:ef:de:23:0a:02:8c:de:f5:75:ae:c1:7a:
b4:8f:b6:f0:2a:9f:ef:5b:85:65:96:08:12:83:fa:
0c:a5:0c:c2:ad:f4:ca:3c:d8:93:b0:d8:81:a1:c9:
f2:f9:a0:9d:f1:75:0d:4d:50:4e:d7:cc:20:ba:d3:
27:cf:fe:ca:b0:94:22:49:7c:27:3f:4c:20:4d:94:
c9:5a:0d:5a:e1:28:1b:5d:98:7e:d9:76:63:eb:e7:
68:d3:48:9b:a0:93:23:5a:21:0a:12:b2:ea:50:bb:
6e:c2:81:23:f3:f2:fe:21:95:42:c3:87:8e:94:ed:
28:c1:61:3f:d1:98:30:73:dc:d3:6f:bb:b2:52:d9:
05:72:3d:9e:e6:97:0f:f0:67:6b:8d:e6:99:36:cb:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:27:35:8B:FC:FD:95:83:A8:8B:A6:17:27:20:E9:C1:1D:CA:9B:9C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0F9445C5E6611F1944861A6107AAC22.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.112.0/22
43.249.180.0/22
45.117.213.0-45.117.215.255
45.124.49.0-45.124.50.255
103.51.152.0/24
103.51.155.0/24
103.58.4.0-103.58.6.255
103.110.232.0/22
103.142.107.0/24
103.199.136.0-103.199.138.255
103.209.36.0/23
103.231.0.0/23
103.236.113.0-103.236.115.255
110.5.72.0/21
137.59.70.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:6a:a8:3f:3c:8c:93:f6:4b:75:c7:dd:d0:d5:63:16:3d:06:
96:96:ad:29:9f:65:cd:c6:ea:c8:85:21:e2:78:59:8c:f2:be:
b2:78:e6:11:9c:f0:f5:34:c7:8f:6e:be:b0:bf:52:ac:e0:bf:
1e:6b:23:11:f6:dd:4b:34:82:72:bf:8a:b9:25:47:b4:57:7e:
35:5b:bd:4f:d2:09:a0:67:5d:87:74:24:f5:6f:a7:31:8e:d1:
1d:80:01:46:55:22:57:12:22:0b:d3:4d:7b:2b:43:d1:ff:39:
c4:25:f3:28:15:b8:70:b0:ab:de:47:d4:8c:1e:45:ed:d9:7a:
3a:38:97:52:20:ff:a8:b2:aa:b5:1f:1a:78:3c:8e:4b:4b:d8:
f9:86:8f:5f:39:95:0e:82:83:57:79:cd:34:e2:d2:4b:f4:9d:
c5:91:65:be:e2:22:fc:b0:77:32:3f:b6:a9:c3:f7:22:ce:67:
9a:57:9a:33:2f:2b:fb:45:c1:9f:51:e4:15:d6:e9:db:48:4a:
84:68:c6:f8:34:f8:0a:84:87:db:79:1c:02:f1:4b:7b:6b:01:
cd:ee:6f:83:a9:09:8c:49:49:5a:7b:6f:62:00:d3:88:e4:73:
7a:4c:63:e7:ba:39:48:75:46:d8:30:ad:ea:4c:1f:5c:3d:c2:
10:ce:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:39 2026 by rpki-client