Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8B4F4BE555A11EF88C38D2CC4F9AE02.roa
File: D8B4F4BE555A11EF88C38D2CC4F9AE02.roa (raw, json)
Hash identifier: FOMO/X36WHnxqczJnD49TSUmMqWcFXpRGSFIS99if0o=
Subject key identifier: 1F:37:C3:AF:AD:60:7F:18:14:04:8C:A2:3E:D6:7F:FC:FE:C8:BC:BA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F72C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8B4F4BE555A11EF88C38D2CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:48:26 +0000
ROA not before: Mon 06 Jul 2026 17:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17483
IP address blocks: 45.123.24.0/24 maxlen: 24
45.123.25.0/24 maxlen: 24
45.123.26.0/24 maxlen: 24
45.123.27.0/24 maxlen: 24
49.156.128.0/24 maxlen: 24
49.156.129.0/24 maxlen: 24
49.156.130.0/24 maxlen: 24
49.156.131.0/24 maxlen: 24
49.156.132.0/22 maxlen: 24
49.156.136.0/22 maxlen: 24
49.156.140.0/24 maxlen: 24
49.156.141.0/24 maxlen: 24
49.156.142.0/24 maxlen: 24
49.156.143.0/24 maxlen: 24
49.156.144.0/24 maxlen: 24
49.156.145.0/24 maxlen: 24
49.156.146.0/24 maxlen: 24
49.156.147.0/24 maxlen: 24
49.156.148.0/24 maxlen: 24
49.156.149.0/24 maxlen: 24
49.156.150.0/24 maxlen: 24
49.156.151.0/24 maxlen: 24
49.156.152.0/24 maxlen: 24
49.156.153.0/24 maxlen: 24
49.156.154.0/24 maxlen: 24
49.156.155.0/24 maxlen: 24
49.156.156.0/24 maxlen: 24
49.156.157.0/24 maxlen: 24
49.156.158.0/24 maxlen: 24
49.156.159.0/24 maxlen: 24
103.5.16.0/24 maxlen: 24
103.5.17.0/24 maxlen: 24
103.5.18.0/24 maxlen: 24
103.5.19.0/24 maxlen: 24
103.152.179.0/24 maxlen: 24
103.158.242.0/24 maxlen: 24
103.168.177.0/24 maxlen: 24
103.176.176.0/24 maxlen: 24
202.62.64.0/24 maxlen: 24
202.62.65.0/24 maxlen: 24
202.62.66.0/24 maxlen: 24
202.62.67.0/24 maxlen: 24
202.62.68.0/24 maxlen: 24
202.62.69.0/24 maxlen: 24
202.62.70.0/24 maxlen: 24
202.62.71.0/24 maxlen: 24
202.62.72.0/24 maxlen: 24
202.62.73.0/24 maxlen: 24
202.62.74.0/24 maxlen: 24
202.62.75.0/24 maxlen: 24
202.62.76.0/24 maxlen: 24
202.62.77.0/24 maxlen: 24
202.62.78.0/24 maxlen: 24
202.62.79.0/24 maxlen: 24
202.62.80.0/24 maxlen: 24
202.62.81.0/24 maxlen: 24
202.62.82.0/24 maxlen: 24
202.62.83.0/24 maxlen: 24
202.62.84.0/24 maxlen: 24
202.62.85.0/24 maxlen: 24
202.62.86.0/24 maxlen: 24
202.62.87.0/24 maxlen: 24
202.62.88.0/24 maxlen: 24
202.62.89.0/24 maxlen: 24
202.62.90.0/24 maxlen: 24
202.62.91.0/24 maxlen: 24
202.62.92.0/24 maxlen: 24
202.62.93.0/24 maxlen: 24
202.62.94.0/24 maxlen: 24
202.62.95.0/24 maxlen: 24
2001:df3:1d40::/48 maxlen: 48
2404:f100::/40 maxlen: 40
2404:f100:100::/40 maxlen: 40
2404:f100:200::/40 maxlen: 40
2404:f100:300::/40 maxlen: 40
2404:f100:400::/40 maxlen: 40
2404:f100:500::/40 maxlen: 40
2404:f100:e000::/40 maxlen: 40
2404:f100:e200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63276 (0xf72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bea6a-0efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:c4:70:63:2f:b5:0b:60:4c:ed:5d:71:63:
12:7e:76:c6:d1:51:57:59:ff:dc:6a:fd:18:d7:07:
48:3c:73:fb:a2:00:02:2d:9f:fe:08:4a:d4:06:93:
1e:cf:b6:6a:1c:91:66:3a:f0:b9:b3:00:fe:5f:ea:
4c:54:8f:f4:15:ae:09:2c:3d:a6:58:f8:46:48:6a:
a4:9f:09:ba:fc:25:ff:f1:91:d9:e5:9e:81:4f:31:
1a:4e:35:06:14:29:ec:c0:d6:15:b9:62:8a:aa:5a:
9c:06:11:82:5f:3c:e0:9e:d1:9d:65:3d:c2:5e:03:
3f:09:03:48:f0:d0:2f:50:b1:c1:d8:c3:69:43:71:
27:02:61:4a:52:b3:2d:da:bc:63:a4:8b:f7:2d:70:
e9:6a:99:78:59:83:39:91:65:be:01:b6:d8:af:2e:
4d:2a:a7:69:53:49:cc:6d:f9:7c:97:1d:75:92:11:
f0:6e:57:95:fa:c8:99:cc:b9:b7:0d:b0:c6:8d:d6:
79:9d:2d:9c:40:fd:82:eb:a4:2d:fc:d8:3a:d5:7b:
b3:1c:3b:cc:1d:20:60:a1:be:10:18:7e:21:3a:7e:
96:bf:96:bb:f4:c4:0c:12:7a:2b:33:26:36:fb:90:
12:e4:79:0b:5b:7e:48:ce:83:66:17:50:e4:6f:83:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:37:C3:AF:AD:60:7F:18:14:04:8C:A2:3E:D6:7F:FC:FE:C8:BC:BA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8B4F4BE555A11EF88C38D2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.123.24.0/22
49.156.128.0/19
103.5.16.0/22
103.152.179.0/24
103.158.242.0/24
103.168.177.0/24
103.176.176.0/24
202.62.64.0/19
IPv6:
2001:df3:1d40::/48
2404:f100::-2404:f100:5ff:ffff:ffff:ffff:ffff:ffff
2404:f100:e000::/40
2404:f100:e200::/40
Signature Algorithm: sha256WithRSAEncryption
72:4d:47:84:fd:1a:bc:cb:4d:9b:da:39:2e:69:5e:68:bd:f2:
97:57:50:90:f7:dc:3a:76:44:18:5a:c5:32:66:cf:fc:cd:f0:
18:30:12:ab:e3:87:83:a7:ad:fc:43:08:0c:48:f2:ea:16:0c:
e8:57:ba:7b:2e:46:85:a7:1d:b0:ac:d1:9d:97:4e:10:13:c9:
6b:02:a6:60:b3:2f:ab:ed:22:4c:7d:7b:d0:1b:33:4c:44:3d:
fc:8a:56:9e:a5:02:89:70:60:9c:7c:58:b0:88:e0:a3:b3:33:
7a:4e:ae:31:e1:ff:67:e5:0e:8d:d4:f3:02:a0:3d:25:99:ce:
21:c9:e9:59:b3:c5:63:e7:5d:09:f0:05:61:4f:6a:be:26:23:
20:6c:52:93:13:b9:c8:04:32:c9:b0:c6:93:ec:d0:68:b1:d6:
96:49:d5:1d:84:23:dc:a9:2b:13:57:bc:57:2f:a3:b0:03:61:
9b:92:4c:d1:da:5a:fb:36:e2:7a:3d:61:78:1b:f7:49:a3:96:
d8:48:ea:86:4b:9a:d0:73:56:a6:39:25:8d:6a:b6:65:8d:e1:
42:91:14:6b:dd:ad:3f:a1:2d:ab:3e:72:84:9d:b1:84:30:5e:
55:e0:bf:bc:f5:95:de:cd:b6:43:72:a6:f5:de:6e:61:11:71:
5f:76:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:06 2026 by rpki-client