Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0F9445C5E6611F1944861A6107AAC22.roa
File: D0F9445C5E6611F1944861A6107AAC22.roa (raw, json)
Hash identifier: XLQHAsFbfNTwg/1ML1Q5w53c8cuA3ip7+/03o0LAvYk=
Subject key identifier: 83:96:F1:EA:17:4C:9C:F6:F2:32:4C:97:63:D9:D5:6A:8B:8F:0A:47
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FB6C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0F9445C5E6611F1944861A6107AAC22.roa
Signing time: Mon 31 Aug 2026 10:12:30 +0000
ROA not before: Mon 31 Aug 2026 10:12:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151347
IP address blocks: 43.239.112.0/24 maxlen: 24
43.239.113.0/24 maxlen: 24
43.239.114.0/24 maxlen: 24
43.239.115.0/24 maxlen: 24
43.249.180.0/24 maxlen: 24
43.249.181.0/24 maxlen: 24
43.249.182.0/24 maxlen: 24
43.249.183.0/24 maxlen: 24
45.117.213.0/24 maxlen: 24
45.117.214.0/24 maxlen: 24
45.117.215.0/24 maxlen: 24
45.124.49.0/24 maxlen: 24
45.124.50.0/24 maxlen: 24
103.51.152.0/24 maxlen: 24
103.51.155.0/24 maxlen: 24
103.58.4.0/24 maxlen: 24
103.58.5.0/24 maxlen: 24
103.58.6.0/24 maxlen: 24
103.110.232.0/24 maxlen: 24
103.110.233.0/24 maxlen: 24
103.110.234.0/24 maxlen: 24
103.110.235.0/24 maxlen: 24
103.142.107.0/24 maxlen: 24
103.199.131.0/24 maxlen: 24
103.199.136.0/24 maxlen: 24
103.199.137.0/24 maxlen: 24
103.199.138.0/24 maxlen: 24
103.209.36.0/24 maxlen: 24
103.209.37.0/24 maxlen: 24
103.231.0.0/24 maxlen: 24
103.231.1.0/24 maxlen: 24
103.236.113.0/24 maxlen: 24
103.236.114.0/24 maxlen: 24
103.236.115.0/24 maxlen: 24
110.5.72.0/24 maxlen: 24
110.5.73.0/24 maxlen: 24
110.5.74.0/24 maxlen: 24
110.5.75.0/24 maxlen: 24
110.5.76.0/24 maxlen: 24
110.5.77.0/24 maxlen: 24
110.5.78.0/24 maxlen: 24
110.5.79.0/24 maxlen: 24
137.59.70.0/24 maxlen: 24
137.59.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64364 (0xfb6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 31 10:12:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a95538e-b611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:94:16:5b:47:18:ee:11:d0:90:82:1d:be:be:
92:0a:55:76:c9:7b:36:e4:7f:4c:ab:77:51:1a:40:
92:a9:d1:06:b6:14:77:a6:e1:7e:70:de:6a:f0:50:
3f:0c:dd:39:c1:68:1e:db:fe:7c:bb:60:b3:74:f8:
9d:31:3c:e0:e7:41:e2:d9:8d:78:f8:96:1b:f1:58:
af:33:73:88:ed:b2:74:27:52:f4:24:b6:b8:92:2a:
d3:71:d5:c8:23:52:64:42:8a:71:fb:2c:68:b1:95:
b9:b2:2c:58:60:6a:8b:e3:11:46:6e:4c:04:b0:d2:
a9:c5:db:f5:aa:07:20:dd:6d:9c:2f:56:56:16:57:
20:8e:18:8d:a8:c3:d5:9d:81:20:13:a4:d9:7a:ba:
1a:d1:e4:03:73:dd:6f:18:f3:56:c3:d2:e8:8a:67:
3d:fc:aa:81:fc:7f:c7:6b:ad:9c:c6:d2:1d:c0:7e:
5f:56:f9:18:de:eb:d6:cf:2c:1c:c4:d5:e9:09:29:
4c:fa:91:4f:84:3f:d9:19:e4:c8:3e:b4:e9:22:4e:
e8:4e:7c:9a:13:b5:6b:9a:b5:20:a4:01:49:47:b4:
14:3e:aa:85:a3:47:ec:0e:cc:f1:c1:cc:3c:02:5b:
bb:4c:71:cc:4a:fd:9d:66:ca:d2:ad:82:ea:de:94:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:96:F1:EA:17:4C:9C:F6:F2:32:4C:97:63:D9:D5:6A:8B:8F:0A:47
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0F9445C5E6611F1944861A6107AAC22.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.112.0/22
43.249.180.0/22
45.117.213.0-45.117.215.255
45.124.49.0-45.124.50.255
103.51.152.0/24
103.51.155.0/24
103.58.4.0-103.58.6.255
103.110.232.0/22
103.142.107.0/24
103.199.131.0/24
103.199.136.0-103.199.138.255
103.209.36.0/23
103.231.0.0/23
103.236.113.0-103.236.115.255
110.5.72.0/21
137.59.70.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:ab:0d:f4:cf:58:4e:cc:1d:09:5b:d5:dd:18:bc:da:19:5e:
96:d9:6e:e7:53:c8:c4:76:ab:51:31:67:7a:1c:38:a6:13:55:
ed:99:c6:c7:85:54:60:14:0c:2f:88:cb:a2:e0:b1:cb:94:4b:
5f:e1:1e:47:77:c5:b3:d2:22:d6:ae:5a:fb:5a:ec:7c:cd:0d:
2a:7f:b4:b6:7d:e5:f1:ab:94:74:6d:36:b1:77:55:6c:17:b3:
fb:d0:2e:b5:66:d5:9c:74:62:ca:b1:ea:1a:40:1f:f4:6a:57:
da:9c:2e:3e:c7:6a:41:f1:2f:5e:49:cb:42:25:54:d4:84:d9:
fe:50:4b:35:c2:9d:e5:9e:36:83:29:8b:a8:fe:5b:c0:b1:c5:
bc:28:44:9a:3c:e6:2e:bd:a7:7c:e0:d6:50:56:6c:6e:0e:12:
c4:22:45:bd:bb:17:9f:47:b8:3a:ee:ea:c3:43:c4:12:02:ba:
d4:84:10:88:c5:42:50:18:ac:fa:b0:ea:30:d6:ee:48:ad:49:
bb:1b:c6:dd:13:fa:33:bc:f0:44:49:86:dc:1f:0e:7e:bc:e3:
f7:c2:12:2c:cd:b0:85:f8:a2:bc:6c:cd:6f:40:01:ea:2d:a7:
e8:28:f9:a0:89:10:8b:d9:1e:1d:ef:2f:e5:89:cf:e6:13:81:
0b:e4:8a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:41:41 2026 by rpki-client