Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEA64F745F5F11F1A21701A68E47A888.roa
File: DEA64F745F5F11F1A21701A68E47A888.roa (raw, json)
Hash identifier: FOi8dJQZoOeOdmmzZbhW+gev9LWJ89MsqVrCZTTj3jM=
Subject key identifier: CF:16:DE:8C:17:21:D6:81:A4:70:45:8E:FE:B4:F6:D6:5D:47:2E:00
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EC11
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEA64F745F5F11F1A21701A68E47A888.roa
Signing time: Wed 03 Jun 2026 15:21:19 +0000
ROA not before: Wed 03 Jun 2026 15:21:19 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 138296
IP address blocks: 27.0.148.0/22 maxlen: 24
103.2.190.0/23 maxlen: 24
103.31.140.0/23 maxlen: 24
103.31.142.0/23 maxlen: 24
103.31.220.0/23 maxlen: 24
103.41.32.0/22 maxlen: 24
103.68.142.0/24 maxlen: 24
103.68.143.0/24 maxlen: 24
103.93.192.0/22 maxlen: 24
103.111.70.0/24 maxlen: 24
103.115.154.0/23 maxlen: 24
103.119.172.0/23 maxlen: 24
103.123.154.0/23 maxlen: 24
103.123.224.0/22 maxlen: 24
103.124.22.0/23 maxlen: 24
103.124.122.0/23 maxlen: 24
103.127.116.0/23 maxlen: 24
103.127.252.0/24 maxlen: 24
103.132.100.0/23 maxlen: 24
103.133.116.0/24 maxlen: 24
103.134.4.0/22 maxlen: 24
103.142.106.0/24 maxlen: 24
103.143.8.0/23 maxlen: 23
103.143.8.0/24 maxlen: 24
103.143.9.0/24 maxlen: 24
103.157.178.0/23 maxlen: 24
103.157.222.0/23 maxlen: 24
103.158.48.0/23 maxlen: 24
103.163.190.0/24 maxlen: 24
103.163.191.0/24 maxlen: 24
103.167.176.0/23 maxlen: 24
103.171.51.0/24 maxlen: 24
103.171.210.0/23 maxlen: 24
103.172.85.0/24 maxlen: 24
103.172.86.0/23 maxlen: 24
103.172.156.0/23 maxlen: 24
103.173.120.0/23 maxlen: 24
103.173.177.0/24 maxlen: 24
103.173.205.0/24 maxlen: 24
103.173.244.0/24 maxlen: 24
103.173.245.0/24 maxlen: 24
103.174.244.0/23 maxlen: 24
103.175.60.0/23 maxlen: 24
103.177.180.0/24 maxlen: 24
103.179.46.0/23 maxlen: 24
103.179.232.0/24 maxlen: 24
103.179.236.0/23 maxlen: 24
103.181.54.0/23 maxlen: 24
103.181.209.0/24 maxlen: 24
103.190.212.0/24 maxlen: 24
103.190.213.0/24 maxlen: 24
103.195.80.0/23 maxlen: 24
103.204.132.0/22 maxlen: 24
103.207.248.0/22 maxlen: 24
103.212.172.0/23 maxlen: 24
103.215.184.0/23 maxlen: 24
103.217.138.0/23 maxlen: 24
103.218.106.0/23 maxlen: 24
103.218.180.0/23 maxlen: 24
103.218.184.0/23 maxlen: 24
103.220.232.0/23 maxlen: 24
103.225.30.0/23 maxlen: 24
103.225.116.0/23 maxlen: 24
103.227.104.0/23 maxlen: 24
103.228.72.0/23 maxlen: 24
103.229.90.0/23 maxlen: 24
103.244.94.0/23 maxlen: 24
110.44.10.0/24 maxlen: 24
110.44.11.0/24 maxlen: 24
2001:df2:380::/48 maxlen: 48
2400:4fe0::/32 maxlen: 32
2404:58c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60433 (0xec11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 3 15:21:19 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a20466f-c0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:08:2b:08:a6:e9:9a:54:d7:4f:4b:e3:60:
f2:a2:54:75:5f:08:a2:47:d0:9d:e2:eb:1d:10:e6:
1d:46:a9:5f:d7:44:23:71:d3:dd:19:be:a8:0a:1d:
b3:d4:bc:e6:0e:87:35:ff:a9:12:77:2c:77:b5:f9:
e0:0c:57:dc:d8:72:c6:b2:02:e5:81:f8:ec:88:8b:
83:86:a2:e6:52:4c:28:7e:36:41:65:6e:77:d3:af:
cd:3d:94:c0:1f:bd:4b:16:f4:8e:a6:eb:08:9e:d5:
51:26:ec:5c:db:46:52:b1:5e:0f:92:4f:f7:c8:45:
7d:ac:79:f6:ab:17:c3:29:d1:5c:ab:a8:52:a5:f6:
b1:08:11:a9:7c:4d:3e:a6:8c:1c:67:81:70:c2:56:
00:ac:bc:a5:36:d3:63:68:96:37:46:45:51:96:cf:
3a:d3:c2:58:17:a8:29:71:12:49:13:4e:b0:ff:4b:
04:64:f1:be:97:f1:1d:5c:a3:7d:99:61:b8:3c:50:
49:9d:62:50:d3:61:2f:b1:c9:b8:69:19:5c:00:c8:
68:ed:d1:be:09:72:05:61:89:aa:d1:c4:ad:0e:03:
e2:81:71:55:2f:e2:07:9a:21:79:fa:10:42:d8:6e:
bb:13:a7:db:da:dd:c8:fa:a2:3a:ea:2f:4a:0e:26:
ff:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:16:DE:8C:17:21:D6:81:A4:70:45:8E:FE:B4:F6:D6:5D:47:2E:00
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEA64F745F5F11F1A21701A68E47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.148.0/22
103.2.190.0/23
103.31.140.0/22
103.31.220.0/23
103.41.32.0/22
103.68.142.0/23
103.93.192.0/22
103.111.70.0/24
103.115.154.0/23
103.119.172.0/23
103.123.154.0/23
103.123.224.0/22
103.124.22.0/23
103.124.122.0/23
103.127.116.0/23
103.127.252.0/24
103.132.100.0/23
103.133.116.0/24
103.134.4.0/22
103.142.106.0/24
103.143.8.0/23
103.157.178.0/23
103.157.222.0/23
103.158.48.0/23
103.163.190.0/23
103.167.176.0/23
103.171.51.0/24
103.171.210.0/23
103.172.85.0-103.172.87.255
103.172.156.0/23
103.173.120.0/23
103.173.177.0/24
103.173.205.0/24
103.173.244.0/23
103.174.244.0/23
103.175.60.0/23
103.177.180.0/24
103.179.46.0/23
103.179.232.0/24
103.179.236.0/23
103.181.54.0/23
103.181.209.0/24
103.190.212.0/23
103.195.80.0/23
103.204.132.0/22
103.207.248.0/22
103.212.172.0/23
103.215.184.0/23
103.217.138.0/23
103.218.106.0/23
103.218.180.0/23
103.218.184.0/23
103.220.232.0/23
103.225.30.0/23
103.225.116.0/23
103.227.104.0/23
103.228.72.0/23
103.229.90.0/23
103.244.94.0/23
110.44.10.0/23
IPv6:
2001:df2:380::/48
2400:4fe0::/32
2404:58c0::/48
Signature Algorithm: sha256WithRSAEncryption
26:89:20:c4:a4:29:3b:69:3e:d3:25:c4:2a:99:5f:d8:72:c6:
df:92:da:89:f3:f4:bd:8c:99:bd:61:3a:93:0f:18:8c:53:83:
7d:3c:f1:87:0f:5c:7c:31:c0:a1:cb:f9:39:61:60:10:a0:f9:
31:a9:c6:b2:b7:2e:29:74:5b:4b:a1:55:f1:9d:9b:26:31:3a:
41:f3:3d:51:9e:cd:08:65:11:b8:02:8c:68:73:ba:ec:67:f2:
90:8c:2f:c3:ee:87:aa:40:d8:64:7d:40:0f:b0:f6:8e:a9:c4:
db:ce:e5:4a:53:62:92:29:f2:d8:f2:69:52:5c:a8:19:fa:e8:
34:fa:e9:b2:c5:ff:30:6a:e0:d0:03:b7:70:e5:af:b9:89:dc:
88:4e:da:df:e0:56:f0:cf:ac:61:3f:78:e7:5e:55:91:35:c3:
1e:89:dd:3e:c0:96:bc:f4:18:02:10:77:4e:1c:53:fa:18:60:
bf:b5:e4:ac:bf:7a:f6:78:14:5e:21:46:53:5d:8b:d3:6f:c5:
7e:2d:53:75:8c:35:15:ce:75:6d:12:8c:12:f8:0f:31:6e:27:
aa:4f:f9:1a:ad:7b:e3:76:e9:5c:ba:d7:8e:10:89:ee:d1:9b:
a5:80:c3:e8:20:d9:8c:a7:94:20:be:bc:97:ca:a4:67:b2:df:
6d:61:b3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:27 2026 by rpki-client