Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E40743E6FAAC11EBAB4C5D16C4F9AE02.roa
File: E40743E6FAAC11EBAB4C5D16C4F9AE02.roa (raw, json)
Hash identifier: ZJ1y4BLDnZU8cN+Oq3CSnJBj0jlBMJ7F2RpFgynOQL4=
Subject key identifier: F8:6F:CE:A6:6A:85:FD:F3:6D:99:2C:18:2B:AE:9E:0B:E8:2B:07:A5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F786
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E40743E6FAAC11EBAB4C5D16C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:51:28 +0000
ROA not before: Mon 06 Jul 2026 17:51:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55341
IP address blocks: 43.248.72.0/22 maxlen: 24
45.116.148.0/22 maxlen: 22
45.116.148.0/24 maxlen: 24
45.116.149.0/24 maxlen: 24
45.116.150.0/24 maxlen: 24
45.116.151.0/24 maxlen: 24
103.56.196.0/22 maxlen: 22
103.56.196.0/24 maxlen: 24
103.56.197.0/24 maxlen: 24
103.56.198.0/24 maxlen: 24
103.56.199.0/24 maxlen: 24
103.73.212.0/24 maxlen: 24
103.73.213.0/24 maxlen: 24
103.73.214.0/24 maxlen: 24
103.73.215.0/24 maxlen: 24
103.171.80.0/23 maxlen: 24
103.171.196.0/23 maxlen: 24
103.229.24.0/22 maxlen: 22
103.229.24.0/24 maxlen: 24
103.229.25.0/24 maxlen: 24
103.229.26.0/24 maxlen: 24
103.229.27.0/24 maxlen: 24
183.177.124.0/24 maxlen: 24
183.177.125.0/24 maxlen: 24
183.177.126.0/24 maxlen: 24
183.177.127.0/24 maxlen: 24
2001:df1:73c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63366 (0xf786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:51:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beb20-249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:78:2d:03:ff:66:b9:9f:b0:f1:2c:97:01:
4f:b9:74:25:42:cc:af:d3:34:52:cf:37:d0:0d:77:
b5:18:b8:4f:70:a4:c0:60:98:bb:75:99:67:2c:05:
68:13:5c:e9:19:72:0f:58:92:76:2d:40:0e:81:ba:
f4:f5:ff:73:99:8a:3c:26:79:cb:8a:3f:04:e0:49:
1d:df:93:77:24:db:fa:78:5f:48:44:56:6e:93:0e:
82:d4:7a:71:e1:ae:56:d9:9b:3f:1e:e1:28:66:75:
f3:48:5a:9b:a9:56:e6:b8:95:e9:d8:f3:5f:31:e1:
62:a0:7a:2e:88:10:ea:fb:95:49:7c:be:38:99:ce:
ac:b5:99:aa:e2:9c:33:9d:a0:e6:7a:7b:a2:d2:a2:
3b:77:8a:9a:bd:0e:18:29:4b:2c:9d:e3:1b:2e:31:
c5:bd:be:8c:bd:ad:02:b5:d3:72:b1:77:73:e9:5a:
09:18:b1:22:74:13:a2:28:3f:ad:e5:67:68:1e:23:
a2:60:80:d9:75:dc:d0:82:60:9a:c4:e5:15:7c:a7:
8d:f2:3b:32:9b:f1:57:35:15:06:3e:1d:f0:a9:82:
6e:3c:46:88:97:46:49:9e:42:f5:62:07:81:05:d9:
7a:62:c2:2d:72:91:b5:cd:bf:d1:3e:4a:4e:35:b7:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6F:CE:A6:6A:85:FD:F3:6D:99:2C:18:2B:AE:9E:0B:E8:2B:07:A5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E40743E6FAAC11EBAB4C5D16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.248.72.0/22
45.116.148.0/22
103.56.196.0/22
103.73.212.0/22
103.171.80.0/23
103.171.196.0/23
103.229.24.0/22
183.177.124.0/22
IPv6:
2001:df1:73c0::/48
Signature Algorithm: sha256WithRSAEncryption
58:37:e5:4e:81:08:f1:a9:ea:40:ea:d3:2e:39:8d:34:3d:b4:
a4:c3:31:84:4e:cd:cb:7f:61:06:54:db:d0:79:db:ef:c4:25:
93:ca:20:dc:6c:bc:93:bc:04:35:db:f0:a8:eb:5f:7b:fa:f1:
50:e8:2b:1a:25:99:bd:1a:9a:58:24:3f:20:08:0f:ca:b5:0c:
28:c9:97:a1:4f:05:ef:e2:31:c2:3b:9a:d7:8b:e4:4c:bc:94:
10:0e:38:d8:1e:4d:45:aa:24:96:41:6b:51:0a:df:42:d5:57:
4e:27:95:34:f1:7b:52:8f:5b:50:f5:e8:5a:f4:66:9f:c9:5c:
c2:65:4a:85:33:e7:b4:65:d7:cc:48:fb:30:0b:18:9c:3c:ff:
48:81:bb:24:e8:ff:38:ba:72:f0:fe:fb:32:21:0e:e8:c2:46:
f0:75:80:1a:c5:4c:08:78:f9:bf:85:58:99:fc:08:9a:d1:10:
03:b2:e7:f7:6d:a2:fa:87:eb:08:d1:d1:74:f5:bf:8b:29:52:
53:2f:cd:ec:3a:90:ab:f2:f3:8e:82:f4:a2:b4:3a:20:f3:58:
c7:8b:62:c1:22:4e:b7:58:6f:18:b1:cf:0d:bd:fa:23:2e:0f:
29:cb:f4:8f:55:fa:be:02:bb:25:af:dc:77:3e:97:e3:b4:ad:
be:4c:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:11 2026 by rpki-client