Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD42B126B75C11EDB5BD8751C4F9AE02.roa
File: DD42B126B75C11EDB5BD8751C4F9AE02.roa (raw, json)
Hash identifier: kCElwRMdSTFBdRvmWwrvnxczntdrztQcFjcyKHQDC2E=
Subject key identifier: BE:AE:8C:42:25:AD:5A:A2:D9:44:53:EE:87:5C:50:DC:74:DF:76:73
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E4B0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD42B126B75C11EDB5BD8751C4F9AE02.roa
Signing time: Sun 31 May 2026 16:55:52 +0000
ROA not before: Sun 31 May 2026 16:55:52 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136377
IP address blocks: 103.99.12.0/22 maxlen: 24
103.144.118.0/24 maxlen: 24
103.144.119.0/24 maxlen: 24
2405:27c0::/32 maxlen: 32
2405:27c0::/48 maxlen: 48
2405:27c0:1::/48 maxlen: 48
2405:27c0:2::/48 maxlen: 48
2405:27c0:3::/48 maxlen: 48
2405:27c0:4::/48 maxlen: 48
2405:27c0:5::/48 maxlen: 48
2405:27c0:6::/48 maxlen: 48
2405:27c0:7::/48 maxlen: 48
2405:27c0:8::/48 maxlen: 48
2405:27c0:9::/48 maxlen: 48
2405:27c0:a::/48 maxlen: 48
2405:27c0:b::/48 maxlen: 48
2405:27c0:c::/48 maxlen: 48
2405:27c0:d::/48 maxlen: 48
2405:27c0:e::/48 maxlen: 48
2405:27c0:f::/48 maxlen: 48
2405:27c0:10::/48 maxlen: 48
2405:27c0:11::/48 maxlen: 48
2405:27c0:12::/48 maxlen: 48
2405:27c0:13::/48 maxlen: 48
2405:27c0:14::/48 maxlen: 48
2405:27c0:15::/48 maxlen: 48
2405:27c0:16::/48 maxlen: 48
2405:27c0:17::/48 maxlen: 48
2405:27c0:18::/48 maxlen: 48
2405:27c0:19::/48 maxlen: 48
2405:27c0:1a::/48 maxlen: 48
2405:27c0:1b::/48 maxlen: 48
2405:27c0:1c::/48 maxlen: 48
2405:27c0:1d::/48 maxlen: 48
2405:27c0:1e::/48 maxlen: 48
2405:27c0:1f::/48 maxlen: 48
2405:27c0:20::/48 maxlen: 48
2405:27c0:21::/48 maxlen: 48
2405:27c0:22::/48 maxlen: 48
2405:27c0:23::/48 maxlen: 48
2405:27c0:24::/48 maxlen: 48
2405:27c0:25::/48 maxlen: 48
2405:27c0:26::/48 maxlen: 48
2405:27c0:27::/48 maxlen: 48
2405:27c0:28::/48 maxlen: 48
2405:27c0:29::/48 maxlen: 48
2405:27c0:2a::/48 maxlen: 48
2405:27c0:2b::/48 maxlen: 48
2405:27c0:2c::/48 maxlen: 48
2405:27c0:2d::/48 maxlen: 48
2405:27c0:2e::/48 maxlen: 48
2405:27c0:2f::/48 maxlen: 48
2405:27c0:30::/48 maxlen: 48
2405:27c0:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58544 (0xe4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:55:52 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6818-64d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:db:96:13:38:eb:13:da:ab:22:df:06:b0:
4c:ba:53:f4:12:b2:e5:1f:71:fb:97:ae:b3:a2:b7:
93:08:f1:35:cc:de:8f:af:db:4f:8e:a9:e1:34:e0:
10:bb:13:6b:98:df:17:a7:83:ed:c6:8a:d9:24:2f:
c6:32:40:30:4f:bf:2f:c3:b4:b7:a6:f3:29:3a:86:
2a:fe:90:cb:b9:bc:b7:53:35:c0:3a:70:ad:f3:34:
d5:65:4d:00:db:c5:7a:48:1e:bb:4f:43:ce:aa:96:
4e:b9:f3:65:33:42:21:7f:40:49:52:dd:09:24:f0:
10:e1:18:28:eb:f4:6f:76:3a:4d:13:20:fd:18:ff:
ae:80:cf:45:65:64:20:a6:48:45:ec:34:90:e2:fa:
de:b1:d3:46:7b:62:92:16:cd:b1:8c:16:a7:4a:01:
bc:29:2e:08:0a:e8:d1:a1:73:3e:aa:e1:f0:e2:61:
bc:b1:a6:69:6b:e3:12:f4:39:60:e9:76:e6:b9:18:
c6:58:7a:a1:b5:3e:88:82:2f:69:c5:a7:bb:c5:f0:
bb:9c:b7:de:74:ac:e7:65:74:84:95:a0:7f:b7:2a:
3b:be:73:a3:f2:1b:9f:8c:55:5d:9f:77:04:0b:86:
fe:42:fe:7b:ea:00:7b:9a:08:f3:bb:a0:e7:71:b1:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AE:8C:42:25:AD:5A:A2:D9:44:53:EE:87:5C:50:DC:74:DF:76:73
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD42B126B75C11EDB5BD8751C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.12.0/22
103.144.118.0/23
IPv6:
2405:27c0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:be:fd:28:69:6d:9a:a8:ba:92:24:ee:43:4e:85:d9:b5:d6:
34:8f:e6:c0:78:80:69:cd:1d:71:f5:4f:a7:c3:96:4c:f8:a7:
3c:63:e8:7d:d6:38:b0:3f:1a:02:56:0f:c4:6e:ef:88:1f:39:
b0:10:a2:6b:7a:ea:3e:ab:b3:e8:bd:3d:e1:e8:f6:fd:ba:06:
7e:6c:0d:21:31:1e:9f:4d:a9:12:5d:8c:20:88:45:ef:0b:b4:
24:7e:46:8c:ba:d8:67:b3:10:63:2a:4a:6a:7b:49:14:2e:37:
b4:40:fa:8d:fe:cd:b2:02:28:95:18:75:e1:c0:fd:a5:4c:6b:
1e:9f:bb:46:8a:51:0f:af:3d:9f:99:c0:32:6b:26:c5:f8:a6:
55:83:b7:f4:6e:9b:4e:d7:46:39:51:84:c4:ea:76:39:6f:ca:
14:71:0b:05:42:d6:81:5d:91:c4:54:b4:5c:36:fc:e8:e1:95:
d4:60:8c:d0:23:9c:95:1c:22:02:f7:8a:45:51:5f:79:b6:7e:
ff:c1:ff:78:a9:78:2f:54:ef:ae:c3:18:8f:e6:53:1d:fd:46:
89:d4:c6:dd:14:bc:b5:f3:ab:f9:7c:1f:55:b7:f6:cb:f4:a3:
83:98:b0:01:ff:4d:1e:69:63:b1:4a:25:4e:f8:9b:45:7c:4a:
4a:fe:3e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:57 2026 by rpki-client