Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9DBE7221E8411F0A85F5565C4F9AE02.roa
File: E9DBE7221E8411F0A85F5565C4F9AE02.roa (raw, json)
Hash identifier: C6mYIgyLAVLfAPvTDU1dtmaG60+y/8zc2Yhx/UQpy5o=
Subject key identifier: F9:88:D4:AF:5F:95:F8:CD:EB:7E:BC:51:35:0D:B4:09:CD:6A:15:C2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EE12
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9DBE7221E8411F0A85F5565C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:31:24 +0000
ROA not before: Mon 06 Jul 2026 16:31:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132770
IP address blocks: 43.227.20.0/22 maxlen: 24
43.228.72.0/22 maxlen: 24
43.241.24.0/22 maxlen: 24
45.119.57.0/24 maxlen: 24
45.119.58.0/24 maxlen: 24
45.119.59.0/24 maxlen: 24
45.252.72.0/22 maxlen: 24
103.59.104.0/24 maxlen: 24
103.81.36.0/22 maxlen: 24
103.93.240.0/24 maxlen: 24
103.93.241.0/24 maxlen: 24
103.93.242.0/24 maxlen: 24
103.93.243.0/24 maxlen: 24
103.94.56.0/22 maxlen: 23
103.94.57.0/24 maxlen: 24
103.94.59.0/24 maxlen: 24
103.125.72.0/23 maxlen: 24
103.126.68.0/22 maxlen: 24
103.148.121.0/24 maxlen: 24
103.178.206.0/23 maxlen: 24
103.184.86.0/24 maxlen: 24
103.184.87.0/24 maxlen: 24
103.204.36.0/22 maxlen: 24
103.211.60.0/24 maxlen: 24
103.211.61.0/24 maxlen: 24
103.211.62.0/24 maxlen: 24
103.211.63.0/24 maxlen: 24
103.221.72.0/22 maxlen: 24
103.239.84.0/22 maxlen: 24
103.241.80.0/22 maxlen: 24
103.243.112.0/22 maxlen: 24
103.249.240.0/22 maxlen: 24
103.251.208.0/22 maxlen: 24
103.254.52.0/22 maxlen: 24
150.129.128.0/22 maxlen: 24
150.129.156.0/22 maxlen: 24
163.53.200.0/22 maxlen: 24
202.136.68.0/22 maxlen: 24
2401:73e0::/32 maxlen: 32
2404:4980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60946 (0xee12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:31:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd85c-0410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:ca:07:16:11:27:51:cf:62:1a:62:f4:77:
fa:c5:62:3a:2e:15:5e:71:0e:66:9c:c5:4b:1e:24:
73:ac:31:22:6d:7b:75:eb:4e:6e:bd:a6:29:2e:84:
a1:a8:5b:73:12:f1:1b:a8:93:23:f4:d2:42:eb:80:
12:d3:62:af:16:a6:e8:02:bc:b4:52:3b:73:7f:81:
95:51:cd:3a:e6:7b:6d:e6:42:ff:17:a1:ad:86:a5:
fe:d6:a5:03:50:5b:31:24:3d:e3:3a:56:9f:2e:30:
4d:6b:c2:74:60:73:07:96:d5:a4:ec:cb:35:46:6e:
57:af:4d:34:80:d0:90:b2:c5:6d:25:6c:06:b6:1f:
1e:1e:c9:d7:a8:34:82:1b:6f:c8:b8:6f:b8:c1:35:
1d:31:e6:78:27:24:bc:ea:06:67:36:e8:ce:2b:45:
05:04:56:63:63:b3:06:18:e8:6e:8c:58:50:12:62:
de:e1:48:ee:3a:96:5a:9b:9c:82:7e:e5:b9:39:dd:
69:3b:32:2e:d2:4d:a6:1b:2c:1d:2c:28:ee:63:37:
7f:37:e9:b7:54:b5:03:7c:fe:58:32:71:46:22:44:
90:5a:9f:27:6b:9e:08:8b:ef:e4:9f:5e:57:fe:3e:
6a:8f:22:f1:45:68:80:55:db:92:cc:d1:d9:2d:9f:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:88:D4:AF:5F:95:F8:CD:EB:7E:BC:51:35:0D:B4:09:CD:6A:15:C2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9DBE7221E8411F0A85F5565C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.227.20.0/22
43.228.72.0/22
43.241.24.0/22
45.119.57.0-45.119.59.255
45.252.72.0/22
103.59.104.0/24
103.81.36.0/22
103.93.240.0/22
103.94.56.0/22
103.125.72.0/23
103.126.68.0/22
103.148.121.0/24
103.178.206.0/23
103.184.86.0/23
103.204.36.0/22
103.211.60.0/22
103.221.72.0/22
103.239.84.0/22
103.241.80.0/22
103.243.112.0/22
103.249.240.0/22
103.251.208.0/22
103.254.52.0/22
150.129.128.0/22
150.129.156.0/22
163.53.200.0/22
202.136.68.0/22
IPv6:
2401:73e0::/32
2404:4980::/32
Signature Algorithm: sha256WithRSAEncryption
b6:17:1b:48:29:90:42:ab:7d:b9:2a:ed:b0:76:7d:32:18:9c:
1c:fc:89:c6:5e:a8:ae:4c:b0:2e:59:c0:1d:73:1c:78:14:f0:
92:0d:92:30:f2:99:4b:d2:6d:35:a5:3d:10:b5:42:2e:88:11:
aa:97:bb:1a:10:ee:0e:11:5e:43:92:16:83:5e:e1:75:ef:fe:
db:c9:d4:d1:92:96:b7:97:e1:2f:aa:5f:d6:32:61:c9:0c:36:
05:c9:4a:48:5f:e9:b0:72:a7:84:48:4f:bb:b2:29:5d:f6:59:
6d:3a:99:a2:c1:ba:77:98:dc:c3:a1:a0:e8:75:f8:d6:e4:35:
0f:0f:45:e6:ef:a5:3e:2e:45:ca:36:69:d1:e1:51:fe:dd:bc:
89:93:5a:be:65:e6:e9:e8:5d:ec:1c:ee:34:d2:ee:ed:aa:fa:
00:8c:e4:c9:9b:ed:f3:59:c3:ca:b8:8a:f7:b7:a5:cc:29:2d:
bc:7f:13:28:ab:bf:8b:eb:a6:f2:a6:97:ec:ed:10:f1:44:77:
64:c3:94:0d:59:91:b8:b0:91:7c:f0:b9:39:42:2d:50:34:69:
8e:2f:7a:7e:d7:8f:c3:98:62:be:0c:56:3a:e8:c4:26:03:65:
fc:32:8a:29:e0:c0:ba:2b:df:8c:ed:36:e7:7f:46:22:6e:aa:
58:7e:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:29 2026 by rpki-client