Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6AABD98BC6B11EFAA982820C4F9AE02.roa
File: D6AABD98BC6B11EFAA982820C4F9AE02.roa (raw, json)
Hash identifier: kYr+MDZpQBUAY+hLv0Zggn0RiQ+lENdEMogY2pmgxec=
Subject key identifier: 11:0A:80:E6:5C:98:3E:7B:C1:3D:F5:6F:41:A7:1A:BC:A5:71:C7:16
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EDD5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6AABD98BC6B11EFAA982820C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:29:16 +0000
ROA not before: Mon 06 Jul 2026 16:29:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10225
IP address blocks: 103.41.74.0/23 maxlen: 24
103.119.113.0/24 maxlen: 24
202.41.0.0/23 maxlen: 23
202.53.64.0/19 maxlen: 19
202.53.64.0/24 maxlen: 24
202.53.65.0/24 maxlen: 24
202.53.65.160/29 maxlen: 29
202.53.66.0/24 maxlen: 24
202.53.67.0/24 maxlen: 24
202.53.68.0/24 maxlen: 24
202.53.68.96/29 maxlen: 29
202.53.69.0/24 maxlen: 24
202.53.70.0/24 maxlen: 24
202.53.71.0/24 maxlen: 24
202.53.72.0/24 maxlen: 24
202.53.73.0/24 maxlen: 24
202.53.74.0/24 maxlen: 24
202.53.75.0/24 maxlen: 24
202.53.76.0/24 maxlen: 24
202.53.77.0/24 maxlen: 24
202.53.78.0/24 maxlen: 24
202.53.79.0/24 maxlen: 24
202.53.79.0/25 maxlen: 25
202.53.79.0/29 maxlen: 29
202.53.79.32/27 maxlen: 27
202.53.79.64/27 maxlen: 27
202.53.79.128/27 maxlen: 27
202.53.79.240/28 maxlen: 28
202.53.80.0/24 maxlen: 24
202.53.81.0/24 maxlen: 24
202.53.82.0/24 maxlen: 24
202.53.83.0/24 maxlen: 24
202.53.84.0/24 maxlen: 24
202.53.85.0/24 maxlen: 24
202.53.86.0/24 maxlen: 24
202.53.87.0/24 maxlen: 24
202.53.88.0/24 maxlen: 24
202.53.89.0/24 maxlen: 24
202.53.90.0/24 maxlen: 24
202.53.91.0/24 maxlen: 24
202.53.92.0/24 maxlen: 24
202.53.93.0/24 maxlen: 24
202.53.94.0/24 maxlen: 24
202.53.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60885 (0xedd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:29:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd7dc-80ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:50:c0:33:76:e9:6f:26:9a:76:75:d6:46:f4:
4d:78:63:b8:e6:3e:57:6f:b6:a7:28:4d:fd:1b:64:
48:37:c7:58:82:2a:2a:85:01:94:a0:ce:5a:8f:dc:
e4:d0:aa:e0:e4:9c:5b:13:a7:61:2b:48:09:3f:f6:
3e:48:8a:39:d9:e6:17:bd:89:42:f9:00:f5:20:aa:
81:80:78:ae:a1:0d:24:6e:4c:65:eb:bd:9e:29:6e:
d9:a5:4b:db:5f:7b:a1:34:f4:34:18:a9:fd:61:fa:
9e:28:3b:dd:46:59:20:e6:67:ce:ec:a4:60:94:e8:
4b:e6:1e:24:36:e0:d3:f0:39:73:97:bf:b7:ef:33:
ff:e4:8e:e4:5b:8d:94:2f:13:ac:0c:34:d2:f3:13:
63:1f:cf:54:e4:5b:ce:6d:fc:13:a5:f9:57:0d:d9:
9e:e1:65:e2:06:d6:d6:7c:0e:2d:a4:c3:78:bb:7a:
ef:dc:fa:4b:76:48:eb:07:70:57:79:a0:a9:de:a2:
38:7d:b8:74:d0:96:86:0e:bf:b6:46:50:76:fb:c9:
db:4a:27:7d:2b:1b:5d:b3:a5:5a:1a:68:df:e4:a2:
0e:56:b0:55:17:a0:c8:06:18:a4:27:48:35:06:56:
53:85:6f:16:29:8b:63:31:8e:3c:07:5c:49:78:53:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:80:E6:5C:98:3E:7B:C1:3D:F5:6F:41:A7:1A:BC:A5:71:C7:16
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D6AABD98BC6B11EFAA982820C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.41.74.0/23
103.119.113.0/24
202.41.0.0/23
202.53.64.0/19
Signature Algorithm: sha256WithRSAEncryption
77:d0:db:4a:f8:23:f4:95:e0:f6:ae:c2:3d:17:fa:fc:32:4f:
52:aa:2c:d5:21:86:64:fc:c2:7a:7a:75:22:32:fd:eb:3b:72:
0d:f4:7b:1f:82:20:34:2b:ef:ad:39:dc:fa:3b:2a:05:ce:58:
6e:d1:5d:43:8a:e3:a4:fb:e5:dd:74:45:10:c7:b1:d5:52:f1:
cb:c6:01:4f:e7:a1:31:5b:72:f0:92:a9:e1:95:8a:73:e6:3c:
e1:3d:c8:a6:2f:9a:8b:b0:56:fb:5a:87:e4:a8:55:d7:1a:29:
04:12:ee:80:fe:2f:02:db:64:b7:99:3a:98:20:8a:13:48:33:
44:b1:8f:0f:8c:f6:6d:18:5b:72:fc:33:7d:68:75:32:7f:20:
55:15:34:2e:e0:2c:85:cf:6d:49:a9:91:e4:b3:26:37:28:eb:
96:70:82:e9:80:b1:13:27:de:ce:9f:c4:03:46:00:f2:e1:cb:
09:1d:8e:25:a1:f1:57:9c:7b:c1:6f:e1:1d:cf:f5:03:23:91:
00:01:6b:59:c5:c3:69:94:e5:49:84:f7:36:e9:58:66:28:c7:
9d:42:a1:d8:11:61:86:0a:4e:c5:a4:ab:a7:eb:e4:91:40:63:
a3:75:bb:43:da:4b:e6:d0:1c:82:d0:2b:97:20:ad:b4:28:44:
8c:1a:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:56:46 2026 by rpki-client