Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA9E0DD4B57911F0834B901BC4F9AE02.roa
File: EA9E0DD4B57911F0834B901BC4F9AE02.roa (raw, json)
Hash identifier: eK+gSdj4k8myrm9+AdWeTMBgwW6ivVyJCQS7GxZ3nq4=
Subject key identifier: 8E:3C:61:EF:31:38:33:68:61:1D:17:F9:CD:3C:62:09:F1:75:7A:41
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB0A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA9E0DD4B57911F0834B901BC4F9AE02.roa
Signing time: Sun 31 May 2026 17:48:58 +0000
ROA not before: Sun 31 May 2026 17:48:58 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 17665
IP address blocks: 36.255.88.0/22 maxlen: 24
43.230.40.0/22 maxlen: 24
45.117.72.0/22 maxlen: 24
45.118.104.0/22 maxlen: 24
59.152.120.0/22 maxlen: 24
103.27.48.0/22 maxlen: 24
103.38.68.0/23 maxlen: 24
103.38.128.0/22 maxlen: 24
103.57.140.0/22 maxlen: 24
103.58.152.0/22 maxlen: 24
103.59.204.0/22 maxlen: 24
103.86.68.0/24 maxlen: 24
103.86.69.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.92.112.0/24 maxlen: 24
103.92.113.0/24 maxlen: 24
103.92.114.0/24 maxlen: 24
103.99.196.0/23 maxlen: 24
103.99.198.0/23 maxlen: 24
103.135.64.0/24 maxlen: 24
103.135.65.0/24 maxlen: 24
103.135.200.0/22 maxlen: 24
103.136.172.0/22 maxlen: 24
103.142.114.0/23 maxlen: 24
103.144.188.0/23 maxlen: 24
103.147.1.0/24 maxlen: 24
103.152.38.0/23 maxlen: 24
103.157.162.0/24 maxlen: 24
103.157.163.0/24 maxlen: 24
103.158.170.0/23 maxlen: 24
103.159.98.0/24 maxlen: 24
103.159.212.0/23 maxlen: 24
103.161.40.0/23 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.168.177.0/24 maxlen: 24
103.168.232.0/23 maxlen: 24
103.171.9.0/24 maxlen: 24
103.171.208.0/24 maxlen: 24
103.175.30.0/24 maxlen: 24
103.175.31.0/24 maxlen: 24
103.176.176.0/24 maxlen: 24
103.176.194.0/23 maxlen: 24
103.177.174.0/23 maxlen: 24
103.178.74.0/24 maxlen: 24
103.178.168.0/23 maxlen: 24
103.179.122.0/24 maxlen: 24
103.182.130.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.186.121.0/24 maxlen: 24
103.186.176.0/24 maxlen: 24
103.199.192.0/22 maxlen: 24
103.203.36.0/22 maxlen: 24
103.206.8.0/24 maxlen: 24
103.206.9.0/24 maxlen: 24
103.206.10.0/24 maxlen: 24
103.206.11.0/24 maxlen: 24
103.209.68.0/22 maxlen: 22
103.209.68.0/24 maxlen: 24
103.209.69.0/24 maxlen: 24
103.209.70.0/24 maxlen: 24
103.209.71.0/24 maxlen: 24
103.215.164.0/22 maxlen: 24
103.245.103.0/24 maxlen: 24
111.223.24.0/22 maxlen: 24
157.119.44.0/22 maxlen: 24
162.12.246.0/23 maxlen: 24
202.148.60.0/22 maxlen: 24
203.189.248.0/22 maxlen: 24
203.192.192.0/20 maxlen: 24
203.192.208.0/22 maxlen: 24
203.192.212.0/24 maxlen: 24
203.192.213.0/24 maxlen: 24
203.192.214.0/24 maxlen: 24
203.192.215.0/24 maxlen: 24
203.192.216.0/24 maxlen: 24
203.192.217.0/24 maxlen: 24
203.192.218.0/24 maxlen: 24
203.192.219.0/24 maxlen: 24
203.192.220.0/22 maxlen: 24
203.192.224.0/23 maxlen: 24
203.192.226.0/24 maxlen: 24
203.192.227.0/24 maxlen: 24
203.192.228.0/22 maxlen: 24
203.192.232.0/22 maxlen: 24
203.192.236.0/24 maxlen: 24
203.192.237.0/24 maxlen: 24
203.192.238.0/23 maxlen: 24
203.192.240.0/20 maxlen: 20
203.192.240.0/24 maxlen: 24
203.192.241.0/24 maxlen: 24
203.192.242.0/24 maxlen: 24
203.192.243.0/24 maxlen: 24
203.192.244.0/24 maxlen: 24
203.192.245.0/24 maxlen: 24
203.192.246.0/24 maxlen: 24
203.192.247.0/24 maxlen: 24
203.192.248.0/24 maxlen: 24
203.192.249.0/24 maxlen: 24
203.192.250.0/24 maxlen: 24
203.192.251.0/24 maxlen: 24
203.192.252.0/24 maxlen: 24
203.192.253.0/24 maxlen: 24
203.192.254.0/24 maxlen: 24
203.192.255.0/24 maxlen: 24
203.194.96.0/24 maxlen: 24
203.194.97.0/24 maxlen: 24
203.194.98.0/24 maxlen: 24
203.194.99.0/24 maxlen: 24
203.194.100.0/24 maxlen: 24
203.194.101.0/24 maxlen: 24
203.194.102.0/24 maxlen: 24
203.194.103.0/24 maxlen: 24
203.194.104.0/24 maxlen: 24
203.194.105.0/24 maxlen: 24
203.194.106.0/24 maxlen: 24
203.194.107.0/24 maxlen: 24
203.194.108.0/24 maxlen: 24
203.194.109.0/24 maxlen: 24
203.194.110.0/24 maxlen: 24
203.194.111.0/24 maxlen: 24
2001:df1:9980::/48 maxlen: 48
2001:df1:9980:1::/64 maxlen: 64
2001:df1:9980:2::/64 maxlen: 64
2001:df1:9980:3::/64 maxlen: 64
2001:df1:9980:4::/64 maxlen: 64
2001:df1:9980:5::/64 maxlen: 64
2001:df2:4c0::/48 maxlen: 48
2404:ba00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 08:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60170 (0xeb0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:48:58 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c748a-5de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:90:88:ff:28:e4:12:a8:b6:5d:12:fd:c6:87:
19:44:28:d9:b2:e8:d1:04:fc:7d:8b:b1:36:4d:e5:
78:61:b0:b6:63:2a:32:5f:b5:d5:de:22:15:6a:b8:
73:7f:b8:8d:3e:8a:5e:2f:38:6c:3d:f9:4d:e7:3e:
ee:d2:31:a9:55:05:13:7d:63:35:b9:98:36:1e:5a:
8d:09:f5:54:76:7f:01:cd:3d:2e:67:1e:79:c1:76:
5a:80:72:84:c6:8b:bf:21:56:87:26:63:37:16:f3:
6c:41:7a:6b:f1:50:e7:36:cf:f6:a8:40:fa:8b:69:
66:c8:02:88:9e:c5:c1:23:90:83:b5:53:25:6b:05:
f3:eb:2b:44:e2:f4:e9:41:2c:5c:7c:5c:0b:94:87:
ec:0b:3b:7c:28:37:48:d2:20:04:1c:0b:cb:53:3d:
9e:ba:3b:91:36:8f:cf:63:71:7c:74:66:b9:00:5c:
00:c2:7e:80:34:7e:bc:a9:1f:d5:ab:5e:67:8d:76:
21:bf:ce:46:0c:16:30:fa:17:fd:6e:8f:cf:13:c7:
0f:5b:bf:19:c7:0a:c6:c9:86:cf:e8:e4:5f:e3:1d:
01:7a:16:c6:e4:55:f6:fa:0e:94:e4:e3:66:45:f3:
22:e3:21:bc:4f:4e:9e:ac:8c:84:52:c0:2a:ea:d9:
79:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3C:61:EF:31:38:33:68:61:1D:17:F9:CD:3C:62:09:F1:75:7A:41
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EA9E0DD4B57911F0834B901BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.88.0/22
43.230.40.0/22
45.117.72.0/22
45.118.104.0/22
59.152.120.0/22
103.27.48.0/22
103.38.68.0/23
103.38.128.0/22
103.57.140.0/22
103.58.152.0/22
103.59.204.0/22
103.86.68.0/23
103.88.57.0-103.88.59.255
103.92.112.0-103.92.114.255
103.99.196.0/22
103.135.64.0/23
103.135.200.0/22
103.136.172.0/22
103.142.114.0/23
103.144.188.0/23
103.147.1.0/24
103.152.38.0/23
103.157.162.0/23
103.158.170.0/23
103.159.98.0/24
103.159.212.0/23
103.161.40.0/23
103.164.46.0/23
103.165.28.0/23
103.168.177.0/24
103.168.232.0/23
103.171.9.0/24
103.171.208.0/24
103.175.30.0/23
103.176.176.0/24
103.176.194.0/23
103.177.174.0/23
103.178.74.0/24
103.178.168.0/23
103.179.122.0/24
103.182.130.0/23
103.184.40.0/23
103.186.121.0/24
103.186.176.0/24
103.199.192.0/22
103.203.36.0/22
103.206.8.0/22
103.209.68.0/22
103.215.164.0/22
103.245.103.0/24
111.223.24.0/22
157.119.44.0/22
162.12.246.0/23
202.148.60.0/22
203.189.248.0/22
203.192.192.0/18
203.194.96.0/20
IPv6:
2001:df1:9980::/48
2001:df2:4c0::/48
2404:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
0f:e1:4f:9b:1d:11:fc:32:4b:36:85:70:f4:1e:38:b3:ff:ac:
cf:f1:72:65:ba:00:b1:97:50:77:e7:c3:c5:b3:60:d3:3b:2f:
d3:62:5c:0d:be:dd:b0:35:0a:0e:55:33:b8:c0:0b:cd:92:e3:
ed:cc:9e:39:be:46:06:24:d4:b5:5f:da:27:83:52:b6:23:66:
27:5b:b0:a9:bb:b6:e2:b8:38:a3:a1:f5:3d:50:fc:91:78:6c:
f0:a1:c3:ef:8a:87:41:46:44:63:d1:9c:6a:77:0c:3c:f8:bf:
2e:11:76:ed:a0:e6:f6:1a:31:27:9c:ed:96:3d:a0:fe:10:f2:
c3:69:ba:7a:a5:32:0c:9b:c5:38:49:7f:94:13:36:81:4b:b8:
66:ca:a5:12:85:24:11:6a:6d:3d:e1:6f:1f:0b:dd:b6:3a:8d:
6c:36:4a:3b:24:e6:05:0f:3c:e0:6f:5b:dd:3c:28:ba:aa:9e:
f6:26:91:f9:55:01:cf:92:6a:bf:68:1e:45:1f:db:52:f4:bb:
78:a0:0e:4c:b5:b6:84:2f:aa:2e:f9:73:27:63:bf:a2:be:8a:
5c:7e:bc:59:09:63:50:27:e6:57:54:ea:1f:8b:40:cf:cd:5e:
4e:2f:93:70:5b:3a:f2:2e:dd:2e:cc:e2:4a:c6:83:6b:d2:35:
44:7c:55:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:34 2026 by rpki-client