Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2429826239C11F1AA97D542C7833773.roa
File: E2429826239C11F1AA97D542C7833773.roa (raw, json)
Hash identifier: b4Yyze0HbnN04w3M3GLxQOLk/SmsclCVQEZOeoqObUw=
Subject key identifier: 38:BC:0A:0D:01:2D:F1:F8:7B:C2:DD:94:DF:12:8F:5F:87:90:27:4C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F145
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2429826239C11F1AA97D542C7833773.roa
Signing time: Mon 06 Jul 2026 16:58:03 +0000
ROA not before: Mon 06 Jul 2026 16:58:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137127
IP address blocks: 103.55.214.0/23 maxlen: 24
103.102.28.0/22 maxlen: 24
103.103.90.0/23 maxlen: 24
103.109.136.0/24 maxlen: 24
103.109.139.0/24 maxlen: 24
103.112.121.0/24 maxlen: 24
103.124.109.0/24 maxlen: 24
103.144.64.0/23 maxlen: 24
103.147.120.0/24 maxlen: 24
103.147.121.0/24 maxlen: 24
103.148.62.0/24 maxlen: 24
103.148.63.0/24 maxlen: 24
103.167.130.0/23 maxlen: 24
103.168.248.0/23 maxlen: 24
103.170.66.0/23 maxlen: 24
103.171.200.0/23 maxlen: 24
103.172.148.0/23 maxlen: 23
103.174.34.0/23 maxlen: 24
103.183.24.0/24 maxlen: 24
103.183.25.0/24 maxlen: 24
103.190.14.0/24 maxlen: 24
103.190.15.0/24 maxlen: 24
103.220.32.0/24 maxlen: 24
103.220.34.0/24 maxlen: 24
2001:df0:82c0::/48 maxlen: 48
2001:df0:e140::/48 maxlen: 48
2001:df1:25c0::/48 maxlen: 48
2400:9820::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61765 (0xf145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:58:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bde9b-e81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:3e:f0:31:38:d5:71:fe:0f:26:55:1b:6d:
34:d8:84:72:02:b2:a1:16:24:bb:60:cb:c7:5a:c9:
16:c0:22:5b:4d:9d:10:31:23:2c:ce:77:b7:d8:71:
9a:48:58:2d:dd:08:d0:ee:2f:9c:33:94:6c:fa:a7:
83:67:c0:f6:eb:79:d1:eb:9d:c8:46:ad:8b:ab:51:
47:12:c7:79:97:45:45:6a:3e:99:49:83:0c:76:74:
b7:f0:3d:5b:5c:15:c9:f3:1b:7e:39:5c:49:e1:53:
ad:e7:64:f2:05:e5:ed:8d:cd:cd:80:58:0b:e6:66:
18:9e:72:a5:c0:37:f4:66:69:f6:bf:9e:74:3c:2c:
86:96:f9:41:f4:48:39:d8:3f:e4:fe:5b:3c:f4:6c:
73:35:d3:0f:22:b1:f2:a1:03:3b:ca:03:d2:39:b5:
69:56:a0:58:d3:e7:7e:03:51:63:5a:f7:7d:bb:78:
89:16:93:42:0e:21:bb:fa:21:d9:4f:30:8d:c6:7c:
80:a6:6d:5e:f0:27:4b:74:75:1c:90:86:08:97:d3:
3e:0e:e8:60:17:6f:54:0c:67:7d:50:70:67:8c:fb:
f5:c6:87:17:d2:05:fb:0f:5f:0a:95:a5:61:4e:e7:
87:c5:dc:d7:25:66:80:49:56:1e:8b:ce:e6:dd:d6:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BC:0A:0D:01:2D:F1:F8:7B:C2:DD:94:DF:12:8F:5F:87:90:27:4C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2429826239C11F1AA97D542C7833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.55.214.0/23
103.102.28.0/22
103.103.90.0/23
103.109.136.0/24
103.109.139.0/24
103.112.121.0/24
103.124.109.0/24
103.144.64.0/23
103.147.120.0/23
103.148.62.0/23
103.167.130.0/23
103.168.248.0/23
103.170.66.0/23
103.171.200.0/23
103.172.148.0/23
103.174.34.0/23
103.183.24.0/23
103.190.14.0/23
103.220.32.0/24
103.220.34.0/24
IPv6:
2001:df0:82c0::/48
2001:df0:e140::/48
2001:df1:25c0::/48
2400:9820::/32
Signature Algorithm: sha256WithRSAEncryption
2c:6e:1f:b4:44:0d:b1:da:97:3b:b9:c9:ff:ac:df:b7:74:69:
ca:80:b9:ce:4a:48:a7:61:79:89:06:ee:42:91:8e:6c:31:20:
85:bd:23:87:6e:2c:13:3e:84:27:52:ba:24:c9:35:af:73:59:
a2:5b:98:42:b9:2d:36:34:41:ce:90:2c:df:2f:5a:9d:44:47:
3e:73:b8:e7:94:b7:0c:97:e3:f9:13:d2:1f:e9:1f:04:6e:5a:
26:64:a8:98:a5:11:8a:76:e8:d3:90:ff:ba:de:8c:ba:6c:49:
3c:12:e0:ae:ae:d0:53:1d:c5:1b:eb:29:10:45:62:91:97:30:
be:aa:4a:86:1d:7f:8a:df:f7:56:9a:47:d9:9d:94:1f:fa:c9:
90:01:c4:aa:06:1b:44:2c:41:de:98:4d:3f:1b:65:bb:c0:49:
47:7b:a7:ca:32:31:6a:77:e8:98:ca:c4:72:89:9b:03:27:cc:
63:2e:60:17:ef:b6:b0:41:ea:ef:dc:c1:3f:96:58:10:33:fe:
6b:e9:fb:a8:69:e9:f8:7a:39:af:8f:9a:10:9e:65:e7:72:2f:
3e:61:73:15:3b:7e:03:f2:da:c1:1f:4e:d9:60:28:ce:00:f0:
9f:96:81:ad:8a:f6:1a:a8:ee:89:b7:d2:23:68:e1:bb:79:3e:
8e:b4:32:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:14:40 2026 by rpki-client